last executing test programs: 1m44.423093517s ago: executing program 4 (id=5): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x238, 0xffffffff, 0x198, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@empty, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x1a, 0x2, {0x1}}}, @common=@addrtype={{0x30}, {0xf4, 0x2, 0x8001}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @gre_key=0x4, @gre_key=0xf801}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @private=0xa010101, @icmp_id, @gre_key=0xfff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x105}], 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace\x00', 0x800, 0x0) read(r5, &(0x7f0000000b00), 0x64) 1m41.292011236s ago: executing program 4 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r5, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r2, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='mem', 0x3) 1m39.249555594s ago: executing program 4 (id=24): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe090, 0x4, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e000000180002"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m39.077613758s ago: executing program 4 (id=29): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x400c8c0) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c0000041000390400000b000500000003710500070000ecc0132eaf3597968d7dc0085a4c86f0aa", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fe8000000000000000000000000000bb"], 0x5c}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x2, 0x80000001, 0x5}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x81, 0x0) write$binfmt_script(r3, 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@gettfilter={0x6c, 0x2e, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {0x8, 0xfff2}, {0x10, 0x4}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0x21}, {0x8, 0xb, 0x8001}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x6155}, {0x8, 0xb, 0xa5a7e2a1}, {0x8, 0xb, 0x2}]}, 0x6c}}, 0x4048800) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000b80)='./file0\x00', 0x800744, &(0x7f0000000100)={[{@abort}, {@discard}, {}, {@grpjquota}, {@errors_remount}, {@nouid32}, {@resgid}]}, 0x1, 0x482, &(0x7f0000000200)="$eJzs289vFFUcAPDvTH8A8qOI+ANErRKTRmNLCyoHLxpNjMFoogc81nYhDQs1tBpBIsWDJxNDomfi0ehf4M2YGPVkwtWTJ0NClAvgqWZmZ2C7bEvq7nZL9/NJdve9nTcz79s3P9681w2gZw1nb0nEtoj4IyKGatmlBYZrHzeunZu6ee3cVBKLi+/8neTlrl87N1UWLdfbWmRG0iyRFjtZau7M2ROT1WrldJEfmz/5wdjcmbPPfXRy8njleOXUxOHDhw6Ov/jCxPNtiTOL6/reT2f37Xn9vYtvTh29+P6v32f13VYsr4+jXYazwP9ZzDUue7rdO+uy7XXppL+LFWFV+iIia66B/Pwfir643XhD8dpnXa0c0FHZvWnT8osXFoENLImVF69ZRYA1Vt7os+ff8rVGXY914erLtQegLO4bxau2pD/SosxAw/NtOw1HxNGFfy9lr+jQOAQAQL0vpr4+MhgRn9z87o2s7zEUEeV40EP5+5/5+45iDmVnRNwfEbsi4oGI2B0RDxZlH46IR1qsz539n/RKi5tcUdb/e6mY21ra/yt7f7Gzr8htz+MfSI7NVCsHYlP+NxmJgU1ZfnyFffz46uUvl1tW3//LXtn+y75gUY8r/Q0DdNOT85N5p7QNrl6I2NvfLP7k1kxAEhF7ImLv6ja9o0zMPPPtvuUKNY//+qUVt9zf8NmCxW+y8Bay+BeiIf5SUj8/OXPH/OTY5qhWDozVjopmfvv987eX2/9w/93av7OuVmqfde3fWGRnUj9fO9fe/f/P4z8dTN7Nr0eDxXcfT87Pnx6PGEyO5Pkl30/cXrfMl+Wz439kf/Pzf1exThb/oxGRHcSPRcTjEfFEUfcnI+KpiNi/Qoy/vHL3+CPtUvtfiJhuev27dfw3tP/qE30nfv6hfp/bmsS/cvsfylMjxTf59e8umlUnu1w0VrDVvx8AAADcC9L8eTxJR2+l03R0tPY//LvjvrQ6Ozf/7LHZD09Nx+UdtfHPtBzpGirGQ6sz1cp4slBssTY+OlGMFZfjpQeLceOv+rbk+dGp2ep0l2OHXrd1mfM/81dft2sHdNiWpt9ODK55RYAuaJxHT5dmz78VLgawUfm9NvSu8vxf5nm//ncwwAbj/g+9q9n5f74hby4ANib3f+hdzn/oUelPLazsqQDude7/0JNa+V1/BxOb10c1upNYr42SJyLKRLou6iPRoUS3r0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8V8AAAD//zko5f8=") sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0x4}, {}, {0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20001010}, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000340)={"596df23de11577778039709f0bacc780", 0x0, 0x0, {0x3, 0x665b1818}, {0x7}, 0x0, [0xffffffffffffff4e, 0xe, 0x0, 0x80000001, 0x2, 0x7fffffffffffffff, 0x1, 0xa, 0x8, 0x1, 0x3ff, 0x100000001, 0x0, 0x1, 0xaf3, 0x10000]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000940)={"ab68fc9b87defbe7a709ff9a8d8bb0ae", 0x0, 0x0, {0xb, 0xe45a}, {0xffff, 0x6}, 0xb, [0xefc, 0x2, 0x3c8e, 0x7, 0x5, 0xb, 0x4000, 0x3, 0xfffffffffffffffe, 0x4, 0x1, 0x1, 0x1000003, 0xffffffffe3773ead, 0x6, 0x1007]}) socket$nl_route(0x10, 0x3, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0x200]}, 0x8, 0x80800) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000080)=0x10000008000, 0x8, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/unix\x00') pread64(r7, &(0x7f0000000100)=""/185, 0xb9, 0x3c) 1m38.97390218s ago: executing program 4 (id=30): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10acc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r2, r2, &(0x7f0000000100)=0x1000000, 0x102) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x205, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x1fe, 0x4000006, 0x1, 0x5, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xc, 0x0, 0x2, 0x0, 0x100000001, 0x0, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0x1003, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r7}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000006140)=ANY=[@ANYBLOB="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"/3451], 0x0) getsockopt$sock_buf(r6, 0x1, 0x0, &(0x7f0000000dc0)=""/4096, &(0x7f0000001dc0)=0x1000) 1m38.633495176s ago: executing program 4 (id=35): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3dd20e18", "6775c975b6b15e11"}, 0x28) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m37.517071227s ago: executing program 32 (id=35): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x18, 0x68, 0x401}, 0x18}}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={&(0x7f0000000540), 0x6}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3dd20e18", "6775c975b6b15e11"}, 0x28) setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r0, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0xff1}], 0x59) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f62726964676500140001007767320000"], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bridge\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) syz_genetlink_get_family_id$netlbl_cipso(0x0, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='memory.swap.current\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1m26.141548641s ago: executing program 2 (id=86): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x489, &(0x7f0000000a40)="$eJzs3M9vFFUcAPDvTFug/GpFREXRKhqJP1paUDl4UKM3DyZ64FrbgsgChtZESBOrMXg0Jt6NRxP/Am9eiHowJl418WhIiDYmFE9r5hfdbrelLW1Xup9Psux7M2/73ndm3u6becwE0LEGsn+SiN0R8VtE9BXZhQUGire52emxm7PTY0nU62/9leTlbsxOj1VFq8/tKjNH0oj00yReThbXO3np8tnRWm3iYpkfmjr3/tDkpcvPnTk3enri9MT5kRMnjh8bfvGFkefXJc4srhsH611FbuzkF+/8+G3WrAOHiiWNcdzWzRYBtTCQbbW/67nmdU+uuLK7w56GdNLdxoawKlmHyHZXT97/+6Ir5ndeX7z+SVsbB2yo7Ldp+9KrZ+rAFpZEu1sAtEf1Q5+d/1avTRp6/C9cfyViW5mem50em7sVf3ek5fKeDax/ICJOzvz7VfaK1V6HAABYg3xs82yr8V8aB/L3Yq5jbzmH0h8R90TEvoi4NyL2R8R9EXnZ+yPigazw1aj3rbD+gab84vFPeq1lm9dJNv57qWHsN9cQf/nW31Xm9uTx9ySnztQmjpbb5Ej0bM/yw8vU8f1rv36+1LrG8V/2yuqvxoJlA651N12gGx+dGl2vjXD944iD3a3iT27NBGRHwIMRcXB1f3pvlTjz9DcPL1Xo9vEvYx3mmepfRzxV7P+ZaIq/kiw/Pzm0I2oTR4eqo2Kxn3658uZS9d9R/Osg2/87Fx7/TSX6/kmK+dqeqNUmLk6uvo4rv3+25DnNWo//bcnb+Zz1z+8Wyz4cnZq6OByxLXkjz1fndPnykfnPVvmqfBb/kcOt+/++8jNZ/A9FRHYQH4qIRyLi0bLtj0XE4xFxeJn4f3j1ifeWiT+JJNq6/8dbfv/dOv77k8b5+jUkus5e/W6pGfOV7f/jMZN/1xby77/bWGkD73DzAQAAwF0hjYjdkaSDRXpgd6Tp4GDxf/j3x860dmFy6plTFz44P17cI9AfPWl1pauv4XrocDJT/sUiP1JeK67WHyuvG3/Z1ZvnB8cu1MbbHDt0ul0L+39U/T/zZ1e7WwdsOPdrQedq7v9pm9oBbL6V/P47F4CtqUX/721HO4DN5/wfOler/v9RU974H7amxf3/jxaPrAO2IuN/6Fz6P3Qu/R860p3c17/2RHWzwIJVvSu+af/S5bM7VlO4IxLVEy82sq7emF8SadtD7qBE1mM2o675Z33MP0MFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgbvZfAAAA//+dEeOQ") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000000)="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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) sendfile(r2, r3, 0x0, 0x2) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r5, 0x0, 0x21, 0x2, @void}, 0x10) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/230, 0xe6}], 0x1, 0x5f0e, 0x0) 1m12.754000018s ago: executing program 2 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r5, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r2, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='mem', 0x3) 1m10.290422123s ago: executing program 2 (id=99): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) r3 = syz_open_procfs$pagemap(0x0, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000000085000000ae00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x4, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x76}]}, 0x0, 0x40000, 0x0, 0x0, 0x41000}, 0x94) r6 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, 0x0, 0x2000c004) r8 = signalfd4(r3, &(0x7f0000001240)={[0x8]}, 0x8, 0x800) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r9 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r9, &(0x7f0000000200)={0xa, 0xf3, 0x4, @mcast1, 0x9}, 0x1c) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000001080)=@req={0x4, 0xf3, 0x3, 0xffffffff}, 0x10) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) close_range(r4, r8, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x46) recvmmsg(0xffffffffffffffff, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 1m7.794469839s ago: executing program 2 (id=104): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1600) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000000)={[{}, {@block={'block', 0x3d, 0x800}}]}, 0x1, 0x9cf, &(0x7f0000000a40)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='net/dev_snmp6\x00') r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x88000, 0x0) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f0000000540)) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) write$sndseq(r2, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) syz_mount_image$iso9660(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x6bb, &(0x7f0000000780)="$eJzs3c9v2+Ydx/EPZdmWPSAotqEIgjR+mqyAg2WKJDcujOwwTaJsdpIokPJgn4qssbsgcrol2bD40vrSbej2D+zWSw/d/zBg5573D+w4oNhOG7ALB/7ST8pyHNvJ2vfLSPiY/JLP9yEZPqFNPhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJBVq5dKZUtNp729Y6ar1T23dcxySUvSvG5+EW325sx6JSv8o0JBl+NZl787WPx6+Nd1XY2/u6pCOCno8Fuvv3b3O/lcuv4xCZ2GZApJAidb4cmzw4f3er29x6erLbBOs965mMhEufE585Nrbdptx3edVnXTNo7vmo319dLtrYZvGk7T9nf9rt0yNc/OdV3PrNZumvLGxpqxi7vudnuzXm3a6cx3flApldbNu4vJ3r/9btGvbTnNptPejGLCxWHMYv8MsastY/Yf9PbWZjUtDCqfJKgyK6hSqlTK5UqlvH5n4847pVJ+YkZpjCYiBiftq3PwcZHO6MoNvLhc2P//3ZKaKqitbe3IZH7VVJcnV60pyxNJx3/zrdv2sfUO9/9pL395sPiKov7/WvzdtWn9/6e/npJN3I9nLbF+nj3/dF9P9EyHeqh76qmnPT0+m+2unF2G5/u1KeUlR75cOWqpqk3ZMskcow2ta10lvactNeTLqCFHTdnytStfXdlqhQdTnmxV1ZUrT0ar8/HxK2tDG1qTka2iduVqW21tqq6q/hMEwb4eRPt97ZgclQaVZwYtD5+ik0HT+v+ffRSv8Xz9P75++ueOMflBMTsGeOmC5P5/urmsmSvnlxEAAAAAADhrVvTT9/D+f15vSArUcJp2aRCw+DKzAwAAAAAAZyH6zf/VcBI9cfWGrLH7/1Rw8bkBAAAAAICzYUXv2FmSlqOH+q3B61IZPwSYkPlyAAAAAAAAeLVEv/+/tiAF0YP+K7Ke6/4fAAAAAAD8H/jd0Bj7+XSM3SD9tX5Okt9ZtP7yz0V589ZRZ+d71kE1XFI9SGImngDoNq5YeUUD9X7y53CyIL0WDdtbs69ayfjAySCYlpLx9r/anzXWv+WNJbAwl/74IiOBS8na0WQ9n3ynP+jNOObNpN77hzlFS+JalhtO0y7W3Obd8qdz1Uu5rr3T/dWjB7+RvH479x/09orvf9i7H+VyFM46Ogjz+GgkndysXJ5G4y1E71xktXhJjbTK37dby1ZUbylt/5yqB7nhik7W/k90PY65nox0u3yYHgFZHyeFcjE8ZBq0PhodwhpkUR5vedaBmMwiF04KURY34pgbqzfiSZpffBQK35+TKsW7ZVVHj4E3nEVlOIvZ+8L618S+mJFFeC6shVn8NdzQlCzWni+LiSMCAC/L/qAXigYxnxxjf7zfzbjKLSXTqVe5/Mze/UejtTz9UxC/cDgn5RUsJt1LEF5L/x3ERmopKLyir8ZhC4ourPkrGVf0UtKvFDTlil46Ue82p7G2zqeLvuh/BkI6dlISl+9n8d8gCO6Wo3r/ONarfhau8NnUev1mZS7chbefHvwiGgA/9MHeB3uPKpW19dLbpdKdiuajZiQT+h4AQIbZn7EzGlEY9Gf9vvvt/l31/X+8FZdG+t1v9x8pKOp9faie7utW+hECK9n1Lg89hnBr8q41jI3+1zEaW9atqXd1UV86FFvpx6Zd9/gd4CB27bwPAwAAF+r6jH54tP/PZ96730rvu1evZN53j/bl/bvjxLTY8kXvCgAAvjFs7ytruftby/OcznvljY1ytbtlG8+t/cR4Tn3TNk67a3u1rWp70zYdz+26NbdpOp4WnbrtG3+703G9rmm4num4vrMTffK7ST763bdb1XbXqfmdpl31bVNz291qrWvqjl8zne0fNx1/y/ailf2OXXMaTq3addy28d0l1eyiMb5tDwU6dbvddRpOWGybjue0qt6u+anb3G7Zpm77Nc/pdN14g2ldTrvheq1os0UFx33QIQAA3xhPnh0+vNfr7T0eKiwky9I5R4oL6fNoSfCXo2tFhYWsDb7E5gEAgAz00gAAAAAAAAAAAAAAAAAAAAAAvPqy3v97rkL6UmA6Z14ZwVJ/zi8vnWjLlgZzPv/bC2V4ikJufE4y0m4we/Uv40I+K2YpLCxI6qW7fzjmaGZicxlrTSusnKiligv5k++fk9Xe6y1JWWfCKQsfz4z54f7oeTgREy7MXLTY36v5F//nkFV49PmURdPOqEK/FYuj+3DhuAaOFvKSHi+c4BAEU2LGrxTL534tAnCx/hcAAP//vuY6Xw==") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$eJzs3c9vI1cdAPCvnThxsmmTlh4AQbu0hQWt1km8bVT1AOWEEKqE6BGkbUi8URQ7jmKnNGEP6ZkrEpU4wZE/gHNP3LkguHFZDkj8iEAbJA5TzXiS9WbtTbRJ7Cj+fKTRzJvnne97a817mW9ivwBG1s2I2I+IiYj4MCJm8/OFfIv3Olv6ukcHD1YODx6sFCJJPvhXIatPz0XXv0ndyK9ZjogffS/ip4Wn47Z29zaW6/Xadl6ebze25lu7e3fWG8trtbXaZrW6tLi08M7dt6sX1tfXGhP50Vcf/nH/Wz9PmzWTn+nux0XqdL10HCc1HhE/uIxgQzCW92di2A3huRQj4uWIeD27/2djLHs3AYDrLElmI5ntLgMA110xy4EVipU8FzATxWKl0snhvRLTxXqz1b59v7mzudrJlc1FqXh/vV5byHOFc1EqpOXF7PhxuXqifDciXoqIX05OZeXKSrO+OswffABghN04Mf//d7Iz/wMA11x52A0AAAbO/A8Ao8f8DwCjx/wPAKOnM/9PDbsZAMAAef4HgNFj/geAkfLD999Pt+Qw//7r1Y92dzaaH91ZrbU2Ko2dlcpKc3urstZsrmXf2dM47Xr1ZnNr8a3Y+Xju21ut9nxrd+9eo7mz2b6Xfa/3vVope9X+AHoGAPTz0muf/aWQzsjvTmVbdK3lUBpqy4DLVhx2A4ChGRt2A4ChsdoXjK5zPONLD8A10WOJ3ieUe31AKEmS5PKaBFyyW1+S/4dR1ZX/91fAMGLk/2F0yf/D6EqSwlnX/I+zvhAAuNrk+IE+v/9/Od//Lv/lwE9WT77i09Ov7TMGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFdH6/9W8nU6ZqJYrFQiXoiIuSgV7q/XawsR8WJE/HmyNJmWF4fcZgDgvIp/L+Trf92afXPmiapXbxwfTkTEz379wa8+Xm63t/8UMVH49+TR+fan+fnq4FsPAJzuaJ7O9l0P8o8OHqwcbYNszz++GxHlTvzDg4k4PI4/HuPZvhyliJj+TyEvdxS6chfnsf9JRHyxV/8LMZPlQDorn56Mn8Z+YaDxi0/EL2Z1nX36f/GFC2gLjJrP0vHnvV73XzFuZvve9385G6HOLx//0kutHGZj4OP4R+PfWJ/x7+ZZY7z1h+93jqaervsk4svjEUexD7vGn6P4hT7x3zxj/L9+5dXX+9Ulv4m4Fb3jd8eabze25lu7e3fWG8trtbXaZrW6tLi08M7dt6vzWY56vjMbJD0mhX++e/vFfvHT/k/3iV8+pf9fP2P/f/v/D3/8tWfE/+YbveIX45VnxE+fzL9xxvjL078v96tL46/26f9p7//tM8RO56eHf9t7atlwAGB4Wrt7G8v1em37Gh+kP6tcgWY4OP9BXOG38juDijURvat+8Ubnnj5RlSTPFavfiHERWTfgKji+6SPif8NuDAAAAAAAAAAAAAAA0NMgPrE07D4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwfX0eAAD//yjlzow=") r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) read$msr(r3, &(0x7f0000000340)=""/238, 0xee) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/scsi_host/host0/scan\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)="ee1c", 0x2) pread64(r3, &(0x7f00000000c0)=""/12, 0xc, 0x597513c1) ioctl$PIO_UNIMAP(r3, 0x4b67, &(0x7f0000000280)={0x2, &(0x7f0000000440)=[{0x32f, 0x8000}, {0x7}]}) r6 = semget$private(0x0, 0x4, 0x86) semop(r6, &(0x7f00000000c0)=[{0x3, 0xffff, 0x3000}, {0x4, 0x8000}], 0x2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000002c0)=0x7, 0x4) 1m5.793621923s ago: executing program 2 (id=107): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./sys\x00', 0x1ff) io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x4017, 0x2, 0x3, 0x1fb}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000240)={r0}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') ioctl$PPPIOCSFLAGS1(r1, 0xc0686611, 0x0) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r5, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) write$binfmt_misc(r2, &(0x7f0000000080)="c66f27e29c34074b6dd5a60ed63f5cd99e1922ead31249385b2ba4cce022de247d94226945e891a773c4acf9a1df693f0570ddf2f4f8589d9e3107d7e4963729cc6d193d6318808a0b2a9c09f6670cdc6d556c4c75618e6c5962363d959419ded5618fb613f9b91de62e", 0x6a) r6 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r6, &(0x7f0000000d00)='mem', 0x3) 1m4.613281679s ago: executing program 2 (id=110): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10acc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r2, r2, &(0x7f0000000100)=0x1000000, 0x102) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x205, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x1fe, 0x4000006, 0x1, 0x5, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xc, 0x0, 0x2, 0x0, 0x100000001, 0x0, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0x1003, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x3}) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r7}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000006140)=ANY=[@ANYBLOB="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"/3451], 0x0) getsockopt$sock_buf(r6, 0x1, 0x0, &(0x7f0000000dc0)=""/4096, &(0x7f0000001dc0)=0x1000) 1m4.58181311s ago: executing program 33 (id=110): syz_clone3(&(0x7f0000000080)={0x1801480, &(0x7f0000000040), 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10acc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d41400000000000000010000000c000000", 0xfe60) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/llc/socket\x00') sendfile(r2, r2, &(0x7f0000000100)=0x1000000, 0x102) ioctl$TIOCL_GETMOUSEREPORTING(r2, 0x541c, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x205, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x1fe, 0x4000006, 0x1, 0x5, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0xc, 0x0, 0x2, 0x0, 0x100000001, 0x0, 0x3, 0x1, 0xffffffffffffffff, 0x0, 0x9, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x3, 0x1003, 0x8, 0x100, 0xffffffffffffffff, 0x0, 0x3}) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x54, 0x10, 0x1, 0x1, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'erspan0\x00'}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r7}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000006140)=ANY=[@ANYBLOB="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"/3451], 0x0) getsockopt$sock_buf(r6, 0x1, 0x0, &(0x7f0000000dc0)=""/4096, &(0x7f0000001dc0)=0x1000) 5.734628622s ago: executing program 3 (id=452): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="64b1de932e628eee8a0a89a94e5f750f399c7b1c35ac914dd6fc80d007beda93780f095b542decee786afeec8991e630bd7ebe6cdd3df5c82a54b9", 0x3b}, {&(0x7f0000000700)="6731a9da84a7f1d212561a21cd729eb4a2e7f2c859d2682f4601b2befc6bfd956ab32128d13f450ac5ef76ffcf2a43f71d5011ad9e4fd63b3648cb51d902fcd1b342c28ea583d0c1bf65a670b2911e63cdc6d7ed06f73cfff3675832fce4151730f7ef2c8becc88720661c5013e176dca9141e3db9acc3293f66963645623733b0f3b11aec36f59f89b3", 0x8a}], 0x2}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="1a4327465638b8670e9ef99039dc0f60eb2cde85b2639882576537b3beb8b09ca7dd2c4972f132eb493ac7a3dd19bf1a9b8aacd86b333646a9e5342d840708bcd9aa55104cfedd028566dffeaf06fdb5f2d372c586b0b89c64700b3d9abdadd9f9fc7a36e68d46b7c9f80f6bd975de3e", 0x70}, {&(0x7f0000000980)="70c12f0fa84f4fcbfdb9e33365085ad18b6b869d3b7d05d8f7610180cb11c7f13b66eeb4156bfbb3f635a7dfde1719e1f90fe56dbf21f901857a7eafcf9fde47342a2d78eeb82a302413a3bfdb1c939d405fa6a8234f082b80073226b42969805f104a28759b329d3b6afc406f0d36cbc7d0a61ccbfb631af5416206c4c57c76bd167a93d23cf3783c3febaf24be3685637891f8380306980cd8505739", 0x9d}, {&(0x7f0000000b40)="abf5afe05d4f96614c55e2f4df6e339dbd36b34c6a2b15fd03bc0e53386f5afad3466fe4dc987d0d6f43b83de758521a3df4da6263843c6c3c449953489752d7d0dfc0a307b6413fb553528a04d888cb07cfb8b4698d47ab8d1627b4c6401e0ee5fdb4dcdbd98b78a17e8aa80d2e042f76dd6b22de5542bd5bdde2ce3e08", 0x7e}, {&(0x7f0000000c00)="59a6ccfde72fa606722d721aada8234cd925b0c5b4b492432d79c736d25b", 0x1e}], 0x4, &(0x7f0000000e00)=ANY=[@ANYBLOB="d8"], 0xd8}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) write(r0, &(0x7f0000001e00)="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", 0x224) (fail_nth: 1) 5.552384216s ago: executing program 1 (id=453): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x0, 0x238, 0xffffffff, 0x198, 0x238, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@empty, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x160, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x1a, 0x2, {0x1}}}, @common=@addrtype={{0x30}, {0xf4, 0x2, 0x8001}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0xff000000, 0xffffffff, 'veth0_vlan\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x20}, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @gre_key=0x4, @gre_key=0xf801}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @private=0xa010101, @icmp_id, @gre_key=0xfff7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x105}], 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) 5.121250196s ago: executing program 5 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) mkdir(0x0, 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x105}], 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace\x00', 0x800, 0x0) read(r4, &(0x7f0000000b00), 0x64) 5.080865297s ago: executing program 1 (id=461): perf_event_open(&(0x7f00000012c0)={0x4, 0x80, 0x41, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4412, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x105004, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0xe01, 0x2, 0xfffffffe, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect(r5, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000040)={[{@mblk_io_submit}, {@nodioread_nolock}, {@oldalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@delalloc}, {@grpjquota}]}, 0x1, 0x5c5, &(0x7f0000000480)="$eJzs3T1sG9cdAPD/HUVLtuXKQwu0hQejLeAChqkP263bSV6LujDgoUCXVqBowRAlGiLVWIKAyLsRxEOQBF6cLRkyJsiQIciSMWuWfMwBjFhIAMtDwoBfsixRDiWbZCL+fsCJ790d+f+/O77nu8OdGcDAOl37k0b8LiKuJhFj25YNRXPh6cZ6mxtr+ccba/kkqtVr3ySRRMSjjbV8a/2k+Xo8ItYj4rcR8XE24my69ZFHWoXyyur8TLFYWGrWxysLN8fLK6vnbizMzBXmCovn//q3i5cuXJycmtye7uPq9lp2f22988XdV+58+o/7d99599R6/rWZJKZjtLlseztepMY2ycb0jvkXuhGsj5J+J8CBZJr9vNaVfhNjkWn2+naq2weH4Z6kB3RRdTiiumVbERgAyXN0+tYgAvwStY4Daue/ramXxx8PLjdOQGpxNzfW8i9HK/5Q49pEjNTPTY59mzx1ZlI73zzZy0Q5lNZvR8TE0NDu73/S/P4d3MSLSJCu+uhyY0ft3v/p1vgTbcaf0da10+fUGv82m+PfZpv4mT3Gv6sdxvj+P1+9uWf828Px+7bxk634SZv4aUT8r8P49/79waW9llXfijgT7eO3JM++Pjx+/UaxMNH42zbGh2dO/X3v9kccq8fP7IrfuGY7Uk9ke/uPNHNKO2z/+5+894f1Z8T/8x+fvf/bbf+jEfFqJ8FrKz56+597LX5wO3lYOwrY7/5PIhv3O4kfEX+ZPv15s+iqIQAAAAAAAAAAvEBp/V62JM1tldM0l2s8w/vrOJYWS+XK2eul5cXZxj1vJyObtu60GmvUk1p9snk/bqs+taN+PtMMmDlar+fypeJsn9sOAAAAAAAAAAAAAAAAAAAAPxfHdzz//12m/vz/dMTUiX7nBvTA3j/5DRx2+j8Mrqf7f9K3PIDe8+8/DKyq/g+DS/+HwaX/w+DS/2Fwte3/R3ufB9B7u/r/SH/yAHpv38f//8p2JxEAAAAAAAAAAAAAAAAAAAAAAAAAADhcrl65UpuqjzfW8rX67NDK8nzp/+dmC+X53MJyPpcvLd3MzZVKc8VCLl9a+KnPS0qlmxOxuHxrvFIoV8bLK6v/XSgtL7Z+U7TgPw4FAAAAAAAAAAAAAAAAAACA3UbrU5LmIrKNeprmchEnIuJkEsn1G8XCRET8KiI+y2SHa/XJficNAAAAAAAAAAAAAAAAAAAAh0x5ZXV+plgsLHWvMNQM1dm7vqx0NZ+h/awcEetPzYlInm+L1T5x3+/KNjdgfc5I1/fX4S5kOvweDnyhj4MSAAAAAAAAAAAAAAAAAAAMqCcP/Xb6jh+6mxAAAAAAAAAAAAAAAAAAAAAMpPTrJCJq05mxP43uXHok2czUXyPipXvXXr81U6ksTdbmP9yaX3mjOX+qH/kDnWr10zQiav0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKK8sjo/UywWlg5YGO5gnX63EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAgfgwAAP//8czFuw==") socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x11ec81, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x1020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 4.681735446s ago: executing program 3 (id=463): semop(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='testhandle 0', 0xc) 4.445236291s ago: executing program 3 (id=464): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x98, "3155d7d7c9917ead7b445bc84967a291a776cb7a37e46aecd076b401afd0a5725771bf56d15a70e044d2f1eff35b2454bd23bcbbbe4ff47f42e081783faaa57ccf612f95fd026045c543440db12d90c1752ba9f3ddbd56da80e8c5d3e0a80abe02dd035ecb78dc9b07de2f98420f8b847434217d0a80a6fa603a63c7408f0f673a5d897fea212ae060b955366eafd1970405b8160b8e8a71"}, &(0x7f0000000400)=0xa0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r1, 0x7}, &(0x7f0000000580)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=@allocspi={0x10c, 0x16, 0x1, 0xfffffffc, 0x4, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x1}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x1, 0x1000000000000000, 0x0, 0xfffffffffffffffc, 0xffffffffffffffed, 0x3, 0xd62b}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}, @iptfs_drop_time={0x8, 0x22, 0x916}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x40, 0x20, 0x3, 0x7fff, {{0x16, 0x4, 0x3, 0x2b, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @loopback, @private=0xa010101, {[@noop, @noop, @timestamp={0x44, 0x20, 0xe0, 0x0, 0x4, [0x3, 0x1, 0x8, 0x8001, 0x3, 0x5, 0x3]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xfc, 0x1, 0x6, [{@multicast1, 0x2}, {@multicast1, 0x7ae39e17}]}, @ssrr={0x89, 0x7, 0x8f, [@multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x1, 0x1, 0x2, 0x5, {{0x28, 0x4, 0x2, 0x8, 0xa0, 0x64, 0x0, 0x6, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0x1b, 0xa5, [@loopback, @multicast2, @empty, @broadcast, @broadcast, @broadcast]}, @timestamp={0x44, 0x20, 0x36, 0x0, 0xf, [0x7, 0x4, 0x400, 0x0, 0x5, 0x6, 0x1]}, @rr={0x7, 0x13, 0x75, [@multicast1, @remote, @local, @local]}, @rr={0x7, 0x13, 0xbf, [@empty, @broadcast, @remote, @local]}, @rr={0x7, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x7a, 0x1, 0x1, [{@loopback, 0x4}, {@multicast1, 0x5}]}, @noop, @end, @rr={0x7, 0xb, 0x35, [@private=0xa010102, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x8, 0x4, 0x26, @remote, @remote, 0x8000, 0x7, 0x1}}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x8001, 0x0, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, {[@timestamp={0x44, 0x8, 0xb2, 0x0, 0x3, [0x0]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xe0, [@local, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast1, @rand_addr=0x64010102]}]}}}}}) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000440)={@rand_addr=' \x01\x00', 0x80, r11}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r11}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x208, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008804}, 0x4c011) r12 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/file0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.431060622s ago: executing program 5 (id=465): syz_init_net_socket$x25(0x9, 0x5, 0x0) perf_event_open(&(0x7f00000005c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) syz_open_dev$usbfs(&(0x7f0000000140), 0x8, 0x531000) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0xffff}}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) setfsuid(0xee00) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$bpf(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x38728a2, &(0x7f0000000280)=ANY=[@ANYBLOB='g)d=', @ANYRESHEX=r6, @ANYBLOB=',\x00']) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {r4, r6}}, './file0\x00'}) setfsuid(0xee00) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000400)='lo\x00\x96o\xd6Q\xb4Y\xa9\xc87,%\x81\xfe\x00\xd2\xd1|\x00\x00\x00\x00\x00\x00\xe3\xd8Yk\xdf\x85\xaac{\x8c\x8ffp`-\xcd\xd9\xd5\xf4\xe68\xe6O\xc2\xf1V0\x8b\t\xed\x13q2\xdd\xcc\xeeR\xf2/\xba\fE>k\a\xe7>t7\x8e(\xf0\x87d\xaf\x93\xfa`\xa6,o\x81.\x1cR\xa5\t\x00\x00\x00\x00\x00\x00\x00|pT\x15\xbc\f*d\xcb\xc2\xcd\x8f\x98\xdf\x00\x00\x1cM\x9c\xa5\xe0\xa8\x00\x00\x00\x80V\xf6\x80\x86\x1b\x05\xe6\"\x1d\f\xaey\x06\xd9$H!w\xa6m\xd8\x7f\xc6\x837\x83/\x9a\xdf\x01\xf2\x9e\xbb\xca\x04\x00\x05\xeb\xb8{7[\xf9\xe9\x15\xdc0]\x89\x9b~\x04\xb4\xa5\xad\v.\xd0*%`\xb0\x03\x00\x00\x00\x00\x00\x00\x00\xab\xf4\xa7\x83r\xa4\x80|\x03C\x9c\x00\xac\xba\xcb\xa4h\x86w_Eu\xbfy%,\xe5\n\xc1\xb3\xa4g\xa3P\x0f\x11\x93\xc7\xf3\xcf\x17\xf5\x86%\x7f\xec\xb2\xc5E\x00\xb2e\xa8\xf1<\xb2\xc82\xbf=o\x00\x00\x00\x00E\x00\xc6X\x92\x0e[\x19\xaa?\x06\xe5\x9d\xd1\x87\x922A\x95\x8e\xbc\xc80xffffffffffffffff}) sendmmsg(r1, &(0x7f000000a4c0)=[{{0x0, 0x0, &(0x7f0000007fc0)=[{&(0x7f0000007b80)="5d884be8d0d6090822962b9cb900cff99d96220f94a95b1e15f1bf6966afb6a4afb9f88097b0785f3e5af56256ba774cf2278c1593bcd5e4eef0580864f5ccc735685a8a5e205fef2d948c2c6761a904f658ee00dbb034e650881d8df19fc0450cc1602df04717e537b9eaf41611af67973710aab11291ceadd5cdc14a35019fffac632c83f0c4ae56eba2f874eb0cf38b2bb9c4880813b258d6311407f8ff1764c91e871da255", 0xa7}, {&(0x7f0000007c40)="b5c958679567abf2d1624192ca672bceaf5a2571ace322991c3c0a2eea5b3f33fa3579d6e32d090eca4743b72bd3d54f37b10de5d522fffc8602095d2a3692eff2a089b5c2bee66a4b573f9677af8b34940f8b737f7c517fa3881e02d9bb8c5b179ad3a61285e5c28aba54755787c08a04c1e0b258df89a0d886da1bec01f822729fa7f70ed759f829ab7adf77b02cdcdf7a92770578f5b2c1b3dc57d7e8709eeb623b9d9ba03807da4f762ee5aa8846182d97a41a50275a6845036c55db554c4df3749fc5217cc5bdf441daeae2dc8ea29c73fe0ce2", 0xd6}, {&(0x7f0000007d40)="b4e5e1fa0f2db20cafef31e623d24399c99aa4b3329a66a2b070eacf74d2c34e3a9c88c6fd56bd5f4b874d0a3cff367ff6d52b44d060cab6a9f98aaec24e77f98803c4925c7fe14b788e1d47cfef3f5e7fb5665fc81bfdeca5d479c3c92b6db55cdf0476864ad1e2ed251afd3c6c076c611315770ba0efc423a75a0b20893e6b6757adf7a7ebdd8c01e2d8498b5d029703f3f2f00f8db59294b5b8ac3e5010c21406694b6db9f5982f246f6bbeea08069591420bf19805b662eb05c89f67f9fada7e17ec9b371d19b9b09745448c7ecdc3380d695055b9a788e1af45f82983efaa2580370841b4e3d1", 0xe9}, {&(0x7f0000007e40)="b8e64a6afcef5e8a6acd15b6b4a32a4374db754654a5b939283cd1f0f957ea4bff0a623e7c70bac6e80086ba70a5bcf91c8b2dcdf7e9fa94e1c62693091219efc6cdc0c32aebd06f1685734b51eb479217fd6064703eed107b8a4b", 0x5b}], 0x4}}, {{0x0, 0x0, &(0x7f0000009240)=[{&(0x7f0000008140)="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", 0x6c1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000001000000010000008f00000000000000b6c83654c7872cc5fb5e3631107961a1f4101adf659ab94ace74bc11d51abdf167e19c38921fb22d69a2ec9f8d7c"], 0x18}}], 0x3, 0x8800) (async, rerun: 64) close(r0) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a00000609000200730073797a31000073a03e01e0a91ceee0bf412df70b4e72000014000380100000800c00018006000100d65b000014000000110001000000000000000000ebff000ab09c69efeb0eff8100ef1eb5ad2596209a0d5befe8700b48b1a2e8dcf71bb2e7d363956c4adb9c3eb1115f9f79eede90ae504381be88800b77aa62a9e8422a951d21d83e9b82fa1af31685b275fc537a12bf45d5e96835a15977ff0fc33a5aa491637003cf1f3500005f56a8fd1a7cc0158b37e7a9d84389545494d639cd1af3adca752997a888036846bbb744240b457286d03e4e67d3058271317c7bf0ce4013b4ce061ce5689c30f8092c786a7790b40c0400b53a39255fa87d191405f545262a82"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000340)={0x0, r0, 0x7, 0x6, 0x2, 0x4}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="37ec000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0xb2d}}}}}}, 0x0) r7 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) (async, rerun: 64) socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) preadv(r7, &(0x7f0000000080)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x100000000000022e, 0x2, 0x5) (async) r8 = socket(0x11, 0x2, 0x10001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001a000100000000000000000002000000000000000000000014000500fce605126d000000000000000000000008000400", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x60080c1}, 0x0) (async, rerun: 64) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x58}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x40000000}}, [], {{0x6, 0x1, 0x7, 0x5}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xffff}, {0x85, 0x0, 0x0, 0x81}}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'bond0\x00', &(0x7f0000000180)=@ethtool_sfeatures={0x3b, 0x2, [{0xae9, 0x8}, {0xfffffff6, 0x2}]}}) 4.304996634s ago: executing program 0 (id=468): socket$unix(0x1, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x6}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x115c, @loopback}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x115c, @loopback}, 0x1, 0x1, 0x1, 0x1}}, 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@union={0x2}]}, {0x0, [0x61, 0x5f, 0x5f, 0x3e]}}, 0x0, 0x2a, 0x0, 0x1, 0x3ff}, 0x28) r0 = open(&(0x7f0000000040)='./file0\x00', 0x6a940, 0x40) fcntl$setlease(r0, 0x400, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180), 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/pppol2tp\x00', 0x0, 0x0) lseek(r1, 0x1, 0x0) read(r1, &(0x7f0000000300), 0x1000) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) pipe(&(0x7f0000000080)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) tee(r2, r4, 0x8f5, 0x0) getxattr(&(0x7f0000000000)='./dev\x00', &(0x7f0000000140)=@random={'security.', '.{{-:$}++\x00'}, &(0x7f0000000280)=""/208, 0xd0) 3.481132543s ago: executing program 5 (id=470): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)) 3.440094124s ago: executing program 3 (id=471): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x24008850}, 0x24000840) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "b738096300"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x400, 0x4, 0xd, 0x2, 0x94, "26a658d0754522bdb0056280fcacc50e000046"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f0000000200)=""/223, 0xfffffe56) 3.361356325s ago: executing program 5 (id=473): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, 0x0, 0x0) semop(r2, &(0x7f0000000380)=[{0x2, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9c5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x881}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f9}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) preadv2(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) write(r3, &(0x7f0000000200)="c7", 0x1) sendfile(r3, r1, 0x0, 0x3ffff) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendfile(r3, r1, 0x0, 0x7ffff000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x80, 0x4000004f, {{0x1f, 0x4, 0x0, 0x34, 0x7c, 0x65, 0x0, 0x30, 0x4, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0xbf, [@broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x39, 0x2, [{0x0, 0x3, '\x00'}, {0x2, 0xf, "01681890df0fb14dae7028a39e"}, {0x5, 0xb, "bb8bc3eb579dd1a39a"}, {0x5, 0x12, "3f9941adbbe6afc1d44c3300dc54d0ad"}, {0x6, 0x4, "8744"}]}, @generic={0x7, 0x2}, @generic={0x89, 0x7, "c3de78dda3"}, @lsrr={0x83, 0x1b, 0x6a, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x21, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010103}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f0000000300)=@framed={{}, [@tail_call, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$nl_route(r6, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=@dellink={0x1c0, 0x11, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x10508, 0x20}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x1c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x39}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x82}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0xc}, {0x8, 0xd, 0x0, 0x0, 0x5cf}, {0x8, 0xa, 0x0, 0x0, 0xd}]}}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vti={{0x8}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10001}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0xf}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x29}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x80}]]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x10008041) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x33b, '\x00', 0x0, r1, 0x1, 0x0, 0x3}, 0x50) 2.766645219s ago: executing program 5 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff, 0x9e}) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60e81, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x19) sendfile(r0, r1, 0x0, 0x2) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = openat(r2, &(0x7f0000000140)='root/proc/sys\x00', 0x10000, 0x0) getdents(r3, 0x0, 0x18) r4 = semget$private(0x0, 0x3, 0x0) semctl$IPC_STAT(r4, 0x0, 0x2, &(0x7f0000000000)=""/233) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {}, {@grpid}, {@bh}, {@barrier}, {@orlov}, {@usrquota}, {@grpquota}, {@norecovery}]}, 0x3, 0x575, &(0x7f0000000ec0)="$eJzs3c1qG1cbAOB3ZDv/3xcHQmi7KIYsmpJGju3+pFBIuixtaCDdp8JWTLAcBUsOsRtIsmg2pVBCoZQGSi+g+y5Db6BX0UUDoQTTLrpxGXkmViwrthURK53ngbHPmRnp6GjOe/SORkIBFNZY+qcU8WpEfJNEHG7bNhzZxrG1/VYe35xOlyRWVy/+mUSSrcv3T7L/B7PKKxHx65cRJ0ud7TaWlucqtVp1IauPN+evjTeWlk9dma/MVmerVyenps68MzX5/nvv9q2vb174+/tPH3x05qvjK9/9/PDIvSTOxaFsW3s/nsPt9spYjGXPyUic27DjRB8aGyTJVjtsMgbYfUNZnI9EOgccjqEs6oH/vlsRsbojeYaws1sBgygRyVBQeR6Qn9v36Tz4pfHow7UToPb+f91KcYbX3huJfa1zowMryVNnRun57mgf2k/b+OWP+/fSJbZ4H+JWH9oDyN2+ExGnh4c75/8km/96d3ob7/qNtWbXdUV7/YHd9CDNf97aLP8rPcl/YpP852B+7eg5bbyPzvgvPexDM12l+d8Hm+a/T6au0aGs9r9WzjeSXL5Sq56OiP9HxIkY2ZvWe72e057/pUvafp4LZo/j4fDep28zU2lWemyuw6M7Ea+t579JdMz/+1q57sbjnz4fF7bZxrHq/de7bdu6/+36nwGv/hTxxqbHf/2KVvLs65PjrfEwno+KTn/dPfZbt/Z31v/+S4//gWf3fzRpv17b2HkbP+77p9ptW6/jf0/yWau8J1t3o9JsLkxE7Ek+6Vw/uX7bvJ7vn/b/xPFnz3+bjf/9EfH5Nvt/92j3NGgQjv/Mjo7/zgu/f/zFD93a397xf7tVOpGt2c78t90H+DzPHQAAAAAAAAyaUkQciqRUflIulcrltc93HI0DpVq90Tx5ub54dSZa35UdjZFSfqX7cNvnISayz8Pm9ckN9amIOBIR3w7tb9XL0/XazG53HgAAAAAAAAAAAAAAAAAAAAbEwS7f//crwFAQgh2Ka8v478cvPQEDyes/FJf4h+IS/1Bc4h+KS/xDcYl/KKqL4h8KTPwDAAAAAAAAAAAAAAAAAAAAAAAAAABAX104fz5dVlce35xO6zPXlxbn6tdPzVQbc+X5xenydH3hWnm2Xp+tVcvT9fmt7q9Wr1+bmIzFG+PNaqM53lhavjRfX7zavHRlvjJbvVQdeSG9AgAAAAAAAAAAAAAAAAAAgJdLY2l5rlKrVRcUuhbOxkA8jJ4LyVZH+Ww2GHpqYvjFdmfIoH0xhV2emAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgzb8BAAD//2YpJk4=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x600000000000, 0xc}, 0x4008, 0x400000, 0x4, 0x0, 0x0, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc1}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000700)) ioctl$PIO_UNIMAP(r7, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x4000, 0x5}]}) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000600)=ANY=[@ANYBLOB="000000004c900200000000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020050000000000000000000000ffffffffffffffff350a0000000000000095000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000006000000000200000000000000fdffffffffffffff00"/192, @ANYRESOCT=r5]) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0xffffffffffffffa1, 0x0}, 0x3}], 0x1, 0x12002, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sendmsg$802154_raw(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)="c1e22038ba518aeefb0386", 0xb}}, 0x0) semop(r4, &(0x7f0000000240), 0x2c48) syz_open_dev$loop(&(0x7f0000000100), 0x12, 0x1ac902) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x12, 0xc, "979fd1e00d96072000001ea89de2b7fb0000e6218b69c980ee0e0c000000000000000000007efff100000013000000000000000000000000002000000800", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000001909000000000001712500000400000170000009a000", [0xd8c, 0xffffffff9673e35d]}}) 2.734077219s ago: executing program 3 (id=476): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000500)={[{@dioread_nolock}, {@norecovery}, {@resgid}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@errors_continue}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@grpid}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@nombcache}], [{@subj_user={'subj_user', 0x3d, '('}}, {@obj_user={'obj_user', 0x3d, 'uid>'}}, {@uid_gt}, {@uid_gt={'uid>', 0xee00}}]}, 0xfd, 0x588, &(0x7f0000000680)="$eJzs3d9rW1UcAPDvTZP96rQdjKE+yGAPTsbStfXHBGHzUXQ40PcZ2qyMpsto0rHWgduDe/FFhiDiQPwDfN/j8B/wrxi4wZBR9EGFyk1vuq7Nj7bLTF0+H8h2Ts5Nzv3m3u/NOfcmTQAD62j6Ty7i1Yj4JokYWdeWj6zx6Opyy4+vT6W3JFZWPv09iTMbnivJ/h/OKq9ExC9fRZzIbe63trg0W6pUyvNZfaw+d2Wstrh08tJcaaY8U748MTl5+u3Jiffefadnsb55/s/vP7n34emvjy1/9/PDQ7eTOBsHs7Y0rh50cWN95Wjpn6xUiLMbFhzvQWe7SdLvFWBHhrI8L0R6DBiJoSzrgRfflxGxAgyoRP7DgGqOA5pz+x7Ng/83Hn2wOgHaHH9+9dxI7GvMjQ4sJ0/NjNL57mgP+k/7GH1w5/bdB3duR+fzEPu71AG25cbNiDiVz28+/iXZ8W/nTjVOHne2sY9Be/+BfrqXjn+SGxGb8j+3Nv6JFuOf4Ra5uxPd8z/3sAfdtJWO/95vOf5dO3SNDmW1lxpjvkJy8VKlfCoiXo6I41HYm9Y7Xc85vXx/pV1bGv/dbPyX3tL+m2PBbD0e5vc+/ZjpUr30LDGv9+hmxGstx7/J2vZPWmz/9PU4v8U+jpTvvN6urXv8z9fKTxFvtNz+T65oJZ2vT4419oex5l6x2R+3jvzarv9+x59u/wOd4x9N1l+vrW2/jx/3/VVu17bT/X9P8lmjvCe771qpXp8fj9iTfJwf3nj/xJPHNuvN5dP4jx9rnf+d9v908vX5FuO/dfhW20W7xv/3ukn6U25usffO0vint7X9t1+4/9EXP+w4/sb2f6tROp7ds5Xj31ZX8FleOwAAAAAAANhtchFxMJJcca2cyxWLhUbb4TiQq1Rr9RMXqwuXp6PxXdnRKOSaV7pH1n0eYjz7PGyzPrGhPhkRhyLi26H9jXpxqlqZ7nfwAAAAAAAAAAAAAAAAAAAAsEsMt/z+/2rbb0P9XjvguWv8sMHefq8F0A9df/K/F7/0BOxKXfMfeGFtP/+dGYAXhfd/GFzyHwaX/IfBtdX8L4w85xUB/nPe/2FwyX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqfPnzqW3leXH16fS+vTVxYXZ6tWT0+XabHFuYao4VZ2/UpypVmcq5eJUda7b81Wq1SvjE7FwbaxertXHaotLF+aqC5frFy7NlWbKF8oFf2wYAAAAAAAAAAAAAAAAAAAANqktLs2WKpXyvELbwpno5RMmu++VP5Ot0o4ent8tUSj0tNDHgxIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbPBvAAAA///YBDOu") open_by_handle_at(0xffffffffffffff9c, 0x0, 0x8840) link(&(0x7f0000000d80)='./file1\x00', &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$usbfs(0x0, 0xf, 0x240000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)="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", 0x105}], 0x1) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace\x00', 0x800, 0x0) read(r4, &(0x7f0000000b00), 0x64) 1.217767043s ago: executing program 0 (id=477): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x3, 0x80, 0x8, 0xe8, 0xff, 0xfd, 0x0, 0x401, 0x3efbbf872bbd6af8, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xc}, 0x2335, 0x81, 0x3, 0x3, 0xfffffffffffffffd, 0x80000000, 0xfff9, 0x0, 0x7fffffff, 0x0, 0x3c646a99}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000010000000100001304000000010000"], 0x0, 0x35}, 0x28) 1.217286923s ago: executing program 6 (id=478): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) sendmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="feb1127208", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004804) 1.216865013s ago: executing program 6 (id=479): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast2}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80002, 0x0) sendfile(r3, r3, 0x0, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="70020000", @ANYRES16=r2, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB="2da4"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x42}], 0x1, 0x8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x9, 0x251, &(0x7f0000000800)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup, 0xf, 0x1, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ac0)=[0x0], 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x33) lseek(r7, 0x6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r4, 0xffffffffffffffff, 0x1c, 0x28, 0x0, @void, @void, @void, @value, r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="fbffffff", @ANYRES16=r2, @ANYBLOB="000328bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x6000, 0x0) 1.164549465s ago: executing program 6 (id=480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xb}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) syz_emit_ethernet(0x2a, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x0) unshare(0x6a040000) syz_open_dev$sg(0x0, 0x1, 0x591500) socket$unix(0x1, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r2 = fsopen(&(0x7f0000000140)='omfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x82) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'sit0\x00', &(0x7f0000001280)=@ethtool_per_queue_op={0x4b, 0xf, [0x10001, 0x1, 0x7fff, 0x1, 0x4, 0x5, 0xcc26, 0xffb, 0x5, 0xb69, 0xc1, 0x85, 0x1, 0x3, 0x80000001, 0xa1, 0xffc, 0x9, 0x701, 0x3, 0x40001, 0xfffffffa, 0x8000004, 0x6, 0x9, 0x12000008, 0x7, 0x5, 0x5, 0x760, 0x3, 0xd, 0x200, 0x2b12, 0xb6, 0x6, 0xff49, 0xb, 0x10000, 0xbed4, 0x2000008, 0x8000100, 0x3, 0x24, 0x8, 0x8, 0x23e, 0x79b, 0x2, 0x1, 0x5, 0x4, 0x7, 0x7, 0x10, 0x57df5d62, 0xe45, 0x1fa0860a, 0x7, 0x2a, 0x81, 0x2, 0x180001, 0x4007, 0x80002, 0xfffffffd, 0x2af, 0xf7, 0x5, 0x2, 0x80000001, 0x6, 0x4, 0x7, 0x4009, 0x0, 0x800004, 0x0, 0x401, 0x752, 0x3, 0x3, 0x0, 0x10001, 0x2, 0x0, 0x6, 0x6, 0x5, 0x80000000, 0xfe000000, 0x5a3, 0x6, 0x84, 0x100, 0x5, 0x252, 0x81, 0xa, 0x5, 0x20006, 0x4005, 0x2, 0xb, 0x66, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x6, 0x2, 0x5, 0x8, 0x7, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x2008d9f, 0x1fc, 0x3, 0x4], "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"}}) poll(0x0, 0x0, 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, r5) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x2090, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0xdf, 0x3}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x7fffffff, 0x9000, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x3, 0xffffffffffffffff, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2810402, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@nogrpid}, {@minixdf}, {@quota}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x246400, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r6, 0x40086602, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000640)={'team0\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x4c, 0x4, 0xb8, 0x6, 0x2, 0x5, 0x3, 0x2, 0x8, 0x4, [0x2, 0xa, 0xb7, 0x6, 0xaa, 0x8001, 0x8, 0xbfa7]}}) write(r1, &(0x7f0000000080)='4', 0xfff5) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x44050) 997.678488ms ago: executing program 0 (id=481): syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 975.152268ms ago: executing program 0 (id=482): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000340)={0x0, 0x98, "3155d7d7c9917ead7b445bc84967a291a776cb7a37e46aecd076b401afd0a5725771bf56d15a70e044d2f1eff35b2454bd23bcbbbe4ff47f42e081783faaa57ccf612f95fd026045c543440db12d90c1752ba9f3ddbd56da80e8c5d3e0a80abe02dd035ecb78dc9b07de2f98420f8b847434217d0a80a6fa603a63c7408f0f673a5d897fea212ae060b955366eafd1970405b8160b8e8a71"}, &(0x7f0000000400)=0xa0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000440)={r1, 0x7}, &(0x7f0000000580)=0x8) sendmsg$nl_xfrm(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=@allocspi={0x10c, 0x16, 0x1, 0xfffffffc, 0x4, {{{@in6=@dev={0xfe, 0x80, '\x00', 0x1a}, @in=@initdev={0xac, 0x1e, 0xfe, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0, 0x1}, {@in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x1, 0x1000000000000000, 0x0, 0xfffffffffffffffc, 0xffffffffffffffed, 0x3, 0xd62b}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xe55286f1921f74be}, 0x0, 0x1a0b1}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0xf}}, @iptfs_drop_time={0x8, 0x22, 0x916}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000600)={'sit0\x00', 0x0, 0x40, 0x20, 0x3, 0x7fff, {{0x16, 0x4, 0x3, 0x2b, 0x58, 0x64, 0x0, 0x8, 0x29, 0x0, @loopback, @private=0xa010101, {[@noop, @noop, @timestamp={0x44, 0x20, 0xe0, 0x0, 0x4, [0x3, 0x1, 0x8, 0x8001, 0x3, 0x5, 0x3]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0xfc, 0x1, 0x6, [{@multicast1, 0x2}, {@multicast1, 0x7ae39e17}]}, @ssrr={0x89, 0x7, 0x8f, [@multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000800)={'tunl0\x00', &(0x7f0000000740)={'tunl0\x00', 0x0, 0x1, 0x1, 0x2, 0x5, {{0x28, 0x4, 0x2, 0x8, 0xa0, 0x64, 0x0, 0x6, 0x2f, 0x0, @local, @multicast1, {[@rr={0x7, 0x1b, 0xa5, [@loopback, @multicast2, @empty, @broadcast, @broadcast, @broadcast]}, @timestamp={0x44, 0x20, 0x36, 0x0, 0xf, [0x7, 0x4, 0x400, 0x0, 0x5, 0x6, 0x1]}, @rr={0x7, 0x13, 0x75, [@multicast1, @remote, @local, @local]}, @rr={0x7, 0x13, 0xbf, [@empty, @broadcast, @remote, @local]}, @rr={0x7, 0x7, 0xdb, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x14, 0x7a, 0x1, 0x1, [{@loopback, 0x4}, {@multicast1, 0x5}]}, @noop, @end, @rr={0x7, 0xb, 0x35, [@private=0xa010102, @private=0xa010100]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000840)={'ip6_vti0\x00', 0x0, 0x2f, 0x1, 0x8, 0x4, 0x26, @remote, @remote, 0x8000, 0x7, 0x1}}) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x78bd30, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xf}, {0xffff, 0xffff}, {0x6, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'erspan0\x00', 0x0, 0x8000, 0x80, 0x8001, 0x0, {{0xf, 0x4, 0x0, 0x1, 0x3c, 0x64, 0x0, 0x1, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @multicast2, {[@timestamp={0x44, 0x8, 0xb2, 0x0, 0x3, [0x0]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xe0, [@local, @private=0xa010100, @rand_addr=0x64010101, @remote, @multicast1, @rand_addr=0x64010102]}]}}}}}) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000440)={@rand_addr=' \x01\x00', 0x80, r11}) ioctl$sock_inet6_SIOCDIFADDR(r9, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r11}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x208, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x20008804}, 0x4c011) r12 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/file0\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r13, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000060000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r14, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 788.139533ms ago: executing program 1 (id=483): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)) 649.247876ms ago: executing program 5 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r2 = semget(0x1, 0x4, 0x39c) semop(r2, 0x0, 0x0) semop(r2, &(0x7f0000000380)=[{0x2, 0x82, 0x1000}, {0x1, 0xbbdd, 0x1000}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x1800, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r1) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, r5, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9c5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x881}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x100}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6c}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_batadv\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8f9}, @IPVS_CMD_ATTR_DAEMON={0x64, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1d}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dummy0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x23}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff4}]}, 0x134}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) preadv2(r4, &(0x7f0000000680)=[{&(0x7f0000000280)=""/134, 0x86}], 0x1, 0xfffffffd, 0x558, 0x12) write(r3, &(0x7f0000000200)="c7", 0x1) sendfile(r3, r1, 0x0, 0x3ffff) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendfile(r3, r1, 0x0, 0x7ffff000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000640)={'gre0\x00', &(0x7f0000000540)={'syztnl1\x00', 0x0, 0x1, 0x7, 0x80, 0x4000004f, {{0x1f, 0x4, 0x0, 0x34, 0x7c, 0x65, 0x0, 0x30, 0x4, 0x0, @empty, @empty, {[@ssrr={0x89, 0xb, 0xbf, [@broadcast, @rand_addr=0x64010100]}, @cipso={0x86, 0x39, 0x2, [{0x0, 0x3, '\x00'}, {0x2, 0xf, "01681890df0fb14dae7028a39e"}, {0x5, 0xb, "bb8bc3eb579dd1a39a"}, {0x5, 0x12, "3f9941adbbe6afc1d44c3300dc54d0ad"}, {0x6, 0x4, "8744"}]}, @generic={0x7, 0x2}, @generic={0x89, 0x7, "c3de78dda3"}, @lsrr={0x83, 0x1b, 0x6a, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r8}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x24, 0x21, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_SRC={0x8, 0x2, @private=0xa010103}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x9, &(0x7f0000000300)=@framed={{}, [@tail_call, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$nl_route(r6, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=@dellink={0x1c0, 0x11, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, 0x10508, 0x20}, [@IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x1c, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x39}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x82}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}]}, @AF_BRIDGE={0x4}]}, @IFLA_AF_SPEC={0xd4, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_INET6={0x28, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x4}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x5c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x8}, @IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}, @AF_BRIDGE={0x4}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}}]}, @AF_MPLS={0x4}, @AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0xc}, {0x8, 0xd, 0x0, 0x0, 0x5cf}, {0x8, 0xa, 0x0, 0x0, 0xd}]}}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_CARRIER={0x5, 0x21, 0x8}, @IFLA_MTU={0x8, 0x4, 0x1}, @IFLA_LINKINFO={0x88, 0x12, 0x0, 0x1, @vti={{0x8}, {0x7c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @empty}, @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @vti_common_policy=[@IFLA_VTI_FWMARK={0x8, 0x6, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x9}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x10001}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_REMOTE={0x8, 0x5, @empty}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x8000}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0xf}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x7}, @IFLA_VTI_OKEY={0x8, 0x3, 0x29}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_IKEY={0x8, 0x2, 0x80}]]}}}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x10008041) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {}, {0xe, 0x3f}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000900)={0x1b, 0x0, 0x0, 0x2, 0x0, r3, 0x33b, '\x00', 0x0, r1, 0x1, 0x0, 0x3}, 0x50) 629.110476ms ago: executing program 1 (id=485): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB='+cpu'], 0x5) openat$cgroup_int(r0, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) syz_open_procfs$pagemap(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x5, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0xf3, 0x4, @mcast1, 0x9}, 0x1c) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) r4 = dup2(r3, r3) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x46) recvmmsg(r4, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x2000, 0x0) 589.385737ms ago: executing program 3 (id=486): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xf3a, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x1000, 0x9, 0x10, 0xeeb4}, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r6) write(r2, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00042abd7000fcdbdf253b0000000800030063eb4c70159c9a60551bc6160462eed25c42a837fee977e2217104adc414f8c5157557ea1029d995e9c575c86794a62269189e97d3832c7fb8089c6b3d352273b15ec7a29842578171fc84eef2c34287dd82a4532b8f5302f0ddce02fe48138445e17284d4eac2c4d97e0e5a458592b4e64fb7ddd33f50b77d7b2c3ec8753f86e412fe155484a029a1af76e804545437ea7482128078734f0f2ca281847495bc3de51602fd947fc1d92f147b95b03d2de5a4df576b3bc03daabc3402ff70f93c1781cbedf5", @ANYRES32=r11, @ANYBLOB="0c0099009e0000004b00000004006c001600cd008c850300d60afffe0600000008000700da0000003100330030380400ffffffffffffffffffffffffffffffffffff540000101f004d00dd0d8af9684302e45dea0cd6d0a660000000"], 0x78}}, 0x10) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r9, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) writev(r9, &(0x7f0000001bc0)=[{&(0x7f00000003c0)="017d00c178b3905bbfc9af380658e7d5dbc2bdc28df11f0059ad5520083030ee855d7751ed90aed1387f94658104ad9f88a47d3939868c8fcba9166d6f4829f2c610560bf6b9f514ac8a7b540f931d35e7e111b44a038d47b105158b66a23ecead57a6febd69261c7af5845b8446c4b97f2c96943e03fb025f96330f4d8c63d0f069490eda452746f1166febff13651a4659c5ed7e4f9097fbf50f79bf18fbef6e04c4146b8eb928e6e677738ad37d04462f2d61f616f66ebb23113da6ab72b1c35f59d5f326c87d", 0xc8}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="c0746a8d1eaf9327db87c497af11e4f13988b65e49de35fff7b1d8d5c22a2ea21f0d8ade4f75abca2fbfe9ba009be0628597f200917e22501abc18793499c2b48eef25dba0046e3e61109bbc37d14850e843ba1c20c6bdd6e3f44a60ed85cc297814689146bc54cc9a531b677e078a0a7e179b4b97a9202ebf77e6e0384fa0e682777a7206fa94dfbc0e06fba1d9a9ed64c8477f57f2cefbe2a30c2133f0e8acdf487eaa5e93ab70a3cc420ac242b7101c768ffbd1ae6187991085d7b82d7d4f13123c3200e82c7b95695d5fec060b", 0xcf}, {&(0x7f0000001a80)="619420ffe870f78551bf83771c22d4057e7e9b3813dbc46c96b85b4c71aec39fc23887f95b92889703e79f47e3c8517538905fe47b1464af5a704b6617662520f71d7774583216f3f2ade30669b2fa493604f6eb348e55882834d40ae6d5a98124410b0750948029e983308e7b83d6b84e5dc8bb3808b060c32d5c8c9191fbe960bb7c4a0e0732d87614bb166e1e12adc834502fc60865da07d9bd78384c4270eebf526a8ca64af24428ec7e3f", 0xad}, {&(0x7f0000001b40)="7cbd14866992b83f93594d79295f95901941ddc6b1eed29a33380cec7820b31533e7d07f7ee9f2e498d66655f02bec97e4674216580b9b036ef49f55b628daa2e25e455419768bbf4396485d753bd06f5f1af19ffb465910866fc1fcc94bddc171b7d630269eab4cb02fed981ef68c7bd3e2da1956", 0x75}], 0x5) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000180)={0xe4, 0x17a, 0x4, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x82, @tick=0x5, 0x3, {0x5, 0x3}, 0x40, 0x0, 0x1}) 185.623936ms ago: executing program 1 (id=487): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005040)=[{{0xfffffffffffffffd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)="1c9647ec520dd0b5551dbbbc244f1e73ec7a4c168f0e927802f771b0bdde37386487d03ac3f31c2f4d1bc670ea68e82d443aa82fadc1", 0x36}], 0x1}}], 0x1, 0x8000) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') cachestat(r2, &(0x7f0000000200)={0xffffffffffffbff5, 0x7a7}, &(0x7f00000002c0), 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) setns(0xc9, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800020000000000000000000000296fe5f82ae84cab0000b634c413c50cc4aeb1300bdfa8bbbfd23399151c696b321dde9a11e5fca7e0c997dc29f173e6a66aad9b8c27db0731f10bb9dae2198faff527ce005b4b11fd31ec29b38687ce829c5a80daf42c450911ac33c5f8328568329fa7b595a9b5bb516bd67212d229f6b41bb8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r4 = epoll_create1(0x0) r5 = fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB="11000000000000000a371846603a7da59eb822e72dbb8bf163bb03c7f44005d2666623e735271477821c469df7ac6659f640c6ef951d1f9ff0a36ba95ee3c65cf500bdfaef6d8caf7b1dd57fa1bb87ad96e40ee393d6bed202cb740b7ebde51c7845a08072758866da0677b25d6fd8b001dc73885b0057c8992228a58b3582b3ff0bfde861f6105f80f9a5252327a2c38042abb331d4183063989979aefc6c15a96c5dba710ffa228f2a06ed8827a0122ceb813ec319d8902317b2f02f884b4f90c796a6818d076371814c9426c8f6635d2ddba69b603df13f01b02813d63a551ec3a3a3e193", @ANYRES32=r5, @ANYBLOB="3366b187fc27c2b80fdb37e6e305bcc9665dcd44736d9fd77a8b37d0385026b8033dc44f6da21ca9f85b9bdeace8964f38da3bb07734ef4e0b6b52a7aa060fed9a70d87a0b1d454259550c4bf4e9ce7c67afa04997392c4c2ab6f5b74705a44d1c7c4480c683c2f32a91c3d51bbc", @ANYRES32, @ANYRESDEC=r1, @ANYRES64=0x0], 0x14) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) syz_open_dev$vcsn(&(0x7f00000001c0), 0xfffffffffffffffc, 0x240041) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0xa0040, &(0x7f0000000180)='mptcp_pm\x00') r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="38100000", @ANYRES16=r11, @ANYBLOB="010000000000000000000100000024000180060005004e210000060001000200000008000300ac1414aa0800060001000000"], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x0, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @broadcast, @loopback}}}}) 129.201637ms ago: executing program 6 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r2, 0x0, 0x400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x1ff}]}}}]}, 0x44}}, 0x800) (fail_nth: 6) 114.128878ms ago: executing program 0 (id=489): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x30004001) sendmmsg(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="feb1127208", 0x5}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4004804) 1.32716ms ago: executing program 6 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x3, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0xe174ff1ad323ca07, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast2}, '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x80002, 0x0) sendfile(r3, r3, 0x0, 0x9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r5) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="70020000", @ANYRES16=r2, @ANYBLOB="0f0700000000000000006700000048000e00", @ANYBLOB="2da4"], 0x270}, 0x1, 0x0, 0x0, 0x44810}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x42}], 0x1, 0x8) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x9, 0x251, &(0x7f0000000800)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004885}, 0x4014) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup, 0xf, 0x1, 0x8, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000ac0)=[0x0], 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0}, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dbg/netdevsim/netdevsim1/hwstats/l3/enable_ifindex\x00', 0x1, 0x33) lseek(r7, 0x6, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32=r7, @ANYBLOB, @ANYRES64=r6], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback=r4, 0xffffffffffffffff, 0x1c, 0x28, 0x0, @void, @void, @void, @value, r6}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c8) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="fbffffff", @ANYRES16=r2, @ANYBLOB="000328bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x20}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000005c0), 0x6000, 0x0) 592.77µs ago: executing program 0 (id=491): r0 = epoll_create1(0x0) unshare(0x22020400) poll(&(0x7f0000000180)=[{r0}], 0x1, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000001ac0)={&(0x7f00000007c0)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, 0x0}, 0x6048810) recvmsg(r1, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002e00)=[{&(0x7f0000001cc0)=""/106, 0x6a}], 0x1}, 0x40000000) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002740)=@newlink={0x3c, 0x10, 0x1, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4f26c, 0xc000}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f0000004080)=[{&(0x7f00000002c0)="862e8e6a73be5c6c33b8f5fca244d476da5800c6fd04ceeb5e298f6c769805e50e732a000f38c96ae5c0cb8449a9428fd76cb629c6c4c10c68bcf324ae0a29ab5c5007c55e6d27bd0bb06963c18517ca901c69a571cccb92446e063964751d1df67efa7abea8", 0x66}, {&(0x7f0000000340)="984d71055544d6c9e2c7fd2ee1a9e5187a96c10f2cfd868f7166d5e317031272a54420efd77c395d6d7e1df694e2283541db8352017ce56194316ebc5c286f506a7643b368f3", 0x46}, {&(0x7f00000003c0)="c3733d30d63b55c3a3551cb12c5d64422c39e71b57f51c88adc03e4e0595e439d7679dc47d3198c325a2bf2a34126e6e01488d69369916fd01f2f8a4d46f8e6eeeaa6e666e2b4e68b4780fa7dad01e615eef43f0203e109c668f5f87624fb437df9fc189e86fd0579f5da7db1ea17585468a9f8d7cc43f0ebaa3d58f93b96289536a242b9cbfc0b9939bba3e81bd48a286b0f9cf3a67e31b886e18672d8834c3b99e0fd5f4ac6adf87cd381191af3d2a886d7775e0ac38b6fc408e7fd609c00eab114c6d0a5902001089ecc111531ca008e59911b189351b12e3a9a20982452a9289", 0xe2}, {&(0x7f0000000500)="af5f72019a891c25f16b26eb8aace13e0c7fa4189d", 0x15}, {&(0x7f0000000540)="ff766afa644c8fe853d6d97dd9ec9804b660898cad1db9a43107602f3d587f1384f3999bc862036441c669a99a45b9e77a460676743e6b748f90c66e6c1136db4bef778124ee3a58b8e350c4e1c682eb14ed44942cfcff7c3ba0dab19fc4fa34d2bf2d57836c21a6f2baab8e006628aa6314bee91fe413703b0fc5e8eaaf27276962d6e02522054b982f332a2f3dc1a303c30bac99ff38a8034500260e8d082ef594d7d69e3d27779008ebb31c07eaceb3b6c32d2c5d6c4227655fdb29110c876b073df1867245613ed6c72373d99365e47dea0fbb4a16d7f019cd8459", 0xdd}, {&(0x7f0000000640)="e8bfd3c9cfaa5b1e1946283fc0edd24d65d34ceff1f61478205fc8d6c21fa0e7b60ed5cb5c567774837a86de7d132c23d37d70e5b80cb7502eeb244a832e306fce992787ba8fc79fbcac9d223f6a5606a2", 0x51}, {&(0x7f0000002f80)="7edf6516d6e60b899871c2f245e7c5246c082193aad16b4ac06d8e1b3ddf20e63e8117a9a9225a947849b9af11f7b0b7d25cd23bd2fe4330ce51f1589814ec673e9fc417c37b676ccd4f6bbd8f9ceb2686e4614409fe3567a715e33995d7631f6e8f589e6196312622d311303272b1b51a006e64f76bf97935b668d84c57f3c6198f5e66872d6f7b12a3693a82ea9662eeb546dc137f04bc830530aefdf14ec79113ee0aa04d906bf8026c4cc86ed05434e6e7d698aaad693f98b5ec998b4584c39fe4c20135ce9658271a5a81298cebffc7ebc1e200e6950ed4b04f24e0974242d23624ad3a77c76cfde935e3e2298232251710522efcae37443f838b6ea20d21cc4050d4d8be81cbe173d94bcd89e35c39f5157549e8a512b597b35e6bd34fd04e472e134eea0958c64b8e91a7d98533cd696b8082a03480104e70109b835dd58c000442322e81894d64764b32afb5ca420305de2c2402b18636e50495126065f258f1d5cf6da179ddf12e290d59880ea8e71082b25a13eda4be261d7606deb11a7da904d11d993d2fea3a987aae77323a36512033bb70e23a4ecd4e41d4b546022681ecd867ef6baa2c9a10d4d174e9965e8739d477c0a8baa67010d31a6a546c8eea1b99d0bbf647c6ab817061e4c2eb1675cbede8ea9e43f5ce114556b9496c0a132642db10a71a5c1c5762d21db5883375fa755deaa00063ceb2cef2e4cc48fd082a20b355e1679528435f3871b77cea5a96fd187e6e9d2fd9ac98bd7ada71b216753d1faac5b39c4dc133372fa547c3cba8992c681d85ea1f0c028d9292eb1d9756a4cd2363b17f1d0938223eec9c2bbdb0e0556debdf54076ca5a12e953059daece9b5bc7473787bcdc9b97f69878603c340192e0f08f92e0e4af4970926529133dd46d35ca654d01dcd2ed93a84554fa84801ebeb2f87834e85e2ed16f652f9cc889f88bf4df8dd6a3a685b9aa8472f80213f0e044fe4c27273f340034235c01d6bfb9994baead8e2c188356ac2d18656151206715e1f130275377a7321529ea23b69fb8e077d78b9a7a7456e90491d922bfe5f15d7c85a0da6296330a392d4c28be056ed0c4c2b3c832226cab31e96b2d789f2ee97532fb489e4fc119c3fec8f659470a689f8b1023984bc42c53394165bd32d7f7503c12e58767902dc6c71052061996606bace013584bfb8aafb70c552520568a3340b8cab45430a2ded00956e62204f5fb99fd4f589fe688a45cf23d48fc8710b27d7e6a01889ceb0b59951ad4a72f55a968ad6e8d027657291d214d411c6e4ab17646ba12b03653b899882d6ca8a3950a5d3b5fe3aac301afc3025f08b510ff633fc727c9acd4df39a1cfeeec3b9ebf67e0dd0cbfc01e9eb52b772787ee83e53e0084fe99f3a50e76cd55873af50355c98b88eb0ec6ab5aa7273d15eab4b36dcd5cbba8e5dee47951235f5f91a6a0a4271d92edf1b13fa8f2bcca9394b8910947c5cfe57ed7693599e3a2f82938039b542d4a0156da7e727120bd9775032b39c5809f659f2cd294cd959d7f16b7a48dc925b2400752b02365166e6630b0199c9d56d9cf4195108b5b2269078a8346cfecb786bc51dfdbff58784fdadedd0bd7e3966389170636f1aa0ba0c437f547b0e59e80a1ed0bed1917c5d337e1567f7df79a28d637a6212830ae777e1f8747864c8209c8ddf18a091f93979d743b66a8d571279572dcfdc89f5e919dbadffc4877200c52bfc0354d4f65d5d181cd2c1e4248c58c46305283b7c8694b84bdb8f9223fed67dc2dabfa537141e5a5e9a7fbddfe73d709d036107a33efc71e76a982eb93f0522e9f7978ec4925735071fb9ee04e34d211f1e552f4f4838a4d3e043fb6d5f1e878c583964dff550418904de59c9444ad790e1c839c6b4464273de3a301411b19e9f615d726a6b85d651815111369f014e64a6cf950b14f2c7baf90de6f512f1bf1ae404264b64fd1a6b97cbc02d7f0150c12e9affe116e9921e935ab5303c9fbc4eb229a2afb616df71ffca7fd088418097d29b3d02827e94187b6db2ae7bd71122320d0ef3cf3ac9e76017ac6f55cce2d0ea458d918fa8dbf79315242c2b080255955a225818bea8a41f0beb5f59a1deb5cab4096d480aa78a112d576ffa7528ecc978b90e905aa67f2f87a6f78e9f01812816483eb9eae8e597eb259195e6781ccd1d5d37c92f87c2f661cb2b2bbba0ef37ea31abc2811beef31538fcd4af49230909a8e6c1c0b68d11332403bc49bec1dc3fa53a37680091bf61771157f43641458b3aad9713f18eaaba0ffbce9f0f8ce7f66fa85f659f405bc3c3eb647f1c615e35fa62b44e3e50cb8d8a43f369df35ae3da3617be7909aa44c0d95cd956ff7a856ac0abb8e3ac4d12fb3bf2696928977ff03fc86a8815ab9db5cdaf488b7ac9a09eca4e9e68995b145431f4b6ff1622be8bf348448e2fe545ee325db1ae9e090dfcc128f3d95acb5124e8a65bd7866c4b0fadc655c3dfd202d64d46977719c865c3067a1c7200e81f1a6fafd5df08bfe4c82a08672521af79350c7941c7f1921b90f82b7902e9e4f2542370aed1348f957124751a5dc87867ed3ccf157b8a4440be18e08db9dedafd839c55498134f4b44862e7b7a0c921ca45622d93a0c99808276b95892c79b117c405f4fc79239a24c2f79a908fa5c26d9744e01f089062376ba02ff956cbefa4ac7a738869e3bb78d85429a59211e93c6fbea617af5376e121d98b1bc709578fd1651dfa52551c0e21c6150fe0218ff0144c471c435f3e7ea696e815cfa02abcb11fbdc42ed5d7b30140196b0a082a3983a55110a8ad567523424329eb379c9148c63272bdb187b8fc1e3fc215b29066b428b29210b2b8f675fb1f245cd3cc79ffeec16ea0f4438c45fb2e536df9c7c33a022d20e8023980d4052db4f59b231a403a59376ec695faf4b9e2a9288c1b473526e400c42a9a21bb02b05fa49fb9272dd2c6dcf0c83584d792999af65af1a0747343a7c85ddc70553168821f93c19c29be5c2dbbc34afc9c130a340775f86360ed645c7e460570084f8a831cbf1bdf204a00aa2e0c0f155217d841a8360d433469b5781aaa7455f74460351e63351b8cab833203cd277134c5501b24e2ff7f00f6d4615e66adcfb90b375418cacd30efd126480511de95692c9d4219d55c56fb6757af8a44b937592c94fd4016b102edb2ebef04038130ab3af0cc33858c6d6a959f89623846e27997d7136e62c59b92a6821bbaa832b9264e65a749f87182479f275ce96a94d256849986ecc91e2bf53eb91c371ab0b5842c49bbd4dae1115cadfbf7d577d492cc2dbdcc03e3dd403feb72cb87307599df7158842f76a29f74747a3de6c93e089b41af0b9bde6a0c10244912a0783294aa6d989da3cf1cf6989300142f5ddeebf4b78c0d2dfc784c86e18c35910ddb86a47d59d84b8516f91bff5f7c34624ccd2e32a58210833380df89a346bd0f6eccc8defc010e403d7a8dba3f23fb9bd54eecda5e7c84d5fac384f5f35d94f89b70b7439bc6f9eb385475dff03ed877493a459925f40df989f8d16eefc19345bd918b82c2370f295320b183ca8b428ae4a30a3656c7d59b156dc2889fe1de7e3678a89ea7b744fe52e9d7e9b2d57af916e9401e54254774b5229205535622b12d96126fef939f16f291c1464f61b99d9fd407d74624e3717c29d78f10b9b96d20c0b0fbefd37ea45a8168e28d837e4036fb84eea5b557fbf0927e45e31b323a457403b9a51cf563a1a40e3d453124d9f91699d8129e38d6d96d30f1da6eeac548d3a5e760b4994933bd737ae250602b2f968964ccfe7804bc44cbd2cc504469f7245fb7cd9bed1233b80413217b94898fb40e31511ba4cfdc5738d9e7fae746986151e71e65e28d396ba0e95271a39a78a3b041d6a87605ba589e867a2e4ae78cab522ddade2a1b3cbe6296e70a6c17aba4d5fbc7e09a3434dfcc34c5de5869fc29785a417baad50a1654a6f9fe588c4def73eff2c082023f42bb0e31c7e7499e8015ed506e0a93dbb099f9b4edaaebf876c2b75d3fba5019e044ad3553654ace4b1ef89379aa6feee6cf670882e1f04faa68881f5e36443ffd37fafe383bb0f95d39ea85ffadc97e3831a592cc85c70c9bf89d4091d6038f96d2c7598c5be59f8d32e383f77919e8360b2ce9afe6bf5804f153a374a866896398e6367980d5b4ff17e1e8fc651a9420c93610b319726282760ec3697a572e53dc5d35c1e3d72e3a11a6cf04dac1b674ea38ee0748c6228d28edf43c525ac9b04d3d2ee37f8f111d210a2a223d9d0ec647fdf2ae9097a4baddf7bffb616d9c1c3815dd9419cae46473d20cc620c7bec28a0b68b16a2db8d8f3d6c6c641a5a88f1c58048ee6f3fd05331fa6fcabba56b512bb4d0a3f3083d4294bd16e67949cbd1f89cb4833587d840994ee6c590d70cb641f3887de59edc87175b07904bfcdb16f5f58e7012878e849004f545c992e17e6fad0693142aa497b9e1fdd7462fc103d850bc58db36d2f0be830efa8d89550ed22291319ebc9975489087778e543bfb51bd6a30d07700900e127121902f7f2461669b4b9b7c149edbd9740e855ad0266ac5142ed6ef6664c1b2bb8cd1bfb3c91119e6aabecfdc8022444f7dbb42ef766b4a7c8cc9199c86499928d7596084d3b3f9d8f1e9f15aa81fdf89226e9e1daa9145e471887bc04729b939d0d9515a03f6981721da97ef295d4eda1860d2ee79c61f65007f29f1ac0023cb9537b0159686ec9a8296f97bd4709c82cf25612f53b9cd987f1cbdbd5f1f41a0b89a4530f440684276fdf0d437fc17588a09ddd4d0029ed90f1ca736612b2e15b4e1ed62268594da1634f17ecc83bd0c1668bebe91618b2b7b2cfd2b036dbfc2a6140138619e272a6a1762a2fd65917eb3fc2b8e9fe22858e5dd826d88fe7f2a2d757dc0326bdaeb8935ca1e891103f6d5658f02ffd445e9575b314fb3473bd450a669ddeb80968e719fa0aef039cbcf1cc4cb2ddf3eaadea403b6a20ab961bce11b3ea3a1450648e8824969b2c180e4af40ef9912361a91e64c39e2d8c7aea6dbcbb1aab00c9c777c98b1a221336050de42be8f20d753b75594be3809954d9c8734c7219108a793f163a8fc808c44e9f042d3b5e86975239274a8cc8b7612bf5ba012c5af33e3b6a1fa676b9dda1ff7b7915c09b15219aade2543371157c8796405f50674868eb57ceaaa3774ce9893300f69de27a6ce8349560444afc7f287c8bbd30fe945322f1f836a3fbfc183a63cf0e0d330fd53aa5ff1efa23b4b4c570e8b08e2cf936aa53d84b90a84e40610762a5193b627fa4afe11c44faf8d0748bf68460d72acdbd8fe8100c9089544121b7f686cb63b3cee69a871906d7348c65ca61ad90001cfdb7d609c2beb9a40d84b355739f55eaf37195f82da77c433a274dec014fa79d1662d6261d8beb23bbd2c359cd7157621cb4d6bff1664d3efec229df587a139bdfd7624703e5b4de5cb57ca233e8cdc84345c0b002f451ab41c4250c6a669e141660d83ce50eb6b00352ef9bdbd57f417543f1cbaaf955614efd109ec60ff4a693b8476146c956032e1da37f46fcd93eb8f35a5dc573897992dcbe12400651440511943d1d9b54b49c2ad29eb26c9b7deb14bdd41ca5f01613b418121d413993fc9a74fc6279f53a3d661ec5fd9e56e6c79c2e5bb1b36b3fabaf1638d77194b02117eef8f91d26c9a1db07e26d76ffdd85604fcad0336c857eb271cb7c90bdd65a706cc4b6ef6fef1fbc28834b9bb285ab5b800cd25", 0x1000}, {&(0x7f0000003f80)="6e4ec8f68aa5cf4a396ce47e0cec7aba090703e1bfe9406228c25fb21420f9868b6395138757ab05936aee1aef502fa30bb1edcbd5c64b1861012dc77bf7bd09c6e7966dc58493246cb6a675b2f0c6fe645c32ead8dc847327b34666a7179911db00dfa46ec9f46b93ecf1bfdce3f5a7f23290980c375201bfcf42af1d02e3fcb916a25885777426ddf2dda25ce37c818a709f970d69da37d3c5c1105d50c70ba562c0ef9b59ac6d80abb348dea47ef919cd9e8ad2262d431eeeea87d87e67cd08db56f3d3", 0xc5}], 0x8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, r3) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fbdbdf2509000000050008000100000008000100010000000500070005"], 0x3c}, 0x1, 0x0, 0x0, 0x8081}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2090) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @loopback}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x4}, 0x0, 0xfffffffeffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x60680, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000100)=0x19) sendfile(r5, r6, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0), &(0x7f0000000240)=0x4) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r7, &(0x7f0000000080)='4', 0x1) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="1b0000001e0011"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 0s ago: executing program 6 (id=492): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xb7) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x4a042, 0x80) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000001d000100000000000000000307000001", @ANYRESHEX=0x0, @ANYBLOB="a79408902a000200aaaaaaaaaa3600000600050001e4765f325db597cc2a542b46759491865648e11ea7f46509e484c7a9ea094d078178f9979317cac6d3a50a7472e9c4"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0003}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r4, 0x40}], 0x1, 0x5e61) shutdown(r3, 0x100000000000000) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_getfd(r5, r5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x200480, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r6 = epoll_create1(0x0) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000200)={0xa0000009}) ppoll(&(0x7f0000000000)=[{r6, 0xd408}, {r7, 0x2003}], 0x2, 0x0, 0x0, 0x0) r8 = socket(0x40000000015, 0x5, 0x1) getsockopt(r8, 0x200000000114, 0x8, &(0x7f0000019580)=""/102393, &(0x7f0000000400)=0x18ff9) kernel console output (not intermixed with test programs): ffed7264c88 [ 86.298961][ T4545] [ 86.316373][ T29] audit: type=1400 audit(1788211775.307:367): avc: denied { map } for pid=4543 comm="syz.5.146" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.316412][ T29] audit: type=1400 audit(1788211775.307:368): avc: denied { write execute } for pid=4543 comm="syz.5.146" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 86.316448][ T29] audit: type=1400 audit(1788211775.327:369): avc: denied { ioctl } for pid=4547 comm="syz.1.148" path="socket:[8276]" dev="sockfs" ino=8276 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 86.405807][ T4539] loop0: detected capacity change from 0 to 512 [ 86.417663][ T4539] EXT4-fs: journaled quota format not specified [ 86.480654][ T4555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.148'. [ 86.668654][ T4561] loop1: detected capacity change from 0 to 1024 [ 86.695153][ T4561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.708526][ T29] audit: type=1400 audit(1788211775.717:370): avc: denied { setattr } for pid=4547 comm="syz.1.148" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.753616][ T29] audit: type=1400 audit(1788211775.767:371): avc: denied { write } for pid=4547 comm="syz.1.148" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.753721][ T29] audit: type=1400 audit(1788211775.767:372): avc: denied { write } for pid=4547 comm="syz.1.148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.753761][ T29] audit: type=1400 audit(1788211775.767:373): avc: denied { rename } for pid=4547 comm="syz.1.148" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.753816][ T29] audit: type=1400 audit(1788211775.767:374): avc: denied { unlink } for pid=4547 comm="syz.1.148" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.894003][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.956995][ T4570] loop3: detected capacity change from 0 to 4096 [ 86.972487][ T4570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.091656][ T4576] loop5: detected capacity change from 0 to 512 [ 87.100440][ T4574] loop1: detected capacity change from 0 to 4096 [ 87.137199][ T4576] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 87.139521][ T4574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.162200][ T4576] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.152: bad orphan inode 131083 [ 87.162229][ T4576] loop5: lost filesystem error report for type 5 error -117 [ 87.172944][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 87.172969][ C1] EXT4-fs (loop5): initial error at time 1788211776: ext4_orphan_get:1429 [ 87.173014][ C1] EXT4-fs (loop5): last error at time 1788211776: ext4_orphan_get:1429 [ 87.197402][ T4576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.205689][ T4583] netlink: 'syz.3.150': attribute type 63 has an invalid length. [ 87.294176][ T4572] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.152: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 87.338565][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.435646][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.155'. [ 87.435698][ T4591] bridge_slave_1: left allmulticast mode [ 87.435725][ T4591] bridge_slave_1: left promiscuous mode [ 87.436176][ T4591] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.485550][ T4591] bridge_slave_0: left allmulticast mode [ 87.485613][ T4591] bridge_slave_0: left promiscuous mode [ 87.485795][ T4591] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.551875][ T4594] netlink: 'syz.1.151': attribute type 63 has an invalid length. [ 87.591029][ T4594] lo: entered promiscuous mode [ 87.591137][ T4594] lo: entered allmulticast mode [ 87.681234][ T4601] netlink: 20 bytes leftover after parsing attributes in process `syz.6.158'. [ 87.789130][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.799523][ T4603] loop0: detected capacity change from 0 to 4096 [ 87.815466][ T4603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.830076][ T4611] mmap: syz.6.161 (4611) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.028712][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.038617][ T4620] netlink: 'syz.0.159': attribute type 63 has an invalid length. [ 88.038669][ T4620] lo: entered promiscuous mode [ 88.038687][ T4620] lo: entered allmulticast mode [ 88.089051][ T4619] FAULT_INJECTION: forcing a failure. [ 88.089051][ T4619] name failslab, interval 1, probability 0, space 0, times 0 [ 88.089144][ T4619] CPU: 0 UID: 0 PID: 4619 Comm: syz.3.164 Not tainted syzkaller #0 PREEMPT(lazy) [ 88.089250][ T4619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 88.089267][ T4619] Call Trace: [ 88.089276][ T4619] [ 88.089286][ T4619] __dump_stack+0x1d/0x30 [ 88.089318][ T4619] dump_stack_lvl+0x95/0xd0 [ 88.089348][ T4619] dump_stack+0x15/0x1b [ 88.089514][ T4619] should_fail_ex+0x262/0x280 [ 88.089542][ T4619] ? __alloc_skb+0x2e0/0x6f0 [ 88.089575][ T4619] should_failslab+0x8c/0xb0 [ 88.089641][ T4619] kmem_cache_alloc_node_noprof+0x82/0x400 [ 88.089746][ T4619] ? should_fail_ex+0xdb/0x280 [ 88.089874][ T4619] ? __alloc_skb+0x2e0/0x6f0 [ 88.089962][ T4619] __alloc_skb+0x2e0/0x6f0 [ 88.090048][ T4619] ? __alloc_skb+0x209/0x6f0 [ 88.090131][ T4619] audit_log_start+0x3aa/0x730 [ 88.090266][ T4619] audit_seccomp+0x49/0x110 [ 88.090433][ T4619] __seccomp_filter+0x909/0x1360 [ 88.090527][ T4619] ? __fget_files+0x184/0x1c0 [ 88.090589][ T4619] ? mutex_lock+0x57/0x90 [ 88.090633][ T4619] ? mutex_unlock+0x4e/0x90 [ 88.090788][ T4619] __seccomp_permit_syscall+0x7d/0x150 [ 88.090882][ T4619] do_syscall_64+0xca/0x360 [ 88.091063][ T4619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.091138][ T4619] RIP: 0033:0x7f8f5932e159 [ 88.091198][ T4619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.091268][ T4619] RSP: 002b:00007f8f57d87028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 88.091338][ T4619] RAX: ffffffffffffffda RBX: 00007f8f595b5fa0 RCX: 00007f8f5932e159 [ 88.091407][ T4619] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 88.091448][ T4619] RBP: 00007f8f57d87090 R08: 0000000000000000 R09: 0000000000000000 [ 88.091491][ T4619] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 88.091604][ T4619] R13: 00007f8f595b6038 R14: 00007f8f595b5fa0 R15: 00007ffed1fb7238 [ 88.091666][ T4619] [ 88.349017][ T4628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.349192][ T4628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.407623][ T4628] PM: suspend entry (deep) [ 88.901217][ T4642] loop6: detected capacity change from 0 to 512 [ 88.923922][ T3672] Filesystems sync: 0.516 seconds [ 88.929009][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.956115][ T4644] loop6: detected capacity change from 0 to 512 [ 88.994510][ T4642] netlink: 8 bytes leftover after parsing attributes in process `syz.6.173'. [ 89.011510][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 89.155560][ T4628] Freezing user space processes [ 89.236364][ T4628] Freezing user space processes completed (elapsed 0.080 seconds) [ 89.236416][ T4628] OOM killer disabled. [ 89.236520][ T4628] Freezing remaining freezable tasks [ 89.238726][ T4628] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 89.238838][ T4628] printk: Suspending console(s) (use no_console_suspend to debug) [ 89.322305][ T4628] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 89.322441][ T4628] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 89.322537][ T4628] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 89.322565][ T4628] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 89.322599][ T4628] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 89.322705][ T4628] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 89.322796][ T4628] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 89.322899][ T4628] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 89.322989][ T4628] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 89.323028][ T4628] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 89.323114][ T4628] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 89.323137][ T4628] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 89.323204][ T4628] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 89.323290][ T4628] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 89.323456][ T4628] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 89.323480][ T4628] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 89.360173][ T3572] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 90.062124][ T4628] ACPI: PM: Preparing to enter system sleep state S3 [ 90.062265][ T4628] ACPI: PM: Saving platform NVS memory [ 90.062312][ T4628] Disabling non-boot CPUs ... [ 90.066898][ T4628] smpboot: CPU 1 is now offline [ 90.074033][ T4628] ACPI: PM: Low-level resume complete [ 90.074094][ T4628] ACPI: PM: Restoring platform NVS memory [ 90.087175][ T4628] Enabling non-boot CPUs ... [ 90.087341][ T4628] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 90.091841][ T4628] CPU1 is up [ 90.092023][ T4628] ACPI: PM: Waking up from system sleep state S3 [ 90.115845][ T3697] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 90.255627][ T4628] OOM killer enabled. [ 90.255645][ T4628] Restarting tasks: Starting [ 90.261011][ T4628] Restarting tasks: Done [ 90.261064][ T4628] random: crng reseeded on system resumption [ 90.268815][ T4628] PM: suspend exit [ 90.316481][ T4662] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.422356][ T4672] netlink: 36 bytes leftover after parsing attributes in process `syz.0.175'. [ 90.456973][ T4671] set_capacity_and_notify: 1 callbacks suppressed [ 90.457007][ T4671] loop6: detected capacity change from 0 to 512 [ 90.495638][ T4678] netlink: 'syz.3.174': attribute type 63 has an invalid length. [ 90.517285][ T4671] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 90.517309][ T4671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 90.517428][ T4671] EXT4-fs (loop6): orphan cleanup on readonly fs [ 90.517813][ T4671] EXT4-fs error (device loop6): ext4_orphan_get:1403: inode #13: comm syz.6.177: iget: bad i_size value: 12154761577498 [ 90.517849][ T4671] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 90.518076][ T4671] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.177: couldn't read orphan inode 13 (err -117) [ 90.518190][ T4671] loop6: lost filesystem error report for type 5 error -117 [ 90.524926][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 90.524951][ C1] EXT4-fs (loop6): initial error at time 1788211779: ext4_orphan_get:1403: inode 13 [ 90.524995][ C1] EXT4-fs (loop6): last error at time 1788211779: ext4_orphan_get:1408 [ 90.527023][ T4671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 90.590097][ T4681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.590264][ T4681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.604855][ T4682] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.177: dx entry: limit 65535 != root limit 120 [ 90.604978][ T4682] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.177: Corrupt directory, running e2fsck is recommended [ 90.865903][ T4692] PM: suspend entry (deep) [ 90.956412][ T3671] Filesystems sync: 0.089 seconds [ 91.235712][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.242340][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.251621][ T4692] Freezing user space processes [ 91.256962][ T4692] Freezing user space processes completed (elapsed 0.005 seconds) [ 91.257012][ T4692] OOM killer disabled. [ 91.257022][ T4692] Freezing remaining freezable tasks [ 91.259551][ T4692] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 91.259829][ T4692] printk: Suspending console(s) (use no_console_suspend to debug) [ 91.306430][ T4692] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 91.306489][ T4692] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 91.306564][ T4692] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 91.306593][ T4692] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 91.306699][ T4692] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 91.316975][ T4692] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 91.317024][ T4692] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 91.317881][ T4692] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 91.317928][ T4692] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 91.318038][ T4692] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 91.318080][ T4692] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 91.318181][ T4692] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 91.318213][ T4692] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 91.318456][ T4692] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 91.318519][ T4692] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 91.318632][ T4692] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 91.387446][ T3608] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 92.026268][ T4692] ACPI: PM: Preparing to enter system sleep state S3 [ 92.026424][ T4692] ACPI: PM: Saving platform NVS memory [ 92.026476][ T4692] Disabling non-boot CPUs ... [ 92.031151][ T4692] smpboot: CPU 1 is now offline [ 92.036314][ T4692] ACPI: PM: Low-level resume complete [ 92.036402][ T4692] ACPI: PM: Restoring platform NVS memory [ 92.048429][ T4692] Enabling non-boot CPUs ... [ 92.048591][ T4692] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 92.053429][ T4692] CPU1 is up [ 92.053623][ T4692] ACPI: PM: Waking up from system sleep state S3 [ 92.089161][ T3671] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 92.260427][ T4692] OOM killer enabled. [ 92.260447][ T4692] Restarting tasks: Starting [ 92.276984][ T4692] Restarting tasks: Done [ 92.277042][ T4692] random: crng reseeded on system resumption [ 92.278940][ T4692] PM: suspend exit [ 92.285240][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 92.285263][ T29] audit: type=1400 audit(1788211781.300:469): avc: denied { name_bind } for pid=4699 comm="syz.5.180" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 92.361094][ T4703] loop6: detected capacity change from 0 to 164 [ 92.363314][ T4703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.365225][ T29] audit: type=1400 audit(1788211781.380:470): avc: denied { mount } for pid=4702 comm="syz.6.181" name="/" dev="loop6" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.370351][ T4703] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 92.372141][ T4703] Symlink component flag not implemented [ 92.372489][ T4703] Symlink component flag not implemented (7) [ 92.374918][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.6.181'. [ 92.446575][ T4707] loop5: detected capacity change from 0 to 512 [ 92.503069][ T4707] EXT4-fs (loop5): invalid journal inode [ 92.503177][ T4707] EXT4-fs (loop5): can't get journal size [ 92.512509][ T4707] EXT4-fs (loop5): 1 truncate cleaned up [ 92.513542][ T4707] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.517849][ T29] audit: type=1400 audit(1788211781.530:471): avc: denied { unmount } for pid=4314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 92.527486][ T29] audit: type=1400 audit(1788211781.540:472): avc: denied { write } for pid=4699 comm="syz.5.180" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 92.527528][ T29] audit: type=1400 audit(1788211781.540:473): avc: denied { read write } for pid=4699 comm="syz.5.180" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.527644][ T29] audit: type=1400 audit(1788211781.540:474): avc: denied { open } for pid=4699 comm="syz.5.180" path="/29/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 92.565707][ T29] audit: type=1400 audit(1788211781.580:475): avc: denied { read } for pid=4699 comm="syz.5.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.574493][ T4717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.574681][ T4717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.590101][ T4717] PM: suspend entry (deep) [ 92.598210][ T4719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.186'. [ 92.598249][ T4719] bridge_slave_1: left allmulticast mode [ 92.598305][ T4719] bridge_slave_1: left promiscuous mode [ 92.598887][ T4719] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.609011][ T4719] bridge_slave_0: left allmulticast mode [ 92.609050][ T4719] bridge_slave_0: left promiscuous mode [ 92.612365][ T4719] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.705065][ T29] audit: type=1400 audit(1788211781.720:476): avc: denied { write } for pid=4723 comm="syz.3.187" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 92.710483][ T3591] Filesystems sync: 0.119 seconds [ 93.263719][ T4717] Freezing user space processes [ 93.279439][ T4717] Freezing user space processes completed (elapsed 0.015 seconds) [ 93.279464][ T4717] OOM killer disabled. [ 93.279472][ T4717] Freezing remaining freezable tasks [ 93.281015][ T4717] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 93.281124][ T4717] printk: Suspending console(s) (use no_console_suspend to debug) [ 93.340502][ T4717] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 93.340936][ T4717] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 93.341077][ T4717] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 93.341125][ T4717] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 93.341173][ T4717] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 93.341231][ T4717] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 93.342855][ T4717] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 93.342895][ T4717] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 93.342957][ T4717] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 93.343003][ T4717] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 93.343043][ T4717] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 93.343124][ T4717] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 93.343150][ T4717] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 93.343197][ T4717] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 93.343306][ T4717] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 93.343332][ T4717] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 93.389809][ T3587] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 94.076655][ T4717] ACPI: PM: Preparing to enter system sleep state S3 [ 94.076851][ T4717] ACPI: PM: Saving platform NVS memory [ 94.076905][ T4717] Disabling non-boot CPUs ... [ 94.082041][ T4717] smpboot: CPU 1 is now offline [ 94.088103][ T4717] ACPI: PM: Low-level resume complete [ 94.088170][ T4717] ACPI: PM: Restoring platform NVS memory [ 94.100098][ T4717] Enabling non-boot CPUs ... [ 94.100231][ T4717] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 94.104573][ T4717] CPU1 is up [ 94.104733][ T4717] ACPI: PM: Waking up from system sleep state S3 [ 94.152055][ T3974] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 94.306251][ T4717] OOM killer enabled. [ 94.306285][ T4717] Restarting tasks: Starting [ 94.318720][ T4717] Restarting tasks: Done [ 94.318779][ T4717] random: crng reseeded on system resumption [ 94.322786][ T4717] PM: suspend exit [ 94.325225][ T4728] Cannot find del_set index 2 as target [ 94.338526][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.584277][ T4736] loop5: detected capacity change from 0 to 4096 [ 94.598263][ T4736] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.627842][ T29] audit: type=1400 audit(1788211783.642:477): avc: denied { write } for pid=4735 comm="syz.5.190" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 94.827755][ T4748] FAULT_INJECTION: forcing a failure. [ 94.827755][ T4748] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 94.827797][ T4748] CPU: 1 UID: 0 PID: 4748 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.827831][ T4748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.827848][ T4748] Call Trace: [ 94.827856][ T4748] [ 94.827866][ T4748] __dump_stack+0x1d/0x30 [ 94.827899][ T4748] dump_stack_lvl+0x95/0xd0 [ 94.827989][ T4748] dump_stack+0x15/0x1b [ 94.828017][ T4748] should_fail_ex+0x262/0x280 [ 94.828109][ T4748] should_fail+0xb/0x20 [ 94.828133][ T4748] should_fail_usercopy+0x1a/0x20 [ 94.828163][ T4748] _copy_to_user+0x20/0xa0 [ 94.828198][ T4748] simple_read_from_buffer+0xb5/0x130 [ 94.828269][ T4748] proc_fail_nth_read+0x10e/0x150 [ 94.828342][ T4748] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 94.828386][ T4748] vfs_read+0x18e/0x7c0 [ 94.828422][ T4748] ? __rcu_read_unlock+0x4e/0x70 [ 94.828464][ T4748] ? __fget_files+0x184/0x1c0 [ 94.828562][ T4748] ? mutex_lock+0x57/0x90 [ 94.828591][ T4748] ksys_read+0xdc/0x1a0 [ 94.828626][ T4748] __x64_sys_read+0x40/0x50 [ 94.828661][ T4748] x64_sys_call+0x2135/0x2550 [ 94.828728][ T4748] do_syscall_64+0x112/0x360 [ 94.828766][ T4748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.828819][ T4748] RIP: 0033:0x7f8f592ee98e [ 94.828840][ T4748] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 94.828908][ T4748] RSP: 002b:00007f8f57d65fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 94.828934][ T4748] RAX: ffffffffffffffda RBX: 00007f8f57d666c0 RCX: 00007f8f592ee98e [ 94.828959][ T4748] RDX: 000000000000000f RSI: 00007f8f57d660a0 RDI: 0000000000000006 [ 94.828976][ T4748] RBP: 00007f8f57d66090 R08: 0000000000000000 R09: 0000000000000000 [ 94.828994][ T4748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.829008][ T4748] R13: 00007f8f595b6128 R14: 00007f8f595b6090 R15: 00007ffed1fb7238 [ 94.829100][ T4748] [ 94.903751][ T29] audit: type=1400 audit(1788211783.842:478): avc: denied { write } for pid=4741 comm="syz.1.192" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 94.995509][ T4750] netlink: 'syz.5.190': attribute type 63 has an invalid length. [ 95.181172][ T4765] loop6: detected capacity change from 0 to 512 [ 95.410909][ T4774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4774 comm=syz.6.195 [ 95.527767][ T4775] Cannot find del_set index 2 as target [ 95.960201][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.062042][ T4779] loop5: detected capacity change from 0 to 764 [ 96.151139][ T4788] loop6: detected capacity change from 0 to 512 [ 96.163970][ T4788] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.356008][ T4788] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.201: bad orphan inode 131083 [ 96.356131][ T4788] loop6: lost filesystem error report for type 5 error -117 [ 96.357027][ T4788] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.434318][ T4785] EXT4-fs error (device loop6): ext4_find_dest_de:2052: inode #2: block 13: comm syz.6.201: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 96.996598][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.110770][ T4816] FAULT_INJECTION: forcing a failure. [ 97.110770][ T4816] name failslab, interval 1, probability 0, space 0, times 0 [ 97.110814][ T4816] CPU: 1 UID: 0 PID: 4816 Comm: syz.1.207 Not tainted syzkaller #0 PREEMPT(lazy) [ 97.110846][ T4816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.110862][ T4816] Call Trace: [ 97.110870][ T4816] [ 97.110879][ T4816] __dump_stack+0x1d/0x30 [ 97.110925][ T4816] dump_stack_lvl+0x95/0xd0 [ 97.110956][ T4816] dump_stack+0x15/0x1b [ 97.111055][ T4816] should_fail_ex+0x262/0x280 [ 97.111083][ T4816] ? __alloc_skb+0x2e0/0x6f0 [ 97.111118][ T4816] should_failslab+0x8c/0xb0 [ 97.111156][ T4816] kmem_cache_alloc_node_noprof+0x82/0x400 [ 97.111228][ T4816] ? netlink_insert+0x684/0x900 [ 97.111258][ T4816] ? __alloc_skb+0x2e0/0x6f0 [ 97.111294][ T4816] __alloc_skb+0x2e0/0x6f0 [ 97.111363][ T4816] ? __alloc_skb+0x209/0x6f0 [ 97.111394][ T4816] netlink_alloc_large_skb+0xbf/0xf0 [ 97.111424][ T4816] netlink_sendmsg+0x40c/0x6f0 [ 97.111521][ T4816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.111557][ T4816] ____sys_sendmsg+0x532/0x580 [ 97.111603][ T4816] ___sys_sendmsg+0x195/0x1e0 [ 97.111697][ T4816] __x64_sys_sendmsg+0xd4/0x160 [ 97.111743][ T4816] x64_sys_call+0x22ab/0x2550 [ 97.111847][ T4816] do_syscall_64+0x112/0x360 [ 97.111929][ T4816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.111959][ T4816] RIP: 0033:0x7fa436b6e159 [ 97.111980][ T4816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.111999][ T4816] RSP: 002b:00007fa4355c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.112043][ T4816] RAX: ffffffffffffffda RBX: 00007fa436df5fa0 RCX: 00007fa436b6e159 [ 97.112063][ T4816] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 97.112079][ T4816] RBP: 00007fa4355c7090 R08: 0000000000000000 R09: 0000000000000000 [ 97.112097][ T4816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.112169][ T4816] R13: 00007fa436df6038 R14: 00007fa436df5fa0 R15: 00007fffb07d37c8 [ 97.112225][ T4816] [ 97.224684][ T4824] Cannot find del_set index 2 as target [ 97.376788][ T4824] loop3: detected capacity change from 0 to 1024 [ 97.499587][ T4827] Cannot find del_set index 2 as target [ 98.776466][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 98.776495][ T29] audit: type=1400 audit(1788211787.792:492): avc: denied { allowed } for pid=4829 comm="syz.5.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.781042][ T29] audit: type=1400 audit(1788211787.792:493): avc: denied { sqpoll } for pid=4829 comm="syz.5.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 98.786249][ T29] audit: type=1400 audit(1788211787.802:494): avc: denied { mount } for pid=4829 comm="syz.5.212" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 98.790907][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.790995][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.815280][ T4830] PM: suspend entry (deep) [ 98.830252][ T29] audit: type=1400 audit(1788211787.842:495): avc: denied { write } for pid=4804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.858230][ T29] audit: type=1400 audit(1788211787.872:496): avc: denied { write } for pid=4838 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.955864][ T29] audit: type=1400 audit(1788211787.972:497): avc: denied { write } for pid=4841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.981434][ T29] audit: type=1400 audit(1788211787.992:498): avc: denied { write } for pid=4852 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.081298][ T29] audit: type=1400 audit(1788211788.092:499): avc: denied { write } for pid=4855 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.108448][ T29] audit: type=1400 audit(1788211788.122:500): avc: denied { write } for pid=4866 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.209133][ T29] audit: type=1400 audit(1788211788.222:501): avc: denied { write } for pid=4869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.265229][ T4824] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.271020][ T4824] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.210: missing EA_INODE flag [ 99.273462][ T4824] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.210: error while reading EA inode 11 err=-117 [ 99.325725][ T3716] Filesystems sync: 0.510 seconds [ 99.758329][ T4830] Freezing user space processes [ 99.773565][ T4830] Freezing user space processes completed (elapsed 0.015 seconds) [ 99.773595][ T4830] OOM killer disabled. [ 99.773604][ T4830] Freezing remaining freezable tasks [ 99.775290][ T4830] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 99.775480][ T4830] printk: Suspending console(s) (use no_console_suspend to debug) [ 99.833783][ T4830] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 99.834639][ T4830] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 99.834679][ T4830] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 99.834736][ T4830] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 99.835001][ T4830] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 99.835817][ T4830] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 99.835894][ T4830] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 99.835973][ T4830] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 99.836051][ T4830] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 99.836106][ T4830] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 99.836540][ T4830] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 99.836588][ T4830] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 99.836696][ T4830] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 99.836725][ T4830] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 99.836754][ T4830] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 99.837006][ T4830] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 99.893400][ T3712] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 100.531179][ T4830] ACPI: PM: Preparing to enter system sleep state S3 [ 100.531356][ T4830] ACPI: PM: Saving platform NVS memory [ 100.531408][ T4830] Disabling non-boot CPUs ... [ 100.536233][ T4830] smpboot: CPU 1 is now offline [ 100.544028][ T4830] ACPI: PM: Low-level resume complete [ 100.544097][ T4830] ACPI: PM: Restoring platform NVS memory [ 100.556742][ T4830] Enabling non-boot CPUs ... [ 100.556895][ T4830] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 100.566621][ T4830] CPU1 is up [ 100.566808][ T4830] ACPI: PM: Waking up from system sleep state S3 [ 100.624773][ T3552] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 100.778999][ T4830] OOM killer enabled. [ 100.779014][ T4830] Restarting tasks: Starting [ 100.784787][ T4830] Restarting tasks: Done [ 100.784835][ T4830] random: crng reseeded on system resumption [ 100.795722][ T4830] PM: suspend exit [ 100.815589][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.962015][ T4902] capability: warning: `syz.6.219' uses deprecated v2 capabilities in a way that may be insecure [ 100.964248][ T4902] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=20 sclass=netlink_audit_socket pid=4902 comm=syz.6.219 [ 101.038876][ T4905] loop6: detected capacity change from 0 to 1024 [ 101.039562][ T4905] EXT4-fs: Ignoring removed nobh option [ 101.045947][ T4905] EXT4-fs: quotafile must be on filesystem root [ 101.133604][ T4910] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 101.133804][ T4910] SELinux: failed to load policy [ 101.175997][ T4912] loop0: detected capacity change from 0 to 4096 [ 101.185441][ T4912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.368850][ T4920] loop1: detected capacity change from 0 to 512 [ 101.401815][ T4921] netlink: 'syz.0.223': attribute type 63 has an invalid length. [ 101.445021][ T4923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'. [ 101.547594][ T4923] batadv_slave_1: entered promiscuous mode [ 101.566292][ T4923] batadv_slave_1: left promiscuous mode [ 102.231475][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.274901][ T4937] usb usb5: usbfs: interface 0 claimed by hub while 'syz.0.230' sets config #1 [ 102.329922][ T4939] FAULT_INJECTION: forcing a failure. [ 102.329922][ T4939] name failslab, interval 1, probability 0, space 0, times 0 [ 102.330027][ T4939] CPU: 0 UID: 0 PID: 4939 Comm: syz.1.231 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.330056][ T4939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.330072][ T4939] Call Trace: [ 102.330080][ T4939] [ 102.330089][ T4939] __dump_stack+0x1d/0x30 [ 102.330269][ T4939] dump_stack_lvl+0x95/0xd0 [ 102.330466][ T4939] dump_stack+0x15/0x1b [ 102.330561][ T4939] should_fail_ex+0x262/0x280 [ 102.330684][ T4939] ? skb_clone+0x151/0x1f0 [ 102.330803][ T4939] should_failslab+0x8c/0xb0 [ 102.330914][ T4939] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 102.331012][ T4939] ? skb_clone+0x151/0x1f0 [ 102.331163][ T4939] skb_clone+0x151/0x1f0 [ 102.331277][ T4939] __netlink_deliver_tap+0x2be/0x510 [ 102.331385][ T4939] netlink_unicast+0x656/0x680 [ 102.331441][ T4939] netlink_sendmsg+0x5be/0x6f0 [ 102.331555][ T4939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.331691][ T4939] ____sys_sendmsg+0x532/0x580 [ 102.331820][ T4939] ___sys_sendmsg+0x195/0x1e0 [ 102.332023][ T4939] __x64_sys_sendmsg+0xd4/0x160 [ 102.332113][ T4939] x64_sys_call+0x22ab/0x2550 [ 102.332153][ T4939] do_syscall_64+0x112/0x360 [ 102.332312][ T4939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.332402][ T4939] RIP: 0033:0x7fa436b6e159 [ 102.332463][ T4939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.332553][ T4939] RSP: 002b:00007fa4355c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.332623][ T4939] RAX: ffffffffffffffda RBX: 00007fa436df5fa0 RCX: 00007fa436b6e159 [ 102.332687][ T4939] RDX: 0000000020008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.332786][ T4939] RBP: 00007fa4355c7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.332834][ T4939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.332886][ T4939] R13: 00007fa436df6038 R14: 00007fa436df5fa0 R15: 00007fffb07d37c8 [ 102.332954][ T4939] [ 102.464008][ T4950] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 102.576281][ T4959] FAULT_INJECTION: forcing a failure. [ 102.576281][ T4959] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 102.576315][ T4959] CPU: 1 UID: 0 PID: 4959 Comm: syz.0.238 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.576358][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.576375][ T4959] Call Trace: [ 102.576382][ T4959] [ 102.576389][ T4959] __dump_stack+0x1d/0x30 [ 102.576414][ T4959] dump_stack_lvl+0x95/0xd0 [ 102.576498][ T4959] dump_stack+0x15/0x1b [ 102.576527][ T4959] should_fail_ex+0x262/0x280 [ 102.576554][ T4959] should_fail_alloc_page+0xf2/0x100 [ 102.576672][ T4959] __alloc_frozen_pages_noprof+0x157/0x400 [ 102.576737][ T4959] alloc_pages_mpol+0xaf/0x1d0 [ 102.576850][ T4959] alloc_pages_noprof+0x94/0x140 [ 102.576876][ T4959] pte_alloc_one+0x1c/0xc0 [ 102.576921][ T4959] __pte_alloc+0x32/0x2a0 [ 102.576958][ T4959] handle_mm_fault+0x3083/0x3bb0 [ 102.576993][ T4959] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 102.577029][ T4959] do_user_addr_fault+0x404/0x1060 [ 102.577117][ T4959] exc_page_fault+0x62/0xa0 [ 102.577147][ T4959] asm_exc_page_fault+0x26/0x30 [ 102.577175][ T4959] RIP: 0010:rep_movs_alternative+0xf/0xa0 [ 102.577302][ T4959] Code: c4 10 e9 04 23 02 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 22 02 00 66 2e [ 102.577326][ T4959] RSP: 0018:ffffc9000154fd38 EFLAGS: 00050202 [ 102.577348][ T4959] RAX: ffff8881048d72c0 RBX: 0000000000000004 RCX: 0000000000000004 [ 102.577365][ T4959] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffc9000154fd8c [ 102.577382][ T4959] RBP: ffffc9000154fde8 R08: 0000000000000685 R09: 0000000000000000 [ 102.577468][ T4959] R10: 0001c9000154fd8c R11: 0001c9000154fd8f R12: 0000000000000016 [ 102.577486][ T4959] R13: 0000000000000000 R14: ffffc9000154fd8c R15: 0000200000000000 [ 102.577511][ T4959] _copy_from_user+0x6f/0xb0 [ 102.577542][ T4959] do_tcp_setsockopt+0x440/0x16c0 [ 102.577647][ T4959] ? selinux_socket_setsockopt+0x1ea/0x220 [ 102.577704][ T4959] tcp_setsockopt+0x51/0xb0 [ 102.577730][ T4959] sock_common_setsockopt+0x69/0x80 [ 102.577769][ T4959] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 102.577849][ T4959] __sys_setsockopt+0x184/0x200 [ 102.577890][ T4959] __x64_sys_setsockopt+0x64/0x80 [ 102.577998][ T4959] x64_sys_call+0x248f/0x2550 [ 102.578033][ T4959] do_syscall_64+0x112/0x360 [ 102.578126][ T4959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.578236][ T4959] RIP: 0033:0x7f5ed488e159 [ 102.578256][ T4959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.578276][ T4959] RSP: 002b:00007f5ed32e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 102.578300][ T4959] RAX: ffffffffffffffda RBX: 00007f5ed4b15fa0 RCX: 00007f5ed488e159 [ 102.578368][ T4959] RDX: 0000000000000016 RSI: 0000000000000006 RDI: 0000000000000003 [ 102.578382][ T4959] RBP: 00007f5ed32e7090 R08: 0000000020000328 R09: 0000000000000000 [ 102.578397][ T4959] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.578410][ T4959] R13: 00007f5ed4b16038 R14: 00007f5ed4b15fa0 R15: 00007ffca57ba348 [ 102.578435][ T4959] [ 102.882477][ T4977] FAULT_INJECTION: forcing a failure. [ 102.882477][ T4977] name failslab, interval 1, probability 0, space 0, times 0 [ 102.882514][ T4977] CPU: 0 UID: 0 PID: 4977 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT(lazy) [ 102.882588][ T4977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 102.882600][ T4977] Call Trace: [ 102.882703][ T4977] [ 102.882740][ T4977] __dump_stack+0x1d/0x30 [ 102.882769][ T4977] dump_stack_lvl+0x95/0xd0 [ 102.882795][ T4977] dump_stack+0x15/0x1b [ 102.882812][ T4977] should_fail_ex+0x262/0x280 [ 102.882876][ T4977] ? ip_fib_metrics_init+0x62/0x470 [ 102.882898][ T4977] should_failslab+0x8c/0xb0 [ 102.882923][ T4977] __kmalloc_cache_noprof+0x7a/0x400 [ 102.883014][ T4977] ? ip_fib_metrics_init+0x62/0x470 [ 102.883054][ T4977] ip_fib_metrics_init+0x62/0x470 [ 102.883140][ T4977] ? fib_create_info+0xb84/0x18e0 [ 102.883349][ T4977] fib_create_info+0xbc7/0x18e0 [ 102.883423][ T4977] fib_table_insert+0x61/0xee0 [ 102.883506][ T4977] ? fib_trie_table+0xb3/0xf0 [ 102.883623][ T4977] ? _raw_spin_lock+0x53/0xa0 [ 102.883779][ T4977] ? _raw_spin_unlock+0x9/0x30 [ 102.883965][ T4977] inet_rtm_newroute+0xb5/0x160 [ 102.884142][ T4977] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 102.884272][ T4977] rtnetlink_rcv_msg+0x64b/0x720 [ 102.884360][ T4977] netlink_rcv_skb+0x11e/0x220 [ 102.884430][ T4977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.884580][ T4977] rtnetlink_rcv+0x1c/0x30 [ 102.884638][ T4977] netlink_unicast+0x5a9/0x680 [ 102.884719][ T4977] netlink_sendmsg+0x5be/0x6f0 [ 102.884836][ T4977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.884974][ T4977] ____sys_sendmsg+0x532/0x580 [ 102.885005][ T4977] ___sys_sendmsg+0x195/0x1e0 [ 102.885109][ T4977] __x64_sys_sendmsg+0xd4/0x160 [ 102.885165][ T4977] x64_sys_call+0x22ab/0x2550 [ 102.885267][ T4977] do_syscall_64+0x112/0x360 [ 102.885366][ T4977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.885442][ T4977] RIP: 0033:0x7fa436b6e159 [ 102.885487][ T4977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.885731][ T4977] RSP: 002b:00007fa4355c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.885813][ T4977] RAX: ffffffffffffffda RBX: 00007fa436df5fa0 RCX: 00007fa436b6e159 [ 102.885859][ T4977] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 102.885897][ T4977] RBP: 00007fa4355c7090 R08: 0000000000000000 R09: 0000000000000000 [ 102.886013][ T4977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.886049][ T4977] R13: 00007fa436df6038 R14: 00007fa436df5fa0 R15: 00007fffb07d37c8 [ 102.886154][ T4977] [ 102.930002][ T4978] loop6: detected capacity change from 0 to 512 [ 103.855355][ T5002] loop3: detected capacity change from 0 to 1024 [ 103.856885][ T5002] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.856973][ T5002] EXT4-fs: Ignoring removed oldalloc option [ 104.221691][ T5002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 104.221808][ T5002] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.364913][ T5012] loop5: detected capacity change from 0 to 512 [ 104.368712][ T5012] EXT4-fs: Invalid want_extra_isize 1969 [ 104.420715][ T5016] ip_tables: iptables: counters copy to user failed while replacing table [ 104.438193][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 104.438220][ T29] audit: type=1400 audit(1788211793.439:595): avc: denied { mounton } for pid=5015 comm="syz.6.253" path="/proc/90/cgroup" dev="proc" ino=9588 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 104.438257][ T29] audit: type=1400 audit(1788211793.439:596): avc: denied { remount } for pid=5015 comm="syz.6.253" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 104.438293][ T29] audit: type=1400 audit(1788211793.439:597): avc: denied { read write } for pid=5015 comm="syz.6.253" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 104.438407][ T29] audit: type=1400 audit(1788211793.439:598): avc: denied { open } for pid=5015 comm="syz.6.253" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 104.438968][ T5010] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 104.590906][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 104.824585][ T5039] loop5: detected capacity change from 0 to 512 [ 104.844387][ T5038] loop3: detected capacity change from 0 to 512 [ 104.866990][ T5039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 104.884447][ T5038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.902478][ T5039] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.257: bad orphan inode 131083 [ 104.902513][ T5039] loop5: lost filesystem error report for type 5 error -117 [ 104.902607][ T5038] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.256: bad orphan inode 131083 [ 104.902634][ T5038] loop3: lost filesystem error report for type 5 error -117 [ 104.903238][ T5038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.903960][ T5039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.917193][ T29] audit: type=1400 audit(1788211793.929:599): avc: denied { write } for pid=5025 comm="syz.5.257" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.927698][ T5030] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.257: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 105.082716][ T5029] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 13: comm syz.3.256: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 105.083568][ T29] audit: type=1400 audit(1788211794.099:600): avc: denied { write } for pid=5028 comm="syz.3.256" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.175761][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.188020][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.251171][ T29] audit: type=1400 audit(1788211794.269:601): avc: denied { write } for pid=5047 comm="syz.1.261" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 105.336812][ T5050] loop3: detected capacity change from 0 to 4096 [ 105.348072][ T5058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.263'. [ 105.365553][ T5050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.378284][ T29] audit: type=1400 audit(1788211794.389:602): avc: denied { write } for pid=5049 comm="syz.3.262" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.563674][ T5067] netlink: 'syz.3.262': attribute type 63 has an invalid length. [ 105.592322][ T5069] loop6: detected capacity change from 0 to 1024 [ 105.593704][ T5069] EXT4-fs: Ignoring removed mblk_io_submit option [ 105.593779][ T5069] EXT4-fs: Ignoring removed oldalloc option [ 105.637297][ T5069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 105.637451][ T5069] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.672319][ T29] audit: type=1400 audit(1788211794.689:603): avc: denied { setattr } for pid=5068 comm="syz.6.265" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.821446][ T29] audit: type=1400 audit(1788211794.839:604): avc: denied { write } for pid=5068 comm="syz.6.265" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 105.855290][ T5073] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.265: bg 0: block 112: padding at end of block bitmap is not set [ 105.857613][ T5073] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 105.857724][ T5073] EXT4-fs (loop6): This should not happen!! Data will be lost [ 105.857724][ T5073] [ 105.857769][ T5073] EXT4-fs (loop6): Total free blocks count 0 [ 105.857810][ T5073] EXT4-fs (loop6): Free/Dirty block details [ 105.857843][ T5073] EXT4-fs (loop6): free_blocks=0 [ 105.857884][ T5073] EXT4-fs (loop6): dirty_blocks=64 [ 105.857924][ T5073] EXT4-fs (loop6): Block reservation details [ 105.857957][ T5073] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 106.034032][ T5095] loop1: detected capacity change from 0 to 512 [ 106.118242][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.171952][ T5097] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 106.190854][ T5097] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.272: bad orphan inode 131083 [ 106.190887][ T5097] loop5: lost filesystem error report for type 5 error -117 [ 106.201419][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 106.201439][ C1] EXT4-fs (loop5): initial error at time 1788211795: ext4_orphan_get:1429 [ 106.201463][ C1] EXT4-fs (loop5): last error at time 1788211795: ext4_orphan_get:1429 [ 106.238375][ T5097] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.313269][ T5102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.274'. [ 106.332879][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 106.479037][ T5102] geneve2: entered promiscuous mode [ 106.776086][ T5093] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.272: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 106.821032][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 106.843485][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.013634][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.1.278'. [ 107.224252][ T5126] Unsupported ieee802154 address type: 0 [ 107.481317][ T5133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.481474][ T5133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.521465][ T5133] PM: suspend entry (deep) [ 107.556970][ T5089] set_capacity_and_notify: 1 callbacks suppressed [ 107.557113][ T5089] loop0: detected capacity change from 0 to 512 [ 107.595744][ T5139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.595867][ T5139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.657084][ T5139] PM: suspend entry (deep) [ 107.657104][ T5139] PM: suspend exit [ 107.663802][ T3635] Filesystems sync: 0.135 seconds [ 107.709055][ T5133] Freezing user space processes [ 107.755032][ T5133] Freezing user space processes completed (elapsed 0.045 seconds) [ 107.755108][ T5133] OOM killer disabled. [ 107.755116][ T5133] Freezing remaining freezable tasks [ 107.757374][ T5133] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 107.757565][ T5133] printk: Suspending console(s) (use no_console_suspend to debug) [ 107.829183][ T5133] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 107.829229][ T5133] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 107.829306][ T5133] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 107.829612][ T5133] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 107.840511][ T5133] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 107.840559][ T5133] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 107.840692][ T5133] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 107.840762][ T5133] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 107.842608][ T5133] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 107.842706][ T5133] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 107.842855][ T5133] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 107.843098][ T5133] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 107.843771][ T5133] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 107.843894][ T5133] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 107.843923][ T5133] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 107.843955][ T5133] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 107.878829][ T3586] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 108.572528][ T5133] ACPI: PM: Preparing to enter system sleep state S3 [ 108.572885][ T5133] ACPI: PM: Saving platform NVS memory [ 108.572932][ T5133] Disabling non-boot CPUs ... [ 108.577752][ T5133] smpboot: CPU 1 is now offline [ 108.589361][ T5133] ACPI: PM: Low-level resume complete [ 108.589469][ T5133] ACPI: PM: Restoring platform NVS memory [ 108.601393][ T5133] Enabling non-boot CPUs ... [ 108.601553][ T5133] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 108.607671][ T5133] CPU1 is up [ 108.607860][ T5133] ACPI: PM: Waking up from system sleep state S3 [ 108.641014][ T3696] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 108.773052][ T5133] OOM killer enabled. [ 108.773072][ T5133] Restarting tasks: Starting [ 109.012761][ T5133] Restarting tasks: Done [ 109.012893][ T5133] random: crng reseeded on system resumption [ 109.069979][ T5133] PM: suspend exit [ 109.081912][ T5154] loop3: detected capacity change from 0 to 512 [ 109.274003][ T5166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.274191][ T5166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.288578][ T5164] Cannot find del_set index 2 as target [ 109.294691][ T5164] loop1: detected capacity change from 0 to 1024 [ 109.308194][ T5164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.311429][ T5166] PM: suspend entry (deep) [ 109.311611][ T5164] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.287: missing EA_INODE flag [ 109.315440][ T5164] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.287: error while reading EA inode 11 err=-117 [ 109.419995][ T3674] Filesystems sync: 0.108 seconds [ 109.427814][ T5176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.427941][ T5176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.451086][ T5176] PM: suspend entry (deep) [ 109.451108][ T5176] PM: suspend exit [ 109.477174][ T5166] Freezing user space processes [ 109.638303][ T5166] Freezing user space processes completed (elapsed 0.161 seconds) [ 109.638361][ T5166] OOM killer disabled. [ 109.638371][ T5166] Freezing remaining freezable tasks [ 109.641180][ T5166] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 109.641487][ T5166] printk: Suspending console(s) (use no_console_suspend to debug) [ 109.693162][ T5166] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 109.694453][ T5166] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 109.694499][ T5166] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 109.704778][ T5166] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 109.704891][ T5166] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 109.704920][ T5166] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 109.705013][ T5166] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 109.705149][ T5166] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 109.705178][ T5166] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 109.705260][ T5166] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 109.705292][ T5166] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 109.705321][ T5166] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 109.705405][ T5166] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 109.705447][ T5166] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 109.705490][ T5166] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 109.705572][ T5166] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 109.742887][ T3669] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 110.416075][ T5166] ACPI: PM: Preparing to enter system sleep state S3 [ 110.416228][ T5166] ACPI: PM: Saving platform NVS memory [ 110.416307][ T5166] Disabling non-boot CPUs ... [ 110.421003][ T5166] smpboot: CPU 1 is now offline [ 110.428503][ T5166] ACPI: PM: Low-level resume complete [ 110.428570][ T5166] ACPI: PM: Restoring platform NVS memory [ 110.441796][ T5166] Enabling non-boot CPUs ... [ 110.441904][ T5166] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 110.446443][ T5166] CPU1 is up [ 110.447385][ T5166] ACPI: PM: Waking up from system sleep state S3 [ 110.473186][ T31] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 110.618369][ T5166] OOM killer enabled. [ 110.618387][ T5166] Restarting tasks: Starting [ 110.640170][ T5166] Restarting tasks: Done [ 110.640235][ T5166] random: crng reseeded on system resumption [ 110.643082][ T5166] PM: suspend exit [ 110.737986][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 110.738022][ T29] audit: type=1400 audit(1788212055.744:610): avc: denied { mount } for pid=5184 comm="syz.5.292" name="/" dev="hugetlbfs" ino=9042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 110.872646][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.994465][ T5193] loop1: detected capacity change from 0 to 4096 [ 111.080321][ T5196] loop5: detected capacity change from 0 to 128 [ 111.133739][ T5193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.154069][ T29] audit: type=1400 audit(1788212056.164:611): avc: denied { write } for pid=5192 comm="syz.1.294" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.395422][ T5199] netlink: 'syz.1.294': attribute type 63 has an invalid length. [ 111.483811][ T5202] loop3: detected capacity change from 0 to 4096 [ 111.501612][ T5202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.507326][ T29] audit: type=1400 audit(1788212056.514:612): avc: denied { write } for pid=5200 comm="syz.3.295" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.696190][ T29] audit: type=1400 audit(1788212056.704:613): avc: denied { watch } for pid=5211 comm="syz.5.299" path="/53" dev="tmpfs" ino=310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 111.701855][ T5215] loop6: detected capacity change from 0 to 512 [ 111.708807][ T5212] process 'syz.5.299' launched './file1' with NULL argv: empty string added [ 111.710294][ T29] audit: type=1400 audit(1788212056.724:614): avc: denied { execute } for pid=5211 comm="syz.5.299" name="file1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.716412][ T29] audit: type=1400 audit(1788212056.724:615): avc: denied { execute_no_trans } for pid=5211 comm="syz.5.299" path="/53/file1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 112.725330][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.731595][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.824752][ T5234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 112.824811][ T5234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 112.830922][ T5233] loop6: detected capacity change from 0 to 1024 [ 112.862341][ T5237] loop1: detected capacity change from 0 to 512 [ 112.962607][ T29] audit: type=1400 audit(1788212057.914:616): avc: denied { getopt } for pid=5229 comm="syz.0.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.999524][ T5233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.012400][ T5233] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.304: missing EA_INODE flag [ 113.014410][ T29] audit: type=1400 audit(1788212058.024:617): avc: denied { write } for pid=5232 comm="syz.6.304" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.020112][ T5245] Cannot find del_set index 2 as target [ 113.030853][ T5245] loop5: detected capacity change from 0 to 1024 [ 113.035095][ T5233] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.304: error while reading EA inode 11 err=-117 [ 113.038346][ T5237] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.038515][ T5237] ext4 filesystem being mounted at /62/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 113.063734][ T5245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.076036][ T5245] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.305: missing EA_INODE flag [ 113.076088][ T29] audit: type=1400 audit(1788212058.084:618): avc: denied { write } for pid=5244 comm="syz.5.305" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.083252][ T5245] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.305: error while reading EA inode 11 err=-117 [ 113.119689][ T5249] loop3: detected capacity change from 0 to 128 [ 113.407047][ T5253] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 18: comm syz.1.301: lblock 23 mapped to illegal pblock 18 (length 1) [ 113.427357][ T5249] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.432808][ T5249] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.572207][ T29] audit: type=1400 audit(1788212058.584:619): avc: denied { setopt } for pid=5246 comm="syz.3.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 113.580741][ T5253] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 3: comm syz.1.301: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 113.912788][ T5253] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 12: comm syz.1.301: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 113.916686][ T5253] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 13: comm syz.1.301: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 113.920560][ T5253] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 16: comm syz.1.301: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653245223, rec_len=65536, size=2048 fake=0 [ 113.928336][ T5253] EXT4-fs error (device loop1): ext4_map_blocks:790: inode #2: block 18: comm syz.1.301: lblock 23 mapped to illegal pblock 18 (length 1) [ 114.080418][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.147665][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.164165][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.364706][ T5304] loop6: detected capacity change from 0 to 128 [ 114.388084][ T5304] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.392655][ T5304] ext4 filesystem being mounted at /37/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.593878][ T4314] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.641891][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.731492][ T5327] loop3: detected capacity change from 0 to 512 [ 115.037276][ T5367] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 115.509274][ T5373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.318'. [ 115.611568][ T5382] loop3: detected capacity change from 0 to 1024 [ 115.630162][ T5382] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.637673][ T5384] netlink: 8 bytes leftover after parsing attributes in process `syz.5.321'. [ 115.638184][ T5382] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.320: missing EA_INODE flag [ 115.638935][ T5382] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.320: error while reading EA inode 11 err=-117 [ 115.661523][ T5384] dns_resolver: Unsupported server list version (0) [ 116.071859][ T5392] loop1: detected capacity change from 0 to 1764 [ 116.078284][ T5392] iso9660: Unknown parameter '' [ 116.212968][ T5395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.213087][ T5395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.222219][ T5395] PM: suspend entry (deep) [ 116.253524][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 116.253549][ T29] audit: type=1400 audit(1788212061.264:633): avc: denied { bind } for pid=5400 comm="syz.5.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 116.262188][ T5401] loop5: detected capacity change from 0 to 1024 [ 116.271290][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.285766][ T5401] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 116.285848][ T5401] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.297040][ T3592] Filesystems sync: 0.074 seconds [ 116.305033][ T29] audit: type=1400 audit(1788212061.314:634): avc: denied { write } for pid=5400 comm="syz.5.324" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.305061][ T5401] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.324: bg 0: block 112: padding at end of block bitmap is not set [ 116.313286][ T5401] EXT4-fs (loop5): Remounting filesystem read-only [ 116.328679][ T5395] Freezing user space processes [ 116.331168][ T5395] Freezing user space processes completed (elapsed 0.002 seconds) [ 116.331205][ T5395] OOM killer disabled. [ 116.331212][ T5395] Freezing remaining freezable tasks [ 116.335702][ T5395] Freezing remaining freezable tasks completed (elapsed 0.004 seconds) [ 116.335786][ T5395] printk: Suspending console(s) (use no_console_suspend to debug) [ 116.390628][ T5395] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 116.390749][ T5395] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 116.390777][ T5395] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 116.390879][ T5395] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 116.390907][ T5395] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 116.391014][ T5395] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 116.391041][ T5395] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 116.391073][ T5395] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 116.391293][ T5395] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 116.391363][ T5395] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 116.391427][ T5395] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 116.391455][ T5395] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 116.391491][ T5395] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 116.391519][ T5395] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 116.391609][ T5395] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 116.391637][ T5395] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 116.437303][ T3618] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 117.117729][ T5395] ACPI: PM: Preparing to enter system sleep state S3 [ 117.117915][ T5395] ACPI: PM: Saving platform NVS memory [ 117.117965][ T5395] Disabling non-boot CPUs ... [ 117.122525][ T5395] smpboot: CPU 1 is now offline [ 117.129842][ T5395] ACPI: PM: Low-level resume complete [ 117.129961][ T5395] ACPI: PM: Restoring platform NVS memory [ 117.142638][ T5395] Enabling non-boot CPUs ... [ 117.142814][ T5395] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 117.146934][ T5395] CPU1 is up [ 117.147116][ T5395] ACPI: PM: Waking up from system sleep state S3 [ 117.181065][ T3679] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 117.352617][ T5395] OOM killer enabled. [ 117.352635][ T5395] Restarting tasks: Starting [ 117.365697][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 117.365745][ T5410] bridge_slave_1: left allmulticast mode [ 117.365770][ T5410] bridge_slave_1: left promiscuous mode [ 117.365941][ T5410] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.372481][ T5395] Restarting tasks: Done [ 117.372543][ T5395] random: crng reseeded on system resumption [ 117.373646][ T5401] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.373759][ T5401] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.374210][ T5401] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 117.374522][ T29] audit: type=1400 audit(1788212062.386:635): avc: denied { write } for pid=5400 comm="syz.5.324" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.374634][ T29] audit: type=1400 audit(1788212062.386:636): avc: denied { read write } for pid=5400 comm="syz.5.324" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.374667][ T29] audit: type=1400 audit(1788212062.386:637): avc: denied { open } for pid=5400 comm="syz.5.324" path="/58/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 117.397122][ T5395] PM: suspend exit [ 117.405316][ T5413] loop6: detected capacity change from 0 to 512 [ 117.414739][ T5410] bridge_slave_0: left allmulticast mode [ 117.414769][ T5410] bridge_slave_0: left promiscuous mode [ 117.414931][ T5410] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.415233][ T5408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.420972][ T5413] EXT4-fs error (device loop6): ext4_iget_extra_inode:5210: inode #15: comm syz.6.328: corrupted in-inode xattr: invalid ea_ino [ 117.421056][ T5413] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 117.423115][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 117.423132][ C1] EXT4-fs (loop6): initial error at time 1788212062: ext4_iget_extra_inode:5210: inode 15 [ 117.423185][ C1] EXT4-fs (loop6): last error at time 1788212062: ext4_iget_extra_inode:5210: inode 15 [ 117.429555][ T29] audit: type=1400 audit(1788212062.436:638): avc: denied { write } for pid=5407 comm="syz.0.327" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.433701][ T5413] EXT4-fs error (device loop6): ext4_orphan_get:1408: comm syz.6.328: couldn't read orphan inode 15 (err -117) [ 117.433805][ T5413] loop6: lost filesystem error report for type 5 error -117 [ 117.437757][ T5413] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.453369][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 117.456876][ T29] audit: type=1400 audit(1788212062.466:639): avc: denied { write } for pid=5411 comm="syz.6.328" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.500499][ T29] audit: type=1400 audit(1788212062.506:640): avc: denied { write } for pid=5411 comm="syz.6.328" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.547939][ T5418] netlink: 'syz.0.327': attribute type 63 has an invalid length. [ 117.577961][ T5421] Cannot find del_set index 2 as target [ 117.605041][ T5421] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.609484][ T5421] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.330: missing EA_INODE flag [ 117.611713][ T29] audit: type=1400 audit(1788212062.616:641): avc: denied { write } for pid=5420 comm="syz.5.330" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 117.615594][ T5421] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.330: error while reading EA inode 11 err=-117 [ 117.700886][ T29] audit: type=1400 audit(1788212062.706:642): avc: denied { setopt } for pid=5411 comm="syz.6.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 118.081601][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.125527][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.533222][ T5454] netlink: 64 bytes leftover after parsing attributes in process `syz.1.332'. [ 118.582444][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.082552][ T5459] set_capacity_and_notify: 2 callbacks suppressed [ 119.082583][ T5459] loop1: detected capacity change from 0 to 1764 [ 119.083824][ T5459] iso9660: Unknown parameter '' [ 120.085420][ T5465] loop0: detected capacity change from 0 to 1024 [ 120.115544][ T5465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.118917][ T5465] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.337: missing EA_INODE flag [ 120.121225][ T5465] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.337: error while reading EA inode 11 err=-117 [ 120.161775][ T5467] netlink: 4 bytes leftover after parsing attributes in process `syz.6.340'. [ 120.166779][ T5467] bridge_slave_1: left allmulticast mode [ 120.168981][ T5467] bridge_slave_1: left promiscuous mode [ 120.176337][ T5467] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.186098][ T5467] bridge_slave_0: left allmulticast mode [ 120.187237][ T5467] bridge_slave_0: left promiscuous mode [ 120.190801][ T5467] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.799084][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.3.341'. [ 120.828204][ T5481] loop1: detected capacity change from 0 to 4096 [ 120.850511][ T5481] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.973883][ T5484] netlink: 'syz.1.342': attribute type 63 has an invalid length. [ 121.039635][ T5486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.039757][ T5486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.062138][ T5486] PM: suspend entry (deep) [ 121.178269][ T3672] Filesystems sync: 0.115 seconds [ 121.284899][ T5486] Freezing user space processes [ 121.301915][ T5486] Freezing user space processes completed (elapsed 0.016 seconds) [ 121.301949][ T5486] OOM killer disabled. [ 121.301959][ T5486] Freezing remaining freezable tasks [ 121.305470][ T5486] Freezing remaining freezable tasks completed (elapsed 0.003 seconds) [ 121.305565][ T5486] printk: Suspending console(s) (use no_console_suspend to debug) [ 121.352464][ T5486] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 121.352536][ T5486] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 121.352565][ T5486] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 121.362554][ T5486] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 121.362599][ T5486] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 121.362661][ T5486] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 121.363836][ T5486] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 121.363898][ T5486] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 121.364107][ T5486] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 121.364356][ T5486] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 121.364464][ T5486] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 121.364543][ T5486] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 121.364626][ T5486] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 121.364665][ T5486] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 121.364711][ T5486] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 121.364785][ T5486] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 121.412927][ T31] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 122.059172][ T5486] ACPI: PM: Preparing to enter system sleep state S3 [ 122.059361][ T5486] ACPI: PM: Saving platform NVS memory [ 122.059442][ T5486] Disabling non-boot CPUs ... [ 122.064165][ T5486] smpboot: CPU 1 is now offline [ 122.070442][ T5486] ACPI: PM: Low-level resume complete [ 122.070510][ T5486] ACPI: PM: Restoring platform NVS memory [ 122.083199][ T5486] Enabling non-boot CPUs ... [ 122.083361][ T5486] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 122.088597][ T5486] CPU1 is up [ 122.088818][ T5486] ACPI: PM: Waking up from system sleep state S3 [ 122.124086][ T3559] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 122.257526][ T5486] OOM killer enabled. [ 122.257545][ T5486] Restarting tasks: Starting [ 122.262331][ T5486] Restarting tasks: Done [ 122.262562][ T5486] random: crng reseeded on system resumption [ 122.271728][ T5486] PM: suspend exit [ 122.272543][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.293853][ T3686] IPVS: starting estimator thread 0... [ 122.323467][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.388595][ T5496] IPVS: using max 1680 ests per chain, 84000 per kthread [ 122.401836][ T5501] xt_HMARK: proto mask must be zero with L3 mode [ 122.418255][ T5501] loop6: detected capacity change from 0 to 256 [ 122.418809][ T5501] vfat: Unknown parameter '*)xzg}ŎwA}>< H}Oz" [ 123.404365][ T5530] __dump_stack+0x1d/0x30 [ 123.404392][ T5530] dump_stack_lvl+0x95/0xd0 [ 123.404418][ T5530] dump_stack+0x15/0x1b [ 123.404489][ T5530] should_fail_ex+0x262/0x280 [ 123.404516][ T5530] ? skb_clone+0x151/0x1f0 [ 123.404560][ T5530] should_failslab+0x8c/0xb0 [ 123.404669][ T5530] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 123.404723][ T5530] ? skb_clone+0x151/0x1f0 [ 123.404765][ T5530] skb_clone+0x151/0x1f0 [ 123.404806][ T5530] __netlink_deliver_tap+0x2be/0x510 [ 123.404904][ T5530] __netlink_sendskb+0xc3/0xd0 [ 123.404935][ T5530] netlink_dump+0x6f8/0x870 [ 123.404977][ T5530] __netlink_dump_start+0x435/0x520 [ 123.405010][ T5530] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 123.405076][ T5530] rtnetlink_rcv_msg+0x59f/0x720 [ 123.405097][ T5530] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 123.405128][ T5530] ? skb_clone+0x151/0x1f0 [ 123.405168][ T5530] ? __pfx_rtnl_dumpit+0x10/0x10 [ 123.405263][ T5530] ? __pfx_rtm_dump_nexthop_bucket+0x10/0x10 [ 123.405298][ T5530] netlink_rcv_skb+0x11e/0x220 [ 123.405331][ T5530] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 123.405428][ T5530] rtnetlink_rcv+0x1c/0x30 [ 123.405457][ T5530] netlink_unicast+0x5a9/0x680 [ 123.405535][ T5530] netlink_sendmsg+0x5be/0x6f0 [ 123.405592][ T5530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 123.405625][ T5530] ____sys_sendmsg+0x532/0x580 [ 123.405694][ T5530] ___sys_sendmsg+0x195/0x1e0 [ 123.405808][ T5530] __x64_sys_sendmsg+0xd4/0x160 [ 123.405859][ T5530] x64_sys_call+0x22ab/0x2550 [ 123.405948][ T5530] do_syscall_64+0x112/0x360 [ 123.405975][ T5530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.406058][ T5530] RIP: 0033:0x7f8f5932e159 [ 123.406076][ T5530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.406097][ T5530] RSP: 002b:00007f8f57d87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 123.406119][ T5530] RAX: ffffffffffffffda RBX: 00007f8f595b5fa0 RCX: 00007f8f5932e159 [ 123.406135][ T5530] RDX: 0000000020000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 123.406203][ T5530] RBP: 00007f8f57d87090 R08: 0000000000000000 R09: 0000000000000000 [ 123.406218][ T5530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.406233][ T5530] R13: 00007f8f595b6038 R14: 00007f8f595b5fa0 R15: 00007ffed1fb7238 [ 123.406252][ T5530] [ 123.410158][ T29] audit: type=1400 audit(1788212068.417:653): avc: denied { bind } for pid=5520 comm="syz.6.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.410317][ T29] audit: type=1400 audit(1788212068.417:654): avc: denied { listen } for pid=5520 comm="syz.6.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.431152][ T29] audit: type=1400 audit(1788212068.447:655): avc: denied { setopt } for pid=5520 comm="syz.6.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.431918][ T29] audit: type=1400 audit(1788212068.447:656): avc: denied { write } for pid=5520 comm="syz.6.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 123.443903][ T5524] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.451401][ T5524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.356: missing EA_INODE flag [ 123.451592][ T29] audit: type=1400 audit(1788212068.467:657): avc: denied { write } for pid=5522 comm="syz.1.356" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 123.452004][ T5524] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.356: error while reading EA inode 11 err=-117 [ 123.566241][ T5493] loop5: detected capacity change from 0 to 1024 [ 123.599840][ T5493] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 123.599981][ T5493] EXT4-fs (loop5): required journal recovery suppressed and not mounted read-only [ 124.016366][ T5536] loop5: detected capacity change from 0 to 2048 [ 124.024375][ T5536] EXT4-fs: Ignoring removed nobh option [ 124.041984][ T5536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.042395][ T5536] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.088754][ T29] audit: type=1400 audit(1788212069.097:658): avc: denied { ioctl } for pid=5491 comm="syz.5.344" path="socket:[11380]" dev="sockfs" ino=11380 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.139476][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.224762][ T5545] xt_hashlimit: size too large, truncated to 1048576 [ 124.252953][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.330589][ T5551] loop1: detected capacity change from 0 to 1764 [ 124.338110][ T5551] iso9660: Unknown parameter '' [ 124.350773][ T29] audit: type=1400 audit(1788212069.357:659): avc: denied { firmware_load } for pid=5548 comm="syz.6.363" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 124.415819][ T29] audit: type=1400 audit(1788212069.417:660): avc: denied { create } for pid=5548 comm="syz.6.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 124.653217][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.6.368'. [ 124.752786][ T5574] loop3: detected capacity change from 0 to 1024 [ 124.764222][ T5574] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.977067][ T5574] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.373: missing EA_INODE flag [ 124.989345][ T5574] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.373: error while reading EA inode 11 err=-117 [ 125.534268][ T5589] loop6: detected capacity change from 0 to 1764 [ 125.534964][ T5589] iso9660: Unknown parameter '' [ 125.645664][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.125838][ T5594] loop1: detected capacity change from 0 to 4096 [ 128.161131][ T5601] usb usb8: usbfs: process 5601 (syz.3.378) did not claim interface 0 before use [ 128.365617][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 128.365663][ T29] audit: type=1400 audit(1788212073.377:665): avc: denied { map } for pid=5596 comm="syz.0.379" path="socket:[11573]" dev="sockfs" ino=11573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.365699][ T29] audit: type=1400 audit(1788212073.377:666): avc: denied { accept } for pid=5596 comm="syz.0.379" path="socket:[11573]" dev="sockfs" ino=11573 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 128.443132][ T5594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.456701][ T29] audit: type=1400 audit(1788212073.477:667): avc: denied { write } for pid=5593 comm="syz.1.377" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.478944][ T5604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.381'. [ 128.496110][ T5607] loop6: detected capacity change from 0 to 512 [ 128.499115][ T5607] EXT4-fs: Ignoring removed bh option [ 128.523535][ T5607] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.523604][ T5607] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.569628][ T5607] EXT4-fs (loop6): shut down requested (1) [ 128.570837][ T29] audit: type=1400 audit(1788212073.577:668): avc: denied { write } for pid=5606 comm="syz.6.380" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.583761][ T29] audit: type=1400 audit(1788212073.597:669): avc: denied { read } for pid=2965 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 128.583853][ T29] audit: type=1400 audit(1788212073.597:670): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.584083][ T29] audit: type=1400 audit(1788212073.597:671): avc: denied { write search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.584159][ T29] audit: type=1400 audit(1788212073.597:672): avc: denied { add_name } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.584261][ T29] audit: type=1400 audit(1788212073.597:673): avc: denied { create } for pid=2965 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.584340][ T29] audit: type=1400 audit(1788212073.597:674): avc: denied { append open } for pid=2965 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 128.589689][ T5607] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 128.822767][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.914258][ T5619] FAULT_INJECTION: forcing a failure. [ 128.914258][ T5619] name failslab, interval 1, probability 0, space 0, times 0 [ 128.914293][ T5619] CPU: 0 UID: 0 PID: 5619 Comm: syz.6.383 Not tainted syzkaller #0 PREEMPT(lazy) [ 128.914317][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 128.914366][ T5619] Call Trace: [ 128.914373][ T5619] [ 128.914380][ T5619] __dump_stack+0x1d/0x30 [ 128.914412][ T5619] dump_stack_lvl+0x95/0xd0 [ 128.914442][ T5619] dump_stack+0x15/0x1b [ 128.914469][ T5619] should_fail_ex+0x262/0x280 [ 128.914600][ T5619] should_failslab+0x8c/0xb0 [ 128.914735][ T5619] __kvmalloc_node_noprof+0x168/0x5c0 [ 128.914765][ T5619] ? alloc_fdtable+0x115/0x1d0 [ 128.914793][ T5619] ? alloc_fdtable+0x115/0x1d0 [ 128.914894][ T5619] alloc_fdtable+0x115/0x1d0 [ 128.915000][ T5619] dup_fd+0x4ae/0x530 [ 128.915114][ T5619] ? _raw_spin_unlock+0x9/0x30 [ 128.915234][ T5619] ksys_unshare+0x36c/0x710 [ 128.915335][ T5619] __x64_sys_unshare+0x1f/0x30 [ 128.915413][ T5619] x64_sys_call+0x1e33/0x2550 [ 128.915524][ T5619] do_syscall_64+0x112/0x360 [ 128.915612][ T5619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.915708][ T5619] RIP: 0033:0x7f935b53e159 [ 128.915755][ T5619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.915809][ T5619] RSP: 002b:00007f9359f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 128.915864][ T5619] RAX: ffffffffffffffda RBX: 00007f935b7c5fa0 RCX: 00007f935b53e159 [ 128.915901][ T5619] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000022020600 [ 128.915937][ T5619] RBP: 00007f935b5d5024 R08: 0000000000000000 R09: 0000000000000000 [ 128.916079][ T5619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.916111][ T5619] R13: 00007f935b7c6038 R14: 00007f935b7c5fa0 R15: 00007ffe9ad3c328 [ 128.916176][ T5619] [ 129.124476][ T5620] netlink: 'syz.1.377': attribute type 63 has an invalid length. [ 129.252401][ T5615] cgroup: fork rejected by pids controller in /syz0 [ 129.521202][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.570748][ T5659] loop3: detected capacity change from 0 to 1024 [ 129.604870][ T5659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.620467][ T5659] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.388: missing EA_INODE flag [ 129.632206][ T5659] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.388: error while reading EA inode 11 err=-117 [ 130.047726][ T5672] loop5: detected capacity change from 0 to 1764 [ 130.079999][ T5672] iso9660: Unknown parameter '' [ 130.128917][ T5673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.129170][ T5673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.177562][ T5673] PM: suspend entry (deep) [ 130.191155][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.6.392'. [ 130.275616][ T3697] Filesystems sync: 0.093 seconds [ 130.554280][ T5683] loop5: detected capacity change from 0 to 1024 [ 130.563050][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.592561][ T5683] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.600771][ T5683] EXT4-fs: Ignoring removed oldalloc option [ 130.607657][ T5673] Freezing user space processes [ 130.706238][ T5683] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 130.706334][ T5683] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.730614][ T5673] Freezing user space processes completed (elapsed 0.122 seconds) [ 130.730726][ T5673] OOM killer disabled. [ 130.730734][ T5673] Freezing remaining freezable tasks [ 130.741589][ T5673] Freezing remaining freezable tasks completed (elapsed 0.010 seconds) [ 130.741794][ T5673] printk: Suspending console(s) (use no_console_suspend to debug) [ 130.818913][ T5673] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 130.818982][ T5673] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 130.819083][ T5673] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 130.819114][ T5673] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 130.819170][ T5673] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 130.819210][ T5673] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 130.819246][ T5673] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 130.819274][ T5673] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 130.819332][ T5673] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 130.819360][ T5673] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 130.819512][ T5673] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 130.819541][ T5673] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 130.819570][ T5673] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 130.819603][ T5673] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 130.819632][ T5673] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 130.819722][ T5673] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 130.858018][ T3611] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 131.549665][ T5673] ACPI: PM: Preparing to enter system sleep state S3 [ 131.549783][ T5673] ACPI: PM: Saving platform NVS memory [ 131.549833][ T5673] Disabling non-boot CPUs ... [ 131.554481][ T5673] smpboot: CPU 1 is now offline [ 131.559971][ T5673] ACPI: PM: Low-level resume complete [ 131.560095][ T5673] ACPI: PM: Restoring platform NVS memory [ 131.572233][ T5673] Enabling non-boot CPUs ... [ 131.572406][ T5673] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 131.576958][ T5673] CPU1 is up [ 131.577204][ T5673] ACPI: PM: Waking up from system sleep state S3 [ 131.613057][ T3607] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 131.751319][ T5673] OOM killer enabled. [ 131.751341][ T5673] Restarting tasks: Starting [ 131.756626][ T5673] Restarting tasks: Done [ 131.756686][ T5673] random: crng reseeded on system resumption [ 131.769284][ T5685] loop6: detected capacity change from 0 to 512 [ 131.773930][ T5673] PM: suspend exit [ 131.839345][ T5685] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 131.880361][ T5685] EXT4-fs (loop6): 1 truncate cleaned up [ 131.936038][ T5685] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.947735][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 131.968762][ T5702] loop5: detected capacity change from 0 to 512 [ 131.973528][ T5702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 131.978469][ T5702] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.400: bad orphan inode 131083 [ 131.978506][ T5702] loop5: lost filesystem error report for type 5 error -117 [ 131.980213][ T5702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.006007][ T5702] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.400: bad entry in directory: '.' directory cannot be the last in data block - offset=0, inode=2, rec_len=1024, size=1024 fake=1 [ 132.025402][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.165238][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.185334][ T5711] loop6: detected capacity change from 0 to 1764 [ 132.186231][ T5711] iso9660: Unknown parameter '' [ 132.239388][ T5713] netlink: 4 bytes leftover after parsing attributes in process `syz.6.404'. [ 132.281381][ T5717] loop6: detected capacity change from 0 to 1024 [ 132.294673][ T5717] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.298339][ T5717] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.406: missing EA_INODE flag [ 132.300784][ T5717] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.406: error while reading EA inode 11 err=-117 [ 132.856815][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.947192][ T5741] loop1: detected capacity change from 0 to 512 [ 132.966504][ T5742] loop5: detected capacity change from 0 to 1764 [ 132.968248][ T5742] iso9660: Unknown parameter '' [ 133.035065][ T5741] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 133.167370][ T5741] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.412: bad orphan inode 131083 [ 133.167410][ T5741] loop1: lost filesystem error report for type 5 error -117 [ 133.167945][ T5741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.185024][ T5745] loop6: detected capacity change from 0 to 1024 [ 133.185391][ T5745] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.185544][ T5745] EXT4-fs: Ignoring removed oldalloc option [ 133.225262][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.235790][ T5745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.235874][ T5745] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.247457][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.416'. [ 133.339556][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.525916][ T5763] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 133.538240][ T5763] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.420: invalid block [ 133.542290][ T5763] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 133.550118][ T5763] EXT4-fs error (device loop5) in ext4_process_orphan:346: IO failure [ 133.550427][ T5763] loop5: lost filesystem error report for type 5 error -5 [ 133.550648][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 133.552718][ C1] EXT4-fs (loop5): initial error at time 1788212078: ext4_get_branch:178: inode 13: block 1024 [ 133.552862][ C1] EXT4-fs (loop5): last error at time 1788212078: ext4_get_branch:178: inode 13: block 1024 [ 133.578134][ T5763] EXT4-fs (loop5): 1 truncate cleaned up [ 133.605433][ T5763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.644451][ T5763] EXT4-fs error (device loop5): ext4_find_dest_de:2052: inode #2: block 13: comm syz.5.420: bad entry in directory: directory entry overrun - offset=108, inode=4294901777, rec_len=1024, size=1024 fake=0 [ 133.648739][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 133.648765][ T29] audit: type=1400 audit(1788212078.657:688): avc: denied { write } for pid=5762 comm="syz.5.420" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.683191][ T5765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.687479][ T5765] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.421: missing EA_INODE flag [ 133.690121][ T29] audit: type=1400 audit(1788212078.697:689): avc: denied { write } for pid=5764 comm="syz.6.421" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 133.694459][ T5765] EXT4-fs error (device loop6): ext4_xattr_inode_iget:442: comm syz.6.421: error while reading EA inode 11 err=-117 [ 133.772017][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.176015][ T5780] FAULT_INJECTION: forcing a failure. [ 134.176015][ T5780] name failslab, interval 1, probability 0, space 0, times 0 [ 134.176066][ T5780] CPU: 1 UID: 0 PID: 5780 Comm: syz.5.424 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.176099][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.176115][ T5780] Call Trace: [ 134.176124][ T5780] [ 134.176134][ T5780] __dump_stack+0x1d/0x30 [ 134.176166][ T5780] dump_stack_lvl+0x95/0xd0 [ 134.176197][ T5780] dump_stack+0x15/0x1b [ 134.176223][ T5780] should_fail_ex+0x262/0x280 [ 134.176251][ T5780] ? security_inode_alloc+0x37/0x100 [ 134.176280][ T5780] should_failslab+0x8c/0xb0 [ 134.176318][ T5780] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.176354][ T5780] ? security_inode_alloc+0x37/0x100 [ 134.176385][ T5780] security_inode_alloc+0x37/0x100 [ 134.176415][ T5780] inode_init_always_gfp+0x495/0x4e0 [ 134.176463][ T5780] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 134.176506][ T5780] alloc_inode+0x58/0x170 [ 134.176548][ T5780] new_inode+0x1d/0xe0 [ 134.176573][ T5780] shmem_get_inode+0x250/0x7b0 [ 134.176615][ T5780] __shmem_file_setup+0x1a0/0x260 [ 134.176654][ T5780] shmem_zero_setup+0x66/0xe0 [ 134.176689][ T5780] mmap_region+0x1a95/0x21a0 [ 134.176749][ T5780] do_mmap+0xa20/0xc70 [ 134.176791][ T5780] vm_mmap_pgoff+0x183/0x2d0 [ 134.176826][ T5780] ksys_mmap_pgoff+0xc1/0x310 [ 134.176865][ T5780] ? __x64_sys_mmap+0x49/0x70 [ 134.176909][ T5780] x64_sys_call+0x23b3/0x2550 [ 134.176938][ T5780] do_syscall_64+0x112/0x360 [ 134.176976][ T5780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.177005][ T5780] RIP: 0033:0x7f2e1d6ee159 [ 134.177026][ T5780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.177051][ T5780] RSP: 002b:00007f2e1c0e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 134.177081][ T5780] RAX: ffffffffffffffda RBX: 00007f2e1d976270 RCX: 00007f2e1d6ee159 [ 134.177100][ T5780] RDX: 0000000000000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 134.177116][ T5780] RBP: 00007f2e1c0e4090 R08: ffffffffffffffff R09: 0000000094175000 [ 134.177136][ T5780] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 134.177153][ T5780] R13: 00007f2e1d976308 R14: 00007f2e1d976270 R15: 00007ffed7264c88 [ 134.177179][ T5780] [ 134.223614][ T29] audit: type=1400 audit(1788212079.217:690): avc: denied { map } for pid=5775 comm="syz.5.424" path="socket:[10846]" dev="sockfs" ino=10846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.223729][ T29] audit: type=1400 audit(1788212079.217:691): avc: denied { read } for pid=5775 comm="syz.5.424" path="socket:[10846]" dev="sockfs" ino=10846 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 134.259567][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.279695][ T5784] iso9660: Unknown parameter '' [ 134.286601][ T29] audit: type=1400 audit(1788212079.297:692): avc: denied { mount } for pid=5785 comm="syz.5.427" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.316717][ T29] audit: type=1400 audit(1788212079.327:693): avc: denied { write } for pid=5771 comm="syz.1.422" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.330281][ T5789] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 134.337404][ T5789] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.426: bad orphan inode 131083 [ 134.337459][ T5789] loop6: lost filesystem error report for type 5 error -117 [ 134.340126][ T5789] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.369998][ T29] audit: type=1400 audit(1788212079.377:694): avc: denied { unmount } for pid=3800 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 134.370271][ T4314] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.477076][ T29] audit: type=1400 audit(1788212079.487:695): avc: denied { write } for pid=5800 comm="syz.5.432" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 134.604845][ T5808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.430'. [ 134.665020][ T5811] FAULT_INJECTION: forcing a failure. [ 134.665020][ T5811] name failslab, interval 1, probability 0, space 0, times 0 [ 134.665064][ T5811] CPU: 0 UID: 0 PID: 5811 Comm: syz.0.434 Not tainted syzkaller #0 PREEMPT(lazy) [ 134.665091][ T5811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 134.665167][ T5811] Call Trace: [ 134.665174][ T5811] [ 134.665183][ T5811] __dump_stack+0x1d/0x30 [ 134.665277][ T5811] dump_stack_lvl+0x95/0xd0 [ 134.665312][ T5811] dump_stack+0x15/0x1b [ 134.665343][ T5811] should_fail_ex+0x262/0x280 [ 134.665371][ T5811] ? do_getname+0x2e/0x1c0 [ 134.665492][ T5811] should_failslab+0x8c/0xb0 [ 134.665615][ T5811] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 134.665718][ T5811] ? do_getname+0x2e/0x1c0 [ 134.665754][ T5811] ? __se_sys_futex+0x2f6/0x370 [ 134.665797][ T5811] do_getname+0x2e/0x1c0 [ 134.665889][ T5811] __se_sys_mkdirat+0x21/0xf0 [ 134.665999][ T5811] __x64_sys_mkdirat+0x43/0x50 [ 134.666031][ T5811] x64_sys_call+0x368/0x2550 [ 134.666094][ T5811] do_syscall_64+0x112/0x360 [ 134.666189][ T5811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.666289][ T5811] RIP: 0033:0x7f5ed488e159 [ 134.666347][ T5811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.666374][ T5811] RSP: 002b:00007f5ed32e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 134.666403][ T5811] RAX: ffffffffffffffda RBX: 00007f5ed4b15fa0 RCX: 00007f5ed488e159 [ 134.666489][ T5811] RDX: 00000000000001ff RSI: 0000000000000000 RDI: ffffffffffffff9c [ 134.666517][ T5811] RBP: 00007f5ed4925024 R08: 0000000000000000 R09: 0000000000000000 [ 134.666537][ T5811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.666557][ T5811] R13: 00007f5ed4b16038 R14: 00007f5ed4b15fa0 R15: 00007ffca57ba348 [ 134.666587][ T5811] [ 134.727080][ T5814] Cannot find del_set index 2 as target [ 134.942893][ T29] audit: type=1400 audit(1788212079.947:696): avc: denied { read } for pid=5813 comm="syz.3.436" name="trace" dev="tracefs" ino=2259 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 135.316427][ T5818] set_capacity_and_notify: 4 callbacks suppressed [ 135.316478][ T5818] loop0: detected capacity change from 0 to 1024 [ 135.332533][ T5820] loop1: detected capacity change from 0 to 512 [ 135.335498][ T5820] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 135.356675][ T5820] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.438: bad orphan inode 131083 [ 135.356750][ T5820] loop1: lost filesystem error report for type 5 error -117 [ 135.360490][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 135.360544][ C0] EXT4-fs (loop1): initial error at time 1788212080: ext4_orphan_get:1429 [ 135.360583][ C0] EXT4-fs (loop1): last error at time 1788212080: ext4_orphan_get:1429 [ 135.369945][ T5818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.395724][ T5820] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.408663][ T5818] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.437: missing EA_INODE flag [ 135.408852][ T29] audit: type=1400 audit(1788212080.417:697): avc: denied { write } for pid=5817 comm="syz.0.437" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 135.422088][ T5818] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.437: error while reading EA inode 11 err=-117 [ 135.577157][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.659765][ T5829] FAULT_INJECTION: forcing a failure. [ 135.659765][ T5829] name failslab, interval 1, probability 0, space 0, times 0 [ 135.659823][ T5829] CPU: 0 UID: 0 PID: 5829 Comm: syz.1.439 Not tainted syzkaller #0 PREEMPT(lazy) [ 135.659851][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 135.659864][ T5829] Call Trace: [ 135.659941][ T5829] [ 135.659949][ T5829] __dump_stack+0x1d/0x30 [ 135.659977][ T5829] dump_stack_lvl+0x95/0xd0 [ 135.660066][ T5829] dump_stack+0x15/0x1b [ 135.660088][ T5829] should_fail_ex+0x262/0x280 [ 135.660110][ T5829] ? do_getname+0x2e/0x1c0 [ 135.660191][ T5829] should_failslab+0x8c/0xb0 [ 135.660251][ T5829] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 135.660282][ T5829] ? do_getname+0x2e/0x1c0 [ 135.660328][ T5829] do_getname+0x2e/0x1c0 [ 135.660361][ T5829] getname_flags+0x1d/0x30 [ 135.660392][ T5829] do_sys_openat2+0x6c/0x130 [ 135.660421][ T5829] __x64_sys_openat+0xf2/0x120 [ 135.660519][ T5829] x64_sys_call+0x1f72/0x2550 [ 135.660547][ T5829] do_syscall_64+0x112/0x360 [ 135.660576][ T5829] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 135.660605][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.660670][ T5829] RIP: 0033:0x7fa436b2e98e [ 135.660691][ T5829] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 135.660718][ T5829] RSP: 002b:00007fa4355c6f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.660738][ T5829] RAX: ffffffffffffffda RBX: 00007fa4355c76c0 RCX: 00007fa436b2e98e [ 135.660753][ T5829] RDX: 0000000000000002 RSI: 00007fa436c0492b RDI: ffffffffffffff9c [ 135.660769][ T5829] RBP: 00007fa436c05024 R08: 0000000000000000 R09: 0000000000000000 [ 135.660838][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.660853][ T5829] R13: 00007fa436df6038 R14: 00007fa436df5fa0 R15: 00007fffb07d37c8 [ 135.660878][ T5829] [ 135.794636][ T5828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.794777][ T5828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.828736][ T5836] loop1: detected capacity change from 0 to 1764 [ 135.831888][ T5836] iso9660: Unknown parameter '' [ 135.858648][ T5842] netlink: 4 bytes leftover after parsing attributes in process `syz.5.444'. [ 135.935131][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.953574][ T5848] loop5: detected capacity change from 0 to 4096 [ 135.961685][ T5848] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.012594][ T5852] loop0: detected capacity change from 0 to 1024 [ 136.035614][ T5852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.050381][ T5852] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 136.078470][ T5852] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 136.078511][ T5852] EXT4-fs (loop0): This should not happen!! Data will be lost [ 136.078511][ T5852] [ 136.078530][ T5852] EXT4-fs (loop0): Total free blocks count 0 [ 136.078549][ T5852] EXT4-fs (loop0): Free/Dirty block details [ 136.078566][ T5852] EXT4-fs (loop0): free_blocks=20480 [ 136.078585][ T5852] EXT4-fs (loop0): dirty_blocks=80 [ 136.078603][ T5852] EXT4-fs (loop0): Block reservation details [ 136.078619][ T5852] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 136.119435][ T3621] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 58 with error 28 [ 136.153867][ T5859] netlink: 'syz.5.447': attribute type 63 has an invalid length. [ 136.832914][ T5869] FAULT_INJECTION: forcing a failure. [ 136.832914][ T5869] name failslab, interval 1, probability 0, space 0, times 0 [ 136.832962][ T5869] CPU: 1 UID: 0 PID: 5869 Comm: syz.3.452 Not tainted syzkaller #0 PREEMPT(lazy) [ 136.832995][ T5869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 136.833012][ T5869] Call Trace: [ 136.833021][ T5869] [ 136.833030][ T5869] __dump_stack+0x1d/0x30 [ 136.833132][ T5869] dump_stack_lvl+0x95/0xd0 [ 136.833162][ T5869] dump_stack+0x15/0x1b [ 136.833190][ T5869] should_fail_ex+0x262/0x280 [ 136.833230][ T5869] ? __alloc_skb+0x2e0/0x6f0 [ 136.833265][ T5869] should_failslab+0x8c/0xb0 [ 136.833303][ T5869] kmem_cache_alloc_node_noprof+0x82/0x400 [ 136.833339][ T5869] ? __alloc_skb+0x2e0/0x6f0 [ 136.833405][ T5869] ? tcp_current_mss+0x302/0x3e0 [ 136.833471][ T5869] __alloc_skb+0x2e0/0x6f0 [ 136.833505][ T5869] tcp_stream_alloc_skb+0x30/0x320 [ 136.833606][ T5869] tcp_sendmsg_locked+0xc16/0x2b70 [ 136.833670][ T5869] ? __pfx_tcp_sendmsg+0x10/0x10 [ 136.833735][ T5869] ? __pfx_inet_sendmsg+0x10/0x10 [ 136.833760][ T5869] tcp_sendmsg+0x2f/0x50 [ 136.833807][ T5869] inet_sendmsg+0x76/0xd0 [ 136.833829][ T5869] sock_write_iter+0x2a4/0x2f0 [ 136.833906][ T5869] ? __pfx_sock_write_iter+0x10/0x10 [ 136.833927][ T5869] vfs_write+0x57f/0x9a0 [ 136.834054][ T5869] ksys_write+0xdc/0x1a0 [ 136.834086][ T5869] __x64_sys_write+0x40/0x50 [ 136.834120][ T5869] x64_sys_call+0x154e/0x2550 [ 136.834153][ T5869] do_syscall_64+0x112/0x360 [ 136.834211][ T5869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.834233][ T5869] RIP: 0033:0x7f8f5932e159 [ 136.834252][ T5869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.834295][ T5869] RSP: 002b:00007f8f57d87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.834319][ T5869] RAX: ffffffffffffffda RBX: 00007f8f595b5fa0 RCX: 00007f8f5932e159 [ 136.834420][ T5869] RDX: 0000000000000224 RSI: 0000200000001e00 RDI: 0000000000000003 [ 136.834506][ T5869] RBP: 00007f8f57d87090 R08: 0000000000000000 R09: 0000000000000000 [ 136.834523][ T5869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.834539][ T5869] R13: 00007f8f595b6038 R14: 00007f8f595b5fa0 R15: 00007ffed1fb7238 [ 136.834566][ T5869] [ 136.998966][ T5872] Cannot find del_set index 2 as target [ 137.141525][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.247599][ T5879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.456'. [ 137.360531][ T5885] loop5: detected capacity change from 0 to 1024 [ 137.374505][ T5887] loop0: detected capacity change from 0 to 1764 [ 137.376157][ T5887] iso9660: Unknown parameter '' [ 137.386693][ T5885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.390525][ T5885] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: inode #11: comm syz.5.459: missing EA_INODE flag [ 137.392827][ T5885] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.459: error while reading EA inode 11 err=-117 [ 137.892485][ T5893] loop1: detected capacity change from 0 to 1024 [ 137.901553][ T5893] EXT4-fs: Ignoring removed mblk_io_submit option [ 137.901683][ T5893] EXT4-fs: Ignoring removed oldalloc option [ 137.920499][ T5893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 137.920669][ T5893] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.053302][ T5904] netlink: 8 bytes leftover after parsing attributes in process `syz.6.462'. [ 138.053337][ T5904] netlink: 32 bytes leftover after parsing attributes in process `syz.6.462'. [ 138.096029][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.969564][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 139.010902][ T5929] netlink: 4 bytes leftover after parsing attributes in process `syz.6.469'. [ 139.032678][ T5932] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.166732][ T5941] loop5: detected capacity change from 0 to 4096 [ 139.205623][ T5941] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.208736][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 139.208761][ T29] audit: type=1400 audit(1788212084.217:708): avc: denied { write } for pid=5940 comm="syz.5.473" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 139.717317][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.729848][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.734484][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.736919][ T5933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.467'. [ 139.741852][ T5934] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.803465][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.813107][ T5963] unsupported nla_type 255 [ 139.870109][ T5967] loop5: detected capacity change from 0 to 1024 [ 139.871290][ T5967] EXT4-fs: Ignoring removed bh option [ 139.871323][ T5967] EXT4-fs: Ignoring removed orlov option [ 139.894111][ T5967] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.270663][ T5965] loop3: detected capacity change from 0 to 1024 [ 141.336987][ T5978] loop6: detected capacity change from 0 to 512 [ 141.390418][ T5965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.396923][ T5965] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.476: missing EA_INODE flag [ 141.397055][ T29] audit: type=1400 audit(1788212086.407:709): avc: denied { write } for pid=5964 comm="syz.3.476" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.403143][ T5965] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.476: error while reading EA inode 11 err=-117 [ 141.613117][ T29] audit: type=1400 audit(1788212086.627:710): avc: denied { read } for pid=5966 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.717989][ T5982] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.474: bg 0: block 404: padding at end of block bitmap is not set [ 141.718267][ T29] audit: type=1400 audit(1788212086.727:711): avc: denied { write } for pid=5966 comm="syz.5.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 141.719124][ T29] audit: type=1400 audit(1788212086.727:712): avc: denied { write } for pid=5966 comm="syz.5.474" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.846893][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.889924][ T29] audit: type=1400 audit(1788212086.897:713): avc: denied { write } for pid=5987 comm="syz.0.482" name="target" dev="configfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 141.926357][ T6000] loop5: detected capacity change from 0 to 4096 [ 141.936018][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.945217][ T6000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.965236][ T29] audit: type=1400 audit(1788212086.977:714): avc: denied { write } for pid=5998 comm="syz.5.484" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 142.222464][ T6013] netlink: 'syz.5.484': attribute type 63 has an invalid length. [ 142.422379][ T6023] FAULT_INJECTION: forcing a failure. [ 142.422379][ T6023] name failslab, interval 1, probability 0, space 0, times 0 [ 142.422477][ T6023] CPU: 0 UID: 0 PID: 6023 Comm: syz.6.488 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.422506][ T6023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.422522][ T6023] Call Trace: [ 142.422529][ T6023] [ 142.422536][ T6023] __dump_stack+0x1d/0x30 [ 142.422558][ T6023] dump_stack_lvl+0x95/0xd0 [ 142.422607][ T6023] dump_stack+0x15/0x1b [ 142.422631][ T6023] should_fail_ex+0x262/0x280 [ 142.422657][ T6023] ? __alloc_skb+0x2e0/0x6f0 [ 142.422783][ T6023] should_failslab+0x8c/0xb0 [ 142.422924][ T6023] kmem_cache_alloc_node_noprof+0x82/0x400 [ 142.423042][ T6023] ? selinux_capable+0x31/0x40 [ 142.423126][ T6023] ? __alloc_skb+0x2e0/0x6f0 [ 142.423233][ T6023] __alloc_skb+0x2e0/0x6f0 [ 142.423322][ T6023] ? __alloc_skb+0x209/0x6f0 [ 142.423478][ T6023] netlink_ack+0xfd/0x530 [ 142.423574][ T6023] netlink_rcv_skb+0x18d/0x220 [ 142.423659][ T6023] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 142.423744][ T6023] rtnetlink_rcv+0x1c/0x30 [ 142.423815][ T6023] netlink_unicast+0x5a9/0x680 [ 142.423887][ T6023] netlink_sendmsg+0x5be/0x6f0 [ 142.424079][ T6023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.424167][ T6023] ____sys_sendmsg+0x532/0x580 [ 142.424328][ T6023] ___sys_sendmsg+0x195/0x1e0 [ 142.424518][ T6023] __x64_sys_sendmsg+0xd4/0x160 [ 142.424723][ T6023] x64_sys_call+0x22ab/0x2550 [ 142.424816][ T6023] do_syscall_64+0x112/0x360 [ 142.424877][ T6023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.424931][ T6023] RIP: 0033:0x7f935b53e159 [ 142.424983][ T6023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.425052][ T6023] RSP: 002b:00007f9359f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.425156][ T6023] RAX: ffffffffffffffda RBX: 00007f935b7c5fa0 RCX: 00007f935b53e159 [ 142.425261][ T6023] RDX: 0000000000000800 RSI: 0000200000000140 RDI: 0000000000000003 [ 142.425272][ T6023] RBP: 00007f9359f97090 R08: 0000000000000000 R09: 0000000000000000 [ 142.425304][ T6023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.425349][ T6023] R13: 00007f935b7c6038 R14: 00007f935b7c5fa0 R15: 00007ffe9ad3c328 [ 142.425511][ T6023] [ 142.506848][ T6027] loop6: detected capacity change from 0 to 512 [ 142.530340][ T6029] __nla_validate_parse: 38 callbacks suppressed [ 142.530373][ T6029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.491'. [ 142.557481][ T6031] netlink: 20 bytes leftover after parsing attributes in process `syz.6.492'. [ 142.559769][ T29] audit: type=1326 audit(1788212087.567:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.6.492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935b53e159 code=0x7ffc0000 [ 142.565405][ T29] audit: type=1326 audit(1788212087.577:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.6.492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935b53e159 code=0x7ffc0000 [ 142.565600][ T29] audit: type=1326 audit(1788212087.577:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6030 comm="syz.6.492" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f935b53e159 code=0x7ffc0000 [ 142.615322][ T6000] ================================================================== [ 142.615357][ T6000] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 142.615381][ T6000] [ 142.615387][ T6000] write to 0xffff888109cccd60 of 8 bytes by task 6010 on cpu 0: [ 142.615400][ T6000] filemap_splice_read+0x52a/0x790 [ 142.615417][ T6000] ext4_file_splice_read+0x8f/0xb0 [ 142.615435][ T6000] splice_direct_to_actor+0x261/0x680 [ 142.615470][ T6000] do_splice_direct+0x119/0x1a0 [ 142.615501][ T6000] do_sendfile+0x37d/0x640 [ 142.615531][ T6000] __x64_sys_sendfile64+0x105/0x150 [ 142.615562][ T6000] x64_sys_call+0x1015/0x2550 [ 142.615592][ T6000] do_syscall_64+0x112/0x360 [ 142.615622][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.615646][ T6000] [ 142.615652][ T6000] write to 0xffff888109cccd60 of 8 bytes by task 6000 on cpu 1: [ 142.615671][ T6000] filemap_splice_read+0x52a/0x790 [ 142.615695][ T6000] ext4_file_splice_read+0x8f/0xb0 [ 142.615714][ T6000] splice_direct_to_actor+0x261/0x680 [ 142.615751][ T6000] do_splice_direct+0x119/0x1a0 [ 142.615787][ T6000] do_sendfile+0x37d/0x640 [ 142.615824][ T6000] __x64_sys_sendfile64+0x105/0x150 [ 142.615860][ T6000] x64_sys_call+0x1015/0x2550 [ 142.615883][ T6000] do_syscall_64+0x112/0x360 [ 142.615904][ T6000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.615927][ T6000] [ 142.615930][ T6000] value changed: 0x0000000000000391 -> 0x0000000000000392 [ 142.615943][ T6000] [ 142.615947][ T6000] Reported by Kernel Concurrency Sanitizer on: [ 142.615960][ T6000] CPU: 1 UID: 0 PID: 6000 Comm: syz.5.484 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.615988][ T6000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.616002][ T6000] ================================================================== [ 142.765296][ T3800] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.