last executing test programs: 2m43.271185118s ago: executing program 1 (id=2): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x5, 0xf4261, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x9, 0x200f60e}, 0x9092, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4014) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001300)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x88, 0xfffffff2, 0x6, 0xfaa, 0x800, 0x588, 0x3ff, 0x4, 0xa0, 0x0, 0x9, 0x3, 0x2, 0x51, 0x7, 0xe, 0x8, 0xfffff3d2, 0x100, 0x9, 0x2, 0xffff, 0x10000, 0x0, 0x2, 0x5e, 0x80000000, 0x8, 0xffff, 0xffffffff, 0x4, 0x1, 0x0, 0xfffffc36, 0x5, 0x5, 0x505d, 0x3, 0xa3, 0x1ff, 0x5, 0x550, 0x3, 0xe, 0x0, 0x6, 0x9, 0x4, 0x3, 0x81, 0x7, 0x7, 0x34fa, 0x1, 0x400, 0x80000001, 0x9, 0x76e, 0x5, 0x2, 0x9, 0x6d, 0x9, 0x1000, 0x4, 0x2, 0x7f, 0x1, 0xea5a, 0x3, 0x400, 0x7, 0xfff, 0x401, 0x6, 0x34e2, 0x4, 0x7c, 0x7, 0x5, 0x1, 0x7, 0x8, 0x359, 0x1, 0x10001, 0x0, 0x200, 0x0, 0x0, 0x8000, 0xfff, 0x4, 0x104, 0xc63b, 0x6, 0x8, 0x6, 0x9, 0x1, 0x6, 0x1, 0x1, 0x5, 0x48000000, 0x200, 0x9, 0xfffffff8, 0xf, 0x2, 0x3ec0, 0x4, 0x4f, 0xe7ce, 0x4, 0x1, 0x7fffffff, 0x80000002, 0x9, 0xb, 0x4, 0x0, 0x10001, 0xfffffff9, 0x80000000, 0x7, 0xffff86c1, 0xb5, 0x7, 0x4, 0x9, 0x4, 0x4, 0x5, 0x2, 0x8, 0x1, 0x1, 0x7, 0x400, 0x3ff, 0x8, 0x0, 0x3, 0x6, 0x3, 0x10000, 0x5, 0xd6bb, 0x6, 0xfffffff2, 0x5, 0x0, 0x0, 0xc7a2, 0x1, 0x9, 0x5, 0x10000, 0x100, 0xd61, 0x8, 0x30, 0x60d, 0x1, 0x9, 0x4, 0x10001, 0x1, 0x514, 0x200, 0xfffffff7, 0xdb15b858, 0xc, 0xb6a5, 0x3, 0x1, 0xfffff001, 0x7ff, 0xff, 0x3, 0x1, 0x7, 0x8, 0x0, 0xfffffffb, 0x5, 0x1, 0xd, 0x4, 0x7, 0x80, 0x5, 0x0, 0x0, 0xb520, 0x7, 0x7ffb, 0x2, 0x9, 0x80000000, 0x8, 0x1, 0x8, 0x8, 0x29d, 0x8, 0x6, 0x4, 0x4a, 0x5, 0x9, 0x80, 0x5, 0x81, 0x3, 0x7fff, 0x1, 0x3, 0x633, 0xb07, 0x8, 0xc, 0x6, 0xfffffffc, 0x2, 0x4, 0xb, 0x5, 0x9, 0x6, 0x6, 0x9, 0x5, 0x2, 0x87c, 0x504c000, 0x374e, 0x67, 0x8, 0x97f, 0x80000000, 0x5, 0xe, 0xff, 0x4, 0x0, 0x7, 0xc, 0x5, 0x6, 0x2, 0x2, 0x2, 0xd9]}]}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (fail_nth: 1) 2m42.860169691s ago: executing program 1 (id=6): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x1000}, 0x1c) listen(r0, 0x50) (fail_nth: 1) 2m42.611309049s ago: executing program 1 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) execve(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000600)={[&(0x7f0000000440)='\x00']}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008814}, 0x8090) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYBLOB="000000000000000000000000000000f1ffffff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@snprintf={{}, {}, {}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x218004, &(0x7f00000002c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x36}}, {@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x40305829, &(0x7f0000000200)={0x17c04, r2, 0x7, 0x9741, 0x11, 0x1000}) connect$inet(r0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000040)=[{0x28, 0x2, 0x3, 0x5ae9}, {0x20, 0x1, 0x4, 0xffe00000}, {0x6, 0x0, 0x7, 0xfffffffe}]}, 0x10) sendmmsg$inet(r3, 0x0, 0x0, 0x0) setpgid(0x0, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x800, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x23, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r6, 0x800) socket$kcm(0x2, 0xa, 0x2) 2m42.180122902s ago: executing program 1 (id=12): io_setup(0x10, &(0x7f0000000200)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000680)=[{}], &(0x7f0000000140)={0x0, 0x3938700}) r1 = socket(0x8000000010, 0x2, 0x0) write(r1, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a2000000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) ioctl$FIONREAD(r2, 0x8924, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRESDEC], 0x74}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="900000000102010400000000000000000a000007040001803c0003800c00188005000100110000002c00018014000300fe800000000000000000000000000029140004000000000000000000000000000000fa003c0002802c00018014000300fe80000000000000000000000000003b14000400"], 0x90}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) 2m40.359860739s ago: executing program 1 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24000000}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m40.31281063s ago: executing program 32 (id=21): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24000000}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m28.476297569s ago: executing program 4 (id=136): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800", @ANYRES32=r1], 0x2c}}, 0x40080) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x1) ioctl$TCFLSH(r2, 0x8910, 0xbffffffffffffffb) 2m28.159216499s ago: executing program 4 (id=141): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x41404, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x2}, 0x40, 0xfffffffffffffffe, 0x10000, 0x3, 0x6, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgget(0x2, 0x624) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11e210, 0x10004, 0x20da, 0x6, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x81, 0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7fe, 0x6, 0x7, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830b}, 0x8100, 0x2, 0xfffffffe, 0x2, 0x9, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x800000000000000}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='binder\x00', 0x0) getpgid(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x48085) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r3, &(0x7f0000000000)=0x922, 0x12) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r5) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002ebd7000fddbdf252000000008000300", @ANYRES32=r6, @ANYBLOB="3c002d80080003000000000008000200030000000500040001000000050001"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x20004000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_EDITDEST(r8, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e23, 0x2000, 0x8, 0x48001}}, 0x44) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r0, {0x8, 0xd993}}, './file0\x00'}) mknodat$loop(r9, &(0x7f0000000300)='./file0\x00', 0xc000, 0x1) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES64=0x0, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x811}, 0x4000080) 2m27.969156795s ago: executing program 4 (id=144): socket$kcm(0xa, 0x922000000003, 0x11) setresuid(0x0, 0xee00, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04002dff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x4) 2m27.854910738s ago: executing program 4 (id=145): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x214041, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x21d000, 0x0) chroot(0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 2m27.837191339s ago: executing program 4 (id=146): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000140)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x100) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f0000000300)="b461802305624431ed33730100010446b20aed0200000000000000", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}, 0x50) socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x146) socket$nl_route(0x10, 0x3, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x10, 0x701, 0x0, 0xffffffff, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x14\x00'}, @typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x24}}, 0x20008080) 2m27.580832437s ago: executing program 4 (id=148): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800000000005, 0x10000) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0}, 0x40) 2m27.528318298s ago: executing program 33 (id=148): remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x800000000005, 0x10000) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0}, 0x94) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0}, 0x40) 1m31.295560941s ago: executing program 3 (id=524): socket(0xa, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18070000000000000000000000800000851000000300000018110000", @ANYRES32=r1, @ANYBLOB="00000000000000009500007b00000000850000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 1m31.277427791s ago: executing program 3 (id=525): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x4000, &(0x7f0000000240)={[{@noinit_itable}]}, 0x1, 0x512, &(0x7f0000000c40)="$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") syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r7 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_setup(0x5a49, &(0x7f0000000200)={0x0, 0x2000, 0x0, 0x0, 0x357}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) r8 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'wlc\x00', 0x0, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4f29, 0x3, 'nq\x00', 0x5, 0x4, 0x6c}, {@loopback, 0x4e23, 0x4, 0xcd, 0x1}}, 0x44) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m29.514728146s ago: executing program 3 (id=528): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x23}, [@alu={0x4, 0x1, 0xb873844da0408b0d, 0x0, 0x2, 0xfffffffffffffff8, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="ff7f00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000500"/28], 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070600b4524c78f2f2d3270000000a0001"], 0x20}}, 0x20048840) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800c727", @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf250400000014000600fe8000000000000000000000000000bb08000800e000000208000400ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') lseek(r5, 0x2000, 0x0) dup3(r0, r0, 0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(r0, &(0x7f0000000600)={[0x4]}, 0x8, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000080)) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="30000000120001e7ffffff00000000001000"/28, @ANYRES16], 0x30}], 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @broadcast, @local}, &(0x7f0000000940)=0xc) syz_open_dev$vcsu(&(0x7f0000000980), 0xffffffffffff583a, 0x65a340) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {0xd}}, './file0\x00'}) 1m28.309984614s ago: executing program 3 (id=539): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") chdir(&(0x7f00000002c0)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r2, 0x3304) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000080)='./file1\x00', 0x2a18c46, &(0x7f0000000880)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x7f, 0x2c4, &(0x7f00000010c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000001280)=""/4089, 0xff9) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}, 0x10) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x6a000080) read(r0, 0x0, 0x0) getsockname$packet(r2, &(0x7f00000000c0), &(0x7f0000000300)=0x14) 1m28.037724312s ago: executing program 3 (id=543): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x8100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m27.711852023s ago: executing program 3 (id=546): unshare(0x4000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x8000, 0x8, 0x5e55b37311de6d89, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x7ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x200000000000026e, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073118300000000008510000002000000850000001800000095000000000000009500a5050000000000bd97255185fea13551121e2d8d39175b1166bcf5ff9e127fc737450d73e6d90dff2f602ba4a26d7dabae2385d145ab863dc6d1876688b4a55b0ace00b0df82ce32d4959d15072707eb36f7f3d3ad88350bc2325c485596344d53fb65196627727bebaa3ede997895e4aa2c916333683d044c3969ccf373b0ad31e50636328b49774e796f1da83e6f4ed8cf1afe87c8fdafa07312eb0ef29da01f8fb70cc42b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x4ffffffffe, 0x32, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x1, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x2, 0x1, 0x4, 0x5, 0x8, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/11, @ANYRES32, @ANYBLOB="92153de8f3c6a5b082e561e8eafbab28dd8cc144728816674db5ae0bbb6aaa5cb57d3ee7e8b8145187641d11b5f8d6fdae597c854ce3a072547ca68135566308ebafcb94f58daba8517a7603a31550525a7083ff1ffbd8cc800657fcc9513d9e2f1d45871e89f74c66bfdbb1b64bc07b324526d84c41cf", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) 1m27.619986046s ago: executing program 34 (id=546): unshare(0x4000400) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x700, 0x7800, 0xfffffffc, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x66, 0x8000, 0x8, 0x5e55b37311de6d89, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x3, 0x0}}}}}) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0xa, 0x7ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x200000000000026e, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073118300000000008510000002000000850000001800000095000000000000009500a5050000000000bd97255185fea13551121e2d8d39175b1166bcf5ff9e127fc737450d73e6d90dff2f602ba4a26d7dabae2385d145ab863dc6d1876688b4a55b0ace00b0df82ce32d4959d15072707eb36f7f3d3ad88350bc2325c485596344d53fb65196627727bebaa3ede997895e4aa2c916333683d044c3969ccf373b0ad31e50636328b49774e796f1da83e6f4ed8cf1afe87c8fdafa07312eb0ef29da01f8fb70cc42b"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x143841, 0x114) lstat(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0x4ffffffffe, 0x32, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x1, @perf_config_ext={0xff, 0x10001}, 0xd, 0x0, 0x2, 0x1, 0x4, 0x5, 0x8, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&\x00'/11, @ANYRES32, @ANYBLOB="92153de8f3c6a5b082e561e8eafbab28dd8cc144728816674db5ae0bbb6aaa5cb57d3ee7e8b8145187641d11b5f8d6fdae597c854ce3a072547ca68135566308ebafcb94f58daba8517a7603a31550525a7083ff1ffbd8cc800657fcc9513d9e2f1d45871e89f74c66bfdbb1b64bc07b324526d84c41cf", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x48) 49.738389156s ago: executing program 5 (id=771): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x2de175a7, @ipv4={'\x00', '\xff\xff', @empty}, 0x8000}, 0x1c) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) sendmsg$inet6(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000029000000040000000200000000080000200000000000000029000000370000000c0000000000000004010f0401080000280000000000000029"], 0x60}, 0x0) 49.723524726s ago: executing program 5 (id=773): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008}) bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000004000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYBLOB="1100"/12, @ANYRES64=0x0], 0x20) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'bond_slave_0\x00', 0x3}) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001a00010029bd7081d10000"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x16c, 0x17, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @in6=@remote, {@in6=@empty, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2={0xfc, 0x2, '\x00', 0xfd}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x89, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x2, 0x0, 0x2, 0x2}, 0xfffffff9}, [@tmpl={0x44, 0x5, [{{@in=@broadcast, 0x4d3, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x10000, 0x1, 0x9}]}]}, 0x16c}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x3}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x7, 0x4e24, 0x4e20, @in6=@local}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}}, 0x48080) 49.61204834s ago: executing program 5 (id=776): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="117c0100221a05002000b6f808000100736974028005000500ff00000005000a00"/45], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 49.467512854s ago: executing program 5 (id=778): r0 = socket$unix(0x1, 0x5, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x118, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xe0, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x8}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x2d}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0xbc, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9720}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x67}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x81}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x3, 0x2, 0x11}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xe}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x5}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x9}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xfe}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xd}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfffffffe}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x6}]}}, @qdisc_kind_options=@q_drr={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x40001}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@ptr={0x1, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x61, 0x2e, 0x30]}}, &(0x7f00000002c0)=""/125, 0x29, 0x7d, 0x1, 0x3ff, 0x10000, @value=r4}, 0x28) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000000)=0x3, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000a00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x21c, &(0x7f0000000440)="$eJzs3c1uEm0UAODDT/n58i26MzExGXWhq0a9ghpTEyOJSQ0L3TWxq7JiNsCmvQxvwfvyAkxXbMwYHAZaCkgxQDDPs+Ew5z0z884bhtlwyCL3/cHXaDRKUT6O4xiW4jDKUbiKWdU7WwCA/THMsviR5e5f7TkAAPbRCt//P7d8SgDAhn389Pn961br5DRJGhHXV712r52/5vm371onL5LfDqdV171euzLJv0xmnx1G+YP4b5x/ldcnk3QtItq1eP40z49ybz60ktv19fiy4bkDAAAAAAAAAAAAAAAAAAAAAMCuPIqkMLe/z9HRbL45zufvbvQHmunfU42HRXvgaXug7HIbkwIAAAAAAAAAAAAAAAAAAIA9k/YHF2edznl3GtQj4uaW6pwxi4PSeMcrDU77ldX3vJGgHOuVN8fTXOOgpfEl2uwEm/MXd3FQnixcVHe8KH8dJPNSEfHkvjusF8tciYjbqWaUlpRn2SiY/yko2mIsLK9FxPITe3a67vUZZlnW+fa4m/YjWzp4eo+ob+VOBAAAAAAAAAAAAAAAAAAApLXiR793c43KLs4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALYv7Q+Kf/kfXJx1OufdtL9ycBkR/8cfBxfHOojG7iYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP+1XAAAA///BvhTo") r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x1a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r7, 0x58, &(0x7f0000000600)}, 0x10) preadv2(r3, 0x0, 0x0, 0x1, 0x40, 0x2) r8 = epoll_create1(0x80000) r9 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000ac0)={0x6}) r10 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setregid(0xee00, 0xee00) ptrace(0x10, r10) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) write$evdev(r11, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000f"], 0x50) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r14, r13}, 0xc) close(r12) ioctl$NILFS_IOCTL_RESIZE(r12, 0x40086e8b, &(0x7f0000000100)=0x9) 49.398997797s ago: executing program 5 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x7, 0x20, 0x5b0, 0x8, {{0x13, 0x4, 0x3, 0x16, 0x4c, 0x67, 0x0, 0x8, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2c}, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x1d, 0x1, 0xc, [{@remote, 0x3ff}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x7f}]}, @noop, @rr={0x7, 0x1b, 0x46, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}, @multicast2, @multicast1, @local]}, @end]}}}}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xc, 0xffffffff, 0x5, 0x5, 0x2900, r3, 0x6, '\x00', 0x0, r3, 0x0, 0x0, 0x2}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="16000000010000001a00000023b3000000000400", @ANYRES32=r0, @ANYBLOB="050000b991356f0000000000000000290000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000050000000200"/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000380)=@raw=[@cb_func={0x18, 0x1, 0x4, 0x0, 0x1}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xffffffff}], &(0x7f00000003c0)='syzkaller\x00', 0x9, 0x25, &(0x7f0000000400)=""/37, 0x20800, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x5, 0x5, 0x3, 0xfffffff7}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000680)=[0x1, r3, r0, r0, r0, r5, r0, r3, r0, r6], &(0x7f00000006c0)=[{0x3, 0x1, 0xb, 0x4}, {0x5, 0x2, 0x6, 0x8}, {0x5, 0x5, 0x5, 0x3}, {0x5, 0x4, 0xf, 0xa}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x5, 0x4, 0x7}, {0x1, 0x5, 0x6, 0x3}, {0x3, 0x5, 0xa, 0xa}]}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r7, 0x2f, 0xfa, 0x4, 0xc, 0x10, @dev={0xfe, 0x80, '\x00', 0x14}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7820, 0x10, 0x9, 0x8001}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r8, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004524001c006800007f48cf5713c72b058ba7614058dec20117780a010102ffffffff0f00907800070006c2e9ea1f6d138c00d6ad92aa1314202fb2a2faf1aa1a67c2c3766dcef9c3e76df5ff2ee94c1221865c12f2b5ce4107d9522d48d810c6a77cc8ad18680c39f5bdb85df3f907000000cee51c8108e752285d26e92c22c2db403d62197f4e66868bab67e0f1160f3db41b2a6f672a565a503e6af21c3f90ab113050dea96dd169773fe301117c8d2c77ff"], 0x0) 49.088055117s ago: executing program 5 (id=783): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) write$evdev(r0, 0x0, 0x0) 49.058403417s ago: executing program 35 (id=783): openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x20402) write$evdev(r0, 0x0, 0x0) 11.385552281s ago: executing program 2 (id=1015): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000ffffffff040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000775dd5af6c628e5c837387c88ee97cd66e216142e26381d76d2e046cda39b8d6dbae9fe1396f70baaf08eef52653ea5b658c7a82adbb359f7a432f54e075000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x40, 0x0, 0x7ffffc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 10.273711476s ago: executing program 2 (id=1020): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x1000, 0x0, 0x5}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="00000000000000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 5.917493901s ago: executing program 6 (id=1046): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0xfffffffffffffffa, 0x7fff}, 0x0, 0x2, 0xfffffffe, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delqdisc={0x2c, 0x25, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1, 0xffe1}, {0xf, 0xfff3}, {0xfff6, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x8}}]}, 0x2c}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r6, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0x3be2b02884f95c63}]) vmsplice(r4, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x48634000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'pimreg0\x00', 0x0}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x12) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x660, 0x2c, 0xd27, 0x70bd28, 0xfffff004, {0x0, 0x0, 0x0, r12, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_flow={{0x9}, {0x630, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x7}, @TCA_FLOW_ACT={0x604, 0x9, 0x0, 0x1, [@m_xt={0x130, 0x16, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0xff, 0x6, "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"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_mpls={0xe0, 0x1e, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5, 0x7, 0x7f}, @TCA_MPLS_LABEL={0x8, 0x5, 0x3fa92}, @TCA_MPLS_TC={0x5, 0x6, 0x6}]}, {0x9b, 0x6, "1e89de9f1dd2d6cee97387329c177a30c1402aa8913feee4cd8b542abb2004d748baa2fcaa3b7aeaed1ac5f873bd1c80c9455a7c93ea7db7f4bc26504b67b186170405c0c6c30332bde5e48785e124f701d24f7091c67a1c2066b160236e2ea3ef4021264ba46c9e0545a29bc011746ac61a5cd698b8f32202e3a91c5fff6db478da512ce2f54561fa127ef026c4936ccccb7a23ba3226"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}, @m_mpls={0xd8, 0xd, 0x0, 0x0, {{0x9}, {0x60, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8100}, @TCA_MPLS_TC={0x5, 0x6, 0x7}, @TCA_MPLS_TTL={0x5, 0x7, 0xff}, @TCA_MPLS_PROTO={0x6, 0x4, 0x6015}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1b}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x1, 0x0, 0xfffffffffffffff8, 0x4ea, 0x5}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x6f92b}, @TCA_MPLS_PROTO={0x6, 0x4, 0x200}]}, {0x4e, 0x6, "d38ded6be8a6008432135eb42cd4143942ec5aa19781ba55f254cf8c7792d0119766a9525df423b10d1884c04a795168e4c84dfc756006fedb5089f1f3c3cda931cc1c6d96de883f6e7c"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_skbedit={0xf8, 0x7, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x6, 0xb}}]}, {0xc1, 0x6, "cd0ba72c3861e13c8a12c19202fcdc669a343c3c461061d7391400f15a1c2ac715f380106e03fc5d2442f81497d245c69040c82cee5a0200caa6cf97ad35f5e764d6d6324a1204a30f4eb72f36a40c6c8004c112dac1f3100f9f9abde5557536a1f1a921c0667d6b17b6854ca728bdb6b49853c80deb27f58e267d68a564bb555c2e33204a8e8f756dfebccb81db3e6e22d5e5111359a6d43134cdbbd2e0943f78b91b25ca35048990d3cefbcf4505f13287564943010f08f7c98e6ff4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x60, 0x12, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x53}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xfffffffe}]}, {0x1a, 0x6, "2b6d1c43a9777eece4f13dcf1a381960a020edf0a1be"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xbc, 0x1d, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfffffff9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x6}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0xe0f}, @TCA_CTINFO_ACT={0x18, 0x3, {0x6, 0xec9, 0x0, 0xe70, 0xc3e}}]}, {0x56, 0x6, "17d672f0af1343f5d9828b76c3d998a899a8f4e13c788c187cadda7d7054fab0ccfd03a914a8d6da190657e7429c1c5d60b8f62b00f4232304cebd00e15de3472f9cd2069e6145adfec0f2c6b03da4f98b3e"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0x104, 0x4, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x4}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xc7, 0x6, "bbd09d00fa2162aaffdda4f8044a14ba889ce64a3f059c3205fc1f8920d8b72a6fa1eaa203b807f01512c8252c1a199e86fa02e85cf371d574dde345cf490ee91d98eda43a08011084e709b059a49a56b008e7ec635ae9fa3d5cdbe79d1ed35135c9b435bd758cd4bfba5ce1df3900931a3ca85511e2fe5f835676b1c2ee04e8e9912b1081beee1ecf49e58a5e38f395e8c49102bcfb236e83b19bfcdcb5c1010e947d65aa418019b614245e213fb2b3793cbcbdacdfbe859ebfa8ecb0749f54d3f227"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOW_POLICE={0x18, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}]}]}}]}, 0x660}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) socket$nl_generic(0x10, 0x3, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)={0x1, 0x4, 0x30}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 5.359501589s ago: executing program 7 (id=1047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000b00000007000000000000070000000000612e00d16627c103"], 0x0, 0x2f}, 0x28) preadv(r1, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x50, 0x8000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104fc3a00000000000000480000", @ANYRES32=r0, @ANYRESDEC=r1, @ANYRES8=r0, @ANYBLOB="eb91", @ANYRESOCT=r1, @ANYRES16, @ANYRES64=r1, @ANYRES64=r0, @ANYRESOCT=r1], 0x40c}}, 0x0) 5.30765235s ago: executing program 7 (id=1049): r0 = socket$l2tp(0x2, 0x2, 0x73) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r0], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0xce, r1}, 0x38) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000020000000000000000000850000003600000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r4, 0x25, 0x0, @void}, 0x10) clock_gettime(0x6, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000540000000e0002006e657464657673696d0000000f0002006e657464657673696d300000080003"], 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) close(0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r10, &(0x7f0000000400)="518328ee68dd5b5554134c4021599504ac338d2e32ac78435eb600879d88c4bca7ffdafa7d005b77bbc235f2157bd9023237c770b4025c2d4d1a4fe5e229401ea1cbf29fca1aa3585ddae083e7c67b8030f97175425b1fd0df47a7a55a7f32431e186da3c7bc803482", &(0x7f00000004c0)=""/6}, 0x20) close(r10) socket$kcm(0x2, 0x200000000000001, 0x106) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1/file0\x00', 0x0, &(0x7f0000000500)={[{@sysvgroups}, {@dax}], [{@uid_lt}, {@appraise_type}, {@hash}, {@appraise}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}]}, 0x1, 0x5a3, &(0x7f00000008c0)="$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") ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) 4.245756784s ago: executing program 8 (id=1051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x3, @l2={'ib', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r5, 0x0, 0x0, 0x10145, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r6], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 3.895651056s ago: executing program 7 (id=1053): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsv1}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000e40)='./bus\x00', 0x19) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0x0, &(0x7f0000000080)={0x5, 0x100000001, 0x1, 0x8000000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0xffffc90000000000, 0x1f, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f00000009c0)={r3}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001020"], 0x20}}, 0x8000002) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r1, 0xc0105502, &(0x7f00000001c0)={0x1, 0x1}) 3.808723198s ago: executing program 8 (id=1054): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5531, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c", 0x7}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040)=0x700, 0x0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e24, @local}, 0x10) 3.607214185s ago: executing program 7 (id=1055): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0xfb1, &(0x7f0000002700)={{0x12, 0x1, 0x200, 0x69, 0x97, 0x3e, 0x10, 0x5c6, 0x9205, 0x7cc3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9f, 0x4, 0x9, 0x3, 0x20, 0xad, "", [{{0x9, 0x4, 0x0, 0x78, 0xd, 0xc8, 0x36, 0x93, 0x57, [@hid_hid={0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x2d6}}], [{{0x9, 0x5, 0x5, 0x1, 0x8, 0x5, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xc}, @generic={0x2c, 0x30, "6f26ab9e2d3b33235183b9a199e21aa1da231e9a9f2c90e7bde6a45b54967ff5fed6700ad38471bddd6c"}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x5, 0x8, 0x9, [@generic={0x11, 0x4, "6d7f53dc7f492ca6e24359d503a5af"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x49, 0x7f}]}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x81, 0x3, 0x5, [@generic={0xa4, 0x5, "d782aab0be2814d4b6782654f308fcf0c6e0090505d3a08952d7ab845986ff3410e11db73a4ee1be6e38d287908e5d559cc0de32b0f12be7e1df567ec3742f560c6e40fa906c71ce3085c0961f8fc3f2403459ba5955791c0890b11f0c4729c3300cc3d74c90af918aa19acc9265ca87085d703b402eddef361a478a650593b09ba7b575716cb901b77d356e8de2640b926bf93e8fd405784812c5476ea23ef436cd"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x3ff, 0x6, 0x5, 0x6}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x3, 0x7, 0x4}}, {{0x9, 0x5, 0x1, 0x4, 0x40, 0x5, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x3ff}, @generic={0x19, 0xd, "e6eb6dea81c282b6d20681cc4b6f6ec3b8da7b9b04dd39"}]}}, {{0x9, 0x5, 0x0, 0x18, 0x10, 0x53, 0x5, 0x7a, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x4}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x2, 0x10, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc, 0x2323}]}}, {{0x9, 0x5, 0x1, 0x3, 0x200, 0x4, 0x0, 0x2}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x3, 0x8, 0x96, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf9, 0x8}]}}, {{0x9, 0x5, 0x9, 0x14, 0x3ff, 0x1b, 0xe3, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x7f, 0x4, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xa}]}}, {{0x9, 0x5, 0x3, 0x8, 0x3ff, 0xe, 0x5, 0x3, [@generic={0xea, 0x2, "e2820c5f0304e79a2ebe26a44b82e8daa6165b18432a2b261042ac642635158d6f7b30a9a13870cb5431a3637ed265d401ab4dfcf3f1a35d97c11ccb72420fd1ce39dd343232fda624e2b3bd73ce3be56ddec198216dbad00978c5ec346081f0ce2d725f1ac623429de2878058355e142838327585de6b57b8d6763ba0d8a20c70bdbc094f09e46db844dfd535126f554bcf13d4cf2defaf439367ba9c8108782f12de062c54fe32b347bf611a9b5505793c088ab217da8cb7233efa3f71e375cfdde1c5f4236f9dafd26da0c41a5a02b11a692fe90b71abdc079a69ccd7eeaa2fa76d8d106b6cc4"}]}}]}}, {{0x9, 0x4, 0xe7, 0x7, 0x9, 0x95, 0x99, 0x42, 0x0, [], [{{0x9, 0x5, 0x4, 0x1, 0x40, 0x8, 0x5, 0xfe, [@generic={0x2, 0x24}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x3, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe5}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x60, 0x3, 0x3, [@generic={0x84, 0x1, "5e6056d03e91c439492b3efb3e5a79bb1a6efa8f5e24d89925e3fc4728ac5be4e81d43249ad6ff2774338435053eb190b2e7d54a04881454d8541c7c155823a12dc1258948568384071ff3c2299c9396da3d4f9ab29738a6cb15c536c0644ad86302b39bb7125a0ddc2ec1fd9eb68e3db52fd99dc536886e95014844c66f68f3e607"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x6, 0x5, 0xc3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1ff}, @generic={0x6f, 0x22, "bfee5d95c3f10336d502025f38f6dd9754ecb9b2354e71a5cc29c4687b4510fc8104c61f63fbcaef50d4b73bc63aa6e26ead649e9ad059a2e64cd62792b1cbec549a98d3f0fdd47335360ab95d4ee9f59ae7e60fe244119dd366ff8d0ac47c06541e34b57ad5e033ae25ceecbe"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x5, 0x5, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x7fff}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x47, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0x5}, @generic={0x59, 0x30, "23478295040fb0358cd33ea8d61872b51fab874dc15c0c0903c9a242f8fe631982ab0a04db2ccbfd1b8d8b15f0c299e77580263f94c2d5823df7fdc32b1fac69ff2fc950f006a42dc19f78fff2da0fa780df0afaa2c3b4"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x4, 0x6, 0x7, [@generic={0xe8, 0x31, "b8e13076a3b03c4c374446bbf15a761901f12382872e7c3b4675a382bfd321a2e26c5ee992721e29c8757df35f1d891360ba4cb099f3648e9b2a4e115290c09d56176a4e555d1e2c05c2353171ccb51cfc8c6c31c1b55343fe1c7f10d757565938f3af010d957ed81a878d70c2ecebae03907ef074be680208f99f73f11ccba8aad144db44b2f87010a520f1fed92b728192fe4fce3d4fb713d52f58df0997c58964285a24ec7196574c6dacd60ab28f8e0ae99605229af7b05de8599f8dc303a3e6a3514bb127e4bfd983d9da4bd430901a26bfc0cad53ba7b55fa2edb53c2d9b56a1c044b9"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x8, 0x88, [@generic={0xa6, 0x6, "2d93891e9a475b009c12bc421a948745c319657797b41486bd037e3ea5ad9a6056280d5c95a1ac5b373e48ee30f1c3045c9e8dd97f1d477a88433846d6f088b735fe6e02f5b13aa8f7436b032c55e7fc5d214fb5cf7d690635ea894eb77acef9cdf23e4047d5f312ab68e4d7a89151ecc84009e2b80a53d0a86c8ed1f5b771ec53dfc481f04423cb7d7e0263b6aa08a76484d440e2e466063541348e853ad4a1f9480447"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x50, 0x7, 0x29, [@generic={0x61, 0x25, "5ed0c74cf8822a4a64b19deac901d9ff77d9b66f692322b4a82792ac5118b8a6063193f7317fdfdb4277db5f467c00470a74a89b089bebb6fd5c76b0d0811b5d737bac0612ec0b6a848deaf0da04ef97a7ee9565845d48a04f5e15dc2729be"}]}}]}}, {{0x9, 0x4, 0x66, 0xca, 0x10, 0x16, 0xd8, 0x50, 0x81, [], [{{0x9, 0x5, 0x6, 0x10, 0x200, 0x2, 0xa3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0xe4, 0x7, 0xa0, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xf, 0x4}]}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5d, 0x0, 0x7, [@generic={0xa5, 0x11, "a85e29e095d0ed89075fb19b59c02686faaa819c207f5fcdb182296d4962742d293424634a4cc7b690cf8bb2d9213b5c024fab28cb8aa88f68387ad03bdf032d1f5193bc9c8d5ae11fc5914830a640eaa8db1e3d50e7aec84cae5739ca178b31a5b0db60380c00eb441325f2ac64f28b37f1e441b90c1da69c70220e02cef5f55a2c1b7983e70f3271f6b3ace8a25150978d6cf1fea1869544d12c095bd8eebaf5edd8"}, @generic={0x74, 0x23, "8fca28cc6a4c4b8c9fa57ac3614b18a04d0d03b521e276e42c8b6d7ddeaaa8bf3e001cf42b8d26e791c456adaf1b80e479f6ac3750dd161adb05e3c7f6cbdc8edf1e3693c8ceead1b712fcbf7fb3a2ceca48fc529095b401a2949b616e2a398a05a291993a84cb29a75e9834a33410071520"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x5, 0x21, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xf9, 0x8000}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x2, 0x81, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x3ff, 0x3, 0x80, 0x42, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xdb, 0x100}, @generic={0xc8, 0x9, "8e91ffc85f16fa36dcdd519cdc6d281f5ff676fcebaf6bf1518b1fb056c5e875afe973f7f07fced1442f2da767b0774575daf129fdd872b66c2697e112ccd43f06f79662c257f119ec10a2e2ae9d4b35e1b930047fa94ff3e132fa3650028d4356141ba41145a6eac180fa39fb36d99c548075343a38f7d86d85791e4c1451e15dcd8b50e56397a08ead1e107b0a301da61b7b1ab21b753646a0f139e8e51af606601af6b4c9bc5e5d64acda9200c911b87a6f01d20601b9eaebe43c2e84c486097c28457d4c"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x25, 0xab, 0x4, [@generic={0xb3, 0x8, "e17af535fcaf22dd70776b47d0213c516f6ca2c07ab782d09da4cc49cc485900a6d9da4056022a2e8567828e2cfc157a280ba30a9bef97145d7c897c04f210d1061c4c599606f24dc4c79e5b4921eb978778e6d0a4d5e67bc40703b403d3106e5bd44ac9c36c1d2fdfd3e2fd7aa5499ef90c8d46ca9449d11c5d2d7e86d6f67c50a5a12dbbf21f485b0ba3f7de6686a4567afe2835733a54eb03faab61af106afe91794d70cadb0fcef16bc439eb80edf7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2}]}}, {{0x9, 0x5, 0x88, 0x2, 0x8, 0xc, 0xd, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x7, 0x80}, @generic={0x29, 0xc, "b9eecf4d6dc97826e7dd563aebed16ff34b5b3ca046fe61fcd21f689b835c4babcc5380184b359"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0xf1, 0xe, 0x6}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x5, 0x1, 0x5, [@generic={0x65, 0xd, "22ce329f9f31b50ebd1ccb22fdedd31228da66530cbd257ed9e8cd69fdf0828a317aff3b23a77cded44bbe6c2c3a19991d3bc0f08d8b394a5f8fddcc19306b28260de5f1c0129adcbd2e845070f627db10c7bbf4fcde934e72d636b6cfb1437677b349"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x5c, 0x8}]}}, {{0x9, 0x5, 0x86, 0x10, 0x20, 0x0, 0x7, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x3, 0x10, 0xb7, [@generic={0x3b, 0x30, "0ddac6e6ba8940c64260470200f8ba500f7e6376c016beba86d927a848a4be7f8a82ee20ed9d630f6c3ed730582c69ee11038b2d8e7e0d7654"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x87, 0x1}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0xda, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x5}]}}, {{0x9, 0x5, 0xc4b4fc797b7e3c17, 0x10, 0x10, 0x0, 0x4, 0x9}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x7, 0x6, 0x9, [@generic={0xeb, 0x23, "8021d241cfe4d91c4d513478c3f22987c8919a89ad3defd32a8a2a86e95100cbcf3d158d33fff31325584da2c12f74117510f9ef00b13886563424eade09522f7d1a652c7e0c7b52d4051e574474365ab192a489098fcfe41cd24c0e81cd27c5e9a973d6816b04ce90a2a07a98d8650c753bf7e1898eda2857877c3fa7886e0ce977c1a68c335dda084f56400abf29fcf0a12cc233c14059a980fb3193dc3cbd3699dff524dee541f635b24c1208873f6f342aba86f0e763cc763a1150d6542f631048a60d421f323f72075d20666673c4fcfde07cc927a5d544144b223ebc2fe38fa2c141e7a55624"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x401}]}}, {{0x9, 0x5, 0x80, 0xc, 0x10, 0xe, 0x94, 0x1}}]}}, {{0x9, 0x4, 0x26, 0x8, 0xc, 0x74, 0x80, 0x85, 0x6, [@uac_as={[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0xbf, 0x1, 0xa2, 0x7f, '\t'}]}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "4299a4646c9e"}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x10, 0x1, 0x1, 0xc0}, {0x6, 0x24, 0x1a, 0x1a, 0x4}}], [{{0x9, 0x5, 0x9, 0x8, 0x8, 0x7, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0xfe}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x1, 0xb, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x524}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x4, 0x3, 0x9, [@generic={0x57, 0xa, "3fd8a459b799141b6460f21667b455321d0f74e9a5c7e79eae13491297dd3036ade0317fd4aca4dfb81406c019140ac38a8c579aa08ab8e9121552e5ae0b7d7bd1b740c078731ba904b9be8fe4077dd583bfde8469"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfc, 0x7fff}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x5, 0xab, 0x3, [@generic={0xca, 0x23, "91ce79c1b2dc619965e22ef3a71af2c951bba673d21f688acc7e4801de7d2ee9a21165a0ac17c7a48cc035cfcfe470c545022efc26ae11d4764f3520968954c28100e842b911f73ae013548946b9d8a930762e5a94cd15aecb972aac427d6b49d63be37629341111268a4020b61616900878d4c66553565ddcd3d6c6991c4d1e7091c30750204a67fab9465ad6684f37ce1ac9f61a0d54666fee8d74f2289535d599601a3d83f2c1bc52fa039844b2eaf4c3dc47450747356d8286d1d8c2d3ea06f8da31c8786533"}]}}, {{0x9, 0x5, 0xb, 0x1, 0x200, 0x2, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd, 0x800}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x1, 0xb6, 0xc1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x40}]}}, {{0x9, 0x5, 0x80, 0x1, 0x20, 0x80, 0x7, 0x4, [@generic={0xcd, 0x22, "24cb955df5f2b5a9391509c512b0a35accaa5254ea8d3d87664c55cd7865b68416e483b4b28f638bf6b03bcb6ba5e2e3dbb415defac9d31358ffcc01e27bb0a9f375d89c68380d6a499517ab3772b00fada922935c152ab5362acb97c0e7d35ecd1744a37f4af505e31cf333a866a5680da65c107ea938b3d52230ff48b41e63c5a32a6f8e25c2cbd93945e4da1236c40c87d59eb2b7d05d73ff381d6753069488a8f82e2778637e4ca255ce4f241a27d21aacdce471a471bb965ba340a142485ac9ad8f752c182b6488b5"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0xc7, 0xc}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x5, 0xc, 0x2, [@generic={0x62, 0x2, "a19f86864a3bd76ece4243f25c6b1694e7189c6587c8a19fd6435ab182d7fa94f565502de99f2df0e18ead34856887aac8b7e18c89390884b21ba0c6796c307697dfe20b8d245039ac143705f663cc1f09129793a1375f43e343611ef38d18f3"}, @generic={0x66, 0x4, "f12200088a74e4a84c1b54105a583a7ad0077f2c3e855bc5cca141b189d3208a2ab98e0ff4cb14daf989581cdcd82ea0b4d3688629eca1bcab3812d10de065c1f56f62579ed93b92edf203c0a88693d8c251d5f6f3eaa504b2d5bfa26de921caf45c4374"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x3ff, 0x2, 0x3, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x49, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x6, 0xaebb}]}}, {{0x9, 0x5, 0x9, 0x0, 0x3ff, 0x8, 0x4e, 0x4}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x8, 0x3, 0x80}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xb, 0x3, 0xff, [@generic={0x67, 0x23, "75e96208f39b39bf9575550988a0216da56938026aa4b1433197c26671f0dad727837734d30e3418c062c80737abfd81dc43c024b51ede1138e709a4c479c78129f63e049947b6825c0d727890192012a87aa63972368491c5f6fc6ba11066553bca785deb"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x5c6c}]}}]}}]}}]}}, &(0x7f00000037c0)={0xa, &(0x7f00000036c0)={0xa, 0x6, 0x110, 0x5, 0x1, 0x6, 0x20, 0xe}, 0x24, &(0x7f0000003700)={0x5, 0xf, 0x24, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x2, 0x9, 0x92, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "614f086f561768b0456993e532d5d32e"}]}, 0x2, [{0x4, &(0x7f0000003740)=@lang_id={0x4, 0x3, 0x419}}, {0x4, &(0x7f0000003780)=@lang_id={0x4, 0x3, 0x41f}}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000000), &(0x7f0000000040)=@v1={0x2, "19a1a1037a59c14d36"}, 0xa, 0x2) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000900)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '\xe2\xbf\xd9\xaf/\x8b1\xaew\f\xee\x03\x1f\xf0\vHk\xd3~a3\xd0\x94\r]\xad>\xa3\x15^\xa0\x9e\xd0\x0f\x80\x1e\x84\x1a\xa0\xd8\xcat\x99\x1b\xe9r\xcf\xfd2@\xec\xcc2t\xa0Yy\xdf\xaf!\xba\x82cV\xe2,&\xe64\xe2\xc1Mh\xde\xb9\x92\xe6\x03\xaam\x9f\xcb+\x89\xb0-o\x90?bJ\xf6]_\x92\xc1\xc5b\xb9\xdd\"K\x01/\xde\xd9]\xa3\xa5\x1b\x8c\xe8\xb0OZ\xbd\x98\xd7\x1f\x92S\xc8\xd0\xb1hk\x13w\xdc\xd6\'\xfb{\x9eA\xf5C\xcc\x13\x9f\x11\x81\xa5\xe9\x9c\xe1\xecv\a\x92P\xc2\xbf\xb1\xb2\xcfz?\xff\x86\x0fOPF@4I\xc2\xe3]cQ\x86);@\x8a\x10\xa5\xaa\xc2\xab\xbaPh,\x1c{\xf9M*E\xaf\xf5\x9e\n3s\xf9\x18\x15\xdf\xc4\x87\x93&n\x05|\x80@Q\xbcKO\x83),\x03\a\xb4\x91y\xe6\x1e\xfa\x94SC\x9b\xf4\x94\x93\xaf\x7f\xd2=\x924\x01\xde\xf04R\xa5#\x13k\'\x1bI\xb5\xc2\x9a\fo\xf8\x90qe\xde\xbcG\x8fP\xbb\xe1_\x9b\xd6\x02\xf1\x15\f4\xbdS3ip\x9b\xce\x9a\xc8+\x9f\x06\xec\xb28\x058~Sg\fSp`a\x96\xf6*\xff\xec\xa1u\xe6e\x03i\x1d\x0e\xac\x1bn\"m(q\xbb\xa9\xf4m\xf5\x87\x8f\xadO\xc7;\xa82s\x01\xc7\x83\xc3C\b\x97\x804\x93\x0f\xbaB\xa2=2\xe8CW\x8b\aq\xfdA\xaa\xf3\xe7,\xe4\x86\\', 0x3a, '', 0x3a, './file0'}, 0x194) perf_event_open(&(0x7f0000000cc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x10108, 0x2, 0x8406, 0x9, 0x8, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) listen(0xffffffffffffffff, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0xfffffffd) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000200)={0x200000, 0x200000, 0x20000000}) socket$inet6_sctp(0xa, 0x1, 0x84) listen(0xffffffffffffffff, 0x1) r2 = socket$netlink(0x10, 0x3, 0x4) listen(0xffffffffffffffff, 0x3) socket$inet6_sctp(0xa, 0x801, 0x84) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 3.086447872s ago: executing program 2 (id=1056): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7, &(0x7f0000000280)=""/150) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x0, 0x400, 0x72e, 0xa, 0x10, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3, 0x3, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) 2.491580361s ago: executing program 8 (id=1057): bpf$MAP_CREATE(0x300000000000018, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000100000001000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000008000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000500"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="5c00000028006b05c84e21020ab16d6e230675f811000000440002005817d30461bc24eeb556a705251e61821466cdc3dc0048dfd8cdbf9367b098fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000001200)={0x1000a4, 0x100072, 0x40000}, 0x20) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x30, 0xffffffffffffffff, 0xfe234000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) r7 = socket(0x2b, 0x1, 0x1) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="40a3000000000000240012800b0001006d616373656300001400028005000b000000000005000a000000000008000500", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x3, r2, 0x9}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000711078000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.906127219s ago: executing program 0 (id=1058): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x200) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = syz_io_uring_complete(0x0, 0x0) renameat2(r6, &(0x7f0000000080)='./bus/file0\x00', r0, &(0x7f0000000180)='./bus\x00', 0x5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xfe94) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r9, 0x303, 0x70bd28, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000640)={0x0, 0x6, 0xbd4}) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/diskstats\x00', 0x0, 0x0) preadv2(r10, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 1.87849436s ago: executing program 8 (id=1059): r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @private=0xa010101}, {0x6, @remote}, 0x70, {0x2, 0x4e22, @broadcast}, 'pim6reg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'erspan0\x00', 0x0, 0x40, 0x7800, 0x0, 0x9, {{0x26, 0x4, 0x2, 0xa, 0x98, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x24}, {[@lsrr={0x83, 0x7, 0x8d, [@remote]}, @ssrr={0x89, 0xf, 0x15, [@private=0xa010100, @multicast2, @private=0xa010102]}, @ssrr={0x89, 0xb, 0x5b, [@loopback, @remote]}, @ssrr={0x89, 0x1b, 0xbb, [@rand_addr=0x64010101, @loopback, @multicast2, @local, @dev={0xac, 0x14, 0x14, 0x2f}, @loopback]}, @ra={0x94, 0x4}, @cipso={0x86, 0x41, 0x2, [{0x2, 0xc, "084e4ea14762f49dca6b"}, {0x7, 0x12, "6ca82df5f6a521743b8d5350505f5a8a"}, {0x7, 0x10, "f562533b916ba0a85159dd201953"}, {0x5, 0xd, "bc7db244b1967b259ea777"}]}, @end]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r1, 0x25, 0x17, @val=@iter={&(0x7f0000000180)=@map_fd=r0, 0x10}}, 0x20) open$dir(&(0x7f0000000200)='./file0\x00', 0x181002, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x2, 0x95, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x86a, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x3, 0x1, 0xf9, 0x10, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x80}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x2, 0x3, 0xa5, 0x2, "949918bae347"}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x3, 0x4, {0x7, 0x25, 0x1, 0xc, 0x0, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x7, 0x3}, @as_header={0x7, 0x24, 0x1, 0x7, 0x40, 0x4}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x58, 0x2, {0x7, 0x25, 0x1, 0xc, 0x3b}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x310, 0x40, 0x8, 0xe1, 0x40, 0x2}, 0x165, &(0x7f0000000340)={0x5, 0xf, 0x165, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x5, 0x6, 0xcc}, @generic={0xab, 0x10, 0x4, "7e8eb8f0189d801d36ff7a41cd5525e26ce7ced52ad5a8138fda06822975104b2e46663f3354be69e9e612b4ccfcc19bf42fcfaf0f2538f3160f6f59de0704b1efac34d9e5bc1bed231150a72fa64ee8f4c692afd99e5b0eab4e0a24a85c0cdbaacc40156b238de68929b7c9b6831784a9741a1a7652d523dd745224b49d07dfcbb1f8867ba660f7f279868ef65f352cf1185a7654f9f9556862d9a5decbd51ce347e63937c2a1cf"}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "64b000d5384269800ab1e410d3240cfc"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xb, 0x3, 0x4}, @generic={0x93, 0x10, 0x1, "1509c62ff2a127031988fdc6244628b1b43de60c5166ae95e60bb29651c17cf42fae6af9113cd78cd2584cc7b11a163c421522cebcdf40f7149d31dee64ec979db2c8f15fdf9a00a881931ea65ba2aef84bed5ca13106eb61051ba03b7bd89ebd25ddaf6566ac84b5a665c6d5cb0c1f51186496bbea367f97be2fd687c51ef3d10db3fbcd679b047c46148e86f5a63e9"}]}, 0x5, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0xc01}}, {0x4e, &(0x7f0000000580)=@string={0x4e, 0x3, "d9cfdfc5515c3cf6d6afbae2c8daefad7d936aee1a5e1575fbb3b71e618deb666d3ff685b86443647c38e69aabd9001a39a4535c37b489e1d071aa8eebbdcdd8243ba49ff1eeabfb6a79c26e"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x4c0a}}]}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x4e20, 0x6, @mcast2, 0x4}}, 0x5, 0x2, 0x4, 0x3, 0x68, 0x3, 0x3}, &(0x7f0000000780)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000007c0)={r4, 0x10001}, 0x8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/power/pm_async', 0x208001, 0x140) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r5, 0xc0805841, &(0x7f0000000840)={0x6, 0x0, 0x61b, 0x1000, 0x10}) r6 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r6, 0x8982, &(0x7f00000008c0)={0x1, 'gretap0\x00', {}, 0x3}) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000900)=0x7dc8800, 0x4) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000980), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x24, r7, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x12}, 0x4000044) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000000bc0)={'broute\x00', 0x0, 0x3, 0xe2, [0x6, 0x80000001, 0x9, 0xffff, 0x400, 0x81], 0x3, &(0x7f0000000a80)=[{}, {}, {}], &(0x7f0000000ac0)=""/226}, &(0x7f0000000c40)=0x78) getsockopt$MRT6(r5, 0x29, 0xce, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000000d00)={{0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, {0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x0, {[0x400, 0x7, 0x8, 0x5, 0x7, 0x9, 0x4, 0xcbe6]}}, 0x5c) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000d80)={0x2, [0x0, 0x0]}, &(0x7f0000000dc0)=0xc) fcntl$notify(r6, 0x402, 0x2) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000000e00)="cf15e4ddee3b029595731309a2ae9fd437c860b8c27fe42b35021dae96e8b9991dca71a3fa5156ff82eb04c48dff3f7ccf72ad414862fdbf1d1e5b68fc2b901c56bee772bbd0b503bdc501330dd4c57be4ad4ac015b321e9fa360c174d4f3f456582124de53f91ba96aec968") getgid() r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ec0), r5) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000010c0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001080)={&(0x7f0000000f00)={0x148, r10, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x16, 0x7}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf17d}, {0x8, 0xb, 0x81}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x800}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0xc7}, {0x5}, {0x6, 0x11, 0x6}, {0x8, 0xb, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x8001}, {0x5, 0x12, 0x1}, {0x6}, {0x8, 0xb, 0x1}}]}, 0x148}, 0x1, 0x0, 0x0, 0x8888}, 0x5) 1.663630947s ago: executing program 0 (id=1060): r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) r1 = fsopen(&(0x7f0000000180)='selinuxfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0, 0xa2) io_uring_setup(0x220c, &(0x7f0000000240)={0x0, 0x23ae, 0x100, 0x0, 0x72, 0x0, r0}) r2 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000002c0)={0xfaa8, 0x401, 0x5, 0x8, 0x101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b80, 0x2, @perf_config_ext={0x7, 0x101}, 0x214, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x420, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 1.623923539s ago: executing program 6 (id=1061): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000001480)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0xffffffff, 0x3, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xf, 0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x27}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x814}, 0x2000400c) 1.5875342s ago: executing program 6 (id=1062): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="070600b4524c78f2f2d3270000000a0001"], 0x20}}, 0x20048840) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800c727", @ANYRES16=r2, @ANYBLOB="010025bd7000fddbdf250400000014000600fe8000000000000000000000000000bb08000800e000000208000400ffffffff"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r3, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) signalfd4(0xffffffffffffffff, &(0x7f0000000600)={[0x4]}, 0x8, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000080)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000300)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="30000000120001e7ffffff00000000001000"/28, @ANYRES16], 0x30}], 0x1}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000900)={0x0, @broadcast, @local}, &(0x7f0000000940)=0xc) syz_open_dev$vcsu(&(0x7f0000000980), 0xffffffffffff583a, 0x65a340) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000a40)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd}}, './file0\x00'}) 1.195498052s ago: executing program 2 (id=1063): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x1, 0xfe, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x8, 0x7}, 0x411c, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0, r1}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) ioprio_set$pid(0x1, 0x0, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="08000000000001001400128009000100766c616e0000000030000280060001"], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x1f, 0x24, 0xd0f, 0x70bd2d, 0x25dfdbfe, {0x60, 0x0, 0x0, 0x0, {0x0, 0xc}, {0x7, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_BYTEMODE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x91}, 0x0) 1.139783184s ago: executing program 8 (id=1064): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x3, @l2={'ib', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r4, 0x0, 0x0, 0x10145, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1.139465754s ago: executing program 0 (id=1065): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'gretap0\x00', 0x0, 0x10, 0x700, 0x4, 0x66, {{0x9, 0x4, 0x0, 0x6, 0x24, 0x66, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @private=0xa010101, {[@rr={0x7, 0xb, 0x2b, [@local, @private=0xa010101]}, @ra={0x94, 0x4, 0x1}]}}}}}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a900000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000000064000380600000800c00018006000100d65b000050000b"], 0xb8}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) close(r5) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000100"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x5}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r7) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r8, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r9, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') ioctl$XFS_IOC_READLINK_BY_HANDLE(0xffffffffffffffff, 0xc038586c, &(0x7f0000000400)={r10, &(0x7f0000000140)='!$:!@*\x00', 0x0, &(0x7f0000000180)={@align=0xff, {0x9bd, 0x4, 0x10001, 0x6}}, 0x0, &(0x7f00000002c0), &(0x7f0000000380)=0x6}) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000580)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x12, 0x1, &(0x7f0000000080)=@raw=[@alu={0x7, 0x0, 0x2, 0x7, 0x8, 0x16, 0x18}], &(0x7f00000000c0)='GPL\x00', 0x40, 0x9e, &(0x7f0000000300)=""/158, 0x0, 0xb, '\x00', r3, @cgroup_sock_addr, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x0, 0xa, 0xfff, 0x1}, 0x10, 0x0, r1, 0x5, &(0x7f0000000600)=[r2, r2, r2, r2, r2, r10, r11], &(0x7f0000000640)=[{0x3, 0x2, 0xd, 0x8}, {0x3, 0x1, 0x2, 0x2}, {0x4, 0x4, 0xe, 0xb}, {0x3ff, 0x4, 0x8, 0xb}, {0x0, 0x1, 0x1, 0x1}]}, 0x94) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) 1.114767345s ago: executing program 8 (id=1066): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12000000ffffffff040000000300000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000775dd5af6c628e5c837387c88ee97cd66e216142e26381d76d2e046cda39b8d6dbae9fe1396f70baaf08eef52653ea5b658c7a82adbb359f7a432f54e075000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x40, 0x0, 0x7ffffc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x5411, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1000, 0xfffffffe, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 1.081005806s ago: executing program 7 (id=1067): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000040)={0x12, 0x10, 0xfa00, {0xffffffffffffffff, r3, r2}}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1ff) shutdown(r0, 0x0) 963.621769ms ago: executing program 2 (id=1068): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006008848"], 0x24}}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000000000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008574270d200000009500000000000000"], &(0x7f0000000880)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ptrace$cont(0x7, 0x0, 0xa8ff, 0x5) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x8008, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@grpid}, {@data_err_ignore}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x94) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) setxattr$trusted_overlay_redirect(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) sendmsg$inet(r2, &(0x7f0000000840)={&(0x7f0000000280)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="0996fc5c595ef012f1f55c1f678cb3169155c467120a", 0x16}, {&(0x7f00000004c0)="03a57c4c773dc7e73fbd8c6f45fdbbec31b2513c4400000000243a21130bddbb65594cf04d46c11d2ce2de24ef546a302cc58aa61fc0b47fdc9565aabf4a1bc6c4dcae631fbc1d91d46c7e43d94dcd2853cd5b0100f933b2f96fedc5643b5eb84f6bddf4b4266436990e2d7a7ac310efec85a8a2fd2e2eaf8ee93974b4a730864c5b7cd1014e07736e2fad0d60b32f1086011e6da1687f39e87e25edf809", 0x9e}, {&(0x7f0000000580)="5f84eaba8decd26a4128f78ac677acbe054a8718d10f9da0ba62f52920737509bf18662c3aad500d1369b42e08c3fc7b1770a4f2a9c434e8ac16e267459c0c2e8287897b6c8ae4828cecfba0103ed58db8d709b3f4847f041e117f758827d622", 0x60}], 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="60000000000000000000000007000000441cf521ac1e000100000007ac1414bb00000004ac1414bb000000004434ad73ffffffff000000020000000000000002ac1414aa0000000264010101000000400a010102000000067f000001000000061c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="ffffffffac1414bb000000001c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="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"], 0x1d0}, 0x44) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000ffff2cbd7000ffdbde2500000000", @ANYRES32=0x0, @ANYBLOB="096d050025100400140012800b0001006970766c616e00000400028008000500", @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x40040) 897.154532ms ago: executing program 0 (id=1069): gettid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) r0 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) getsockopt$sock_buf(r1, 0x1, 0x19, 0x0, &(0x7f00000008c0)=0x47) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000020c0)={&(0x7f00000000c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000001e40)=[@mask_cswp={0x58, 0x118, 0x9, {{0x7f, 0x3}, 0x0, 0x0, 0x7, 0x4, 0xef, 0x3, 0xc, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xf}], 0x70, 0x20008011}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e31000000000000000000240012800b0001006923185570766c616e00001400028006000100000000000600020001000000c6959b751857157b7eaa"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0xffffffffffffffa6, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x1004, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x102270, 0xfffd, 0x1, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000820000106}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@gettaction={0x48, 0x32, 0x400, 0x70bd2e, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x40090) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x11}, 0x4000044) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x739da133b426e85c}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40804) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000180)=[{0x6, 0x80, 0x4, 0x7fff0000}]}) r5 = fsopen(&(0x7f00000002c0)='fusectl\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 388.184988ms ago: executing program 6 (id=1070): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000040)=0x4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, {0x4}, {0x6}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x8094) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r7, 0x5, &(0x7f00000005c0)='fd', 0x0, r6) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x2) fchdir(r8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x0, 0x62d, 0x4, 0x20314, r2, 0x4, '\x00', r4, r8, 0x3, 0x2, 0x2, 0x6}, 0x50) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) 253.129262ms ago: executing program 0 (id=1071): unshare(0x20000400) unshare(0x30000480) r0 = socket$xdp(0x2c, 0x3, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, 0x0) 210.642474ms ago: executing program 0 (id=1072): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4, 0xffffffff80000001}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0xa) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$dupfd(r0, 0x0, r0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x40, 0x0, 0x7ffffc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1105954c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x2, @remote, 0x7}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="77525ea3b3cf03db", 0x8, 0x800, 0x0, 0x0) 141.912146ms ago: executing program 2 (id=1073): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(0x0, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r4, &(0x7f0000000940)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x66, 0x1, 0xff, 0x0, 0x0, 0x0, 0x2210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080), 0xc}, 0x2405, 0xff, 0x0, 0x4, 0x21cd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000aa80}, 0x0, 0x0, 0xffffffffffffffff, 0xd) writev(r3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, &(0x7f0000000980)='./file0\x00', 0x4) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x7, &(0x7f0000000280)=""/150) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x0, 0x400, 0x72e, 0xa, 0x10, 0x0, 0x5e}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3f}, 0x0, 0x3, 0x3, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000039000900f036d6760000000004000000040000000c0001800600060088"], 0x24}}, 0x10) 141.140646ms ago: executing program 6 (id=1074): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x1000}}, './file0\x00'}) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f00000002c0)={{0x8001000000000000, 0x5}, {0x0, 0xae7}, 0xfffffe29, 0x6}) 60.356978ms ago: executing program 7 (id=1075): socket(0x10, 0x803, 0x0) (async) r0 = socket(0x10, 0x803, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x58, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_deladdrlabel={0x40, 0x49, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x20, 0x0, r1, 0x59}, [@IFAL_LABEL={0x8, 0x2, 0xc}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0xc008}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x1, 0x8ffff) (async) fallocate(r2, 0x0, 0x1, 0x8ffff) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './file0', [{0x20, ' \x01\x00'}, {}, {0x20, ' \x01\x00'}, {0x20, '}\x81]/$\\[&\\'}], 0xa, "5f58e66f6cb1ae350123fe9ef9c0e7d8ff685591aa1813b4ff674ffb92508b8de13f9e6b9f8862eac87b5f1a9b735c64b69ce563841e1659cd8ed0433879054cbb5c0322cb5c33e7dcfd1adc710c94e8eaa549c2c95689235863ef659719bde19f3dd949e2aed7532ac31e8eb0ef777a15cce2bc8585bbfae6"}, 0x97) 0s ago: executing program 6 (id=1076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x9, 0x3, @l2={'ib', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') preadv(r4, 0x0, 0x0, 0x10145, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) kernel console output (not intermixed with test programs): pt to access beyond end of device [ 115.740986][ T68] loop5: rw=1, sector=329, nr_sectors = 8 limit=128 [ 115.748650][ T401] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.761472][ T68] kworker/u8:4: attempt to access beyond end of device [ 115.761472][ T68] loop5: rw=1, sector=345, nr_sectors = 8 limit=128 [ 115.782098][ T68] kworker/u8:4: attempt to access beyond end of device [ 115.782098][ T68] loop5: rw=1, sector=361, nr_sectors = 8 limit=128 [ 115.782624][ T401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.797687][ T68] kworker/u8:4: attempt to access beyond end of device [ 115.797687][ T68] loop5: rw=1, sector=377, nr_sectors = 8 limit=128 [ 115.806140][ T401] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.829408][ T401] veth1_macvtap: left promiscuous mode [ 115.835096][ T401] veth0_macvtap: left promiscuous mode [ 115.840836][ T401] veth1_vlan: left promiscuous mode [ 115.846458][ T401] veth0_vlan: left promiscuous mode [ 115.939789][ T401] team0 (unregistering): Port device team_slave_1 removed [ 115.953608][ T401] team0 (unregistering): Port device team_slave_0 removed [ 115.965288][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.500674][ T5861] syzkaller0: entered promiscuous mode [ 116.534908][ T5861] syzkaller0: entered allmulticast mode [ 116.560419][ T5852] netlink: 64 bytes leftover after parsing attributes in process `syz.6.556'. [ 116.598973][ T5852] tipc: Enabled bearer , priority 0 [ 116.640026][ T5851] tipc: Resetting bearer [ 116.666974][ T5851] tipc: Disabling bearer [ 116.856559][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.890609][ T28] audit: type=1400 audit(2000000016.810:3691): avc: denied { write } for pid=5884 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.919619][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.943892][ T5807] bridge_slave_0: entered allmulticast mode [ 116.956179][ T5807] bridge_slave_0: entered promiscuous mode [ 116.978486][ T401] IPVS: stop unused estimator thread 0... [ 116.986336][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.005493][ T28] audit: type=1400 audit(2000000016.890:3692): avc: denied { write } for pid=5910 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.037946][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.050865][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.062078][ T5807] bridge_slave_1: entered allmulticast mode [ 117.069423][ T5807] bridge_slave_1: entered promiscuous mode [ 117.081603][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 117.091945][ T5913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.566'. [ 117.113020][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.133292][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.179349][ T5807] team0: Port device team_slave_0 added [ 117.197238][ T5807] team0: Port device team_slave_1 added [ 117.246596][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.264895][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.327730][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.334552][ T5921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5921 comm=syz.6.568 [ 117.349151][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.365033][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 117.436449][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.482057][ T28] audit: type=1400 audit(2000000017.400:3693): avc: denied { write } for pid=5922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.537609][ T5807] hsr_slave_0: entered promiscuous mode [ 117.545221][ T5807] hsr_slave_1: entered promiscuous mode [ 117.568306][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 117.586191][ T3395] net_ratelimit: 159 callbacks suppressed [ 117.586212][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.601051][ T5807] Cannot create hsr debugfs directory [ 117.621684][ T28] audit: type=1400 audit(2000000017.540:3694): avc: denied { write } for pid=5936 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.689296][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 117.921877][ T5807] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 117.937872][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 117.962529][ T5807] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 117.987941][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.006607][ T5807] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 118.025933][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.154729][ T5807] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.183982][ T5807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.200309][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 118.344843][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.365600][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.386323][ T401] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.394065][ T401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.420077][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.427389][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.616964][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.741708][ T5995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.761650][ T5995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.846979][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.164635][ T6017] loop5: detected capacity change from 0 to 4096 [ 119.196652][ T6017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.259546][ T5807] veth0_vlan: entered promiscuous mode [ 119.277950][ T5807] veth1_vlan: entered promiscuous mode [ 119.297235][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 119.297318][ T28] audit: type=1400 audit(2000000019.220:3698): avc: denied { write } for pid=6016 comm="syz.5.580" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 119.327963][ T5807] veth0_macvtap: entered promiscuous mode [ 119.362348][ T5807] veth1_macvtap: entered promiscuous mode [ 119.377362][ T28] audit: type=1400 audit(2000000019.300:3699): avc: denied { ioctl } for pid=6016 comm="syz.5.580" path="/94/file1/file1" dev="loop5" ino=15 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.416231][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.435736][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.447960][ T6030] netlink: 40 bytes leftover after parsing attributes in process `syz.2.582'. [ 119.467405][ T28] audit: type=1400 audit(2000000019.320:3700): avc: denied { map } for pid=6016 comm="syz.5.580" path="/94/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.498195][ T36] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.524309][ T28] audit: type=1400 audit(2000000019.320:3701): avc: denied { execute } for pid=6016 comm="syz.5.580" path="/94/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 119.526453][ T36] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.654877][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.679375][ T36] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.691397][ T3588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.725551][ T36] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.767340][ T28] audit: type=1400 audit(2000000019.680:3702): avc: denied { mounton } for pid=5807 comm="syz-executor" path="/root/syzkaller.lY0HdX/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=13033 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 119.816173][ T6036] loop2: detected capacity change from 0 to 512 [ 119.862252][ T6036] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.873009][ T28] audit: type=1400 audit(2000000019.750:3703): avc: denied { mount } for pid=5807 comm="syz-executor" name="/" dev="gadgetfs" ino=4491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 119.942625][ T6036] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.584: corrupted xattr entries [ 119.966427][ T6036] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 119.967221][ T6036] EXT4-fs (loop2): Remounting filesystem read-only [ 119.977385][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 119.977409][ C0] EXT4-fs (loop2): initial error at time 2000000019: xattr_find_entry:337: inode 15 [ 119.977435][ C0] EXT4-fs (loop2): last error at time 2000000019: xattr_find_entry:337: inode 15 [ 120.011450][ T6036] EXT4-fs (loop2): 1 truncate cleaned up [ 120.017846][ T6036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.054757][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.137767][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.297949][ T28] audit: type=1400 audit(2000000020.220:3704): avc: denied { ioctl } for pid=6052 comm="syz.7.589" path="socket:[14172]" dev="sockfs" ino=14172 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 120.351660][ T6054] syzkaller0: entered promiscuous mode [ 120.357562][ T6054] syzkaller0: entered allmulticast mode [ 120.377726][ T6067] netlink: 40 bytes leftover after parsing attributes in process `syz.5.593'. [ 120.536504][ T6077] loop5: detected capacity change from 0 to 512 [ 120.550123][ T6077] EXT4-fs: test_dummy_encryption option not supported [ 120.592917][ T6082] netlink: 68 bytes leftover after parsing attributes in process `syz.7.600'. [ 120.609870][ T6079] syzkaller0: entered promiscuous mode [ 120.622115][ T6079] syzkaller0: entered allmulticast mode [ 120.635865][ T28] audit: type=1400 audit(2000000020.560:3705): avc: denied { read } for pid=6081 comm="syz.7.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 120.719826][ T6088] netlink: 64 bytes leftover after parsing attributes in process `syz.0.598'. [ 120.737499][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.756978][ T6088] tipc: Enabled bearer , priority 0 [ 120.772850][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.830671][ T6078] tipc: Resetting bearer [ 121.142153][ T6092] loop2: detected capacity change from 0 to 512 [ 121.194200][ T6092] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 121.214940][ T6078] tipc: Disabling bearer [ 121.307800][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.602: iget: bad i_size value: 38620345925642 [ 121.409279][ T6092] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 121.415391][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.602: couldn't read orphan inode 15 (err -117) [ 121.425235][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 121.425271][ C1] EXT4-fs (loop2): initial error at time 2000000021: ext4_orphan_get:1397: inode 15 [ 121.425308][ C1] EXT4-fs (loop2): last error at time 2000000021: ext4_orphan_get:1397: inode 15 [ 121.721329][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 121.796011][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 121.914387][ T3395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.940561][ T6092] loop2: lost filesystem error report for type 5 error -117 [ 121.941261][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.947075][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 121.966650][ T28] audit: type=1400 audit(2000000021.890:3706): avc: denied { write } for pid=6091 comm="syz.2.602" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.034625][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.044089][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.053892][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.063307][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.079656][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.106876][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.128779][ T6097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.148381][ T6097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.603'. [ 122.175779][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 122.242737][ T6106] bond0: option arp_interval: invalid value (18446744073709551615) [ 122.265200][ T6106] bond0: option arp_interval: allowed values 0 - 2147483647 [ 122.489991][ T6120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6120 comm=syz.0.612 [ 122.753336][ T6129] loop6: detected capacity change from 0 to 512 [ 122.763828][ T6129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 122.784668][ T28] audit: type=1400 audit(2000000022.700:3707): avc: denied { getopt } for pid=6131 comm="syz.5.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 122.800435][ T6129] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.614: iget: bad i_size value: 38620345925642 [ 122.817402][ T6129] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 122.818229][ T6129] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.614: couldn't read orphan inode 15 (err -117) [ 122.827597][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 122.827638][ C0] EXT4-fs (loop6): initial error at time 2000000022: ext4_orphan_get:1397: inode 15 [ 122.827668][ C0] EXT4-fs (loop6): last error at time 2000000022: ext4_orphan_get:1397: inode 15 [ 122.907577][ T6129] loop6: lost filesystem error report for type 5 error -117 [ 122.912661][ T6129] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.034121][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.174454][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.766846][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.566872][ T6162] loop7: detected capacity change from 0 to 128 [ 124.659529][ T6162] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.675799][ T6162] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.796500][ T6172] audit_log_lost: 2 callbacks suppressed [ 124.796746][ T6172] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 124.907753][ T6172] audit: out of memory in audit_log_start [ 124.908706][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.992573][ T6177] loop5: detected capacity change from 0 to 128 [ 126.204152][ T5807] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 126.382837][ T28] audit: type=1326 audit(2000000026.290:3710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.473043][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.482916][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.488047][ T28] audit: type=1326 audit(2000000026.290:3711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.525869][ T28] audit: type=1326 audit(2000000026.290:3712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.571857][ T6195] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 126.579397][ T28] audit: type=1326 audit(2000000026.290:3713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.591962][ T6195] netlink: 'syz.7.631': attribute type 21 has an invalid length. [ 126.629414][ T28] audit: type=1326 audit(2000000026.290:3714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.660487][ T28] audit: type=1326 audit(2000000026.290:3715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.711585][ T28] audit: type=1326 audit(2000000026.290:3716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.717828][ T6198] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.738417][ T28] audit: type=1326 audit(2000000026.290:3717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6175 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75553ace59 code=0x7fc00000 [ 126.753655][ T6198] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 126.818814][ T6204] loop2: detected capacity change from 0 to 8192 [ 127.687695][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.654631][ T6226] loop2: detected capacity change from 0 to 512 [ 128.673644][ T6226] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 128.687495][ T6226] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.642: iget: bad i_size value: 38620345925642 [ 129.136986][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.168868][ T6226] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.169118][ T6226] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.642: couldn't read orphan inode 15 (err -117) [ 129.178544][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 129.178563][ C1] EXT4-fs (loop2): initial error at time 2000000029: ext4_orphan_get:1397: inode 15 [ 129.178591][ C1] EXT4-fs (loop2): last error at time 2000000029: ext4_orphan_get:1397: inode 15 [ 129.651604][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.201833][ T6226] loop2: lost filesystem error report for type 5 error -117 [ 130.202511][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.225782][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.651546][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.838764][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 130.838780][ T28] audit: type=1400 audit(2000000030.760:3776): avc: denied { write } for pid=6225 comm="syz.2.642" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 130.945012][ T6234] loop7: detected capacity change from 0 to 2048 [ 130.975787][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.040232][ T6234] loop7: p2 p3 p7 [ 131.054927][ T6234] xt_hashlimit: size too large, truncated to 1048576 [ 131.155852][ T6258] __nla_validate_parse: 128 callbacks suppressed [ 131.155868][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.651'. [ 131.203352][ T6254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.263743][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.291230][ T28] audit: type=1400 audit(2000000031.200:3777): avc: denied { write } for pid=6228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.366757][ T6267] loop5: detected capacity change from 0 to 128 [ 131.404790][ T6267] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 131.440094][ T28] audit: type=1400 audit(2000000031.360:3778): avc: denied { write } for pid=6273 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.469108][ T6254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.485938][ T6267] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 131.592708][ T6254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.596071][ T6259] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6259 comm=syz.2.647 [ 131.682532][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.652'. [ 131.700212][ T6267] netlink: 28 bytes leftover after parsing attributes in process `syz.5.652'. [ 131.745170][ T6254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.749749][ T28] audit: type=1400 audit(2000000031.670:3779): avc: denied { write } for pid=6278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.805280][ T28] audit: type=1400 audit(2000000031.720:3780): avc: denied { write } for pid=6292 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.859742][ T30] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.878082][ T30] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.900594][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.913220][ T12] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.960659][ T6302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.655'. [ 132.114684][ T28] audit: type=1400 audit(2000000032.030:3781): avc: denied { write } for pid=6297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.140365][ T6314] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6314 comm=syz.5.655 [ 132.172138][ T28] audit: type=1400 audit(2000000032.090:3782): avc: denied { write } for pid=6315 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.363095][ T6317] loop7: detected capacity change from 0 to 128 [ 132.429866][ T6317] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.450527][ T6317] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.647188][ T6324] netlink: 76 bytes leftover after parsing attributes in process `syz.5.658'. [ 132.690872][ T6322] netlink: 277 bytes leftover after parsing attributes in process `syz.2.657'. [ 132.701586][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.785211][ T6322] loop2: detected capacity change from 0 to 512 [ 133.001286][ T6322] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.013425][ T6332] loop5: detected capacity change from 0 to 256 [ 133.154941][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.171970][ T6322] EXT4-fs (loop2): 1 truncate cleaned up [ 133.196820][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.054058][ T5807] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.173041][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.214821][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.392956][ T28] audit: type=1400 audit(2000000034.310:3783): avc: denied { write } for pid=6344 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.490495][ T28] audit: type=1400 audit(2000000034.410:3784): avc: denied { write } for pid=6378 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.542272][ T6358] loop5: detected capacity change from 0 to 8192 [ 134.610965][ T6385] loop7: detected capacity change from 0 to 736 [ 134.631684][ T6385] iso9660: Unknown parameter 'iide' [ 134.749226][ T6387] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6387 comm=syz.2.672 [ 135.277538][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.734789][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.747241][ T6413] netlink: 'syz.2.678': attribute type 39 has an invalid length. [ 136.106696][ T6418] xt_hashlimit: size too large, truncated to 1048576 [ 136.294918][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.335682][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.422741][ T6380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.553180][ T6439] FAULT_INJECTION: forcing a failure. [ 137.553180][ T6439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 137.588759][ T6439] CPU: 1 UID: 0 PID: 6439 Comm: syz.7.686 Not tainted syzkaller #0 PREEMPT(lazy) [ 137.588836][ T6439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 137.588853][ T6439] Call Trace: [ 137.588862][ T6439] [ 137.588872][ T6439] __dump_stack+0x1d/0x30 [ 137.588910][ T6439] dump_stack_lvl+0x95/0xd0 [ 137.589027][ T6439] dump_stack+0x15/0x1b [ 137.589051][ T6439] should_fail_ex+0x263/0x280 [ 137.589076][ T6439] should_fail+0xb/0x20 [ 137.589098][ T6439] should_fail_usercopy+0x1a/0x20 [ 137.589121][ T6439] _copy_from_user+0x1c/0xb0 [ 137.589168][ T6439] ___sys_sendmsg+0xc1/0x1e0 [ 137.589207][ T6439] __x64_sys_sendmsg+0xd4/0x160 [ 137.589315][ T6439] x64_sys_call+0x194c/0x3020 [ 137.589377][ T6439] do_syscall_64+0x12c/0x3b0 [ 137.589413][ T6439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.589520][ T6439] RIP: 0033:0x7f945720ce59 [ 137.589547][ T6439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.589568][ T6439] RSP: 002b:00007f9455c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.589591][ T6439] RAX: ffffffffffffffda RBX: 00007f9457485fa0 RCX: 00007f945720ce59 [ 137.589609][ T6439] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 137.589671][ T6439] RBP: 00007f9455c67090 R08: 0000000000000000 R09: 0000000000000000 [ 137.589688][ T6439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.589703][ T6439] R13: 00007f9457486038 R14: 00007f9457485fa0 R15: 00007ffcb5938d08 [ 137.589724][ T6439] [ 137.766227][ T6432] loop5: detected capacity change from 0 to 8192 [ 137.818699][ T6440] loop2: detected capacity change from 0 to 512 [ 137.898588][ T6440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.912611][ T6440] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.964916][ T6440] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #12: comm syz.2.684: Directory hole found for htree leaf block 0 [ 137.983805][ T28] audit: type=1400 audit(2000000037.850:3785): avc: denied { write } for pid=6431 comm="syz.2.684" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.183933][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.196029][ T28] audit: type=1400 audit(2000000037.870:3786): avc: denied { write } for pid=6431 comm="syz.2.684" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.355676][ T28] audit: type=1400 audit(2000000037.870:3787): avc: denied { write } for pid=6431 comm="syz.2.684" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.551714][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.629715][ T6450] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6450 comm=syz.0.687 [ 139.657313][ T28] audit: type=1400 audit(2000000037.870:3788): avc: denied { write } for pid=6431 comm="syz.2.684" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 139.703772][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.783995][ T6436] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 139.941843][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.965566][ T28] audit: type=1400 audit(2000000037.870:3789): avc: denied { rename } for pid=6431 comm="syz.2.684" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.654855][ T6467] loop2: detected capacity change from 0 to 512 [ 140.693055][ T28] audit: type=1400 audit(2000000037.870:3790): avc: denied { reparent } for pid=6431 comm="syz.2.684" name="file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.866257][ T6467] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.880860][ T6467] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.960638][ T6467] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #12: comm syz.2.691: Directory hole found for htree leaf block 0 [ 141.226566][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.294350][ T28] audit: type=1400 audit(2000000039.530:3791): avc: denied { cpu } for pid=6461 comm="syz.2.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 141.313837][ T28] audit: type=1326 audit(2000000039.540:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4ef7ce59 code=0x7ffc0000 [ 141.365358][ T6483] tipc: Started in network mode [ 141.379465][ T28] audit: type=1326 audit(2000000039.540:3793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4ef7ce59 code=0x7ffc0000 [ 141.413370][ T6483] tipc: Node identity , cluster identity 4711 [ 141.506117][ T28] audit: type=1326 audit(2000000039.540:3794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6461 comm="syz.2.690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4ef7ce59 code=0x7ffc0000 [ 141.690778][ T6497] loop5: detected capacity change from 0 to 4096 [ 141.714100][ T6497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.266623][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.278214][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.289807][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.312673][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.352186][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.373159][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.385567][ T6514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.484734][ T3588] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.792532][ T6519] xt_hl: Unknown TTL match mode: 29 [ 142.938797][ T6521] loop7: detected capacity change from 0 to 128 [ 143.007067][ T6521] vfat: Unknown parameter '™÷`îoQð>øt' [ 143.085746][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 143.085765][ T28] audit: type=1400 audit(2000000043.010:3832): avc: denied { write } for pid=6525 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.162262][ T6537] tipc: Failed to obtain node identity [ 143.176343][ T6537] tipc: Enabling of bearer rejected, failed to enable media [ 143.202249][ T28] audit: type=1400 audit(2000000043.120:3833): avc: denied { write } for pid=6538 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.364891][ T6546] syzkaller0: entered promiscuous mode [ 143.388196][ T6546] syzkaller0: entered allmulticast mode [ 143.479899][ T6555] netlink: 64 bytes leftover after parsing attributes in process `syz.2.703'. [ 143.517923][ T6555] tipc: Enabled bearer , priority 0 [ 143.604344][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.6.710'. [ 143.635981][ T6562] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6562 comm=syz.5.704 [ 143.654126][ T6561] netlink: 'syz.7.711': attribute type 21 has an invalid length. [ 143.725150][ T6561] netlink: 36 bytes leftover after parsing attributes in process `syz.7.711'. [ 143.793367][ T6564] loop6: detected capacity change from 0 to 8192 [ 143.809079][ T28] audit: type=1326 audit(2000000043.730:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.005142][ T28] audit: type=1326 audit(2000000043.730:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.059351][ T28] audit: type=1326 audit(2000000043.730:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.094495][ T28] audit: type=1326 audit(2000000043.730:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.120191][ T28] audit: type=1326 audit(2000000043.760:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.136515][ T6569] xt_hashlimit: size too large, truncated to 1048576 [ 144.146813][ T28] audit: type=1326 audit(2000000043.760:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.178366][ T6545] tipc: Resetting bearer [ 144.188563][ T28] audit: type=1326 audit(2000000043.760:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.251688][ T28] audit: type=1326 audit(2000000043.760:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6560 comm="syz.7.711" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f945720ce59 code=0x7ffc0000 [ 144.280593][ T6545] tipc: Disabling bearer [ 144.318987][ T6579] netlink: 16 bytes leftover after parsing attributes in process `syz.6.714'. [ 144.363531][ T6569] Cannot find add_set index 2 as target [ 144.542332][ T6590] tipc: Enabled bearer , priority 9 [ 145.433982][ T3416] net_ratelimit: 16 callbacks suppressed [ 145.434000][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.522003][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.599715][ T6603] loop7: detected capacity change from 0 to 1024 [ 145.673892][ T23] tipc: Node number set to 1329964948 [ 145.870858][ T6607] netlink: 76 bytes leftover after parsing attributes in process `syz.6.724'. [ 146.005093][ T6609] loop6: detected capacity change from 0 to 8192 [ 146.493330][ T6603] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 146.502159][ T6603] System zones: 0-1, 3-36 [ 146.952352][ T6613] loop6: detected capacity change from 0 to 128 [ 147.516468][ T6603] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.722: bad orphan inode 134217728 [ 147.527174][ T6603] loop7: lost filesystem error report for type 5 error -117 [ 147.527677][ T6603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.557713][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.576819][ T6613] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 147.688933][ T6613] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.992128][ T6631] tipc: Enabled bearer , priority 9 [ 148.008410][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.098598][ T6636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 148.141303][ T6636] 8021q: adding VLAN 0 to HW filter on device bond1 [ 148.177133][ T6641] bond1: option ad_select: unable to set because the bond device is up [ 148.321100][ T6643] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6643 comm=syz.5.735 [ 148.512192][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.579014][ T4167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 148.617094][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.639480][ T6656] loop6: detected capacity change from 0 to 128 [ 148.646245][ T6656] EXT4-fs: Ignoring removed nobh option [ 148.657602][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 148.657616][ T28] audit: type=1400 audit(2000000048.580:3843): avc: denied { read } for pid=6657 comm="syz.2.739" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.688921][ T6656] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 148.700765][ T6652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6652 comm=syz.0.737 [ 148.702308][ T6656] ext4 filesystem being mounted at /122/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 148.724183][ T28] audit: type=1400 audit(2000000048.580:3844): avc: denied { open } for pid=6657 comm="syz.2.739" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 148.772141][ T28] audit: type=1400 audit(2000000048.690:3845): avc: denied { write } for pid=6655 comm="syz.6.738" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.858586][ T28] audit: type=1400 audit(2000000048.770:3846): avc: denied { write } for pid=6655 comm="syz.6.738" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.104305][ T6100] tipc: Node number set to 186429451 [ 149.129882][ T4167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 149.214693][ T6675] loop2: detected capacity change from 0 to 512 [ 149.296262][ T6675] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.313871][ T6675] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.402038][ T6675] EXT4-fs error (device loop2): __ext4_add_entry:2412: inode #12: comm syz.2.742: Directory hole found for htree leaf block 0 [ 149.446876][ T28] audit: type=1400 audit(2000000049.270:3847): avc: denied { write } for pid=6669 comm="syz.2.742" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.505811][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.543424][ T6677] loop5: detected capacity change from 0 to 512 [ 149.655263][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.694347][ T28] audit: type=1400 audit(2000000049.310:3848): avc: denied { write } for pid=6669 comm="syz.2.742" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.968927][ T28] audit: type=1400 audit(2000000049.310:3849): avc: denied { write } for pid=6669 comm="syz.2.742" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.046130][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.058278][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.067161][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.087705][ T6684] loop6: detected capacity change from 0 to 128 [ 150.133489][ T6684] FAT-fs (loop6): bogus logical sector size 0 [ 150.188914][ T6684] FAT-fs (loop6): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 150.221289][ T6686] tipc: Failed to obtain node identity [ 150.230349][ T6684] FAT-fs (loop6): Can't find a valid FAT filesystem [ 150.246075][ T6686] tipc: Enabling of bearer rejected, failed to enable media [ 150.410885][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.6.744'. [ 150.502982][ T28] audit: type=1400 audit(2000000050.420:3850): avc: denied { read write } for pid=6683 comm="syz.6.744" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 150.594348][ T28] audit: type=1400 audit(2000000050.420:3851): avc: denied { open } for pid=6683 comm="syz.6.744" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 150.694976][ T6696] netlink: 666 bytes leftover after parsing attributes in process `syz.6.748'. [ 150.740314][ T6696] netlink: 40 bytes leftover after parsing attributes in process `syz.6.748'. [ 150.812647][ T28] audit: type=1400 audit(2000000050.730:3852): avc: denied { sys_module } for pid=6695 comm="syz.6.748" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 150.913633][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.922860][ T6704] loop6: detected capacity change from 0 to 2048 [ 150.930070][ T6702] netlink: 16 bytes leftover after parsing attributes in process `syz.0.750'. [ 151.001946][ T6708] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6708 comm=syz.2.753 [ 151.065213][ T6704] Alternate GPT is invalid, using primary GPT. [ 151.071610][ T6704] loop6: p2 p3 p7 [ 151.105673][ T23] net_ratelimit: 1 callbacks suppressed [ 151.105691][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.153235][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 151.168380][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 151.211677][ T4022] udevd[4022]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 151.222618][ T6717] netlink: 16 bytes leftover after parsing attributes in process `syz.5.752'. [ 151.459396][ T6725] loop6: detected capacity change from 0 to 512 [ 151.471105][ T6725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.484281][ T6725] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.517953][ T6725] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #18: comm syz.6.758: corrupted inode contents [ 151.530770][ T6725] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 151.531032][ T6725] EXT4-fs error (device loop6): ext4_dirty_inode:6587: inode #18: comm syz.6.758: mark_inode_dirty error [ 151.551684][ T6725] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 151.551961][ T6725] EXT4-fs error (device loop6): ext4_do_update_inode:5690: inode #18: comm syz.6.758: corrupted inode contents [ 151.573472][ T6725] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 151.573738][ T6725] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3001: inode #18: comm syz.6.758: mark_inode_dirty error [ 151.595969][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.605300][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.611285][ T6725] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 151.613704][ T6725] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3004: inode #18: comm syz.6.758: mark inode dirty (error -117) [ 151.635824][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.644474][ T6725] loop6: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 151.644655][ T6725] EXT4-fs warning (device loop6): ext4_evict_inode:287: xattr delete (err -117) [ 151.679173][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.689477][ T6731] loop2: detected capacity change from 0 to 8192 [ 151.783739][ T6739] FAULT_INJECTION: forcing a failure. [ 151.783739][ T6739] name failslab, interval 1, probability 0, space 0, times 0 [ 151.797488][ T6739] CPU: 1 UID: 0 PID: 6739 Comm: syz.6.761 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.797559][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.797570][ T6739] Call Trace: [ 151.797576][ T6739] [ 151.797583][ T6739] __dump_stack+0x1d/0x30 [ 151.797606][ T6739] dump_stack_lvl+0x95/0xd0 [ 151.797704][ T6739] dump_stack+0x15/0x1b [ 151.797721][ T6739] should_fail_ex+0x263/0x280 [ 151.797739][ T6739] ? dev_ethtool+0x96/0x16a0 [ 151.797828][ T6739] should_failslab+0x8c/0xb0 [ 151.797867][ T6739] __kmalloc_cache_noprof+0x5f/0x400 [ 151.797911][ T6739] dev_ethtool+0x96/0x16a0 [ 151.797952][ T6739] ? full_name_hash+0x92/0xe0 [ 151.797983][ T6739] ? strcmp+0x22/0x50 [ 151.798078][ T6739] dev_ioctl+0x2e0/0x960 [ 151.798104][ T6739] sock_do_ioctl+0x1aa/0x230 [ 151.798147][ T6739] sock_ioctl+0x41b/0x610 [ 151.798195][ T6739] ? __se_sys_ioctl+0x52/0x140 [ 151.798222][ T6739] ? __pfx_sock_ioctl+0x10/0x10 [ 151.798276][ T6739] __se_sys_ioctl+0xce/0x140 [ 151.798303][ T6739] __x64_sys_ioctl+0x43/0x50 [ 151.798335][ T6739] x64_sys_call+0x1563/0x3020 [ 151.798387][ T6739] do_syscall_64+0x12c/0x3b0 [ 151.798496][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.798516][ T6739] RIP: 0033:0x7f3c17adce59 [ 151.798531][ T6739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.798547][ T6739] RSP: 002b:00007f3c16537028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.798612][ T6739] RAX: ffffffffffffffda RBX: 00007f3c17d55fa0 RCX: 00007f3c17adce59 [ 151.798625][ T6739] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 000000000000002a [ 151.798636][ T6739] RBP: 00007f3c16537090 R08: 0000000000000000 R09: 0000000000000000 [ 151.798647][ T6739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.798658][ T6739] R13: 00007f3c17d56038 R14: 00007f3c17d55fa0 R15: 00007ffd1f9da2c8 [ 151.798676][ T6739] [ 152.029465][ T6741] FAULT_INJECTION: forcing a failure. [ 152.029465][ T6741] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.042725][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.6.764 Not tainted syzkaller #0 PREEMPT(lazy) [ 152.042756][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 152.042770][ T6741] Call Trace: [ 152.042859][ T6741] [ 152.042867][ T6741] __dump_stack+0x1d/0x30 [ 152.042960][ T6741] dump_stack_lvl+0x95/0xd0 [ 152.042978][ T6741] dump_stack+0x15/0x1b [ 152.042995][ T6741] should_fail_ex+0x263/0x280 [ 152.043033][ T6741] should_fail+0xb/0x20 [ 152.043048][ T6741] should_fail_usercopy+0x1a/0x20 [ 152.043068][ T6741] _copy_to_user+0x20/0xa0 [ 152.043124][ T6741] simple_read_from_buffer+0xb5/0x130 [ 152.043157][ T6741] proc_fail_nth_read+0x10e/0x150 [ 152.043184][ T6741] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 152.043223][ T6741] vfs_read+0x1ab/0x7f0 [ 152.043250][ T6741] ? __rcu_read_unlock+0x4e/0x70 [ 152.043269][ T6741] ? __fget_files+0x184/0x1c0 [ 152.043373][ T6741] ? mutex_lock+0x57/0x90 [ 152.043396][ T6741] ksys_read+0xdc/0x1a0 [ 152.043421][ T6741] __x64_sys_read+0x40/0x50 [ 152.043477][ T6741] x64_sys_call+0x2886/0x3020 [ 152.043500][ T6741] do_syscall_64+0x12c/0x3b0 [ 152.043596][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.043615][ T6741] RIP: 0033:0x7f3c17a9d68e [ 152.043629][ T6741] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 152.043645][ T6741] RSP: 002b:00007f3c16536fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 152.043697][ T6741] RAX: ffffffffffffffda RBX: 00007f3c165376c0 RCX: 00007f3c17a9d68e [ 152.043730][ T6741] RDX: 000000000000000f RSI: 00007f3c165370a0 RDI: 0000000000000004 [ 152.043742][ T6741] RBP: 00007f3c16537090 R08: 0000000000000000 R09: 0000000000000000 [ 152.043753][ T6741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.043769][ T6741] R13: 00007f3c17d56038 R14: 00007f3c17d55fa0 R15: 00007ffd1f9da2c8 [ 152.043786][ T6741] [ 152.240099][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.323558][ T6753] netlink: 72 bytes leftover after parsing attributes in process `syz.6.767'. [ 152.337880][ T6744] loop2: detected capacity change from 0 to 128 [ 152.482877][ T6765] loop2: detected capacity change from 0 to 8192 [ 152.483539][ T6759] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6759 comm=syz.0.770 [ 152.514896][ T6771] loop6: detected capacity change from 0 to 512 [ 152.523814][ T6771] EXT4-fs: inline encryption not supported [ 152.536044][ T6771] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.775: bad orphan inode 15 [ 152.546214][ T6771] loop6: lost filesystem error report for type 5 error -117 [ 152.546397][ T6771] ext4_test_bit(bit=14, block=5) = 0 [ 152.559094][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 152.559118][ C0] EXT4-fs (loop6): initial error at time 2000000052: ext4_orphan_get:1423 [ 152.559162][ C0] EXT4-fs (loop6): last error at time 2000000052: ext4_orphan_get:1423 [ 152.594889][ T6771] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.609895][ T6771] EXT4-fs (loop6): shut down requested (1) [ 152.619979][ T6771] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 152.708062][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.725151][ T6781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.759861][ T6781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.776207][ T6781] ext4 filesystem being mounted at /150/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.776664][ T6785] netlink: 22 bytes leftover after parsing attributes in process `syz.6.779'. [ 152.799791][ T6781] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.810009][ T6781] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 153.211508][ T6686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.254626][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.446382][ T6815] usb usb8: usbfs: process 6815 (syz.7.788) did not claim interface 0 before use [ 153.449145][ T6795] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.466797][ T6795] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.474061][ T6795] bridge_slave_0: entered allmulticast mode [ 153.481213][ T6795] bridge_slave_0: entered promiscuous mode [ 153.488837][ T6795] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.506423][ T6795] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.514411][ T6795] bridge_slave_1: entered allmulticast mode [ 153.515883][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.523596][ T6795] bridge_slave_1: entered promiscuous mode [ 153.552213][ T6795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.563596][ T6795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.614178][ T6795] team0: Port device team_slave_0 added [ 153.624151][ T6795] team0: Port device team_slave_1 added [ 153.657795][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.672849][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.724490][ T6795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.747132][ T6795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.793136][ T6795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 153.843579][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 153.843599][ T28] audit: type=1326 audit(2000000053.760:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.2.789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4ef7ce59 code=0x7ffc0000 [ 153.877129][ T28] audit: type=1326 audit(2000000053.760:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6818 comm="syz.2.789" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e4ef7ce59 code=0x7ffc0000 [ 153.910464][ T6795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.029497][ T6825] set_capacity_and_notify: 4 callbacks suppressed [ 154.029611][ T6825] loop7: detected capacity change from 0 to 128 [ 154.160074][ T6825] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 154.181268][ T6825] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.695905][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.880148][ T282] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.914130][ T6795] hsr_slave_0: entered promiscuous mode [ 154.920283][ T6795] hsr_slave_1: entered promiscuous mode [ 154.926569][ T6795] debugfs: 'hsr0' already exists in 'hsr' [ 155.636135][ T6832] loop2: detected capacity change from 0 to 128 [ 155.677883][ T5807] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 155.714872][ T6832] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 155.731114][ T6832] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.885025][ T6795] Cannot create hsr debugfs directory [ 155.934683][ T6837] loop7: detected capacity change from 0 to 1024 [ 155.953038][ T3394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.077808][ T6837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.100290][ T6837] ext4: Bad value for 'mb_optimize_scan' [ 156.168667][ T28] audit: type=1400 audit(2000000056.090:3897): avc: denied { map } for pid=6836 comm="syz.7.793" path="socket:[17561]" dev="sockfs" ino=17561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.202325][ T6837] netlink: 52 bytes leftover after parsing attributes in process `syz.7.793'. [ 156.293338][ T28] audit: type=1400 audit(2000000056.090:3898): avc: denied { read } for pid=6836 comm="syz.7.793" path="socket:[17561]" dev="sockfs" ino=17561 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 156.419521][ T6840] loop7: detected capacity change from 0 to 4096 [ 156.449396][ T6840] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 156.492108][ T28] audit: type=1400 audit(2000000056.410:3899): avc: denied { write } for pid=6839 comm="syz.7.794" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.835497][ T28] audit: type=1400 audit(2000000056.640:3900): avc: denied { write } for pid=6839 comm="syz.7.794" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 157.025400][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.168335][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 157.178430][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.196919][ T6795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 157.212956][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 157.227936][ T6795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 157.246270][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 157.281912][ T6795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 157.291449][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.309486][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 157.317964][ T6795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 157.347714][ T6795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 157.388969][ T6849] loop2: detected capacity change from 0 to 8192 [ 157.427718][ T6863] loop6: detected capacity change from 0 to 512 [ 157.482384][ T28] audit: type=1400 audit(2000000057.400:3901): avc: denied { mount } for pid=6865 comm="syz.2.802" name="/" dev="configfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 157.518814][ T6863] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.801: bg 0: block 169: padding at end of block bitmap is not set [ 157.605599][ T6863] loop6: lost filesystem error report for type 5 error -117 [ 157.605903][ T6863] Quota error (device loop6): write_blk: dquota write failed [ 157.614629][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 157.614657][ C0] EXT4-fs (loop6): initial error at time 2000000057: ext4_validate_block_bitmap:441 [ 157.614679][ C0] EXT4-fs (loop6): last error at time 2000000057: ext4_validate_block_bitmap:441 [ 157.653650][ T28] audit: type=1400 audit(2000000057.460:3902): avc: denied { write } for pid=6853 comm="syz.7.799" path="socket:[16725]" dev="sockfs" ino=16725 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 157.658788][ T6795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.683678][ T6863] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 157.694097][ T6863] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.801: Failed to acquire dquot type 0 [ 157.697184][ T6868] sg_write: data in/out 32768/136 bytes for SCSI command 0x0-- guessing data in; [ 157.697184][ T6868] program syz.2.802 not setting count and/or reply_len properly [ 157.705750][ T6863] loop6: lost filesystem error report for type 5 error -117 [ 157.706316][ T6863] EXT4-fs (loop6): 1 truncate cleaned up [ 157.706908][ T6863] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.707002][ T6863] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.721337][ T6795] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.778973][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.786117][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.798404][ T6629] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.805577][ T6629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.851788][ T6795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.878443][ T6795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.882694][ T6872] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.801: Failed to acquire dquot type 0 [ 157.896166][ T3416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 157.995202][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.007823][ T6874] loop7: detected capacity change from 0 to 1024 [ 158.064459][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 158.097738][ T6874] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.158155][ T6795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.173214][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.248168][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 158.255138][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 158.263002][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 158.383820][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.7.808'. [ 158.444462][ T6904] infiniband syz0: set active [ 158.449296][ T3416] xfrm0 speed is unknown, defaulting to 1000 [ 158.465251][ T6904] infiniband syz0: added xfrm0 [ 158.518326][ T6904] RDS/IB: syz0: added [ 158.562537][ T6795] veth0_vlan: entered promiscuous mode [ 158.570255][ T6904] smc: adding ib device syz0 with port count 1 [ 158.588191][ T6904] smc: ib device syz0 port 1 has no pnetid [ 158.599905][ T6795] veth1_vlan: entered promiscuous mode [ 158.623203][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 158.650935][ T3415] xfrm0 speed is unknown, defaulting to 1000 [ 158.665346][ T6795] veth0_macvtap: entered promiscuous mode [ 158.692954][ T6795] veth1_macvtap: entered promiscuous mode [ 158.699139][ T6920] loop2: detected capacity change from 0 to 8192 [ 158.723067][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.755107][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 158.767351][ T6795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.809026][ T311] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.842670][ T311] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.856094][ T28] kauditd_printk_skb: 161 callbacks suppressed [ 158.856113][ T28] audit: type=1326 audit(2000000058.770:4062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 158.906874][ T311] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.928574][ T311] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.945458][ T28] audit: type=1326 audit(2000000058.810:4063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 158.972712][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 159.032000][ T28] audit: type=1326 audit(2000000058.820:4064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.086667][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 159.095867][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.107305][ T28] audit: type=1326 audit(2000000058.820:4065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.158602][ T6939] netlink: 72 bytes leftover after parsing attributes in process `syz.8.784'. [ 159.170469][ T28] audit: type=1326 audit(2000000058.820:4066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.218646][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 159.251292][ T28] audit: type=1326 audit(2000000058.820:4067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.303806][ T6942] netlink: 'syz.8.814': attribute type 29 has an invalid length. [ 159.318510][ T28] audit: type=1326 audit(2000000058.830:4068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.367310][ T28] audit: type=1326 audit(2000000058.840:4069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.393458][ T6904] xfrm0 speed is unknown, defaulting to 1000 [ 159.445304][ T28] audit: type=1326 audit(2000000058.840:4070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.512436][ T28] audit: type=1326 audit(2000000058.840:4071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6926 comm="syz.6.812" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f3c17a9d68e code=0x7ffc0000 [ 159.557810][ T6946] netlink: 40 bytes leftover after parsing attributes in process `syz.8.815'. [ 159.774054][ T6957] loop6: detected capacity change from 0 to 1024 [ 159.811568][ T6957] EXT4-fs (loop6): blocks per group (131072) and clusters per group (8192) inconsistent [ 160.087598][ T6971] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 160.120974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.331895][ T6973] netlink: 'syz.7.817': attribute type 21 has an invalid length. [ 160.339898][ T6973] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.347907][ T6973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 160.355251][ T6973] IPv6: NLM_F_CREATE should be set when creating new route [ 160.362474][ T6973] IPv6: NLM_F_CREATE should be set when creating new route [ 160.369806][ T6973] IPv6: NLM_F_CREATE should be set when creating new route [ 160.370423][ T6100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.400968][ T6965] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6965 comm=syz.6.822 [ 160.434808][ T6971] netlink: 'syz.0.823': attribute type 4 has an invalid length. [ 160.535348][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.682151][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.698018][ T6971] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.801066][ T6980] syzkaller0: entered promiscuous mode [ 160.811293][ T6980] syzkaller0: entered allmulticast mode [ 160.838839][ T6976] netlink: 64 bytes leftover after parsing attributes in process `syz.8.824'. [ 160.840488][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.861631][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.874678][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.889971][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.905057][ T6978] tipc: Started in network mode [ 160.910417][ T6978] tipc: Node identity 160b6509a8f1, cluster identity 4711 [ 160.954868][ T6978] tipc: Enabled bearer , priority 0 [ 160.982160][ T6975] tipc: Resetting bearer [ 160.999849][ T6975] tipc: Disabling bearer [ 161.172144][ T7011] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 161.172144][ T7011] The task syz.0.832 (7011) triggered the difference, watch for misbehavior. [ 161.359203][ T7015] loop2: detected capacity change from 0 to 164 [ 161.372329][ T7015] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.393312][ T7015] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.565268][ T36] Bluetooth: hci0: Frame reassembly failed (-84) [ 161.811986][ T7024] FAULT_INJECTION: forcing a failure. [ 161.811986][ T7024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.825424][ T7024] CPU: 0 UID: 0 PID: 7024 Comm: syz.7.837 Not tainted syzkaller #0 PREEMPT(lazy) [ 161.825459][ T7024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.825543][ T7024] Call Trace: [ 161.825551][ T7024] [ 161.825562][ T7024] __dump_stack+0x1d/0x30 [ 161.825592][ T7024] dump_stack_lvl+0x95/0xd0 [ 161.825619][ T7024] dump_stack+0x15/0x1b [ 161.825643][ T7024] should_fail_ex+0x263/0x280 [ 161.825672][ T7024] should_fail+0xb/0x20 [ 161.825692][ T7024] should_fail_usercopy+0x1a/0x20 [ 161.825720][ T7024] _copy_from_iter+0xcf/0xea0 [ 161.825745][ T7024] ? __alloc_skb+0x4f6/0x690 [ 161.825823][ T7024] ? __alloc_skb+0x200/0x690 [ 161.825851][ T7024] netlink_sendmsg+0x4ae/0x6f0 [ 161.825972][ T7024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.826092][ T7024] ____sys_sendmsg+0x563/0x5b0 [ 161.826131][ T7024] ___sys_sendmsg+0x195/0x1e0 [ 161.826179][ T7024] __x64_sys_sendmsg+0xd4/0x160 [ 161.826285][ T7024] x64_sys_call+0x194c/0x3020 [ 161.826329][ T7024] do_syscall_64+0x12c/0x3b0 [ 161.826370][ T7024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.826400][ T7024] RIP: 0033:0x7f945720ce59 [ 161.826428][ T7024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.826453][ T7024] RSP: 002b:00007f9455c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.826480][ T7024] RAX: ffffffffffffffda RBX: 00007f9457485fa0 RCX: 00007f945720ce59 [ 161.826494][ T7024] RDX: 0000000020000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 161.826509][ T7024] RBP: 00007f9455c67090 R08: 0000000000000000 R09: 0000000000000000 [ 161.826561][ T7024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.826610][ T7024] R13: 00007f9457486038 R14: 00007f9457485fa0 R15: 00007ffcb5938d08 [ 161.826636][ T7024] [ 162.052358][ T7013] random: crng reseeded on system resumption [ 162.280336][ T7031] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7031 comm=syz.6.840 [ 162.317711][ T7042] netlink: 83992 bytes leftover after parsing attributes in process `syz.8.843'. [ 162.317739][ T7042] netlink: zone id is out of range [ 162.317749][ T7042] netlink: zone id is out of range [ 162.317816][ T7042] netlink: zone id is out of range [ 162.317839][ T7042] netlink: zone id is out of range [ 162.319134][ T7042] netlink: zone id is out of range [ 162.319149][ T7042] netlink: zone id is out of range [ 162.319233][ T7042] netlink: zone id is out of range [ 162.319245][ T7042] netlink: zone id is out of range [ 162.319270][ T7042] netlink: zone id is out of range [ 162.319280][ T7042] netlink: zone id is out of range [ 162.345863][ T7039] dvmrp0: entered allmulticast mode [ 162.498626][ T7042] netlink: 'syz.8.843': attribute type 2 has an invalid length. [ 162.546785][ T282] kernel read not supported for file [fscontext] (pid: 282 comm: kworker/0:2) [ 162.704661][ T7057] FAULT_INJECTION: forcing a failure. [ 162.704661][ T7057] name failslab, interval 1, probability 0, space 0, times 0 [ 162.717733][ T7057] CPU: 1 UID: 0 PID: 7057 Comm: syz.0.849 Not tainted syzkaller #0 PREEMPT(lazy) [ 162.717806][ T7057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.717820][ T7057] Call Trace: [ 162.717826][ T7057] [ 162.717834][ T7057] __dump_stack+0x1d/0x30 [ 162.717884][ T7057] dump_stack_lvl+0x95/0xd0 [ 162.717909][ T7057] dump_stack+0x15/0x1b [ 162.717936][ T7057] should_fail_ex+0x263/0x280 [ 162.717959][ T7057] ? create_io_worker+0x5c/0x360 [ 162.718012][ T7057] should_failslab+0x8c/0xb0 [ 162.718058][ T7057] __kmalloc_cache_noprof+0x5f/0x400 [ 162.718181][ T7057] create_io_worker+0x5c/0x360 [ 162.718250][ T7057] io_wq_enqueue+0x461/0x540 [ 162.718290][ T7057] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 162.718375][ T7057] io_queue_iowq+0x24e/0x320 [ 162.718407][ T7057] ? io_queue_sqe_fallback+0xdd/0x140 [ 162.718521][ T7057] io_queue_sqe_fallback+0xe5/0x140 [ 162.718554][ T7057] io_submit_sqes+0xd29/0x1170 [ 162.718591][ T7057] __se_sys_io_uring_enter+0x25c/0xfc0 [ 162.718711][ T7057] ? mutex_unlock+0x4e/0x90 [ 162.718763][ T7057] ? fput+0x8f/0xc0 [ 162.718788][ T7057] __x64_sys_io_uring_enter+0x78/0x90 [ 162.718815][ T7057] x64_sys_call+0x1e16/0x3020 [ 162.718881][ T7057] do_syscall_64+0x12c/0x3b0 [ 162.718912][ T7057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.719006][ T7057] RIP: 0033:0x7f93afb3ce59 [ 162.719081][ T7057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.719100][ T7057] RSP: 002b:00007f93ae597028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 162.719123][ T7057] RAX: ffffffffffffffda RBX: 00007f93afdb5fa0 RCX: 00007f93afb3ce59 [ 162.719142][ T7057] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 162.719158][ T7057] RBP: 00007f93ae597090 R08: 0000000000000000 R09: 0000000000000000 [ 162.719174][ T7057] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 162.719189][ T7057] R13: 00007f93afdb6038 R14: 00007f93afdb5fa0 R15: 00007fff1cc11058 [ 162.719273][ T7057] [ 163.147723][ T7059] loop8: detected capacity change from 0 to 1024 [ 163.178965][ T7059] EXT4-fs: Ignoring removed bh option [ 163.351542][ T7059] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.644265][ T7022] Bluetooth: hci0: command 0x1003 tx timeout [ 163.650779][ T3621] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 163.827443][ T7082] loop6: detected capacity change from 0 to 512 [ 163.849065][ T7083] netlink: 'syz.7.857': attribute type 30 has an invalid length. [ 163.869523][ T7082] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 163.896377][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.7.857'. [ 163.919896][ T7082] EXT4-fs (loop6): 1 truncate cleaned up [ 163.927632][ T7083] bond0: option arp_missed_max: invalid value (0) [ 163.939344][ T7082] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.954775][ T7083] bond0: option arp_missed_max: allowed values 1 - 255 [ 164.509747][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.522472][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.558482][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 164.571643][ T7089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.863'. [ 164.651090][ T7094] netlink: 'syz.6.859': attribute type 1 has an invalid length. [ 164.692966][ T7097] loop8: detected capacity change from 0 to 128 [ 164.715724][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 164.715742][ T28] audit: type=1400 audit(2000000064.610:4285): avc: denied { map } for pid=7092 comm="syz.6.859" path="/proc/467" dev="proc" ino=17228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 164.777399][ T7097] loop8: detected capacity change from 0 to 512 [ 164.784781][ T7097] EXT4-fs: test_dummy_encryption option not supported [ 164.944390][ T7103] loop7: detected capacity change from 0 to 512 [ 165.077856][ T7103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.093486][ T7103] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.119288][ T28] audit: type=1400 audit(2000000065.030:4286): avc: denied { write } for pid=7090 comm="syz.7.862" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.163245][ T7104] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 165.188663][ T7103] EXT4-fs error (device loop7): __ext4_add_entry:2412: inode #12: comm syz.7.862: Directory hole found for htree leaf block 0 [ 165.241012][ T7104] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 165.474189][ T7104] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.865'. [ 165.487126][ T7113] netlink: 156 bytes leftover after parsing attributes in process `syz.8.866'. [ 165.503792][ T28] audit: type=1400 audit(2000000065.090:4287): avc: denied { write } for pid=7090 comm="syz.7.862" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.572796][ T28] audit: type=1400 audit(2000000065.090:4288): avc: denied { write } for pid=7090 comm="syz.7.862" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 165.849538][ T7125] netlink: 'syz.8.871': attribute type 1 has an invalid length. [ 165.885925][ T28] audit: type=1400 audit(2000000065.810:4289): avc: denied { watch_reads } for pid=7124 comm="syz.8.871" path="/13/file0" dev="tmpfs" ino=88 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 165.953140][ T7125] loop8: detected capacity change from 0 to 128 [ 166.070470][ T7125] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.090197][ T7125] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.654695][ T7141] loop2: detected capacity change from 0 to 128 [ 166.691172][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.735207][ T7141] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.751664][ T7141] ext4 filesystem being mounted at /166/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.912189][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz.6.870'. [ 167.143201][ T6795] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.774563][ T7157] syzkaller0: entered promiscuous mode [ 167.786435][ T7157] syzkaller0: entered allmulticast mode [ 167.831496][ T7157] netlink: 64 bytes leftover after parsing attributes in process `syz.6.881'. [ 167.853986][ T7157] tipc: Enabled bearer , priority 0 [ 167.873345][ T7156] tipc: Resetting bearer [ 167.883828][ T7156] tipc: Disabling bearer [ 168.019676][ T7163] loop6: detected capacity change from 0 to 512 [ 168.189376][ T28] audit: type=1400 audit(2000000068.110:4290): avc: denied { read } for pid=7174 comm="syz.8.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 168.237188][ T7175] netlink: 8 bytes leftover after parsing attributes in process `syz.8.886'. [ 168.270436][ T28] audit: type=1326 audit(2000000068.180:4291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7176 comm="syz.7.887" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f945720ce59 code=0x0 [ 168.276968][ T7175] net_ratelimit: 43 callbacks suppressed [ 168.277171][ T7175] openvswitch: netlink: Flow key attr not present in new flow. [ 168.326646][ T3308] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.380005][ T28] audit: type=1400 audit(2000000068.300:4292): avc: denied { bind } for pid=7180 comm="syz.6.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 168.424289][ T7187] syzkaller0: entered promiscuous mode [ 168.434342][ T7187] syzkaller0: entered allmulticast mode [ 168.444706][ T28] audit: type=1400 audit(2000000068.300:4293): avc: denied { mounton } for pid=7180 comm="syz.6.889" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 168.499079][ T7187] netlink: 64 bytes leftover after parsing attributes in process `syz.8.892'. [ 168.515711][ T7187] tipc: Enabled bearer , priority 0 [ 168.557405][ T7186] tipc: Resetting bearer [ 168.588208][ T7186] tipc: Disabling bearer [ 168.623555][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'. [ 168.682898][ T7185] netlink: 16 bytes leftover after parsing attributes in process `syz.2.890'. [ 168.833456][ T7208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.850309][ T7208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.925256][ T7212] loop2: detected capacity change from 0 to 2048 [ 168.936672][ T7212] EXT4-fs (loop2): Invalid log cluster size: 31 [ 168.993972][ T28] audit: type=1400 audit(2000000068.910:4294): avc: denied { execute } for pid=7216 comm="syz.6.903" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18380 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 169.115248][ T7221] syzkaller0: entered promiscuous mode [ 169.121102][ T7221] syzkaller0: entered allmulticast mode [ 169.166214][ T7221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.905'. [ 169.186861][ T7221] tipc: Enabled bearer , priority 0 [ 169.196656][ T7220] tipc: Resetting bearer [ 169.216287][ T7220] tipc: Disabling bearer [ 169.224906][ T7224] loop6: detected capacity change from 0 to 512 [ 169.258901][ T7224] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #2: comm syz.6.906: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 5, max 4(4), depth 0(0) [ 169.280068][ T7224] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 169.283490][ T7224] EXT4-fs (loop6): get root inode failed [ 169.297005][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 169.297261][ C0] EXT4-fs (loop6): initial error at time 2000000069: ext4_ext_check_inode:521: inode 2 [ 169.297630][ C0] EXT4-fs (loop6): last error at time 2000000069: ext4_ext_check_inode:521: inode 2 [ 169.349156][ T7224] EXT4-fs (loop6): mount failed [ 169.734464][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 169.734483][ T28] audit: type=1326 audit(2000000069.650:4433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 169.795851][ T28] audit: type=1326 audit(2000000069.650:4434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f93afb3cbc2 code=0x7ffc0000 [ 169.837850][ T28] audit: type=1326 audit(2000000069.650:4435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f93afb3cc57 code=0x7ffc0000 [ 169.888905][ T28] audit: type=1326 audit(2000000069.650:4436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f93afaf9b51 code=0x7ffc0000 [ 169.951483][ T28] audit: type=1326 audit(2000000069.660:4437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f93afb3dc49 code=0x7ffc0000 [ 170.006702][ T28] audit: type=1326 audit(2000000069.660:4438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f93afaf9bbb code=0x7ffc0000 [ 170.064149][ T28] audit: type=1326 audit(2000000069.660:4440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f93afaf92ac code=0x7ffc0000 [ 170.114330][ T28] audit: type=1326 audit(2000000069.660:4441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f93afaf930e code=0x7ffc0000 [ 170.158442][ T28] audit: type=1326 audit(2000000069.660:4442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f93afb3caeb code=0x7ffc0000 [ 170.241727][ T28] audit: type=1326 audit(2000000069.660:4439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7246 comm="syz.0.915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 170.301194][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 170.321218][ T7264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.517082][ T7276] loop8: detected capacity change from 0 to 256 [ 170.540047][ T7276] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 170.543048][ T7278] SELinux: Context system_u:object_r:fonts_t:s0 is not valid (left unmapped). [ 170.622556][ T7268] xfrm0 speed is unknown, defaulting to 1000 [ 170.681330][ T7287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.928'. [ 170.782377][ T7294] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 170.805163][ T7255] Set syz1 is full, maxelem 65536 reached [ 171.392127][ T7311] loop7: detected capacity change from 0 to 512 [ 171.421105][ T7311] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 171.455867][ T7311] EXT4-fs (loop7): failed to open journal device unknown-block(11,127) -6 [ 171.532842][ T7321] netlink: 48 bytes leftover after parsing attributes in process `syz.6.936'. [ 171.978284][ T7331] loop6: detected capacity change from 0 to 512 [ 172.164104][ T7331] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.200842][ T7331] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.294096][ T7331] EXT4-fs error (device loop6): __ext4_add_entry:2412: inode #12: comm syz.6.938: Directory hole found for htree leaf block 0 [ 173.616353][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.041764][ T7361] loop8: detected capacity change from 0 to 2048 [ 174.056059][ T7361] journal_path: Lookup failure for './bus' [ 174.086420][ T7361] EXT4-fs: error: could not find journal device path [ 174.171328][ T7361] loop8: detected capacity change from 0 to 512 [ 174.210667][ T7361] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 174.223136][ T7361] System zones: 0-2, 18-18, 34-35 [ 174.232313][ T7361] EXT4-fs (loop8): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 174.250919][ T7361] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 174.371684][ T7374] tun0: tun_chr_ioctl cmd 1074025677 [ 174.383087][ T7374] tun0: linktype set to 778 [ 174.783066][ T28] kauditd_printk_skb: 739 callbacks suppressed [ 174.783092][ T28] audit: type=1400 audit(2000000074.700:5182): avc: denied { write } for pid=7394 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.611762][ T28] audit: type=1400 audit(2000000075.530:5183): avc: denied { write } for pid=7403 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.726212][ T28] audit: type=1400 audit(2000000075.630:5184): avc: denied { write } for pid=7419 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.344114][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 176.445336][ T28] audit: type=1400 audit(2000000076.370:5185): avc: denied { map } for pid=7430 comm="syz.8.958" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.707224][ T7443] __nla_validate_parse: 1 callbacks suppressed [ 176.707253][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.8.961'. [ 176.818662][ T7446] loop8: detected capacity change from 0 to 1764 [ 177.495211][ T7465] loop6: detected capacity change from 0 to 128 [ 179.571811][ T7465] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 180.347285][ T7465] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.129932][ T4167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 181.141696][ T7472] loop8: detected capacity change from 0 to 512 [ 181.174950][ T7472] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 181.221955][ T7472] EXT4-fs error (device loop8): ext4_orphan_get:1397: inode #13: comm syz.8.969: iget: bad i_size value: 12154757448730 [ 181.282738][ T7472] loop8: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 181.282941][ T7472] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.969: couldn't read orphan inode 13 (err -117) [ 181.292793][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 181.292817][ C0] EXT4-fs (loop8): initial error at time 2000000081: ext4_orphan_get:1397: inode 13 [ 181.292849][ C0] EXT4-fs (loop8): last error at time 2000000081: ext4_orphan_get:1397: inode 13 [ 181.446474][ T7481] loop2: detected capacity change from 0 to 512 [ 181.505147][ T7472] loop8: lost filesystem error report for type 5 error -117 [ 181.513168][ T28] audit: type=1326 audit(2000000081.430:5186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 181.528605][ T7481] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a841c018, mo2=0002] [ 181.555468][ T7472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 181.571999][ T28] audit: type=1326 audit(2000000081.430:5187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 181.600896][ T7472] EXT4-fs warning (device loop8): ext4_lookup:1797: Inconsistent encryption contexts: 2/12 [ 181.614849][ T7481] System zones: 0-2, 18-18, 34-35 [ 181.640896][ T35] hid (null): unknown global tag 0xe [ 181.648981][ T35] hid-generic 0001:0003:0400.0001: unknown main item tag 0x6 [ 181.660418][ T7481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0003-0000-000000000000 r/w without journal. Quota mode: none. [ 181.692757][ T28] audit: type=1326 audit(2000000081.470:5188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 181.721263][ T7481] ext4 filesystem being mounted at /190/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 181.727859][ T35] hid-generic 0001:0003:0400.0001: unknown main item tag 0x0 [ 181.745310][ T7481] audit: audit_backlog=65 > audit_backlog_limit=64 [ 181.754761][ T7481] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 181.764386][ T7481] audit: backlog limit exceeded [ 181.774850][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.778888][ T28] audit: type=1326 audit(2000000081.470:5189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 181.788392][ T35] hid-generic 0001:0003:0400.0001: unknown global tag 0xe [ 181.822093][ T35] hid-generic 0001:0003:0400.0001: item 0 4 1 14 parsing failed [ 181.830826][ T35] hid-generic 0001:0003:0400.0001: probe with driver hid-generic failed with error -22 [ 181.856242][ T7493] netlink: 'syz.8.976': attribute type 1 has an invalid length. [ 182.023443][ T28] audit: type=1326 audit(2000000081.470:5190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 182.048984][ T28] audit: type=1326 audit(2000000081.470:5191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7483 comm="syz.0.974" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93afb3ce59 code=0x7ffc0000 [ 182.074505][ T28] audit: type=1400 audit(2000000081.520:5192): avc: denied { write } for pid=7471 comm="syz.8.969" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 182.155829][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0003-0000-000000000000. [ 182.340759][ T7502] loop8: detected capacity change from 0 to 512 [ 182.512465][ T7502] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.646745][ T7502] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.791259][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.922985][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.932919][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.953155][ T7522] netlink: 36 bytes leftover after parsing attributes in process `syz.0.984'. [ 182.963452][ T7522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.993847][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.020896][ T7526] xt_hashlimit: size too large, truncated to 1048576 [ 183.139377][ T7536] netlink: 'syz.2.988': attribute type 1 has an invalid length. [ 183.328372][ T7545] netlink: 64 bytes leftover after parsing attributes in process `syz.8.986'. [ 183.340964][ T7548] netlink: 40 bytes leftover after parsing attributes in process `syz.0.989'. [ 183.589101][ T7552] loop6: detected capacity change from 0 to 512 [ 183.608262][ T7552] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 184.153013][ T7556] loop6: detected capacity change from 0 to 32768 [ 186.046167][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.061317][ T7531] syzkaller0: entered promiscuous mode [ 186.070012][ T7556] loop6: p1 p3 < > [ 186.076180][ T7531] syzkaller0: entered allmulticast mode [ 186.268831][ T49] bridge_slave_1: left allmulticast mode [ 186.286476][ T49] bridge_slave_1: left promiscuous mode [ 186.300466][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.336454][ T49] bridge_slave_0: left allmulticast mode [ 186.360417][ T49] bridge_slave_0: left promiscuous mode [ 186.379938][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.516208][ T28] kauditd_printk_skb: 461 callbacks suppressed [ 186.516227][ T28] audit: type=1326 audit(2000000086.440:5654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.550365][ T7585] netlink: 'syz.6.996': attribute type 10 has an invalid length. [ 186.579551][ T4022] udevd[4022]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 186.599222][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 186.621015][ T28] audit: type=1326 audit(2000000086.440:5655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.699626][ T28] audit: type=1326 audit(2000000086.440:5656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.740018][ T28] audit: type=1326 audit(2000000086.450:5657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.766056][ T28] audit: type=1326 audit(2000000086.450:5658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.791849][ T28] audit: type=1326 audit(2000000086.450:5659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.817782][ T28] audit: type=1326 audit(2000000086.460:5660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.830772][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.852653][ T28] audit: type=1326 audit(2000000086.460:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.881661][ T28] audit: type=1326 audit(2000000086.470:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.908469][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.917603][ T28] audit: type=1326 audit(2000000086.470:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7559 comm="syz.7.992" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f94571cd68e code=0x7ffc0000 [ 186.945920][ T49] bond0 (unregistering): Released all slaves [ 186.961188][ T7593] netlink: 'syz.6.996': attribute type 10 has an invalid length. [ 186.978567][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 187.004483][ T49] tipc: Disabling bearer [ 187.010453][ T49] tipc: Left network mode [ 188.046451][ T7630] loop8: detected capacity change from 0 to 128 [ 188.159634][ T7630] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 188.178000][ T7630] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 188.331276][ T7638] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1003'. [ 188.331323][ T7628] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7628 comm=syz.7.999 [ 188.739934][ T49] hsr_slave_0: left promiscuous mode [ 188.746554][ T49] hsr_slave_1: left promiscuous mode [ 188.753134][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.831343][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.846928][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.856142][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.875834][ T49] veth1_macvtap: left promiscuous mode [ 188.882870][ T49] veth0_macvtap: left promiscuous mode [ 188.894099][ T49] veth1_vlan: left promiscuous mode [ 188.908409][ T49] veth0_vlan: left promiscuous mode [ 189.041528][ T49] team0 (unregistering): Port device team_slave_1 removed [ 189.053044][ T49] team0 (unregistering): Port device team_slave_0 removed [ 189.107946][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 189.118679][ T7656] syzkaller0: entered promiscuous mode [ 189.124392][ T7656] syzkaller0: entered allmulticast mode [ 189.182037][ T7654] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1005'. [ 189.270403][ T7669] bridge_slave_0: left allmulticast mode [ 189.296685][ T7669] bridge_slave_0: left promiscuous mode [ 189.313844][ T7669] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.506600][ T7683] loop7: detected capacity change from 0 to 512 [ 189.521022][ T7683] EXT4-fs: Ignoring removed bh option [ 189.701582][ T7688] loop6: detected capacity change from 0 to 128 [ 189.755380][ T7688] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.771065][ T7688] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.878730][ T7683] EXT4-fs: inline encryption not supported [ 189.909129][ T7683] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 189.956413][ T7683] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 189.994953][ T7683] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1007: bg 0: block 248: padding at end of block bitmap is not set [ 190.037632][ T7683] loop7: lost filesystem error report for type 5 error -117 [ 190.038240][ T7683] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.1007: Failed to acquire dquot type 1 [ 190.045801][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 190.045820][ C0] EXT4-fs (loop7): last error at time 2000000089: ext4_validate_block_bitmap:441 [ 190.079222][ T7683] loop7: lost filesystem error report for type 5 error -28 [ 190.080666][ T7683] EXT4-fs (loop7): 1 truncate cleaned up [ 190.094992][ T7683] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 190.131330][ T6795] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 190.354147][ T7669] bridge_slave_1: left allmulticast mode [ 190.372944][ T7669] bridge_slave_1: left promiscuous mode [ 190.382631][ T7669] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.392931][ T7669] bond0: (slave bond_slave_0): Releasing backup interface [ 190.426761][ T7669] bond0: (slave bond_slave_1): Releasing backup interface [ 190.456719][ T7669] team0: Port device team_slave_0 removed [ 190.475426][ T7669] team0: Port device team_slave_1 removed [ 190.485280][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.504492][ T7669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.515671][ T7669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.526440][ T7669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.538455][ T7669] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 190.555229][ T7654] tipc: Enabled bearer , priority 0 [ 190.562707][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 190.577518][ T7653] tipc: Resetting bearer [ 190.596313][ T7653] tipc: Disabling bearer [ 190.628279][ T7703] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1011'. [ 190.649395][ T3415] xfrm0 speed is unknown, defaulting to 1000 [ 190.673141][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 190.760268][ T3415] hid (null): unknown global tag 0xe [ 190.774747][ T3415] hid-generic 0001:0003:0400.0002: unknown main item tag 0x6 [ 190.918603][ T3415] hid-generic 0001:0003:0400.0002: unknown main item tag 0x0 [ 191.496134][ T4167] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.520660][ T3415] hid-generic 0001:0003:0400.0002: unknown global tag 0xe [ 191.669339][ T3415] hid-generic 0001:0003:0400.0002: item 0 4 1 14 parsing failed [ 191.720858][ T3415] hid-generic 0001:0003:0400.0002: probe with driver hid-generic failed with error -22 [ 191.760080][ T7732] FAULT_INJECTION: forcing a failure. [ 191.760080][ T7732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.799320][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 191.799348][ T28] audit: type=1326 audit(2000000091.720:5815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 191.858500][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.6.1017 Not tainted syzkaller #0 PREEMPT(lazy) [ 191.858535][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.858588][ T7732] Call Trace: [ 191.858596][ T7732] [ 191.858606][ T7732] __dump_stack+0x1d/0x30 [ 191.858637][ T7732] dump_stack_lvl+0x95/0xd0 [ 191.858665][ T7732] dump_stack+0x15/0x1b [ 191.858739][ T7732] should_fail_ex+0x263/0x280 [ 191.858829][ T7732] should_fail+0xb/0x20 [ 191.858881][ T7732] should_fail_usercopy+0x1a/0x20 [ 191.858913][ T7732] _copy_from_iter+0xcf/0xea0 [ 191.858981][ T7732] ? __alloc_skb+0x4f6/0x690 [ 191.859136][ T7732] ? __alloc_skb+0x200/0x690 [ 191.859166][ T7732] netlink_sendmsg+0x4ae/0x6f0 [ 191.859286][ T7732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.859327][ T7732] ____sys_sendmsg+0x563/0x5b0 [ 191.859364][ T7732] ___sys_sendmsg+0x195/0x1e0 [ 191.859480][ T7732] __x64_sys_sendmsg+0xd4/0x160 [ 191.859519][ T7732] x64_sys_call+0x194c/0x3020 [ 191.859552][ T7732] do_syscall_64+0x12c/0x3b0 [ 191.859636][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.859738][ T7732] RIP: 0033:0x7f3c17adce59 [ 191.859760][ T7732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.859783][ T7732] RSP: 002b:00007f3c16516028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.859809][ T7732] RAX: ffffffffffffffda RBX: 00007f3c17d56090 RCX: 00007f3c17adce59 [ 191.859827][ T7732] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000005 [ 191.859844][ T7732] RBP: 00007f3c16516090 R08: 0000000000000000 R09: 0000000000000000 [ 191.859918][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.859930][ T7732] R13: 00007f3c17d56128 R14: 00007f3c17d56090 R15: 00007ffd1f9da2c8 [ 191.859955][ T7732] [ 192.046053][ T28] audit: type=1326 audit(2000000091.720:5816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.071618][ T28] audit: type=1326 audit(2000000091.720:5817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.097159][ T28] audit: type=1326 audit(2000000091.760:5818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.144377][ T28] audit: type=1326 audit(2000000091.760:5819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.187380][ T28] audit: type=1326 audit(2000000091.760:5820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.215825][ T28] audit: type=1326 audit(2000000091.770:5821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.245492][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 192.288945][ T28] audit: type=1326 audit(2000000091.770:5822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.352549][ T7763] syzkaller0: entered promiscuous mode [ 192.369161][ T7763] syzkaller0: entered allmulticast mode [ 192.378672][ T28] audit: type=1326 audit(2000000091.770:5823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.427112][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1026'. [ 192.447064][ T28] audit: type=1326 audit(2000000091.770:5824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7731 comm="syz.8.1019" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b128bce59 code=0x7ffc0000 [ 192.482349][ T7766] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1025'. [ 192.518229][ T3415] IPVS: starting estimator thread 0... [ 192.545959][ T7766] tipc: Enabled bearer , priority 0 [ 192.571490][ T7761] tipc: Resetting bearer [ 192.579977][ T7761] tipc: Disabling bearer [ 192.624422][ T7773] IPVS: using max 2304 ests per chain, 115200 per kthread [ 192.651245][ T7780] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1030'. [ 193.490976][ T7799] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7799 comm=syz.0.1035 [ 193.728161][ T7813] netlink: 'syz.6.1039': attribute type 3 has an invalid length. [ 193.756122][ T7815] loop8: detected capacity change from 0 to 164 [ 193.764265][ T7813] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1039'. [ 193.781577][ T7815] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 193.804448][ T7815] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 193.833386][ T7815] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 193.872294][ T7817] futex_wake_op: syz.6.1041 tries to shift op by 32; fix this program [ 194.408583][ T7831] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7831 comm=syz.8.1043 [ 194.619860][ T7835] loop6: detected capacity change from 0 to 512 [ 194.763925][ T7835] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.784996][ T7835] ext4 filesystem being mounted at /202/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.153832][ T7842] loop8: detected capacity change from 0 to 512 [ 196.183288][ T4167] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.240259][ T7842] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.264833][ T7842] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.743751][ T7846] netlink: 1004 bytes leftover after parsing attributes in process `syz.7.1047'. [ 196.839825][ T28] kauditd_printk_skb: 331 callbacks suppressed [ 196.839872][ T28] audit: type=1400 audit(2000000096.760:6156): avc: denied { write } for pid=7847 comm="syz.0.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.896892][ T7854] loop7: detected capacity change from 0 to 1024 [ 198.011406][ T6795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.153750][ T7866] tipc: Enabled bearer , priority 9 [ 198.205744][ T7872] loop7: detected capacity change from 0 to 512 [ 198.233305][ T7872] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 198.305791][ T7872] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.326430][ T7872] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.384058][ T28] audit: type=1400 audit(2000000098.300:6157): avc: denied { write } for pid=7871 comm="syz.7.1053" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.426831][ T28] audit: type=1400 audit(2000000098.340:6158): avc: denied { append } for pid=7871 comm="syz.7.1053" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 198.457652][ T7872] usb usb8: usbfs: process 7872 (syz.7.1053) did not claim interface 0 before use [ 199.202357][ T5807] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.323000][ T7888] loop2: detected capacity change from 0 to 512 [ 199.445924][ T7888] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.476074][ T7888] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.506953][ T28] audit: type=1400 audit(2000000099.410:6159): avc: denied { write } for pid=7885 comm="syz.2.1056" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.163036][ T23] tipc: Node number set to 3204080905 [ 200.168987][ T7894] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1057'. [ 200.242459][ T28] audit: type=1400 audit(2000000100.160:6160): avc: denied { mount } for pid=7898 comm="syz.0.1058" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 200.283376][ T7899] netlink: 'syz.0.1058': attribute type 4 has an invalid length. [ 200.292011][ T7904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.325214][ T7904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.379540][ T7897] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7897 comm=syz.7.1055 [ 200.417414][ T28] audit: type=1400 audit(2000000100.340:6161): avc: denied { mount } for pid=7905 comm="syz.0.1060" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 200.918896][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.944470][ T7914] tipc: Enabling of bearer rejected, already enabled [ 200.983136][ T7919] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1063'. [ 201.005759][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1063'. [ 201.140127][ T7929] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 201.167313][ T7929] loop2: detected capacity change from 0 to 512 [ 201.186069][ T7929] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 201.202003][ T7929] EXT4-fs (loop2): 1 truncate cleaned up [ 201.210744][ T7929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.522735][ T7934] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1069'. [ 201.550510][ T7929] EXT4-fs (loop2): shut down requested (1) [ 201.587441][ T7929] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 201.648644][ T7929] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=15 [ 201.725713][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.737135][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.747215][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.756200][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.765522][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.774538][ T7944] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 201.784011][ T7944] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 201.794693][ T28] audit: type=1400 audit(2000000101.670:6162): avc: denied { mounton } for pid=7927 comm="syz.2.1068" path="/201/file0/file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 201.820989][ T28] audit: type=1400 audit(2000000101.740:6163): avc: denied { setattr } for pid=7927 comm="syz.2.1068" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 201.885912][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1070'. [ 201.896012][ T28] audit: type=1400 audit(2000000101.820:6164): avc: denied { mount } for pid=7945 comm="syz.6.1070" name="/" dev="autofs" ino=20496 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 201.930970][ T28] audit: type=1400 audit(2000000101.850:6165): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 201.981420][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.002235][ T28] audit: type=1400 audit(2000000101.920:6166): avc: denied { read } for pid=7954 comm="syz.6.1074" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.035506][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.058307][ T28] audit: type=1400 audit(2000000101.920:6167): avc: denied { open } for pid=7954 comm="syz.6.1074" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.083721][ T28] audit: type=1400 audit(2000000101.920:6168): avc: denied { ioctl } for pid=7954 comm="syz.6.1074" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 202.102993][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.119356][ T7960] ================================================================== [ 202.126711][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.127520][ T7960] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 202.137220][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.144476][ T7960] [ 202.144485][ T7960] write to 0xffff8881056e8000 of 8 bytes by task 7958 on cpu 0: [ 202.144504][ T7960] mas_wr_store_entry+0x3be9/0x5ad0 [ 202.144539][ T7960] mas_store_prealloc+0x43e/0x690 [ 202.153708][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.155664][ T7960] vma_complete+0x3c7/0x850 [ 202.155697][ T7960] __split_vma+0x593/0x640 [ 202.155731][ T7960] vma_modify+0xb4b/0xca0 [ 202.164099][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.168585][ T7960] vma_modify_flags+0x182/0x210 [ 202.168621][ T7960] mprotect_fixup+0x3a2/0x680 [ 202.181670][ T3308] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 202.182439][ T7960] do_mprotect_pkey+0x6ae/0x960 [ 202.227715][ T7960] __x64_sys_mprotect+0x48/0x60 [ 202.232609][ T7960] x64_sys_call+0x2768/0x3020 [ 202.237314][ T7960] do_syscall_64+0x12c/0x3b0 [ 202.242197][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.248111][ T7960] [ 202.250452][ T7960] read to 0xffff8881056e8000 of 8 bytes by task 7960 on cpu 1: [ 202.258008][ T7960] mtree_range_walk+0x350/0x490 [ 202.262901][ T7960] mas_walk+0x1cc/0x370 [ 202.267085][ T7960] lock_vma_under_rcu+0xc9/0x210 [ 202.272053][ T7960] do_user_addr_fault+0x232/0x1050 [ 202.277194][ T7960] exc_page_fault+0x62/0xa0 [ 202.281718][ T7960] asm_exc_page_fault+0x26/0x30 [ 202.286759][ T7960] [ 202.289109][ T7960] value changed: 0xffff888105aea20e -> 0xffff8881056e8000 [ 202.296228][ T7960] [ 202.298568][ T7960] Reported by Kernel Concurrency Sanitizer on: [ 202.304731][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.7.1075 Not tainted syzkaller #0 PREEMPT(lazy) [ 202.314047][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.324120][ T7960] ================================================================== [ 202.335230][ T7959] tipc: Enabled bearer , priority 9 [ 202.342035][ T28] audit: type=1400 audit(2000000102.100:6169): avc: denied { write } for pid=3308 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.364505][ T28] audit: type=1400 audit(2000000102.110:6170): avc: denied { rmdir } for pid=3308 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 202.396739][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.093605][ T28] audit: type=1400 audit(2000000103.010:6171): avc: denied { write } for pid=7967 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.146998][ T28] audit: type=1400 audit(2000000103.050:6172): avc: denied { write } for pid=7978 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.464289][ T6100] tipc: Node number set to 2704205050 [ 203.615734][ T28] audit: type=1400 audit(2000000103.540:6173): avc: denied { write } for pid=7981 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1