last executing test programs: 5m30.121021598s ago: executing program 32 (id=532): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 5m7.44529407s ago: executing program 1 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) mq_open(0x0, 0x1, 0xc, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r5, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f00008b00000000", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000380)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000010) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 5m5.670873298s ago: executing program 2 (id=673): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ptrace$getregs(0xc, r3, 0x9, &(0x7f0000000180)=""/63) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x8625, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6, 0x0, r6}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r7}, 0x38) 5m5.442913649s ago: executing program 1 (id=676): socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x60f, &(0x7f0000000c40)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={r0, 0x9d6}, 0x8) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000000000), 0x1000000000000019, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)={0x0, 0x43c, "69a2c521bb4fdf5d1c5e64724bab22cfb072ea626356e0a1c4738d19c16c3690b61a3e5dd116583260fa790bfcfed72da69ff7eb9512733c81ee584ea9668546ef072bae75b095316bd50ae7d8db30cd9bd7897fcd780fe489ac9168c06fa7b7e4f0a798828dff4de510cf7dc76f7cb9b2a74d2385377069d7598da6e2969f18bfe03a9bce3a9b353109a60530be457b026dad169666fd8fe7452405fcee24e9912cc78dec917233e65efd68b5b8561680d599700dc966402eb5bacaf9f9483dc765919b235b380592be297c1175474db4605bfe73f4e83ba43f11c9224aab29436fc0c170fd2074fe55df35731030ce40de55c6a88fc4dbcf3c73a51ee36b07dc1a769fb60cb6e4118a18ecf87fe4671a319928816639a72d1d15b8511d64fc4f21fccb864ba7bcd42b05a99441221fcc03ae2fb2083d9f7d0d4d26627e861f9a5be96c5636ac4131f258290fe52da28b447e6e8393f016b4f8b17ef1afa579976541adfb8351e4ccbef67db12ed4ada30d4e59f403ca4b3b2fd50334103407c867995dd34499396eecd56eb5cd80ca3c1835e65f3d64f0a9fbb3e9bc23e6d78aeab1effdc1855fbbf8ef77bf567693dea2c594b1fd4800b05da2678a89f908956fe3384087a9d248ae2798504db49c65caa0a9551727eb7933c2017d2268bf72abe62fecc8ddbe56534a978915478118b985ecd13b466e487f2d7c79cff4aeef8ea12a9adf6da7f7156e235404c2b85d8e59a35c89cd7c6e0934796dc4357740491ebaefd71142b393479e7eb8466f573b33b763862fa7821113c396410bc6f9fb7cb57dec36563d84deca70d6ab756e2a7e8c0aba262e5ca0ba6b94c4f7974450663abd63f10c74196afc29137f56ec82c8a503db24165759d8b7eae8be8ac7e26b1f704c352a46b53bd1010b3ddaa7bf532e7046811b27c63a7ed43b1470d167c6ab96f46ecfc5b4e28cc5ecf181ae13697f670da50e0b4c60b0e6660e5b83863b4722b04b2e1180db69d70643acafe393696fb1f1812cd554092fef66747ca0666fe4f14c59f41f38f2c0c39d6a2c20c27d96e957c4047a594685aeffd8addf46727d446e2dcd45e7e335d0e5758388ffaff401209c5cb1e0681d9d418a1eef297dff948f5f3b978645eeb512ead89c4792aed813b681c45c69e92ae289de18fca3b584fa2dfc614787d3c60f4ba44ec1244442c70593b02afdaedcde888fe5c93599c19f37b8758db3ea782c12c8dd79e7a0f60a1f2a89d1bc1a8d0fcf77e84d4ff0aa98f8415d026df90d078b8e76111d28adebb33893db9e50882bd836912ba9641d88b20d80f0496302dd9fb550d64a3e860b22c87732d33c6a6689e6f0c06503b9f271cc02ca12debb13b268d2e02f4aedfc875ee6830f7a0b0d0b14494166ae09ea5f6d014409d7afbaa28cb286c5ad48e2f654a808f516a79b2755de0fc03e1b4913bdf3f1189dfb41dd7a7374f76fc6441f8a6fad726c2fd87be567c040379ed4684a844a30b5d23aa755bf987f9426800892fd9903"}, &(0x7f0000000100)=0x444) 5m4.643342127s ago: executing program 2 (id=677): r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8331, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x0, 0xd}, 0x2000, 0xffff, 0x0, 0x6, 0x8, 0x697b, 0x1, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r0, 0x2) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000100)={r4, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000007c0)={r4, 0x7d, "b3da3218acc662a1fb2b6dd4e7feef4b68a53ec24323d2dea941c697a79b5f2fc10d575254786d123b43e0f1f87484a2eceaa992bf01a61e0b01f3156befee9656a30bf933009760ae3c55c57f261d741521f3a308344357c300bf29efef67e35470e3cd565bbbbe542f4aa36eb042572d5183b7e284377803ef0ad830"}, &(0x7f0000000480)=0x85) sendmsg$inet_sctp(r1, &(0x7f0000000600)={&(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000080)="5713112ca04c2a056715bce85e3f8861b392809e9bcdec92ac944b794eebc76b155fd160393ef188584f3f602db3ff7e903db41fbeb0f1b6124b5345410a8c8ef418e9f320", 0x45}, {&(0x7f00000001c0)="fa5345bb0769ad6bae8b", 0xa}, {&(0x7f0000000200)="71cf92ddf7dc3d15d9dec27ffac71ee3f5bac5562f3a07f52f4fb4860f45623b740c0ddda05211ee3891948bbbdf0db3560f77ff4b9c3872d7843858558578bca03524c436cc9657aa1c11c2d719d89c77a60cb9a375ab287fa0db3f587340e085975b64ad57b92b40f9ee19a145f91a879d070819", 0x75}, {&(0x7f0000000280)="ee7cb18f892bb7ec2785ba0347eecb6f39f4cd146303c8ed7cc6ce016ea74f952f4fb39dd593f592d17aa9a2906d384039d646", 0x33}], 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000008400000042000000000000000700000018000000000000008400000007000000e00000010000000020000002000000008400000008000000200100000000000200000000000000011800000000000000840000000000000007005003ff03000020000000000000008400000002000000060008000000800000ffffff", @ANYRES32=r4, @ANYBLOB="180000000000000084000000060000000300000000000000300000000000000084000000010000000500311a0080000008000000ffffffff03000000010100000d000000", @ANYRES32=r5, @ANYBLOB="20000000000000008400000008000000fc02000000000000000000000000000030000000000000008400000001000000020040000c0200000100000009000000010000004d01000004000000", @ANYRES32=r6], 0x120, 0x400c000}, 0x4000005) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r8, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 5m4.578791523s ago: executing program 1 (id=679): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x10, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'nr0\x00'}}}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004001}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000001c0), 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000540)='./file0\x00', 0x2000040, &(0x7f0000000140)={[{@check_relaxed}, {@map_off}, {@hide}, {@map_normal}, {@cruft}, {@hide}, {@dmode={'dmode', 0x3d, 0x800}}, {@session={'session', 0x3d, 0x54}}, {@check_relaxed}]}, 0x1, 0x557, &(0x7f0000000580)="$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") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4087, 0xff7) 5m4.371479618s ago: executing program 1 (id=681): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r6, r6, 0x0, 0xe3aa6ea) 5m3.527008397s ago: executing program 4 (id=683): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x100888e, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@delalloc}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) 5m3.338911946s ago: executing program 2 (id=685): syz_mount_image$iso9660(&(0x7f0000001180), &(0x7f0000000180)='./file1\x00', 0x102c481, &(0x7f0000000040)=ANY=[], 0x3, 0x7e0, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x80642, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0x78, 0x30, 0x51b, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x0, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0x7, 0x3, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}]}]}, 0x78}}, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, &(0x7f0000001280)=0x40, 0x4) fchownat(r1, &(0x7f0000000940)='./file0\x00', r3, 0x0, 0x1000) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000011c0)=@nullb, r3, &(0x7f0000001200)={0xe9, 0xff, 0xc, 0xe0b, 0x400006, 0x2, 0x7, 0x1}) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(r4, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xffffffffffffffff, 0x0) r8 = socket(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000401000008000000ffffffff04000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001089232a7b198d5bea0000000000000000002000"/36], 0x50) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback, 0xc}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x3]}}, 0x8f) socket(0xa, 0x3, 0x3a) 5m3.255352258s ago: executing program 1 (id=687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) sendfile(r1, r2, 0x0, 0xec0) 5m3.02949315s ago: executing program 4 (id=688): unshare(0x2000400) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x90100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000, 0x2, @perf_config_ext={0x0, 0x2}, 0x1306, 0x2, 0x0, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x2120) 5m2.540464774s ago: executing program 1 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m2.110431152s ago: executing program 2 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200ac14140d0c000280050001000000000008000740000000002000068008000100ac1414bb080002"], 0x84}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000180)=0x7) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}]}, 0x0) timer_settime(r6, 0x0, &(0x7f0000000000), &(0x7f0000000380)) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34004a006d00010016bd7000f3db759f37d0b102", @ANYRES32=0x0, @ANYBLOB="0a000000002800001400350062726964676530000000000000000000", @ANYRES64=r2, @ANYBLOB="1f1bea697eb1c6019d3924bb357b3221b6af50d1dcfb52e804d374215a23130ad1e4f5350cfe79ad0cd32e0c54c497d766bce18adfb16ba0addae53e9cbc4c1cb30362b32b93dc7f0deb4ebd078ef4dcd2d4611153e61e07bfaff62e269b6e12844f98de"], 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2d}, 0x94) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0x8005, r10, 0x4}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 5m1.390816067s ago: executing program 2 (id=693): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) 5m1.17091366s ago: executing program 4 (id=694): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0), 0xa00}, 0x20) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_audit(0x10, 0x3, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace(0x10, 0x0) ptrace$pokeuser(0x6, 0x0, 0x388, 0x8001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x118}, 0x1, 0x0, 0x0, 0x240401d4}, 0x240408d0) r6 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r6, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1}}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) preadv(r7, &(0x7f00000012c0), 0x0, 0x806, 0x3) getsockname$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, &(0x7f0000000100)=0x10) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x438}, 0x1, 0x0, 0x0, 0x4000}, 0x800) syz_emit_ethernet(0x5a, &(0x7f00000004c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "abb9bfe0c34c72d50c66fa8369f6e787"}, @md5sig={0x13, 0x12, "2a9c444be69caceb3fbd4ef8047b79a3"}]}}}}}}}, 0x0) 4m59.445294918s ago: executing program 33 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000700)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5560}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r3, &(0x7f0000000940)='./file0\x00', r4, r5, 0x1000) setregid(r2, r5) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c757466383d302c696f636861727365743d63703836302c696f636861727365743d6d616363726f617469616e2c756e695f786c6174653d312c747a3d5554432c6e6f6e756d7461696c3d302c756e695f786c6174653d312c696f636861727365743d63703433372c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d6d697865642c6e6f636173652c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c736d61636b66736465663d757466383d302c64697273796e632c736d61636b66736861743d262c657569643e807d6dc634ae06b292a3825c7626caa45b7a39a81660437a556646a082c54e8cf9c81260f6a760b9f06d5738818ee5a4503b0364b0f4c56abfe2", @ANYRES32, @ANYBLOB="2c6f624a5f726f6c653d80006173682ca8ea26de004d22080834ec21408c1cbd571f6191519244adb50f367988fb2727cc32238fac4fbdc332b1719e340000000004f23246a8d5ec9c21dd657ad6d91f895438297d5da5a51f2163a3aefc9a13608114683a6be3371b75c707284241970a8159ba2bec7414c90ddbdd8218b3ce593b992196b6a3cd4bc2bb6754b654ba0fa3821193cdf866d2630a60f040d612f358308919f24bccb430ad754832a2402e3b7240e7eec9ad32c333f3dca7ab50db1f0415a70ece849f03e8441be2c1c54491c7428bbfdcea758eb7de27821cbc79a45c11b52ff4b704fefa01987a8fa8be2756414f8d10f022600574c68d130d46301ff52bbd08cf61190205"], 0x25, 0x359, &(0x7f0000000bc0)="$eJzs3T1onHUYAPDn+ia5JFiTQSg6nW6ClCbioFNCqVDMoJXDr8XDpn7kzkIOD+KQyy1KcVJcBJ3cOujYWRxE3BxcrSBVcbFbocFX3rv3vnJ3Jhkutvj7DeXh+f+f+z/vB33fhOSf15uxdXk2rty+fSvm5wsxs3Z+Le4UYjlORRIdezHWR3Pj8wDAPe5OmsZfacfhsz9Z7Eae/QBw/2o//9883U8Uj1F87YFptAQATNkRv/5/fmz26tTaAgCmaOT5/9jQ8IFv88/0fiYAALh/vfjKq8+tb0RcKpXmI2ofNsqNcjzTH1+/Em9HNTbjXCzFfkTnRaHztpD9++zFjQvnSpnflqOcVTTKEbVmo9x5U1hP2vXFWImlWM7r0159ktWvtOtLEbHXbK8ftUKjPBuL+fo/L8ZmrMZSPDRSH3Fx48JqKf+Acq1b34xoxXz3ILL+z8ZS/PhGXI1qXI6stt//7kqpdD7dGKpvXC+25wEAAAAAAAAAAAAAAAAAAAAAwDScLfUs9/a/SWvNxgeXDk7ojRfb+/t0hvP9gVqd/YHSYnd3nmvJwf2BhvfnaZRn4tR/euQAAAAAAAAAAAAAAAAAAABw76jvzEWlWt3cru+8vzUYNAcy737/1bcL0R2ayUvfSfpVkSeHPqc7ceCTk+gtkfbK02RoTh4kEd3Je5XrN3odD84p9o5ipDwLiiNDhbynSrV6+tFfPx9X9XcW7LUzSYycluGgkK8/MFR7MEvMR8T+pKrJweohc26maTqpfPezXqbbVj0KETNx7DaOEHx3662Hn6yfeaqd+Sbf9OHxJ5Zeuvnpl39sVarR6rRQrc5t1/fTSVcnvxZZJut1dK1k4P4p5Oe5MOZOGB+0+pnWdn2nkvz058uPfPzDgcnJ+PsnHcy8N3mtrw9m5jpBIWK5exL+rdXZMTf/+OC1u0Nn7LCqhaHMmS/WKjd2f/n9qFd54D8JG3UAAAAAAAAAAAAAAAAAAMCJ6P/S73Gqnn5heh0BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMnr//3/gaA1kjlKcLcZo0PFze36xMUXTvRQAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4H/snAAD//82Fa84=") perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) 4m59.420885873s ago: executing program 2 (id=696): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4m59.420339453s ago: executing program 4 (id=697): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") sendfile(r0, 0xffffffffffffffff, 0x0, 0xec0) 4m59.239014874s ago: executing program 4 (id=698): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) 4m59.154031116s ago: executing program 4 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000002000000", @ANYRES32=r0, @ANYBLOB="0600150007e000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60cfc3606b4f01012fa83b5282e6dcc0950e96a94605a0eabb9f5e2e56edcecb74893d532f3bc72f8f043417531e20b15cb6a4610a289efe2598927ea8f0457032f928ed21c8ff76502e1fd093c1f6c0fc575fd2a27cb7e71e60683d000230181e99742151df89adf474e7e7dfee0000000000000000000000000000b57b0641f5542d2241190db19bec8286d608d2db57114a24d2fe63c701f2e911b7dad5b37295882c707570649688e3e6f0245e0c1273cb7e2816d9831e5cfbbb6923b18cf180989661743822f13c1868232636", @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf250e00000008000600040000000c000180080009004d00000008000500dfed00000c00038006000400f6ff00001c0003800800010001000000060007004e240000060007004e2200000800050009000000"], 0x60}}, 0x40448a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="4a7b8798bfca14184162d5034c19d47d14bb527280d9c4e50f6e", 0x1a}], 0x1}, 0x2000c8c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) accept(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, 0x0, 0x0, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r7, 0x240000000) 4m48.182006865s ago: executing program 6 (id=724): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf2502101004090000060620010008000200ac14142a"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 4m48.107444209s ago: executing program 6 (id=725): getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000040)={[{@quota}, {@noblock_validity}, {@abort}, {@nojournal_checksum}, {@abort}, {@i_version}]}, 0x1, 0x797, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 4m47.261172018s ago: executing program 34 (id=689): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000040000"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m47.08540174s ago: executing program 6 (id=728): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x40000000, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xf340, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0xbc, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x7d, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x97, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x7, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x0, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r4, 0x10, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x1000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0xfffff788}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x0, 0xffff}}}, {0x8, 0x6558, 0xfffffffe}}}}}}, 0x0) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 4m45.517141742s ago: executing program 6 (id=731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000000)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) mq_open(0x0, 0x1, 0xc, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="190000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000340)={r5, &(0x7f0000000400), 0x20000000}, 0x20) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f00008b00"/47, @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000380)={r8, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000080)={r8, 0x1, 0x6, @multicast}, 0x10) sendmsg$nl_route(r0, 0x0, 0x4000010) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4ea0, @remote}, 0x10) sendmsg$nl_route(r0, 0x0, 0x0) 4m43.611064062s ago: executing program 35 (id=696): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) ioprio_set$pid(0x2, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe3aa6ea) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 4m43.496133808s ago: executing program 36 (id=699): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000002000000", @ANYRES32=r0, @ANYBLOB="0600150007e000"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60cfc3606b4f01012fa83b5282e6dcc0950e96a94605a0eabb9f5e2e56edcecb74893d532f3bc72f8f043417531e20b15cb6a4610a289efe2598927ea8f0457032f928ed21c8ff76502e1fd093c1f6c0fc575fd2a27cb7e71e60683d000230181e99742151df89adf474e7e7dfee0000000000000000000000000000b57b0641f5542d2241190db19bec8286d608d2db57114a24d2fe63c701f2e911b7dad5b37295882c707570649688e3e6f0245e0c1273cb7e2816d9831e5cfbbb6923b18cf180989661743822f13c1868232636", @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf250e00000008000600040000000c000180080009004d00000008000500dfed00000c00038006000400f6ff00001c0003800800010001000000060007004e240000060007004e2200000800050009000000"], 0x60}}, 0x40448a0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000003c0)="4a7b8798bfca14184162d5034c19d47d14bb527280d9c4e50f6e", 0x1a}], 0x1}, 0x2000c8c0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x404, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r6, 0x90004) accept(r6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc92b18236457ee3c8", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x3, 0x44, 0x0, 0x0, 0x20, 0x3, 0x0, 0x4bf, 0x404, 0x0}) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x110, r7, 0x240000000) 4m43.46227901s ago: executing program 6 (id=735): socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2010871, &(0x7f0000000300)=ANY=[@ANYBLOB]) 4m42.637379393s ago: executing program 6 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200ac14140d0c000280050001000000000008000740000000002000068008000100ac1414bb080002"], 0x84}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000180)=0x7) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000280)=0x10) timer_settime(r6, 0x0, &(0x7f0000000000), 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34004a006d00010016bd7000f3db759f37d0b102", @ANYRES32=0x0, @ANYBLOB="0a000000002800001400350062726964676530000000000000000000", @ANYRES64=r2, @ANYBLOB="1f1bea697eb1c6019d3924bb357b3221b6af50d1dcfb52e804d374215a23130ad1e4f5350cfe79ad0cd32e0c54c497d766bce18adfb16ba0addae53e9cbc4c1cb30362b32b93dc7f0deb4ebd078ef4dcd2d4611153e61e07bfaff62e269b6e12844f98de"], 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2d}, 0x94) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0x8005, r10, 0x4}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 4m27.082558036s ago: executing program 37 (id=736): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac14143208000200e00000020c0002800500010000000000240002801400018008000100e000000108000200ac14140d0c000280050001000000000008000740000000002000068008000100ac1414bb080002"], 0x84}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000001300)=0xffff0002) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000004c0)={0xa, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x10000, 0x3, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$pokeuser(0x6, r4, 0x358, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r5, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) timer_create(0x8, &(0x7f0000000240)={0x0, 0x18, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000280)=0x0) r7 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1bbc, 0x801) ioctl$EVIOCSCLOCKID(r7, 0x400445a0, &(0x7f0000000180)=0x7) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x12, &(0x7f0000000200)=[@in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000280)=0x10) timer_settime(r6, 0x0, &(0x7f0000000000), 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34004a006d00010016bd7000f3db759f37d0b102", @ANYRES32=0x0, @ANYBLOB="0a000000002800001400350062726964676530000000000000000000", @ANYRES64=r2, @ANYBLOB="1f1bea697eb1c6019d3924bb357b3221b6af50d1dcfb52e804d374215a23130ad1e4f5350cfe79ad0cd32e0c54c497d766bce18adfb16ba0addae53e9cbc4c1cb30362b32b93dc7f0deb4ebd078ef4dcd2d4611153e61e07bfaff62e269b6e12844f98de"], 0x34}, 0x1, 0x0, 0x0, 0x40048a0}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x71, '\x00', 0x0, @fallback=0x2d}, 0x94) ioctl$XFS_IOC_START_COMMIT(r3, 0x80585882, &(0x7f0000000000)) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140), 0x8005, r10, 0x4}, 0x38) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) 2m10.465639376s ago: executing program 7 (id=1601): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000140), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200), &(0x7f0000000100)=0x8) 2m10.444108332s ago: executing program 7 (id=1602): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b0001"], 0x44}, 0x1, 0x2}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000020000100dcec51ecfbdbdf250210100409000006062001000800"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2m10.373728167s ago: executing program 7 (id=1603): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x2000) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400800c}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) (async) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x11, r0, 0x2000) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x401, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x40}, 0x1, 0x0, 0x0, 0x400800c}, 0x10) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0xfffffffe}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 2m9.55331605s ago: executing program 7 (id=1609): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000f020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) open(&(0x7f0000000080)='./file0\x00', 0x0, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES16=r0], 0x24}, 0x1, 0x0, 0x0, 0x4881}, 0x404c000) r1 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x84}, &(0x7f0000000180), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x3ffffcdf) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r4, 0xc0185879, &(0x7f0000001280)={0x58f5, 0xd0002, 0x2, 0xfffffff7fffffffd, 0x1, 0x0, 0x2401}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000003, 0xc3072, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r5, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) r7 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x7}, 0x1c) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000000000)=0x0) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0x1, 0x0, &(0x7f0000000400)) 2m9.012156894s ago: executing program 7 (id=1616): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x15, 0x0, &(0x7f0000000000)) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000200)={'filter\x00', 0x0, 0x3, 0xec, [0x8, 0x2, 0x8, 0x81, 0x4, 0xb16], 0x3, &(0x7f00000000c0)=[{}, {}, {}], &(0x7f0000000100)=""/236}, &(0x7f0000000280)=0x78) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0x40e8662e, &(0x7f0000000080)={0x80000000000ae, 0xd000007}) 2m8.769030462s ago: executing program 7 (id=1619): timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r1, r0, 0x0, 0x3ffff) 2m8.768677482s ago: executing program 38 (id=1619): timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r1, r0, 0x0, 0x3ffff) 8.150662993s ago: executing program 9 (id=2331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r3, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="c6f1c436", @ANYRES16=r3, @ANYBLOB="01002dbd7000fbdbdf2501000000140002007767310000000000000000000000000024000300b08073e8d44e91e3da922c22438244bb885c69e269c8e9d835b114293a4ddc6e"], 0x4c}, 0x1, 0x0, 0x0, 0x20d0}, 0x44000) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_ALM_SET(r5, 0x40247007, &(0x7f0000000100)={0x3c, 0x21, 0x3, 0x1a, 0x3, 0x4, 0x2, 0x14}) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x1010040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x182) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r6, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd70fdd9e5557ad2d08e000400ae80"], 0x18}}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6004000000140600fc010000000000000000000000000002fe8000000000000000000000000000aa0000c001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="504000099478ff886c36b392befd"], 0x0) r9 = memfd_secret(0x80000) getsockopt$sock_int(r9, 0x1, 0x2b, &(0x7f0000000280), &(0x7f0000000300)=0x4) ioctl$TUNGETFEATURES(r9, 0x800454cf, &(0x7f00000001c0)) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x214, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'pimreg\x00', @link_local}) 7.549790514s ago: executing program 3 (id=2332): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010102, @multicast2, r4}, 0xc) ioctl$FS_IOC_SETFSLABEL(r0, 0x8915, &(0x7f0000000000)="37c4a5e33a6081f2a3fcc30a2ea92ef80f6427c344d1178a1c43ca4f0000ec67b9f27cd83b08959c0e471c4ae78b9cc4c7603c7a040782f3c379a03019e3bfd92533743c77dd984784f531853d184c539dcac54ff2e955ab3fd1c00b016be5e263b9695d15c56bbfcc195f2b2c6ac6c6c02f59935620d42a59a7e285c4e602bc5acbf3e1bfd871e98e4f37b281b5e13b55a48e24a9981b78fe9de127f5b2c8ae0a12cbc189b6a1f44e298ff0acca36aac1967ea538fb81000000000000003d868eac5217ad9b6e5c0f7bba6311f4b36020ec81e814f17062e2d5766abba3d757582a9b922b726173db7a852dc7983fdc000000000000000000001000") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="120100060277791363eb1a12b0b4884d0b0000402505a1a440000102030309025c00020102f9030904000001020d00000024060001002400000000240f0100000000000000881357c2000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0x0) r7 = gettid() syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 6.64539764s ago: executing program 9 (id=2340): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000006d00000425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004000000004000008000d000100000008002e000200000008000d00001000000a000200aaaaaaaaaa20000008000f000900000008000400000000007b1bffd5430d1655aa6599bca1c213ef00241f6bd9bee18c"], 0x54}, 0x1, 0x0, 0x0, 0x240408c4}, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x8, 0x9}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000006d00000425bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="004000000004000008000d000100000008002e000200000008000d00001000000a000200aaaaaaaaaa20000008000f000900000008000400000000007b1bffd5430d1655aa6599bca1c213ef00241f6bd9bee18c"], 0x54}, 0x1, 0x0, 0x0, 0x240408c4}, 0x0) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000000)={0x4, 0x8, 0x9}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) (async) 6.295079674s ago: executing program 9 (id=2341): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (fail_nth: 3) 5.790741836s ago: executing program 9 (id=2344): timer_delete(0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0xfffffffa, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r1, r0, 0x0, 0x3ffff) 4.92767263s ago: executing program 9 (id=2347): bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000006febcee83c8aef7a2c378883e261b2f991bdbb577d982ca56dcf29d1684d936b3001099dd5617a3f632b771d6ff78e0186c4f1386b615ba27da6d836c38a033faabfec3c5dd361619056b77f5d8673625033c7bff3ce352c6df92d2a87094231cda00ec10f"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f00fff9000000000b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0a060000000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%+9llu \x00'}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'nicvf0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000340)="ededefdeb5c3c51e23134dd1f0d29ac92cd759857d943731b68698ba06b41f262c79c60c056410ab32567b9b02cd0cf13cd7e06450f37023051bcad2379a343e3b836d73070d19e45abecf1b4d1905d51099fe15c8dc10766bd93ff145e419d260fb701e318bbf8f140bfadb7b7a2939f4b1f8839dd1a68ebcb55545f4e9f515cc1dafe5cd3b120fe4d98dee282cf5510b742d", 0x93, 0x90, &(0x7f0000000540)={0x11, 0x8, r6, 0x1, 0x7}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1, &(0x7f0000000200)=@raw=[@ldst={0x3, 0x0, 0x0, 0x6, 0x5}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) 4.37289569s ago: executing program 3 (id=2348): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x84680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x410002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x4, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r2, 0x0, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) openat(0xffffffffffffff9c, 0x0, 0x2c41, 0x10e) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r4, &(0x7f00000023c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000002100)={0x2a4, 0x15, 0x10, 0x70bd2b, 0x25dfdbfd, {0x2, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "5dc58a293ad1538b2099190e7592b8e95d7bca4d92b8ae819944704cc807fdcd49ae3d64d0d1a18606728786501acd274706ddb620bd9d0f4373bbfeebf72ef87e24ac4033dc12b906c58a1425f4fb8882fe475135890ebcf3da2787b6e7c98424be4c5739045580534b7f0e8b7502a3b55a8a06ea06bf4df32b949acb34476be8951a5d7335b629909da19bb73d51f9e58572acd9d76a68e1de84aa2fd8f0be759eaf474732d0cb6bcc3addf5f740fb06769a1aec4366ab0a31100a822f3dc1c2f695184de3732861ea74435ffd7996d7d5f1"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "f55244b5e5637868be4e6557aaa3af768beffa7d27b5f04e259531f7859d75c3028d4e3162720c1e81514d32a6fb597221c895d738aaad0f9437c9dbdd26ba3178a7e84bede234061086f75eb4a2e138bf97d80168af72be6d957bb330c23ae60eb74a5b4be3a8e1388e9224d79feaa54b9936fa1a30d1c2dfe273a8ac849ac15de21090dc838603fba09de57a07a92becdba9be66c749bfeb6ffc1576fa03d9d27d26e922ff409f3588c75ec966819030922ef7f4542854184c33b96e70ab77a61bc31c88cb60b4c04ff9afa31c1295999c217b310c"}, @INET_DIAG_REQ_BYTECODE={0xd1, 0x1, "54c2931a94b3f292e42663aa6a9bf63d4efa91d7f17c3d64cc83021bc70729fea0b8771c43e4a768daa67339758fce665c45933f7478c0d058fd701d54717a3b07f3f83c42f163cd27c0606e32d210f4ca4fd7551814c5b135679df1909730f33402cfbf3e3037c9a1c88d1023defc7bf419498dd82dc1c5c82f607fe69a01b738de605822c2a3dcf4007a3a2e8b015573821730af3070e9f1fbc85b6348e6ce4ebcbc101f3d5753b4ed8e964c091d44fb37a433da6b58a348c6e101ce48335594fba1ee9b39a4b1bb3311f8fd"}, @INET_DIAG_REQ_BYTECODE={0x5, 0x1, 'v'}]}, 0x2a4}, 0x1, 0x0, 0x0, 0x48000}, 0x10) 4.288411992s ago: executing program 3 (id=2350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7c0000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000021280000540012800c0001006d6163766c616e00440002801000b182dbf3c1ab07c7245dcef8d03197cb8f3182ea16095d4d3649c01cb3c4ce77a53ff46b6c26c13f307d82945568dee505800a000400aaaaaa2aaaaa0000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) r1 = socket(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x11418, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1, @perf_config_ext={0x8, 0x9383}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x9, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000800000000001800038014000380"], 0x44}}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7ffff000) getsockopt(r1, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) 4.130133448s ago: executing program 8 (id=2351): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x14}}, 0x0) socket$inet6(0xa, 0x3, 0x3) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_io_uring_setup(0x10d2, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa224, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'tunl0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x10, 0x8, 0x7, 0x1bb0e9be, {{0xf, 0x4, 0x0, 0x2d, 0x3c, 0x66, 0x0, 0xe, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x14, 0x2b, 0x1, 0xc, [{@empty, 0x9}, {@loopback, 0x1}]}, @end, @lsrr={0x83, 0x7, 0x9f, [@broadcast]}, @ssrr={0x89, 0xb, 0xc1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end]}}}}}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmmsg$inet(r4, &(0x7f0000001440)=[{{&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000100), 0x0, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14}}], 0x30}}, {{&(0x7f0000000180)={0x2, 0x2, @multicast2}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000300)="b598f6722971a8d7c63225457cf79d0606b36d16c344817af6ea1076b7b498ab2410ccad35f12658586719d4ae4fe69a11d8cd478ba5bbc0b1bd8abd8e1ed587527904b41536e927bd597afd9b1ca21d2cb6ad0c72396db5ad744ad69f39b0a517fb2af90fb07a2bf1e4039e0eed22ec6ab8c70dd850b81ed6fc219cabaf58ce9e28f8378b54fff0386d6b5c2dc88dbeac5da73fdf6eb4ae5cab507d27bbfafecc0df7b5881ee1872b58", 0xaa}, {&(0x7f00000003c0)="52cdb0c9dc2295bc1a918e3a5a3b5cbc4343443035772de7f0ba3c2ee01f79240c3672251a622aadd5896a0bfa5c113ec057b2ba96195c2aab9488bed095ecdcff38c2fe3fc7542ab1fc50f371b4e9eaf142f702efc2c9a3fc68547bd89ba11b4a0423d0", 0x64}, {&(0x7f0000000200)="eac2f7725ea5ae861b599e164ccc818be76749264bf7725fc56ddc14d943b846b7ca5b92b456df979d5a98f3e47aa71bb0ff", 0x32}, {&(0x7f0000000440)="d92b4030a16f039313bb89d850e442b85667dbd9c4c2857feabecef6013559e728507068aba4f9be1c06ba31b6f335f0136847138f1b5d14353fe1ae589cc8e619e6ae15bb5b5ec27c3081bad2f47b2eb594aff5a3191478e38e742cf9aff7f7c8badc374d10e014f27447b56b861cdd41a23e6dc31c482926376a7f13464f6d8430a635f07e583373eb65cf45999ed5ae64ebd7572643730beb13010c35991103b390a4f11ecaf7f7b55c56688f40c8e386d06e176f8624854771dd27107fdb33c0ffeab5d6c16709149d94afacbdfc236a6ac8848fe8b900c273d8504851a48363378959382444da1258bbd32c62271979dffa72d55e", 0xf7}, {&(0x7f0000000680)="41722122dd340078c9c4f8e7921badf6fcae0a7bd0a756763389cf4c249b8985e5fa8027ab75de9be4d377cac839ec018212777c2b44f89e08240156c80a8ac93bab580e4c9c0ae81696fa292c36e27cca8769184d8571d774cceb43add7c63046b7a4f9b1d4a8b22fcc98c045ca26f001ad9aaf5d6b429f5916e7f327dc3eeb83f72f967800e1e0b12b8fb08700f13310bb38321c4b8e21db568ebe1c802baa77bacf36d20c400b92b36515d2a11b4acb82b6bb91", 0xb5}], 0x5}}, {{&(0x7f0000000740)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000900)=[{&(0x7f00000009c0)="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", 0xfb}, {&(0x7f0000000780)="5aff3eb8285c7f04dd4b3561a90253cdfc3b3ae4ae3f84f2609bb19a18d2be24d00abdc56dc1862d7ae245064228edc088020774e59d426ac0ef2f2c7c7efbcb5700923a9315aa02e970ba8da5938f23ceb88d746e4eb95858e5d6270703ef4d490fe7d41991c857f3967b0b49a4d45c1a13adc0170d75ac1d47e694c0f0449809b45aee107697d2f1a81333bc16bec6e19d9552d64a5fb126c10444a327e31ec31b45667d58c109bc9ddaab38455299669e", 0xb2}, {&(0x7f0000000ac0)="6260896046794a89be475b91a3215803be56562d320b075e7f0f378f24c3d6095c83eb3c0e1da47549370091747fbfed6a7323a7390a5b4c82a5868a0da60a22da5fc448c9f86409435f1f0d3acfbc99f61244b3a6303d11748e19f4f95954a01c845c43c9cf2d903f7a54aedcec66735ec685e394ab6cd34aef0ab3f2e513532cde07592459ffd578faf9019494badafb70e3850abab1e2370f402dd8daded9830082f196af35c4954e281f45a3b0b036881c9f73ea6295be4fc964d98c2a021398bf372a920a5a347f7378b7a124bf0ec278c748b72f", 0xd7}], 0x3, &(0x7f0000000e80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @loopback, @multicast2}}}, @ip_retopts={{0x16c, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x25, [@private=0xa010100]}, @ssrr={0x89, 0x17, 0xc5, [@loopback, @multicast1, @local, @local, @loopback]}, @rr={0x7, 0xf, 0xf6, [@dev={0xac, 0x14, 0x14, 0x25}, @broadcast, @remote]}, @timestamp_prespec={0x44, 0x44, 0x49, 0x3, 0x6, [{@multicast2, 0x5968}, {@loopback, 0xff}, {@multicast1, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0xb}, 0xffffff59}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@rand_addr=0x64010101, 0xffffff0b}, {@empty, 0x200}, {@empty, 0x3}]}, @lsrr={0x83, 0x2b, 0x75, [@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @private=0xa010101, @empty, @rand_addr=0x64010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x1f, 0xa3, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @broadcast, @dev={0xac, 0x14, 0x14, 0x16}, @multicast2]}, @timestamp_addr={0x44, 0x4c, 0x6d, 0x1, 0xc, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x19a22ba5}, {@multicast1, 0x8}, {@multicast2, 0x4}, {@private=0xa010101, 0x8}, {@broadcast, 0x81}, {@rand_addr=0x64010101, 0x800}, {@local, 0x2}, {@rand_addr=0x64010100, 0xff}]}, @end, @timestamp_addr={0x44, 0x54, 0x87, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x10}}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x7}, {@loopback, 0x10000}, {@remote, 0x8}, {@local, 0x9}, {@private=0xa010101, 0x7}, {@multicast2, 0x3}, {@broadcast, 0x3}, {@empty, 0x6}]}]}}}, @ip_tos_u8={{0x11}}], 0x1a8}}, {{0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000c40)="8c962d1df320d891deca7d65dcb55b588e20088fcf13e8fa622b83bfd2542a49221c19667f8bbc5f2a738a762e8699103a866f23a3ee0129349329489f415b07455d8e123f6b82dc759a7c832cf8e5f6db65e45a77749900847e8566f9ceb2ed87f3078da76d7e5fb929e9f97d6cfed5397fc2f47880b6b0499a863a37fa33d44149a2c19e2a2629b0dce831d4c0590b59f8140fa28ae7562772e0066f", 0x9d}, {&(0x7f0000001040)="45ca36e1cb579384459eb43f9eb141c1351353f9d083814b6a41e9ffc7060dee3c977991409fe1abfe81eb393870dfcfb41e355819bf9a38f4a4dcc58a932ea493777ca706e86d29debc576d25bcfecd1a18d2bb9da8aaad0e0275fe0d523cabc3ce2ea66f27aa2aac393c76e2f07c2d3ab979de9405a2eede2aa462d0b317be212345e067dc36ab2331afbe1e578bfafd73d06c99ca1a3b2f203523ed78377e45f262c0c2bd1dd9229fb0a034bee8f618ac2e716e8cb3ce638117674daf9af459503e94452aa4d69cbc170371b46120f95d50e8e9fabe74b7356781b7158c83a0f64fd5b810e8119e7c7d81868e1e39ca82fa", 0xf3}, {&(0x7f0000001140)="3866136c45975f955af147263c68a397fb90358b0ba0378e04c1beec688b6a6409ff966dee73dc4f67fcccb2770fdb1da7dfe17cfc1ef2eed09d897493f5988dcd24a29b8b243fbaa3c5cf4240ddb0857cccad6a10e777f7fb2bb47cea9c2327e2a884f409187abe0859d005e621e805f318756fd08f83b97c32a8243a9b40241eb696ba", 0x84}, {&(0x7f0000000d00)="3922326c1e9e8b86865db59ecacccf1757f3cc51129e833b56eb49f134f5a87e88f9bfe121677c73e352dcc2ad95f729d3052b49ade011d3f913488c793931deec5c748c46ca2191471d9298e1e6f41ca8082814", 0x54}], 0x4, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @private=0xa010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x111}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000001}}], 0xd0}}], 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x5664}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xfffffffc}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.372541305s ago: executing program 0 (id=2352): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007}) 3.341818349s ago: executing program 8 (id=2353): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0xffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000300000040000180010004001400010002004e227f000001000000ffffffffffffffff0002000000e000000200000000000000000d0001007564703a73797a3200000000f8c57848707d15acba492520ab208a1addfb75cbed8bdcf8d8b67ac8e1c5467a8b29974b293ea0ffbf2c6dab2a70303008169a4d9b7fd856ebd8b45913659d4a7f4cde84c40d74dc294f499397dc76da6f5796d03327a8960ad2d9e355b460c72008b036a972ebc04d11d7ab3113870b849ea9ad662f3219c7bbb4c40e823b12578d1584456662432bdb75d5e06367b5f6f06225256415d303000000769b7a913c7309724917a674e5f901ce6b0a424f"], 0x54}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = epoll_create1(0x0) epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r4 = dup3(r2, r3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv4_newrule={0x34, 0x20, 0x1, 0x70bd26, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x0, 0x9, 0x0, 0x0, 0x6, 0x10006}, [@FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2a}}, @FRA_FLOW={0x8, 0xb, 0x6}, @FRA_DST={0x8, 0x1, @empty}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4004804) r6 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f00000008c0)={0x0, 0x3, 0x0, 0xfffffffffffffff4, 0xf}, &(0x7f0000000900)=0x18) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000940)={r7, 0xa}, 0x8) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r9, 0x5, &(0x7f00000005c0)='fd', 0x0, r8) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x2) r11 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r11, r11) setpgid(0x0, r11) fchdir(r10) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r12, &(0x7f0000000340)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount(0x0, &(0x7f0000000500)='./cgroup\x00', 0x0, 0x208000, 0x0) close(0x3) 3.303215801s ago: executing program 5 (id=2354): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2720, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) (fail_nth: 3) 3.235030186s ago: executing program 3 (id=2355): socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0xff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810040000011aaab0300e5ff008914a2f4b7339fb201862885080c242e396052fcfa0ba0cab64b937c3f6a8936619c1993e44589ea33a048a385aee38047fbb7bff2ec"], 0x0) r1 = socket(0x2c, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) 3.149729568s ago: executing program 9 (id=2356): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) getgroups(0x1, &(0x7f0000000180)=[0xee00]) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000840)={0x4, 0xf, 0x2, 0xfff2, 0x0, 0x3, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) statx(0xffffffffffffffff, &(0x7f0000000a40)='./file0\x00', 0x6000, 0x100, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000000940)='./file0\x00', r3, r4, 0x1000) setregid(r2, r4) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x3, 0x80, 0x11, 0x1, 0x0, 0x40, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x7, 0x6}, 0x8887, 0x10000, 0x8, 0x1, 0x80d, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000200)=@req3={0x10000, 0x100000001, 0x10003, 0x1, 0x0, 0x0, 0xfffffffc}, 0x1c) 3.11869877s ago: executing program 5 (id=2357): r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x180}, 0x40080c0) sendto$inet6(r0, 0x0, 0x4881b39f, 0x4, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xfd, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) write$P9_RREAD(r5, &(0x7f0000002080)=ANY=[], 0xec1) 3.087571554s ago: executing program 3 (id=2358): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x401, 0xffffffffffffffff, 0xe80, 0x4}, 0x4, r4}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@private=0xa010102, @multicast2, r4}, 0xc) ioctl$FS_IOC_SETFSLABEL(r0, 0x8915, &(0x7f0000000000)="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") fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000a00)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) unshare(0x64000600) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000580)=ANY=[@ANYBLOB="120100060277791363eb1a12b0b4884d0b0000402505a1a440000102030309025c00020102f9030904000001020d00000024060001002400000000240f0100000000000000881357c2000000241a0000000905810300000000000904010000020d00000904010102020d0000090582020000"], 0x0) r7 = gettid() syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x6, 0x2de, &(0x7f0000000b40)="$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") r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) timer_settime(r9, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010000304f9ffbffffedbdf2500007400", @ANYRES32=r6, @ANYBLOB="049c01000750050008001300", @ANYRES32=r7, @ANYBLOB="1400030076"], 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x42850) 3.082787613s ago: executing program 0 (id=2359): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1400000014000103f7000000010000000a"], 0x14}}, 0x4014) 2.530356554s ago: executing program 0 (id=2360): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x40000000, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xf340, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0xbc, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x7d, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x97, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x7, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x0, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000002100)=0xc) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x38, 0x3, 0x6, 0x0, 0x1ff, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0xff, 0x2, @perf_config_ext={0x5f, 0x200}, 0x6080, 0x9, 0xe6, 0x1, 0x0, 0x4a, 0x0, 0x0, 0x8, 0x0, 0x10}, r2, 0x10, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.319066028s ago: executing program 8 (id=2361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x5e}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.91019262s ago: executing program 5 (id=2362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001400b59527bd7000000000000a400000", @ANYRES32=r4], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001400b59500000000000000000a000000", @ANYRESDEC=r5, @ANYBLOB="14000222000000e9020000000000ff0100000000080008002d96147d"], 0x34}}, 0x4001) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0xffffffffffff4e19) r10 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r10, &(0x7f0000000880)={&(0x7f0000000000)={0xa, 0x4c20, 0x2, @mcast1, 0x9}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000001c0)="8000e8beec9dbc33", 0x8}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="24000000000000002900000032000000ff010000000000000000000000000001", @ANYRES32=0x0, @ANYRES64=r2], 0x28}, 0xc000) socket$inet(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x100000000, 0x12) socket$nl_route(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000023c0), 0x80, 0x0) 999.312895ms ago: executing program 8 (id=2363): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x6, 0x400000, 0x0, 'queue1\x00', 0x37fffe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 738.376189ms ago: executing program 0 (id=2364): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[], 0x48) 736.356478ms ago: executing program 8 (id=2365): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (fail_nth: 4) 685.035797ms ago: executing program 8 (id=2366): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004de, &(0x7f0000000100), 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x4, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x8, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x5, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x83fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8001, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x7, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xff2e) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x20000000000002, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4014850) mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) accept4(0xffffffffffffffff, &(0x7f00000000c0)=@ll={0x11, 0x0, 0x0}, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000002400)={0x9, 0x11, &(0x7f00000021c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10f9, 0x0, 0x0, 0x0, 0x2b}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x7fff, 0xa3, &(0x7f0000002280)=""/163, 0x40f00, 0x15, '\x00', r6, @fallback=0x1c, r1, 0x8, &(0x7f0000000200)={0x7, 0x8}, 0x8, 0x10, &(0x7f0000002340)={0x2, 0x9, 0x1000, 0x1}, 0x10, 0xffffffffffffffff, r5, 0x1, &(0x7f0000002380)=[0xffffffffffffffff, r2, r1], &(0x7f00000023c0)=[{0x4, 0x1, 0x0, 0xa}], 0x10, 0x7ff}, 0x94) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) unshare(0x6a040000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000000)={0xfffffffffffffffc, 0x6, 0x7fff, 0x3, 0x2}) write$P9_RVERSION(r1, &(0x7f00000001c0)={0x15, 0x65, 0xffff, 0x8000, 0x8, '9P2000.L'}, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0x40e8662e, &(0x7f0000000080)={0xac, 0x90}) 684.351137ms ago: executing program 0 (id=2367): r0 = socket$rxrpc(0x21, 0x2, 0xa) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0xfffffffffffffffd, &(0x7f00000001c0)="186bf7ffffffffffffffef0a3254", 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0xd, 0x0, 0x0, 0xc, 0x5}]}}, &(0x7f0000001f40)=""/4105, 0x26, 0x1009, 0x8, 0xf0d5}, 0x28) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @multicast2}}, 0x24) 419.12176ms ago: executing program 5 (id=2368): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x6, 0x400000, 0x0, 'queue1\x00', 0x37fffe}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 412.313919ms ago: executing program 5 (id=2369): socket$key(0xf, 0x3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0xff}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000810040000011aaab0300e5ff008914a2f4b7339fb201862885080c242e396052fcfa0ba0cab64b937c3f6a8936619c1993e44589ea33a048a385aee38047fbb7bff2ec"], 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) 336.572902ms ago: executing program 5 (id=2370): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000540)=0x2000204, 0x300) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) socket(0x200000000000011, 0x2, 0xd) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xff, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x2, 0xffffffffffffffff, 0x1) recvmsg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=""/4090, 0xffa}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f00000073c0)=""/4115, 0x1013}, {&(0x7f0000001ac0)=""/232, 0xe8}, {&(0x7f0000000180)=""/197, 0xc5}], 0x5}, 0x12022) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f00000002c0), 0x45, 0x7b1, &(0x7f0000000c80)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x1000000, 0x0) socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 159.073784ms ago: executing program 0 (id=2371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xab31ea29de8b0703, 0x70bd26, 0x25dfdafe, {0x0, 0x0, 0x0, 0x0, 0x10, 0x29c7d}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}]}}}]}, 0x5c}, 0x1, 0xffffff9f, 0x0, 0x40000c0}, 0x48800) 0s ago: executing program 3 (id=2372): timer_delete(0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unlink(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r1, &(0x7f0000000240)="53d38327618ea9", 0x7) sendfile(r1, r0, 0x0, 0x3ffff) kernel console output (not intermixed with test programs): Port device team_slave_0 removed [ 342.265478][T10233] team0: Port device team_slave_1 removed [ 342.286904][T10233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.295091][T10233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.322329][T10233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.331040][T10233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.374616][T10233] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 343.206020][T10240] __nla_validate_parse: 1 callbacks suppressed [ 343.206039][T10240] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1781'. [ 343.246713][T10240] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1781'. [ 343.287042][T10240] loop9: detected capacity change from 0 to 2048 [ 343.290001][T10246] loop8: detected capacity change from 0 to 512 [ 343.330054][T10240] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.365587][T10246] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1783: invalid indirect mapped block 256 (level 2) [ 343.419738][T10246] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 343.423750][T10246] EXT4-fs (loop8): 2 truncates cleaned up [ 343.433033][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 343.433060][ C1] EXT4-fs (loop8): initial error at time 1772307918: ext4_free_branches:1023: inode 11 [ 343.433098][ C1] EXT4-fs (loop8): last error at time 1772307918: ext4_free_branches:1023: inode 11 [ 343.469047][T10246] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 343.483411][T10240] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1781: bg 0: block 234: padding at end of block bitmap is not set [ 343.545606][T10240] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 420 with error 28 [ 343.586462][T10246] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.1783: bg 0: block 5: invalid block bitmap [ 343.606528][T10240] EXT4-fs (loop9): This should not happen!! Data will be lost [ 343.606528][T10240] [ 343.620238][T10246] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 343.633789][T10240] EXT4-fs (loop9): Total free blocks count 0 [ 343.639913][T10240] EXT4-fs (loop9): Free/Dirty block details [ 343.646747][T10240] EXT4-fs (loop9): free_blocks=0 [ 343.652475][T10246] EXT4-fs (loop8): This should not happen!! Data will be lost [ 343.652475][T10246] [ 343.664027][T10240] EXT4-fs (loop9): dirty_blocks=432 [ 343.670597][T10240] EXT4-fs (loop9): Block reservation details [ 343.676726][T10246] EXT4-fs (loop8): Total free blocks count 0 [ 343.683810][T10240] EXT4-fs (loop9): i_reserved_data_blocks=27 [ 343.690535][T10246] EXT4-fs (loop8): Free/Dirty block details [ 343.699447][T10246] EXT4-fs (loop8): free_blocks=0 [ 343.707481][T10246] EXT4-fs (loop8): dirty_blocks=1 [ 343.713214][T10246] EXT4-fs (loop8): Block reservation details [ 343.723901][T10256] loop0: detected capacity change from 0 to 128 [ 343.739803][T10246] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 343.826969][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.841276][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.027214][T10261] loop9: detected capacity change from 0 to 512 [ 344.076135][T10261] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1789: invalid indirect mapped block 256 (level 2) [ 344.096489][T10261] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 344.096956][T10261] EXT4-fs (loop9): 2 truncates cleaned up [ 344.106586][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 344.106609][ C1] EXT4-fs (loop9): initial error at time 1772307919: ext4_free_branches:1023: inode 11 [ 344.106643][ C1] EXT4-fs (loop9): last error at time 1772307919: ext4_free_branches:1023: inode 11 [ 344.138678][T10261] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.180195][T10261] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.1789: bg 0: block 5: invalid block bitmap [ 344.196338][T10261] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 344.211395][T10261] EXT4-fs (loop9): This should not happen!! Data will be lost [ 344.211395][T10261] [ 344.221997][T10261] EXT4-fs (loop9): Total free blocks count 0 [ 344.229113][T10261] EXT4-fs (loop9): Free/Dirty block details [ 344.247518][T10261] EXT4-fs (loop9): free_blocks=0 [ 344.278566][T10261] EXT4-fs (loop9): dirty_blocks=1 [ 344.320338][T10261] EXT4-fs (loop9): Block reservation details [ 344.361991][T10261] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 344.401532][T10270] loop0: detected capacity change from 0 to 512 [ 344.413536][T10270] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 344.456688][T10270] EXT4-fs (loop0): filesystem is read-only [ 344.464604][ T28] kauditd_printk_skb: 390 callbacks suppressed [ 344.464665][ T28] audit: type=1400 audit(1772307919.731:3396): avc: denied { perfmon } for pid=10271 comm="syz.5.1792" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.506354][T10270] EXT4-fs (loop0): failed to initialize system zone (-117) [ 344.513778][T10270] EXT4-fs (loop0): mount failed [ 344.518930][ T28] audit: type=1400 audit(1772307919.761:3397): avc: denied { tracepoint } for pid=10271 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 344.545363][T10270] cgroup: Need name or subsystem set [ 344.555964][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 344.565527][ T28] audit: type=1400 audit(1772307919.771:3398): avc: denied { perfmon } for pid=10271 comm="syz.5.1792" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 344.617153][ T28] audit: type=1400 audit(1772307919.811:3399): avc: denied { read write } for pid=10267 comm="syz.0.1791" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.677815][ T28] audit: type=1400 audit(1772307919.811:3400): avc: denied { read write open } for pid=10267 comm="syz.0.1791" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.703082][ T28] audit: type=1400 audit(1772307919.811:3401): avc: denied { ioctl } for pid=10267 comm="syz.0.1791" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 344.738504][ T28] audit: type=1400 audit(1772307919.811:3402): avc: denied { mounton } for pid=10267 comm="syz.0.1791" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 344.776409][ T28] audit: type=1400 audit(1772307919.811:3403): avc: denied { unmount } for pid=6143 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 344.856654][ T28] audit: type=1400 audit(1772307919.811:3404): avc: denied { open } for pid=10271 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 344.881231][T10283] audit: audit_backlog=65 > audit_backlog_limit=64 [ 344.981129][T10284] SET target dimension over the limit! [ 345.010176][T10287] loop8: detected capacity change from 0 to 512 [ 345.083625][T10283] loop0: detected capacity change from 0 to 128 [ 345.106252][T10287] FAT-fs (loop8): error, fat_get_cluster: invalid start cluster (i_pos 49, start 000000c8) [ 345.139405][T10287] FAT-fs (loop8): Filesystem has been set read-only [ 345.290824][T10289] loop9: detected capacity change from 0 to 128 [ 346.480558][T10313] loop9: detected capacity change from 0 to 512 [ 346.540691][T10313] ext4: Unknown parameter 'dont_measure' [ 346.780291][T10319] SET target dimension over the limit! [ 347.544705][T10324] loop5: detected capacity change from 0 to 128 [ 348.953362][T10376] netlink: 'syz.3.1828': attribute type 2 has an invalid length. [ 349.517503][ T28] kauditd_printk_skb: 648 callbacks suppressed [ 349.517522][ T28] audit: type=1400 audit(1772307924.781:3976): avc: denied { prog_load } for pid=10384 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.605079][ T28] audit: type=1400 audit(1772307924.791:3977): avc: denied { bpf } for pid=10384 comm="syz.5.1830" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.639901][ T28] audit: type=1400 audit(1772307924.811:3978): avc: denied { prog_load } for pid=10384 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.694107][ T28] audit: type=1400 audit(1772307924.811:3979): avc: denied { map_create } for pid=10361 comm="syz.0.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.740893][ T28] audit: type=1400 audit(1772307924.811:3980): avc: denied { map_read map_write } for pid=10361 comm="syz.0.1822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.781439][ T28] audit: type=1400 audit(1772307924.811:3981): avc: denied { bpf } for pid=10384 comm="syz.5.1830" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.820054][ T28] audit: type=1400 audit(1772307924.811:3982): avc: denied { perfmon } for pid=10384 comm="syz.5.1830" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 349.844182][ T28] audit: type=1400 audit(1772307924.811:3983): avc: denied { prog_load } for pid=10384 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.874835][ T28] audit: type=1400 audit(1772307924.811:3984): avc: denied { prog_run } for pid=10384 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.916760][ T28] audit: type=1400 audit(1772307924.821:3985): avc: denied { open } for pid=10384 comm="syz.5.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 350.562502][T10426] netlink: 'syz.0.1845': attribute type 2 has an invalid length. [ 350.903277][T10439] set_capacity_and_notify: 1 callbacks suppressed [ 350.903354][T10439] loop5: detected capacity change from 0 to 1024 [ 350.918722][T10439] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 350.940671][T10439] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 2: comm syz.5.1850: lblock 2 mapped to illegal pblock 2 (length 1) [ 350.978747][T10439] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 350.978866][T10439] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 48: comm syz.5.1850: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.002365][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 351.002402][ C0] EXT4-fs (loop5): initial error at time 1772307926: ext4_map_blocks:776: inode 3: block 2 [ 351.002457][ C0] EXT4-fs (loop5): last error at time 1772307926: ext4_map_blocks:776: inode 3: block 2 [ 351.070724][T10439] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.070901][T10439] EXT4-fs error (device loop5): ext4_acquire_dquot:7001: comm syz.5.1850: Failed to acquire dquot type 0 [ 351.094626][T10439] loop5: lost filesystem error report for type 5 error -117 [ 351.094791][T10439] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 351.112744][T10439] loop5: lost filesystem error report for type 5 error -117 [ 351.112932][T10439] EXT4-fs error (device loop5): ext4_evict_inode:255: inode #11: comm syz.5.1850: mark_inode_dirty error [ 351.132827][T10439] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.132981][T10439] EXT4-fs warning (device loop5): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 351.153416][T10439] EXT4-fs (loop5): 1 orphan inode deleted [ 351.160718][T10439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.173697][ T9479] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.188851][ T9479] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.189048][ T9479] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 0 [ 351.232868][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.268546][ T9479] EXT4-fs error (device loop5): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:14: lblock 1 mapped to illegal pblock 1 (length 1) [ 351.285258][T10444] loop9: detected capacity change from 0 to 1024 [ 351.292047][ T9479] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.292229][ T9479] EXT4-fs error (device loop5): ext4_release_dquot:7037: comm kworker/u8:14: Failed to release dquot type 0 [ 351.333241][ T9479] loop5: lost filesystem error report for type 5 error -117 [ 351.333631][ T9680] EXT4-fs error (device loop5): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 351.355720][ T9680] loop5: lost filesystem error report for type 5 error -117 [ 351.355935][ T9680] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 351.373866][ T9680] loop5: lost filesystem error report for type 5 error -117 [ 351.374061][ T9680] EXT4-fs error (device loop5): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 351.393925][ T9680] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.560434][T10444] EXT4-fs (loop9): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 351.623612][T10444] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 2: comm syz.9.1851: lblock 2 mapped to illegal pblock 2 (length 1) [ 351.654654][T10449] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1852'. [ 351.658807][T10444] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.664224][T10444] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 48: comm syz.9.1851: lblock 0 mapped to illegal pblock 48 (length 1) [ 351.673369][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 351.673395][ C1] EXT4-fs (loop9): initial error at time 1772307926: ext4_map_blocks:776: inode 3: block 2 [ 351.673461][ C1] EXT4-fs (loop9): last error at time 1772307926: ext4_map_blocks:776: inode 3: block 2 [ 351.719605][T10451] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1854'. [ 351.729265][T10444] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 351.729382][T10444] EXT4-fs error (device loop9): ext4_acquire_dquot:7001: comm syz.9.1851: Failed to acquire dquot type 0 [ 351.808564][T10444] loop9: lost filesystem error report for type 5 error -117 [ 351.814869][T10444] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 351.886832][T10444] loop9: lost filesystem error report for type 5 error -117 [ 351.900395][T10444] EXT4-fs error (device loop9): ext4_evict_inode:255: inode #11: comm syz.9.1851: mark_inode_dirty error [ 351.932191][T10444] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 351.932325][T10444] EXT4-fs warning (device loop9): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 351.968623][T10444] EXT4-fs (loop9): 1 orphan inode deleted [ 351.985186][T10444] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.010845][ T311] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 352.045558][ T311] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 352.573827][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.588864][T10465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1858'. [ 353.038979][ T311] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 353.099549][T10472] loop5: detected capacity change from 0 to 128 [ 353.129742][ T311] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 353.129905][ T311] EXT4-fs error (device loop9): ext4_release_dquot:7037: comm kworker/u8:7: Failed to release dquot type 0 [ 353.179989][T10476] loop8: detected capacity change from 0 to 256 [ 353.248483][ T311] loop9: lost filesystem error report for type 5 error -117 [ 353.248860][ T6143] EXT4-fs error (device loop9): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 353.389384][ T6143] loop9: lost filesystem error report for type 5 error -117 [ 353.389489][ T6143] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 353.453275][ T6143] loop9: lost filesystem error report for type 5 error -117 [ 353.468579][ T6143] EXT4-fs error (device loop9): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 353.630629][T10488] netlink: 'syz.9.1865': attribute type 2 has an invalid length. [ 354.365923][T10499] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 354.578517][ T28] kauditd_printk_skb: 504 callbacks suppressed [ 354.578532][ T28] audit: type=1400 audit(1772307929.781:4482): avc: denied { execmem } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 354.803942][ T28] audit: type=1400 audit(1772307929.791:4483): avc: denied { execute } for pid=10498 comm="syz.3.1869" path="/434/memory.events" dev="tmpfs" ino=2310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 355.052666][ T28] audit: type=1400 audit(1772307929.841:4484): avc: denied { read write } for pid=6143 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.107909][ T28] audit: type=1400 audit(1772307929.841:4485): avc: denied { open } for pid=6143 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 355.135405][ T28] audit: type=1400 audit(1772307929.841:4486): avc: denied { ioctl } for pid=6143 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 356.166761][ T28] audit: type=1400 audit(1772307929.841:4487): avc: denied { create } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 356.196580][ T28] audit: type=1400 audit(1772307929.931:4488): avc: denied { create } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 356.322036][ T28] audit: type=1400 audit(1772307929.941:4489): avc: denied { create } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.577448][ T28] audit: type=1400 audit(1772307929.951:4490): avc: denied { create } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 356.682735][ T28] audit: type=1400 audit(1772307929.961:4492): avc: denied { write } for pid=10498 comm="syz.3.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 357.261848][T10536] loop0: detected capacity change from 0 to 1024 [ 357.278776][T10536] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 357.308219][T10536] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 2: comm syz.0.1877: lblock 2 mapped to illegal pblock 2 (length 1) [ 357.322696][T10536] fserror_report: 1 callbacks suppressed [ 357.322709][T10536] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 357.328922][T10536] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 48: comm syz.0.1877: lblock 0 mapped to illegal pblock 48 (length 1) [ 357.352223][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 357.352261][ C0] EXT4-fs (loop0): initial error at time 1772307932: ext4_map_blocks:776: inode 3: block 2 [ 357.352319][ C0] EXT4-fs (loop0): last error at time 1772307932: ext4_map_blocks:776: inode 3: block 2 [ 357.379403][T10536] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 357.379675][T10536] EXT4-fs error (device loop0): ext4_acquire_dquot:7001: comm syz.0.1877: Failed to acquire dquot type 0 [ 357.400490][T10536] loop0: lost filesystem error report for type 5 error -117 [ 357.400690][T10536] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 357.417503][T10536] loop0: lost filesystem error report for type 5 error -117 [ 357.417783][T10536] EXT4-fs error (device loop0): ext4_evict_inode:255: inode #11: comm syz.0.1877: mark_inode_dirty error [ 357.436551][T10536] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 357.442704][T10536] EXT4-fs warning (device loop0): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 357.462222][T10536] EXT4-fs (loop0): 1 orphan inode deleted [ 357.468764][T10536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.481016][ T9477] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 357.496339][ T9477] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 357.523043][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.532238][ T9477] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 357.546765][ T9477] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 357.547361][ T9477] EXT4-fs error (device loop0): ext4_release_dquot:7037: comm kworker/u8:12: Failed to release dquot type 0 [ 357.570713][ T9477] loop0: lost filesystem error report for type 5 error -117 [ 357.571539][ T6663] EXT4-fs error (device loop0): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 357.592827][ T6663] loop0: lost filesystem error report for type 5 error -117 [ 357.592979][ T6663] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 357.610472][ T6663] loop0: lost filesystem error report for type 5 error -117 [ 357.610598][ T6663] EXT4-fs error (device loop0): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 357.629320][ T6663] loop0: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 357.751970][T10542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.810474][T10545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 357.832230][T10542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.841414][T10545] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1880'. [ 357.899030][T10547] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1881'. [ 357.955416][T10542] loop9: detected capacity change from 0 to 512 [ 358.002760][T10542] ------------[ cut here ]------------ [ 358.008297][T10542] EA inode 11 i_nlink=2 [ 358.008345][T10542] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.9.1879/10542 [ 358.023588][T10542] Modules linked in: [ 358.027525][T10542] CPU: 0 UID: 0 PID: 10542 Comm: syz.9.1879 Not tainted syzkaller #0 PREEMPT(full) [ 358.037093][T10542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 358.047242][T10542] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 358.053983][T10542] Code: 74 5f 99 ff 4c 8d 2d 7d ef 5d 05 49 8d 7e 40 e8 f4 f0 b5 ff 49 8b 6e 40 4c 89 e7 e8 28 ec b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 49 dd 03 66 66 66 66 66 66 2e [ 358.074086][T10542] RSP: 0018:ffffc9000172f778 EFLAGS: 00010246 [ 358.080428][T10542] RAX: ffff888104a38a78 RBX: ffff888100708ec8 RCX: ffffffff81bff5c8 [ 358.088477][T10542] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871de530 [ 358.096496][T10542] RBP: 000000000000000b R08: 0001888100708e7b R09: 0000000000000000 [ 358.104708][T10542] R10: ffffc9000172f6a8 R11: 0001c9000172f6a8 R12: ffff888100708e78 [ 358.112763][T10542] R13: ffffffff871de530 R14: ffff888100708e30 R15: 0000000000000001 [ 358.120802][T10542] FS: 00007f4f002a76c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 358.129844][T10542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 358.136475][T10542] CR2: 00007fb51369b930 CR3: 000000010b360000 CR4: 00000000003506f0 [ 358.144516][T10542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 358.152700][T10542] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 358.160810][T10542] Call Trace: [ 358.164281][T10542] [ 358.167328][T10542] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 358.173399][T10542] ? errseq_check+0x2c/0x50 [ 358.178042][T10542] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 358.183589][T10542] ? ext4_truncate+0x92b/0xb00 [ 358.188405][T10542] ext4_evict_inode+0xa1f/0xd60 [ 358.193400][T10542] ? __pfx_ext4_evict_inode+0x10/0x10 [ 358.199002][T10542] evict+0x2af/0x510 [ 358.202974][T10542] ? __dquot_initialize+0x146/0x7c0 [ 358.208331][T10542] iput+0x41a/0x580 [ 358.212284][T10542] ext4_process_orphan+0x1a9/0x1c0 [ 358.217427][T10542] ext4_orphan_cleanup+0x6a8/0xa00 [ 358.222603][T10542] ext4_fill_super+0x3408/0x37c0 [ 358.227629][T10542] ? set_blocksize+0x14c/0x270 [ 358.232486][T10542] ? setup_bdev_super+0x30e/0x370 [ 358.237567][T10542] ? __pfx_ext4_fill_super+0x10/0x10 [ 358.242940][T10542] get_tree_bdev_flags+0x291/0x300 [ 358.248111][T10542] ? __pfx_ext4_fill_super+0x10/0x10 [ 358.253521][T10542] get_tree_bdev+0x1f/0x30 [ 358.258013][T10542] ext4_get_tree+0x1c/0x30 [ 358.262507][T10542] vfs_get_tree+0x57/0x1d0 [ 358.266971][T10542] do_new_mount+0x288/0x8d0 [ 358.271532][T10542] path_mount+0x4d0/0xbc0 [ 358.275907][T10542] __se_sys_mount+0x28c/0x2e0 [ 358.280692][T10542] ? __se_sys_mkdirat+0xa2/0xf0 [ 358.285635][T10542] ? kmem_cache_free+0xc8/0x380 [ 358.290565][T10542] __x64_sys_mount+0x67/0x80 [ 358.295259][T10542] x64_sys_call+0x2d61/0x3020 [ 358.300057][T10542] do_syscall_64+0x12c/0x370 [ 358.304711][T10542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.310692][T10542] RIP: 0033:0x7f4f0184da0a [ 358.315165][T10542] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.334925][T10542] RSP: 002b:00007f4f002a6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.343536][T10542] RAX: ffffffffffffffda RBX: 00007f4f002a6ee0 RCX: 00007f4f0184da0a [ 358.351626][T10542] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f4f002a6ea0 [ 358.359766][T10542] RBP: 00002000000009c0 R08: 00007f4f002a6ee0 R09: 0000000000800718 [ 358.367818][T10542] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 358.375948][T10542] R13: 00007f4f002a6ea0 R14: 000000000000048d R15: 0000200000000200 [ 358.384071][T10542] [ 358.387155][T10542] ---[ end trace 0000000000000000 ]--- [ 358.394743][T10542] EXT4-fs (loop9): 1 orphan inode deleted [ 358.402929][T10542] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 358.797252][T10559] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 359.402257][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.589486][ T28] kauditd_printk_skb: 334 callbacks suppressed [ 359.589504][ T28] audit: type=1400 audit(1772307934.861:4801): avc: denied { prog_load } for pid=10576 comm="syz.8.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 359.965920][T10583] veth0: entered promiscuous mode [ 360.059146][ T28] audit: type=1400 audit(1772307934.961:4802): avc: denied { bpf } for pid=10576 comm="syz.8.1889" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.079953][ T28] audit: type=1400 audit(1772307934.971:4803): avc: denied { prog_load } for pid=10576 comm="syz.8.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 360.099131][ T28] audit: type=1400 audit(1772307934.971:4804): avc: denied { perfmon } for pid=10576 comm="syz.8.1889" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.126842][ T28] audit: type=1400 audit(1772307934.971:4805): avc: denied { bpf } for pid=10576 comm="syz.8.1889" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 360.159922][ T28] audit: type=1400 audit(1772307934.991:4806): avc: denied { create } for pid=10576 comm="syz.8.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 360.193918][ T28] audit: type=1400 audit(1772307935.001:4807): avc: denied { connect } for pid=10576 comm="syz.8.1889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 360.221842][T10587] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1891'. [ 360.259345][ T28] audit: type=1400 audit(1772307935.041:4808): avc: denied { module_request } for pid=10578 comm="syz.9.1887" kmod="fs-ceph" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 360.342151][ T28] audit: type=1400 audit(1772307935.111:4809): avc: denied { read write } for pid=6140 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.377476][ T28] audit: type=1400 audit(1772307935.111:4810): avc: denied { open } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 360.809950][T10582] veth0: left promiscuous mode [ 360.866303][T10600] netlink: 'syz.8.1896': attribute type 7 has an invalid length. [ 360.906498][T10602] loop8: detected capacity change from 0 to 512 [ 360.916788][T10602] EXT4-fs error (device loop8): ext4_init_orphan_info:583: comm syz.8.1897: inode #0: comm syz.8.1897: iget: illegal inode # [ 360.933164][T10602] loop8: lost filesystem error report for type 5 error -117 [ 360.933525][T10602] EXT4-fs (loop8): get orphan inode failed [ 360.940973][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 360.940996][ C1] EXT4-fs (loop8): initial error at time 1772307936: ext4_init_orphan_info:583 [ 360.941023][ C1] EXT4-fs (loop8): last error at time 1772307936: ext4_init_orphan_info:583 [ 360.971625][T10602] EXT4-fs (loop8): mount failed [ 361.103094][T10607] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1899'. [ 361.211495][T10612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1900'. [ 361.236888][T10612] netlink: 'syz.3.1900': attribute type 10 has an invalid length. [ 361.263077][T10612] team0: Port device dummy0 added [ 361.292000][T10612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=10612 comm=syz.3.1900 [ 361.343553][T10617] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1902'. [ 361.360366][T10618] syzkaller0: entered promiscuous mode [ 361.374009][T10618] syzkaller0: entered allmulticast mode [ 361.561623][T10630] netlink: 'syz.8.1907': attribute type 2 has an invalid length. [ 361.923041][T10642] netlink: 'syz.9.1909': attribute type 39 has an invalid length. [ 361.939814][T10642] hsr_slave_1 (unregistering): left promiscuous mode [ 362.334943][T10655] loop9: detected capacity change from 0 to 512 [ 362.358699][T10655] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 362.408811][T10655] EXT4-fs (loop9): 1 truncate cleaned up [ 362.415038][T10655] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.905555][T10676] SET target dimension over the limit! [ 363.170300][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.310532][T10682] loop9: detected capacity change from 0 to 4096 [ 363.538031][T10684] loop9: detected capacity change from 0 to 1024 [ 363.555550][T10684] EXT4-fs: Ignoring removed nobh option [ 363.570247][T10687] program syz.8.1924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.579682][T10684] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.615517][T10684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.797315][T10696] loop5: detected capacity change from 0 to 512 [ 363.815531][T10696] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1926: invalid indirect mapped block 256 (level 2) [ 363.851626][T10696] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 363.852031][T10696] EXT4-fs (loop5): 2 truncates cleaned up [ 363.861283][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 363.861302][ C1] EXT4-fs (loop5): initial error at time 1772307939: ext4_free_branches:1023: inode 11 [ 363.861331][ C1] EXT4-fs (loop5): last error at time 1772307939: ext4_free_branches:1023: inode 11 [ 363.979945][T10696] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.449937][T10702] program syz.0.1928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.504947][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.646119][ T28] kauditd_printk_skb: 664 callbacks suppressed [ 364.646138][ T28] audit: type=1400 audit(1772307939.911:5466): avc: denied { read } for pid=10707 comm="syz.5.1929" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 364.691517][T10709] program syz.5.1929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 364.730449][T10710] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.1932'. [ 364.744108][ T28] audit: type=1400 audit(1772307939.941:5468): avc: denied { read open } for pid=10707 comm="syz.5.1929" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 364.766037][T10710] netlink: 4580 bytes leftover after parsing attributes in process `syz.0.1932'. [ 364.836030][ T28] audit: type=1400 audit(1772307939.921:5467): avc: denied { prog_load } for pid=10708 comm="syz.0.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 364.872845][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.896578][ T28] audit: type=1400 audit(1772307939.951:5469): avc: denied { bpf } for pid=10708 comm="syz.0.1932" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 364.924674][T10717] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.936052][T10717] audit: audit_lost=49 audit_rate_limit=0 audit_backlog_limit=64 [ 364.942835][ T6143] audit: audit_backlog=65 > audit_backlog_limit=64 [ 364.945741][T10717] audit: backlog limit exceeded [ 364.956426][ T28] audit: type=1400 audit(1772307939.951:5470): avc: denied { prog_load } for pid=10708 comm="syz.0.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 364.968607][ T6143] audit: audit_lost=50 audit_rate_limit=0 audit_backlog_limit=64 [ 365.119672][T10719] tmpfs: Bad value for 'mpol' [ 365.270238][T10730] netlink: 'syz.3.1939': attribute type 2 has an invalid length. [ 365.637713][T10731] loop9: detected capacity change from 0 to 512 [ 366.247338][T10752] loop5: detected capacity change from 0 to 256 [ 366.260953][T10751] loop9: detected capacity change from 0 to 512 [ 366.305213][T10751] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.348730][T10751] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 366.382982][T10751] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 366.391373][T10751] EXT4-fs (loop9): orphan cleanup on readonly fs [ 366.397954][T10751] EXT4-fs warning (device loop9): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 366.412691][T10751] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 366.420772][T10751] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1945: bg 0: block 40: padding at end of block bitmap is not set [ 366.435228][T10751] loop9: lost filesystem error report for type 5 error -117 [ 366.435325][T10751] EXT4-fs (loop9): Remounting filesystem read-only [ 366.442674][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 366.442701][ C0] EXT4-fs (loop9): initial error at time 1772307941: ext4_validate_block_bitmap:441 [ 366.442731][ C0] EXT4-fs (loop9): last error at time 1772307941: ext4_validate_block_bitmap:441 [ 366.475180][T10751] EXT4-fs (loop9): 1 truncate cleaned up [ 366.482382][T10751] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.629715][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.816365][T10759] smc: net device hsr0 applied user defined pnetid SYZ2 [ 366.823672][T10759] smc: net device hsr0 erased user defined pnetid SYZ2 [ 367.057911][T10767] netlink: 'syz.8.1950': attribute type 2 has an invalid length. [ 367.763758][T10774] delete_channel: no stack [ 367.810267][T10774] loop0: detected capacity change from 0 to 512 [ 368.019898][T10779] SET target dimension over the limit! [ 368.256405][T10774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.370994][T10790] loop5: detected capacity change from 0 to 512 [ 368.421698][T10790] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.581000][T10801] syzkaller0: entered promiscuous mode [ 368.586637][T10801] syzkaller0: entered allmulticast mode [ 368.665245][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.773881][T10806] netlink: 'syz.0.1962': attribute type 2 has an invalid length. [ 368.884120][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.400054][T10825] loop5: detected capacity change from 0 to 128 [ 369.763886][ T28] kauditd_printk_skb: 793 callbacks suppressed [ 369.763911][ T28] audit: type=1400 audit(1772307944.981:6262): avc: denied { create } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.828756][ T28] audit: type=1400 audit(1772307945.001:6263): avc: denied { prog_load } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.891643][ T28] audit: type=1400 audit(1772307945.011:6264): avc: denied { bpf } for pid=10834 comm="syz.3.1972" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.129554][ T28] audit: type=1400 audit(1772307945.011:6265): avc: denied { perfmon } for pid=10834 comm="syz.3.1972" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.230407][ T28] audit: type=1400 audit(1772307945.011:6266): avc: denied { prog_run } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 370.281984][ T28] audit: type=1400 audit(1772307945.011:6267): avc: denied { open } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 370.330978][ T28] audit: type=1400 audit(1772307945.011:6268): avc: denied { perfmon } for pid=10834 comm="syz.3.1972" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 370.352129][ T28] audit: type=1400 audit(1772307945.021:6269): avc: denied { kernel } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 370.408812][ T28] audit: type=1400 audit(1772307945.021:6270): avc: denied { write } for pid=10834 comm="syz.3.1972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 370.485685][ T28] audit: type=1400 audit(1772307945.521:6271): avc: denied { read write } for pid=6140 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 372.031743][T10872] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1984'. [ 372.054820][T10874] syzkaller0: entered promiscuous mode [ 372.063157][T10872] netlink: 'syz.5.1984': attribute type 10 has an invalid length. [ 372.071927][T10874] syzkaller0: entered allmulticast mode [ 372.084640][T10872] team0: Port device dummy0 added [ 372.146264][T10872] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=10872 comm=syz.5.1984 [ 372.264729][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1988'. [ 372.276849][T10880] netlink: 'syz.0.1988': attribute type 10 has an invalid length. [ 372.298591][T10880] team0: Port device dummy0 added [ 372.321466][T10880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=10880 comm=syz.0.1988 [ 372.414406][T10887] loop9: detected capacity change from 0 to 512 [ 372.454663][T10887] EXT4-fs (loop9): 1 truncate cleaned up [ 372.479192][T10887] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.546025][T10887] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.1991: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 372.607473][T10887] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1991: bg 0: block 465: padding at end of block bitmap is not set [ 372.624671][T10887] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2 with error 28 [ 372.638536][T10887] EXT4-fs (loop9): This should not happen!! Data will be lost [ 372.638536][T10887] [ 372.648409][T10887] EXT4-fs (loop9): Total free blocks count 0 [ 372.655451][T10887] EXT4-fs (loop9): Free/Dirty block details [ 372.663553][T10887] EXT4-fs (loop9): free_blocks=0 [ 372.669601][T10887] EXT4-fs (loop9): dirty_blocks=3 [ 372.683594][T10887] EXT4-fs (loop9): Block reservation details [ 372.710456][T10887] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 372.737787][T10905] loop0: detected capacity change from 0 to 512 [ 372.824192][T10905] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1998: invalid indirect mapped block 256 (level 2) [ 372.838037][T10905] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 372.838347][T10905] EXT4-fs (loop0): 2 truncates cleaned up [ 372.847562][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 372.847590][ C0] EXT4-fs (loop0): initial error at time 1772307948: ext4_free_branches:1023: inode 11 [ 372.847648][ C0] EXT4-fs (loop0): last error at time 1772307948: ext4_free_branches:1023: inode 11 [ 372.881237][T10905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.943749][ T9479] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 373.123299][T10911] batadv_slave_1: entered promiscuous mode [ 373.240838][T10911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 373.403390][T10917] loop8: detected capacity change from 0 to 512 [ 373.476790][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.543818][T10920] veth0_vlan: entered allmulticast mode [ 373.663594][T10922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2003'. [ 373.705950][T10922] netlink: 'syz.0.2003': attribute type 10 has an invalid length. [ 373.751600][T10925] syzkaller0: entered promiscuous mode [ 373.761466][T10925] syzkaller0: entered allmulticast mode [ 373.780550][T10922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=10922 comm=syz.0.2003 [ 373.796399][T10909] batadv_slave_1: left promiscuous mode [ 373.835893][T10928] loop8: detected capacity change from 0 to 256 [ 374.768630][ T28] kauditd_printk_skb: 559 callbacks suppressed [ 374.768646][ T28] audit: type=1400 audit(1772307950.031:6829): avc: denied { prog_load } for pid=10953 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 374.871375][T10954] loop9: detected capacity change from 0 to 128 [ 374.894431][ T28] audit: type=1400 audit(1772307950.041:6830): avc: denied { perfmon } for pid=10953 comm="syz.9.2014" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 374.916468][ T28] audit: type=1400 audit(1772307950.041:6831): avc: denied { prog_load } for pid=10953 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 374.966020][ T28] audit: type=1400 audit(1772307950.041:6832): avc: denied { bpf } for pid=10953 comm="syz.9.2014" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.103102][ T28] audit: type=1400 audit(1772307950.041:6833): avc: denied { open } for pid=10953 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.124533][ T28] audit: type=1400 audit(1772307950.051:6834): avc: denied { perfmon } for pid=10953 comm="syz.9.2014" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 375.146978][ T28] audit: type=1400 audit(1772307950.051:6835): avc: denied { kernel } for pid=10953 comm="syz.9.2014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.461913][ T28] audit: type=1400 audit(1772307950.061:6836): avc: denied { open } for pid=10951 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 375.713812][ T28] audit: type=1400 audit(1772307950.101:6837): avc: denied { read write } for pid=10953 comm="syz.9.2014" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.738190][ T28] audit: type=1400 audit(1772307950.101:6838): avc: denied { open } for pid=10953 comm="syz.9.2014" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 375.940893][T10964] loop0: detected capacity change from 0 to 128 [ 375.956844][T10970] syzkaller0: entered promiscuous mode [ 375.994396][T10964] FAT-fs (loop0): Directory bread(block 32) failed [ 376.001073][T10964] FAT-fs (loop0): Directory bread(block 33) failed [ 376.004556][T10972] netlink: 'syz.3.2021': attribute type 2 has an invalid length. [ 376.007844][T10964] FAT-fs (loop0): Directory bread(block 34) failed [ 376.036623][T10970] syzkaller0: entered allmulticast mode [ 376.096981][T10964] FAT-fs (loop0): Directory bread(block 35) failed [ 376.127735][T10964] FAT-fs (loop0): Directory bread(block 36) failed [ 376.153718][T10964] FAT-fs (loop0): Directory bread(block 37) failed [ 376.179941][T10964] FAT-fs (loop0): Directory bread(block 38) failed [ 376.186518][T10964] FAT-fs (loop0): Directory bread(block 39) failed [ 376.195306][T10964] FAT-fs (loop0): Directory bread(block 40) failed [ 376.255125][T10964] FAT-fs (loop0): Directory bread(block 41) failed [ 376.403626][T10984] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2023'. [ 376.430028][T10984] netlink: 'syz.8.2023': attribute type 10 has an invalid length. [ 376.441549][T10984] team0: Port device dummy0 added [ 376.452196][T10984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=10984 comm=syz.8.2023 [ 376.477486][T10968] loop9: detected capacity change from 0 to 256 [ 376.686639][T10968] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 377.039980][T10990] team0: Port device dummy0 removed [ 377.247199][T10990] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.595665][T10968] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 379.438281][T11012] loop8: detected capacity change from 0 to 512 [ 379.778607][ T28] kauditd_printk_skb: 293 callbacks suppressed [ 379.778627][ T28] audit: type=1400 audit(1772307955.041:7132): avc: denied { create } for pid=11013 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 379.903637][T11012] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2031: invalid indirect mapped block 256 (level 2) [ 379.981814][T11015] loop0: detected capacity change from 0 to 512 [ 379.986104][ T28] audit: type=1400 audit(1772307955.121:7133): avc: denied { create } for pid=11013 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.028516][T11012] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 380.030599][T11012] EXT4-fs (loop8): 2 truncates cleaned up [ 380.039815][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 380.039833][ C1] EXT4-fs (loop8): initial error at time 1772307955: ext4_free_branches:1023: inode 11 [ 380.039858][ C1] EXT4-fs (loop8): last error at time 1772307955: ext4_free_branches:1023: inode 11 [ 380.070316][ T28] audit: type=1400 audit(1772307955.131:7134): avc: denied { write } for pid=11013 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.100171][ T28] audit: type=1400 audit(1772307955.131:7135): avc: denied { read } for pid=11013 comm="syz.0.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 380.128742][T11015] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.2032: iget: bad extra_isize 90 (inode size 256) [ 380.142188][ T28] audit: type=1400 audit(1772307955.141:7136): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.166616][T11015] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 380.167617][T11015] EXT4-fs (loop0): Remounting filesystem read-only [ 380.176972][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 380.177003][ C0] EXT4-fs (loop0): initial error at time 1772307955: ext4_xattr_inode_iget:441: inode 18 [ 380.177029][ C0] EXT4-fs (loop0): last error at time 1772307955: ext4_xattr_inode_iget:441: inode 18 [ 380.209675][ T28] audit: type=1400 audit(1772307955.141:7137): avc: denied { open } for pid=9680 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.267659][T11021] syzkaller0: entered promiscuous mode [ 380.273277][ T28] audit: type=1400 audit(1772307955.141:7138): avc: denied { ioctl } for pid=9680 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.285093][T11015] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 380.299530][ T28] audit: type=1400 audit(1772307955.231:7139): avc: denied { read write } for pid=11013 comm="syz.0.2032" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.308877][T11021] syzkaller0: entered allmulticast mode [ 380.344176][T11015] EXT4-fs (loop0): 1 orphan inode deleted [ 380.352158][T11015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.363003][T11012] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.411854][ T28] audit: type=1400 audit(1772307955.231:7140): avc: denied { open } for pid=11013 comm="syz.0.2032" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.481806][ T28] audit: type=1400 audit(1772307955.231:7141): avc: denied { ioctl } for pid=11013 comm="syz.0.2032" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 380.584461][T11012] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.2031: bg 0: block 5: invalid block bitmap [ 380.607458][T11012] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 380.621182][T11012] EXT4-fs (loop8): This should not happen!! Data will be lost [ 380.621182][T11012] [ 380.632861][T11012] EXT4-fs (loop8): Total free blocks count 0 [ 380.639698][T11012] EXT4-fs (loop8): Free/Dirty block details [ 380.646283][T11012] EXT4-fs (loop8): free_blocks=0 [ 380.652916][T11012] EXT4-fs (loop8): dirty_blocks=1 [ 380.658749][T11012] EXT4-fs (loop8): Block reservation details [ 380.665556][T11012] EXT4-fs (loop8): i_reserved_data_blocks=1 [ 381.243443][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.493326][T11041] netlink: 'syz.5.2041': attribute type 2 has an invalid length. [ 381.665252][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.687034][T11043] loop9: detected capacity change from 0 to 512 [ 381.742899][T11043] EXT4-fs (loop9): 1 truncate cleaned up [ 381.764992][T11043] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.828554][T11043] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #2: block 13: comm syz.9.2042: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 381.921533][T11043] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2042: bg 0: block 465: padding at end of block bitmap is not set [ 381.982385][T11043] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2 with error 28 [ 382.028669][T11043] EXT4-fs (loop9): This should not happen!! Data will be lost [ 382.028669][T11043] [ 382.061097][T11043] EXT4-fs (loop9): Total free blocks count 0 [ 382.075222][T11043] EXT4-fs (loop9): Free/Dirty block details [ 382.108091][T11050] loop0: detected capacity change from 0 to 256 [ 382.120467][T11043] EXT4-fs (loop9): free_blocks=0 [ 382.134538][T11043] EXT4-fs (loop9): dirty_blocks=3 [ 382.151654][T11043] EXT4-fs (loop9): Block reservation details [ 382.200412][T11043] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 382.282029][ T311] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 382.705831][T11064] syzkaller0: entered promiscuous mode [ 382.721561][T11064] syzkaller0: entered allmulticast mode [ 383.721905][T11080] loop9: detected capacity change from 0 to 128 [ 384.156258][T11095] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2056'. [ 384.190227][T11095] netlink: 'syz.8.2056': attribute type 10 has an invalid length. [ 384.264108][T11095] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=11095 comm=syz.8.2056 [ 384.612426][T11101] syzkaller0: entered promiscuous mode [ 384.765876][T11050] bio_check_eod: 58 callbacks suppressed [ 384.765993][T11050] syz.0.2044: attempt to access beyond end of device [ 384.765993][T11050] loop0: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 384.790701][T11101] syzkaller0: entered allmulticast mode [ 384.854795][ T28] kauditd_printk_skb: 473 callbacks suppressed [ 384.854879][ T28] audit: type=1400 audit(1772307960.071:7606): avc: denied { bpf } for pid=11104 comm="syz.8.2060" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 384.996627][T11050] syz.0.2044: attempt to access beyond end of device [ 384.996627][T11050] loop0: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 385.014799][T11050] syz.0.2044: attempt to access beyond end of device [ 385.014799][T11050] loop0: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 385.036985][T11050] syz.0.2044: attempt to access beyond end of device [ 385.036985][T11050] loop0: rw=2049, sector=448, nr_sectors = 32 limit=256 [ 385.052367][ T28] audit: type=1400 audit(1772307960.191:7607): avc: denied { create } for pid=11100 comm="syz.9.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 385.073412][ T28] audit: type=1400 audit(1772307960.201:7608): avc: denied { allowed } for pid=11100 comm="syz.9.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 385.095688][ T28] audit: type=1400 audit(1772307960.201:7609): avc: denied { create } for pid=11100 comm="syz.9.2059" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.125678][T11050] syz.0.2044: attempt to access beyond end of device [ 385.125678][T11050] loop0: rw=2049, sector=512, nr_sectors = 32 limit=256 [ 385.144676][T11050] syz.0.2044: attempt to access beyond end of device [ 385.144676][T11050] loop0: rw=2049, sector=640, nr_sectors = 32 limit=256 [ 385.167705][ T28] audit: type=1400 audit(1772307960.221:7610): avc: denied { map } for pid=11100 comm="syz.9.2059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.189064][T11050] syz.0.2044: attempt to access beyond end of device [ 385.189064][T11050] loop0: rw=2049, sector=704, nr_sectors = 32 limit=256 [ 385.207472][ T28] audit: type=1400 audit(1772307960.221:7611): avc: denied { read write } for pid=11100 comm="syz.9.2059" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=29251 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 385.235791][ T28] audit: type=1400 audit(1772307960.231:7612): avc: denied { prog_load } for pid=11100 comm="syz.9.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 385.255366][T11050] syz.0.2044: attempt to access beyond end of device [ 385.255366][T11050] loop0: rw=2049, sector=768, nr_sectors = 32 limit=256 [ 385.289835][T11050] syz.0.2044: attempt to access beyond end of device [ 385.289835][T11050] loop0: rw=2049, sector=832, nr_sectors = 32 limit=256 [ 385.310581][T11050] syz.0.2044: attempt to access beyond end of device [ 385.310581][T11050] loop0: rw=2049, sector=896, nr_sectors = 32 limit=256 [ 385.331436][ T28] audit: type=1400 audit(1772307960.231:7613): avc: denied { bpf } for pid=11100 comm="syz.9.2059" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 385.387140][ T28] audit: type=1400 audit(1772307960.251:7614): avc: denied { open } for pid=11100 comm="syz.9.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 385.407241][ T28] audit: type=1400 audit(1772307960.261:7615): avc: denied { perfmon } for pid=11100 comm="syz.9.2059" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 386.086198][T11124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2066'. [ 386.121831][T11114] loop5: detected capacity change from 0 to 128 [ 386.159971][T11122] netlink: 'syz.0.2066': attribute type 10 has an invalid length. [ 386.196917][T11122] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=11122 comm=syz.0.2066 [ 386.601928][T11140] batadv_slave_1: entered promiscuous mode [ 387.686664][T11145] team0: Port device dummy0 removed [ 387.706051][T11145] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.745168][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2071'. [ 388.625669][T11154] syzkaller0: entered promiscuous mode [ 388.685163][T11154] syzkaller0: entered allmulticast mode [ 388.798018][T11136] batadv_slave_1: left promiscuous mode [ 389.281790][T11158] loop5: detected capacity change from 0 to 128 [ 389.774214][T11169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 389.898106][ T28] kauditd_printk_skb: 298 callbacks suppressed [ 389.898141][ T28] audit: type=1400 audit(1772307965.161:7914): avc: denied { map_create } for pid=11161 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.119868][ T28] audit: type=1400 audit(1772307965.201:7915): avc: denied { perfmon } for pid=11161 comm="syz.8.2079" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.220971][ T28] audit: type=1400 audit(1772307965.201:7916): avc: denied { map_read map_write } for pid=11161 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.437386][ T28] audit: type=1400 audit(1772307965.211:7917): avc: denied { prog_load } for pid=11161 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.561590][ T28] audit: type=1400 audit(1772307965.211:7918): avc: denied { bpf } for pid=11161 comm="syz.8.2079" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 390.834332][ T28] audit: type=1400 audit(1772307965.211:7919): avc: denied { prog_load } for pid=11161 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 390.908250][ T28] audit: type=1400 audit(1772307965.211:7920): avc: denied { perfmon } for pid=11161 comm="syz.8.2079" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.044789][ T28] audit: type=1400 audit(1772307965.211:7921): avc: denied { bpf } for pid=11161 comm="syz.8.2079" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 391.265672][ T28] audit: type=1400 audit(1772307965.231:7922): avc: denied { prog_run } for pid=11161 comm="syz.8.2079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 391.375082][T11180] audit: audit_backlog=65 > audit_backlog_limit=64 [ 391.730320][T11188] loop8: detected capacity change from 0 to 512 [ 391.747273][T11188] EXT4-fs (loop8): 1 truncate cleaned up [ 391.761930][T11188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.864943][T11188] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2086: bg 0: block 465: padding at end of block bitmap is not set [ 391.909538][T11188] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2 with error 28 [ 391.936527][T11188] EXT4-fs (loop8): This should not happen!! Data will be lost [ 391.936527][T11188] [ 391.948157][T11188] EXT4-fs (loop8): Total free blocks count 0 [ 391.954364][T11188] EXT4-fs (loop8): Free/Dirty block details [ 391.961537][T11188] EXT4-fs (loop8): free_blocks=0 [ 391.966975][T11188] EXT4-fs (loop8): dirty_blocks=3 [ 391.972943][T11188] EXT4-fs (loop8): Block reservation details [ 391.979789][T11188] EXT4-fs (loop8): i_reserved_data_blocks=3 [ 392.138734][ T9479] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 392.759597][T11209] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2088'. [ 392.769995][T11209] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2088'. [ 392.793824][T11209] loop8: detected capacity change from 0 to 2048 [ 392.809368][T11201] loop5: detected capacity change from 0 to 128 [ 392.846818][T11209] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.956655][T11209] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2088: bg 0: block 234: padding at end of block bitmap is not set [ 392.982657][T11209] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 248 with error 28 [ 392.995188][T11209] EXT4-fs (loop8): This should not happen!! Data will be lost [ 392.995188][T11209] [ 393.004979][T11209] EXT4-fs (loop8): Total free blocks count 0 [ 393.011164][T11209] EXT4-fs (loop8): Free/Dirty block details [ 393.017150][T11209] EXT4-fs (loop8): free_blocks=0 [ 393.022248][T11209] EXT4-fs (loop8): dirty_blocks=256 [ 393.027538][T11209] EXT4-fs (loop8): Block reservation details [ 393.033726][T11209] EXT4-fs (loop8): i_reserved_data_blocks=16 [ 393.539226][T11220] loop5: detected capacity change from 0 to 512 [ 393.582111][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.600136][T11220] EXT4-fs (loop5): 1 truncate cleaned up [ 393.616993][T11220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.759874][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.550395][T11232] loop5: detected capacity change from 0 to 128 [ 394.923912][ T28] kauditd_printk_skb: 500 callbacks suppressed [ 394.923931][ T28] audit: type=1400 audit(1772307970.191:8349): avc: denied { create } for pid=11252 comm="syz.0.2104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 395.014594][ T28] audit: type=1400 audit(1772307970.191:8350): avc: denied { read write } for pid=6140 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.094988][T11250] loop9: detected capacity change from 0 to 128 [ 395.112282][ T28] audit: type=1400 audit(1772307970.191:8351): avc: denied { open } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.114404][T11256] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2105'. [ 395.190994][T11258] netlink: 'syz.8.2105': attribute type 10 has an invalid length. [ 395.213290][ T28] audit: type=1400 audit(1772307970.191:8352): avc: denied { ioctl } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 395.277430][T11256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=11256 comm=syz.8.2105 [ 395.313494][ T28] audit: type=1400 audit(1772307970.221:8353): avc: denied { create } for pid=11247 comm="syz.9.2103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 395.369963][T11262] audit: audit_backlog=65 > audit_backlog_limit=64 [ 395.378692][ T28] audit: type=1400 audit(1772307970.221:8354): avc: denied { unmount } for pid=9680 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 395.404276][T11262] audit: audit_lost=80 audit_rate_limit=0 audit_backlog_limit=64 [ 395.417078][T11263] audit: audit_backlog=65 > audit_backlog_limit=64 [ 395.426550][T11256] audit: audit_backlog=65 > audit_backlog_limit=64 [ 395.783900][T11270] loop0: detected capacity change from 0 to 512 [ 395.837298][T11270] EXT4-fs (loop0): 1 truncate cleaned up [ 395.855300][T11270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.882536][T11270] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2108: bg 0: block 465: padding at end of block bitmap is not set [ 395.923476][T11270] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 2 with error 28 [ 395.935957][T11270] EXT4-fs (loop0): This should not happen!! Data will be lost [ 395.935957][T11270] [ 395.949243][T11270] EXT4-fs (loop0): Total free blocks count 0 [ 395.955365][T11270] EXT4-fs (loop0): Free/Dirty block details [ 395.961647][T11270] EXT4-fs (loop0): free_blocks=0 [ 395.966894][T11270] EXT4-fs (loop0): dirty_blocks=3 [ 395.972134][T11270] EXT4-fs (loop0): Block reservation details [ 395.978936][T11270] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 396.003077][ T311] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 396.068288][T11282] ip6tnl2: entered allmulticast mode [ 396.098514][T11280] loop9: detected capacity change from 0 to 512 [ 396.147546][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 396.570824][T11300] loop9: detected capacity change from 0 to 512 [ 396.649460][T11300] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2119: invalid indirect mapped block 256 (level 2) [ 396.663208][T11300] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 396.668459][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 396.684127][ C0] EXT4-fs (loop9): initial error at time 1772307971: ext4_free_branches:1023: inode 11 [ 396.693869][ C0] EXT4-fs (loop9): last error at time 1772307971: ext4_free_branches:1023: inode 11 [ 396.703965][T11300] EXT4-fs (loop9): 2 truncates cleaned up [ 396.710441][T11300] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.780191][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.485592][T11316] loop8: detected capacity change from 0 to 512 [ 397.983415][T11335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11335 comm=syz.8.2128 [ 398.102525][T11340] program syz.8.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 398.294183][T11341] IPv6: addrconf: prefix option has invalid lifetime [ 398.701432][T11356] syzkaller0: entered promiscuous mode [ 398.709804][T11356] syzkaller0: entered allmulticast mode [ 399.924529][T11378] SET target dimension over the limit! [ 399.934386][ T28] kauditd_printk_skb: 616 callbacks suppressed [ 399.934403][ T28] audit: type=1400 audit(1772307975.201:8966): avc: denied { map_create } for pid=11374 comm="syz.8.2142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 399.967155][ T28] audit: type=1400 audit(1772307975.231:8967): avc: denied { open } for pid=11382 comm="syz.0.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 399.990968][ T28] audit: type=1400 audit(1772307975.261:8968): avc: denied { perfmon } for pid=11382 comm="syz.0.2143" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 400.012586][ T28] audit: type=1400 audit(1772307975.261:8969): avc: denied { kernel } for pid=11382 comm="syz.0.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 400.040468][ T28] audit: type=1400 audit(1772307975.261:8970): avc: denied { tracepoint } for pid=11382 comm="syz.0.2143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 400.061190][ T28] audit: type=1400 audit(1772307975.311:8971): avc: denied { write } for pid=11375 comm="syz.9.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.086525][ T28] audit: type=1400 audit(1772307975.321:8972): avc: denied { write } for pid=11375 comm="syz.9.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.387304][T11385] loop0: detected capacity change from 0 to 512 [ 400.588492][ T28] audit: type=1400 audit(1772307975.331:8973): avc: denied { write } for pid=11375 comm="syz.9.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.625450][ T28] audit: type=1400 audit(1772307975.331:8974): avc: denied { write } for pid=11375 comm="syz.9.2141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 400.768941][T11394] audit: audit_backlog=65 > audit_backlog_limit=64 [ 401.032347][T11407] syzkaller0: entered promiscuous mode [ 401.051027][T11407] syzkaller0: entered allmulticast mode [ 401.231342][T11416] FAULT_INJECTION: forcing a failure. [ 401.231342][T11416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.258664][T11416] CPU: 1 UID: 0 PID: 11416 Comm: syz.8.2151 Tainted: G W syzkaller #0 PREEMPT(full) [ 401.258778][T11416] Tainted: [W]=WARN [ 401.258786][T11416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.258803][T11416] Call Trace: [ 401.258811][T11416] [ 401.258820][T11416] __dump_stack+0x1d/0x30 [ 401.258886][T11416] dump_stack_lvl+0x95/0xd0 [ 401.258934][T11416] dump_stack+0x15/0x1b [ 401.258962][T11416] should_fail_ex+0x263/0x280 [ 401.259007][T11416] should_fail+0xb/0x20 [ 401.259068][T11416] should_fail_usercopy+0x1a/0x20 [ 401.259123][T11416] _copy_from_iter+0xcf/0xea0 [ 401.259157][T11416] ? __alloc_skb+0x4f6/0x690 [ 401.259182][T11416] ? __alloc_skb+0x200/0x690 [ 401.259205][T11416] netlink_sendmsg+0x4ae/0x6f0 [ 401.259286][T11416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.259313][T11416] ____sys_sendmsg+0x5af/0x600 [ 401.259384][T11416] ___sys_sendmsg+0x195/0x1e0 [ 401.259428][T11416] __x64_sys_sendmsg+0xd4/0x160 [ 401.259469][T11416] x64_sys_call+0x194c/0x3020 [ 401.259517][T11416] do_syscall_64+0x12c/0x370 [ 401.259539][T11416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.259562][T11416] RIP: 0033:0x7f1b2306c799 [ 401.259578][T11416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.259599][T11416] RSP: 002b:00007f1b21ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.259623][T11416] RAX: ffffffffffffffda RBX: 00007f1b232e5fa0 RCX: 00007f1b2306c799 [ 401.259641][T11416] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 401.259658][T11416] RBP: 00007f1b21ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 401.259671][T11416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.259683][T11416] R13: 00007f1b232e6038 R14: 00007f1b232e5fa0 R15: 00007fff3c8474f8 [ 401.259805][T11416] [ 401.790603][T11426] FAULT_INJECTION: forcing a failure. [ 401.790603][T11426] name failslab, interval 1, probability 0, space 0, times 0 [ 401.840976][T11426] CPU: 0 UID: 0 PID: 11426 Comm: syz.0.2154 Tainted: G W syzkaller #0 PREEMPT(full) [ 401.841081][T11426] Tainted: [W]=WARN [ 401.841089][T11426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.841106][T11426] Call Trace: [ 401.841142][T11426] [ 401.841148][T11426] __dump_stack+0x1d/0x30 [ 401.841176][T11426] dump_stack_lvl+0x95/0xd0 [ 401.841219][T11426] dump_stack+0x15/0x1b [ 401.841240][T11426] should_fail_ex+0x263/0x280 [ 401.841277][T11426] should_failslab+0x8c/0xb0 [ 401.841317][T11426] __kmalloc_noprof+0xb8/0x4e0 [ 401.841338][T11426] ? sk_prot_alloc+0xa8/0x180 [ 401.841437][T11426] sk_prot_alloc+0xa8/0x180 [ 401.841464][T11426] sk_alloc+0x35/0x3e0 [ 401.841496][T11426] bpf_prog_test_run_skb+0x31b/0xef0 [ 401.841544][T11426] ? __fget_files+0x184/0x1c0 [ 401.841577][T11426] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 401.841621][T11426] bpf_prog_test_run+0x204/0x340 [ 401.841669][T11426] __sys_bpf+0x52e/0x7e0 [ 401.841707][T11426] __x64_sys_bpf+0x41/0x50 [ 401.841749][T11426] x64_sys_call+0x10cb/0x3020 [ 401.841836][T11426] do_syscall_64+0x12c/0x370 [ 401.841858][T11426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.841938][T11426] RIP: 0033:0x7ff13671c799 [ 401.841954][T11426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.842057][T11426] RSP: 002b:00007ff13516f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.842082][T11426] RAX: ffffffffffffffda RBX: 00007ff136995fa0 RCX: 00007ff13671c799 [ 401.842096][T11426] RDX: 0000000000000050 RSI: 0000200000000580 RDI: 000000000000000a [ 401.842108][T11426] RBP: 00007ff13516f090 R08: 0000000000000000 R09: 0000000000000000 [ 401.842151][T11426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.842172][T11426] R13: 00007ff136996038 R14: 00007ff136995fa0 R15: 00007ffec85cc858 [ 401.842198][T11426] [ 403.284972][T11466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2167'. [ 403.294495][T11466] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2167'. [ 403.370239][T11468] SET target dimension over the limit! [ 404.202234][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2172'. [ 404.218310][T11484] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2172'. [ 405.038685][ T28] kauditd_printk_skb: 564 callbacks suppressed [ 405.038713][ T28] audit: type=1400 audit(1772307980.311:9533): avc: denied { read write } for pid=6140 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.186431][ T28] audit: type=1400 audit(1772307980.341:9534): avc: denied { open } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.210816][ T28] audit: type=1400 audit(1772307980.341:9535): avc: denied { ioctl } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 405.236669][ T28] audit: type=1400 audit(1772307980.451:9536): avc: denied { read } for pid=11507 comm="syz.8.2179" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 405.248995][T11508] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2179'. [ 405.258161][ T28] audit: type=1400 audit(1772307980.451:9537): avc: denied { open } for pid=11507 comm="syz.8.2179" path="net:[4026532378]" dev="nsfs" ino=4026532378 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 405.295118][T11508] netlink: 'syz.8.2179': attribute type 10 has an invalid length. [ 405.298145][ T28] audit: type=1400 audit(1772307980.451:9538): avc: denied { create } for pid=11507 comm="syz.8.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.326612][T11508] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=11508 comm=syz.8.2179 [ 405.361184][ T28] audit: type=1400 audit(1772307980.451:9539): avc: denied { write } for pid=11507 comm="syz.8.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.391435][ T28] audit: type=1400 audit(1772307980.451:9540): avc: denied { read } for pid=11507 comm="syz.8.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.424105][ T28] audit: type=1400 audit(1772307980.481:9541): avc: denied { write } for pid=11507 comm="syz.8.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 405.468333][ T28] audit: type=1400 audit(1772307980.481:9542): avc: denied { prog_load } for pid=11507 comm="syz.8.2179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 405.563969][T11517] loop0: detected capacity change from 0 to 512 [ 405.574111][T11511] SET target dimension over the limit! [ 405.580995][T11518] FAULT_INJECTION: forcing a failure. [ 405.580995][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 405.630085][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2184'. [ 405.639354][T11518] CPU: 1 UID: 0 PID: 11518 Comm: syz.8.2183 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.639433][T11518] Tainted: [W]=WARN [ 405.639440][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 405.639453][T11518] Call Trace: [ 405.639459][T11518] [ 405.639467][T11518] __dump_stack+0x1d/0x30 [ 405.639496][T11518] dump_stack_lvl+0x95/0xd0 [ 405.639564][T11518] dump_stack+0x15/0x1b [ 405.639591][T11518] should_fail_ex+0x263/0x280 [ 405.639623][T11518] ? io_setxattr_prep+0xfc/0x1b0 [ 405.639690][T11518] should_failslab+0x8c/0xb0 [ 405.639722][T11518] __kmalloc_cache_noprof+0x5f/0x410 [ 405.639753][T11518] io_setxattr_prep+0xfc/0x1b0 [ 405.639850][T11518] io_submit_sqes+0x75a/0x1270 [ 405.639988][T11518] __se_sys_io_uring_enter+0x1c9/0xf50 [ 405.640025][T11518] ? __fget_files+0x184/0x1c0 [ 405.640053][T11518] ? mutex_unlock+0x4e/0x90 [ 405.640135][T11518] ? fput+0x8f/0xc0 [ 405.640166][T11518] __x64_sys_io_uring_enter+0x78/0x90 [ 405.640260][T11518] x64_sys_call+0x1e16/0x3020 [ 405.640290][T11518] do_syscall_64+0x12c/0x370 [ 405.640380][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.640407][T11518] RIP: 0033:0x7f1b2306c799 [ 405.640425][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.640481][T11518] RSP: 002b:00007f1b21ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 405.640553][T11518] RAX: ffffffffffffffda RBX: 00007f1b232e5fa0 RCX: 00007f1b2306c799 [ 405.640613][T11518] RDX: 0000000000001adf RSI: 0000000000002219 RDI: 0000000000000000 [ 405.640625][T11518] RBP: 00007f1b21ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 405.640637][T11518] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 405.640649][T11518] R13: 00007f1b232e6038 R14: 00007f1b232e5fa0 R15: 00007fff3c8474f8 [ 405.640674][T11518] [ 405.646916][T11517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.860369][T11524] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2184'. [ 405.874101][T11517] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.925772][T11517] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 405.966370][T11517] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 405.993561][T11517] EXT4-fs (loop0): This should not happen!! Data will be lost [ 405.993561][T11517] [ 406.009047][T11517] EXT4-fs (loop0): Total free blocks count 0 [ 406.027276][T11517] EXT4-fs (loop0): Free/Dirty block details [ 406.039628][T11517] EXT4-fs (loop0): free_blocks=65280 [ 406.045088][T11517] EXT4-fs (loop0): dirty_blocks=31 [ 406.050368][T11517] EXT4-fs (loop0): Block reservation details [ 406.056804][T11517] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 406.867604][T11525] loop5: detected capacity change from 0 to 8192 [ 407.151998][T11525] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 407.815137][T11546] netlink: 'syz.5.2185': attribute type 10 has an invalid length. [ 407.875335][T11525] 9p: Could not find request transport: xen [ 408.025058][T11561] netlink: 'syz.5.2185': attribute type 10 has an invalid length. [ 408.089455][T11546] team0: Port device dummy0 added [ 408.251161][T11561] team0: Port device dummy0 removed [ 408.331976][T11561] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 408.980137][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2198'. [ 408.992911][T11578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2198'. [ 409.016351][T11578] loop5: detected capacity change from 0 to 2048 [ 409.053384][T11578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.146717][T11578] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2198: bg 0: block 234: padding at end of block bitmap is not set [ 409.161475][T11578] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 996 with error 28 [ 409.174171][T11578] EXT4-fs (loop5): This should not happen!! Data will be lost [ 409.174171][T11578] [ 409.184006][T11578] EXT4-fs (loop5): Total free blocks count 0 [ 409.190170][T11578] EXT4-fs (loop5): Free/Dirty block details [ 409.196176][T11578] EXT4-fs (loop5): free_blocks=0 [ 409.201196][T11578] EXT4-fs (loop5): dirty_blocks=1008 [ 409.206539][T11578] EXT4-fs (loop5): Block reservation details [ 409.212647][T11578] EXT4-fs (loop5): i_reserved_data_blocks=63 [ 409.455712][ T311] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 30 with error 28 [ 409.796249][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.921386][T11590] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2200'. [ 409.935104][T11590] netlink: 'syz.0.2200': attribute type 10 has an invalid length. [ 409.945900][T11590] team0: Port device dummy0 added [ 409.958898][T11590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58912 sclass=netlink_route_socket pid=11590 comm=syz.0.2200 [ 409.979175][T11593] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2202'. [ 409.990042][T11593] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2202'. [ 410.018373][T11593] loop5: detected capacity change from 0 to 2048 [ 410.041134][T11593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.059570][ T28] kauditd_printk_skb: 483 callbacks suppressed [ 410.059629][ T28] audit: type=1400 audit(1772307985.331:10011): avc: denied { mount } for pid=11591 comm="syz.5.2202" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 410.088200][ T28] audit: type=1400 audit(1772307985.331:10012): avc: denied { read write } for pid=11591 comm="syz.5.2202" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.114734][ T28] audit: type=1400 audit(1772307985.331:10013): avc: denied { open } for pid=11591 comm="syz.5.2202" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.139182][ T28] audit: type=1400 audit(1772307985.331:10014): avc: denied { add_name } for pid=11591 comm="syz.5.2202" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 410.162064][ T28] audit: type=1400 audit(1772307985.331:10015): avc: denied { create } for pid=11591 comm="syz.5.2202" name="hugetlb.2MB.usage_in_bytes" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 410.185009][ T28] audit: type=1400 audit(1772307985.331:10016): avc: denied { read append open } for pid=11591 comm="syz.5.2202" path="/105/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 410.231270][T11593] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2202: bg 0: block 234: padding at end of block bitmap is not set [ 410.248291][ T28] audit: type=1400 audit(1772307985.491:10017): avc: denied { read write } for pid=6143 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.314008][ T28] audit: type=1400 audit(1772307985.491:10018): avc: denied { open } for pid=6143 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.324156][T11593] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 410.368249][T11593] EXT4-fs (loop5): This should not happen!! Data will be lost [ 410.368249][T11593] [ 410.388324][T11593] EXT4-fs (loop5): Total free blocks count 0 [ 410.429577][T11593] EXT4-fs (loop5): Free/Dirty block details [ 410.436270][T11593] EXT4-fs (loop5): free_blocks=0 [ 410.489046][ T28] audit: type=1400 audit(1772307985.491:10019): avc: denied { ioctl } for pid=6143 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 410.523834][ T28] audit: type=1400 audit(1772307985.501:10020): avc: denied { map } for pid=11591 comm="syz.5.2202" path="/105/file0/hugetlb.2MB.usage_in_bytes" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 410.558645][T11593] EXT4-fs (loop5): dirty_blocks=128 [ 410.566430][T11593] EXT4-fs (loop5): Block reservation details [ 410.579638][T11593] EXT4-fs (loop5): i_reserved_data_blocks=8 [ 410.759209][T11604] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 412.625807][T11600] loop0: detected capacity change from 0 to 256 [ 413.338245][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.881468][T11618] loop8: detected capacity change from 0 to 256 [ 414.695138][T11642] loop9: detected capacity change from 0 to 128 [ 415.313804][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 415.313833][ T28] audit: type=1400 audit(1772307990.381:10302): avc: denied { open } for pid=11647 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 415.455528][T11653] team0: Port device dummy0 removed [ 415.623909][T11653] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 415.932177][ T28] audit: type=1400 audit(1772307990.381:10303): avc: denied { perfmon } for pid=11647 comm="syz.3.2217" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 416.193065][ T28] audit: type=1400 audit(1772307990.391:10304): avc: denied { kernel } for pid=11647 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 416.407095][ T28] audit: type=1400 audit(1772307990.391:10305): avc: denied { create } for pid=11647 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 416.452015][T11656] audit: audit_backlog=65 > audit_backlog_limit=64 [ 416.469736][T11661] audit: audit_backlog=65 > audit_backlog_limit=64 [ 416.489651][T11656] audit: audit_lost=91 audit_rate_limit=0 audit_backlog_limit=64 [ 416.500843][T11661] audit: audit_lost=92 audit_rate_limit=0 audit_backlog_limit=64 [ 416.531392][T11656] audit: backlog limit exceeded [ 416.551765][ T28] audit: type=1400 audit(1772307990.401:10306): avc: denied { open } for pid=11647 comm="syz.3.2217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 418.443141][T11672] team0: Port device dummy0 removed [ 418.457635][T11672] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 419.144329][T11670] loop9: detected capacity change from 0 to 512 [ 420.034009][T11675] SET target dimension over the limit! [ 420.340568][ T28] kauditd_printk_skb: 199 callbacks suppressed [ 420.340583][ T28] audit: type=1400 audit(1772307995.611:10487): avc: denied { open } for pid=11685 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 420.429976][ T28] audit: type=1400 audit(1772307995.641:10488): avc: denied { create } for pid=11684 comm="syz.9.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 420.466862][T11687] loop9: detected capacity change from 0 to 512 [ 420.496073][ T28] audit: type=1400 audit(1772307995.651:10489): avc: denied { perfmon } for pid=11685 comm="syz.3.2228" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.548271][T11687] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.2227: iget: bad extra_isize 90 (inode size 256) [ 420.579472][ T28] audit: type=1400 audit(1772307995.651:10490): avc: denied { kernel } for pid=11685 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 420.608562][T11687] loop9: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 420.608729][T11687] EXT4-fs (loop9): Remounting filesystem read-only [ 420.624467][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 420.624489][ C0] EXT4-fs (loop9): initial error at time 1772307995: ext4_xattr_inode_iget:441: inode 18 [ 420.624519][ C0] EXT4-fs (loop9): last error at time 1772307995: ext4_xattr_inode_iget:441: inode 18 [ 420.624568][ T28] audit: type=1400 audit(1772307995.651:10491): avc: denied { perfmon } for pid=11685 comm="syz.3.2228" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 420.670329][T11687] EXT4-fs warning (device loop9): ext4_evict_inode:275: xattr delete (err -30) [ 420.675679][ T28] audit: type=1400 audit(1772307995.651:10492): avc: denied { create } for pid=11684 comm="syz.9.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 420.700990][ T28] audit: type=1400 audit(1772307995.651:10493): avc: denied { create } for pid=11684 comm="syz.9.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.720757][ T28] audit: type=1400 audit(1772307995.661:10494): avc: denied { create } for pid=11685 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 420.741457][ T28] audit: type=1400 audit(1772307995.661:10496): avc: denied { connect } for pid=11684 comm="syz.9.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.743372][T11687] EXT4-fs (loop9): 1 orphan inode deleted [ 420.764933][ T28] audit: type=1400 audit(1772307995.661:10495): avc: denied { read write } for pid=9680 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 420.793638][T11687] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.895866][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.787202][T11709] loop0: detected capacity change from 0 to 512 [ 421.794565][T11710] loop5: detected capacity change from 0 to 512 [ 421.819726][T11709] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.2234: iget: bad extra_isize 90 (inode size 256) [ 421.848465][T11709] loop0: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 421.848755][T11709] EXT4-fs (loop0): Remounting filesystem read-only [ 421.864553][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 421.864577][ C0] EXT4-fs (loop0): initial error at time 1772307997: ext4_xattr_inode_iget:441: inode 18 [ 421.864608][ C0] EXT4-fs (loop0): last error at time 1772307997: ext4_xattr_inode_iget:441: inode 18 [ 421.893726][T11709] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -30) [ 421.906152][T11709] EXT4-fs (loop0): 1 orphan inode deleted [ 421.912474][T11709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.427192][T11723] team0: Port device dummy0 removed [ 422.437968][T11723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.094138][T11725] loop9: detected capacity change from 0 to 128 [ 423.228166][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 424.286503][T11733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2240'. [ 424.310994][T11733] netlink: 'syz.0.2240': attribute type 10 has an invalid length. [ 424.347604][T11733] team0: Port device dummy0 added [ 424.546281][T11749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2246'. [ 424.568258][T11749] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2246'. [ 424.619709][T11740] loop5: detected capacity change from 0 to 256 [ 425.037760][T11748] loop0: detected capacity change from 0 to 128 [ 425.353411][ T28] kauditd_printk_skb: 385 callbacks suppressed [ 425.353431][ T28] audit: type=1400 audit(1772308000.621:10882): avc: denied { create } for pid=11757 comm="syz.8.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 425.402260][ T28] audit: type=1400 audit(1772308000.621:10883): avc: denied { prog_load } for pid=11757 comm="syz.8.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.424141][ T28] audit: type=1400 audit(1772308000.631:10884): avc: denied { bpf } for pid=11757 comm="syz.8.2249" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 425.445654][ T28] audit: type=1400 audit(1772308000.631:10885): avc: denied { prog_load } for pid=11757 comm="syz.8.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 425.460879][T11737] v: renamed from ip6_vti0 (while UP) [ 425.465222][ T28] audit: type=1400 audit(1772308000.631:10886): avc: denied { perfmon } for pid=11757 comm="syz.8.2249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 425.563046][ T28] audit: type=1400 audit(1772308000.691:10887): avc: denied { open } for pid=11757 comm="syz.8.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 425.582877][ T28] audit: type=1400 audit(1772308000.691:10888): avc: denied { perfmon } for pid=11757 comm="syz.8.2249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 425.604117][ T28] audit: type=1400 audit(1772308000.691:10889): avc: denied { kernel } for pid=11757 comm="syz.8.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 425.642519][T11758] loop8: detected capacity change from 0 to 128 [ 425.682790][T11762] SET target dimension over the limit! [ 425.692248][ T28] audit: type=1400 audit(1772308000.691:10890): avc: denied { perfmon } for pid=11757 comm="syz.8.2249" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 425.713607][ T28] audit: type=1400 audit(1772308000.711:10891): avc: denied { mount } for pid=11747 comm="syz.0.2247" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 426.195574][T11781] loop8: detected capacity change from 0 to 512 [ 427.682213][T11802] loop5: detected capacity change from 0 to 128 [ 427.866403][T11806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.735518][T11814] loop0: detected capacity change from 0 to 128 [ 429.537639][T11819] loop5: detected capacity change from 0 to 128 [ 429.631938][T11821] netlink: 'syz.3.2271': attribute type 2 has an invalid length. [ 429.923869][T11829] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 430.002432][T11792] loop9: detected capacity change from 0 to 8192 [ 430.054168][T11792] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 430.181263][T11835] loop5: detected capacity change from 0 to 2048 [ 430.214080][T11835] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 430.358736][ T28] kauditd_printk_skb: 436 callbacks suppressed [ 430.358797][ T28] audit: type=1400 audit(1772308005.631:11328): avc: denied { bpf } for pid=11840 comm="syz.9.2276" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.444486][ T28] audit: type=1400 audit(1772308005.671:11329): avc: denied { module_request } for pid=11840 comm="syz.9.2276" kmod="netdev-ip6_vti0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.536329][ T28] audit: type=1400 audit(1772308005.691:11330): avc: denied { sys_module } for pid=11840 comm="syz.9.2276" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 430.633229][T11835] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2275: bg 0: block 234: padding at end of block bitmap is not set [ 430.652615][ T28] audit: type=1400 audit(1772308005.691:11331): avc: denied { module_request } for pid=11840 comm="syz.9.2276" kmod=37C4A5E3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.678701][T11835] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1424 with error 28 [ 430.686269][ T28] audit: type=1400 audit(1772308005.771:11332): avc: denied { sys_module } for pid=11840 comm="syz.9.2276" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 430.718613][T11835] EXT4-fs (loop5): This should not happen!! Data will be lost [ 430.718613][T11835] [ 430.753000][T11852] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2277'. [ 430.773857][ T28] audit: type=1400 audit(1772308005.771:11333): avc: denied { module_request } for pid=11840 comm="syz.9.2276" kmod="ip6_vti0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 430.790934][T11835] EXT4-fs (loop5): Total free blocks count 0 [ 430.796165][ T28] audit: type=1400 audit(1772308005.781:11334): avc: denied { perfmon } for pid=11840 comm="syz.9.2276" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.824622][T11855] netlink: 'syz.0.2277': attribute type 10 has an invalid length. [ 430.834443][ T28] audit: type=1400 audit(1772308005.791:11335): avc: denied { read } for pid=11831 comm="syz.5.2275" dev="nsfs" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 430.856234][T11835] EXT4-fs (loop5): Free/Dirty block details [ 430.868021][ T28] audit: type=1400 audit(1772308005.791:11336): avc: denied { read open } for pid=11831 comm="syz.5.2275" path="net:[4026532432]" dev="nsfs" ino=4026532432 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 430.872783][T11856] loop8: detected capacity change from 0 to 512 [ 430.901496][T11835] EXT4-fs (loop5): free_blocks=0 [ 430.903376][ T28] audit: type=1400 audit(1772308005.791:11337): avc: denied { create } for pid=11831 comm="syz.5.2275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 430.927183][T11835] EXT4-fs (loop5): dirty_blocks=1440 [ 430.938669][T11835] EXT4-fs (loop5): Block reservation details [ 430.944689][T11835] EXT4-fs (loop5): i_reserved_data_blocks=90 [ 431.004808][T11856] EXT4-fs (loop8): 1 truncate cleaned up [ 431.019027][T11856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.068684][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2279'. [ 431.103369][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.154293][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.193457][T11860] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2279'. [ 431.215616][T11860] loop0: detected capacity change from 0 to 2048 [ 431.267966][T11860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.457236][T11860] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2279: bg 0: block 234: padding at end of block bitmap is not set [ 431.516324][T11860] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 490 with error 28 [ 431.535074][T11860] EXT4-fs (loop0): This should not happen!! Data will be lost [ 431.535074][T11860] [ 431.545683][T11860] EXT4-fs (loop0): Total free blocks count 0 [ 431.552683][T11860] EXT4-fs (loop0): Free/Dirty block details [ 431.559475][T11860] EXT4-fs (loop0): free_blocks=0 [ 431.565106][T11860] EXT4-fs (loop0): dirty_blocks=496 [ 431.573623][T11860] EXT4-fs (loop0): Block reservation details [ 431.583565][T11860] EXT4-fs (loop0): i_reserved_data_blocks=31 [ 431.943344][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.135459][T11881] syzkaller0: entered promiscuous mode [ 432.141334][T11881] syzkaller0: entered allmulticast mode [ 433.266419][T11898] netlink: 'syz.8.2292': attribute type 2 has an invalid length. [ 433.350017][T11897] loop5: detected capacity change from 0 to 512 [ 433.419505][T11897] EXT4-fs (loop5): 1 truncate cleaned up [ 433.463511][T11897] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.721127][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.769061][T11904] loop0: detected capacity change from 0 to 512 [ 434.531834][T11926] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2299'. [ 434.615539][T11926] loop9: detected capacity change from 0 to 2048 [ 434.663057][T11926] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.786648][T11926] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.2299: bg 0: block 234: padding at end of block bitmap is not set [ 434.819245][T11926] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 542 with error 28 [ 434.858472][T11926] EXT4-fs (loop9): This should not happen!! Data will be lost [ 434.858472][T11926] [ 434.890440][T11926] EXT4-fs (loop9): Total free blocks count 0 [ 434.908503][T11926] EXT4-fs (loop9): Free/Dirty block details [ 434.914481][T11926] EXT4-fs (loop9): free_blocks=0 [ 434.938480][T11926] EXT4-fs (loop9): dirty_blocks=544 [ 434.955874][T11926] EXT4-fs (loop9): Block reservation details [ 434.968528][T11926] EXT4-fs (loop9): i_reserved_data_blocks=34 [ 435.227572][T11949] loop0: detected capacity change from 0 to 512 [ 435.272378][T11949] EXT4-fs (loop0): 1 truncate cleaned up [ 435.292317][T11949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.339538][ T6143] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.371501][ T28] kauditd_printk_skb: 460 callbacks suppressed [ 435.371521][ T28] audit: type=1400 audit(1772308010.641:11798): avc: denied { kernel } for pid=11954 comm="syz.5.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 435.436710][T11955] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2307'. [ 435.468236][ T28] audit: type=1400 audit(1772308010.641:11799): avc: denied { prog_load } for pid=11934 comm="syz.3.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.506867][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.508875][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2307'. [ 435.601258][ T28] audit: type=1400 audit(1772308010.671:11800): avc: denied { perfmon } for pid=11954 comm="syz.5.2307" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 436.199570][ T28] audit: type=1400 audit(1772308010.681:11801): avc: denied { prog_load } for pid=11954 comm="syz.5.2307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 436.316052][ T28] audit: type=1400 audit(1772308010.681:11802): avc: denied { bpf } for pid=11954 comm="syz.5.2307" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 436.415819][ T28] audit: type=1400 audit(1772308010.681:11803): avc: denied { perfmon } for pid=11954 comm="syz.5.2307" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 436.875152][ T28] audit: type=1400 audit(1772308010.681:11804): avc: denied { read write } for pid=6143 comm="syz-executor" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.912762][T11980] audit: audit_backlog=65 > audit_backlog_limit=64 [ 436.925648][ T28] audit: type=1400 audit(1772308010.681:11805): avc: denied { open } for pid=6143 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 436.954137][T11980] audit: audit_lost=99 audit_rate_limit=0 audit_backlog_limit=64 [ 437.630365][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 437.648537][T11993] netlink: 'syz.0.2316': attribute type 30 has an invalid length. [ 437.685143][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2316'. [ 437.703130][T11993] netlink: 'syz.0.2316': attribute type 30 has an invalid length. [ 437.773516][T11997] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2319'. [ 438.015028][T12000] loop0: detected capacity change from 0 to 512 [ 438.059563][T12000] loop0: detected capacity change from 0 to 764 [ 438.577823][T12020] FAULT_INJECTION: forcing a failure. [ 438.577823][T12020] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.599645][T12020] CPU: 0 UID: 0 PID: 12020 Comm: syz.8.2328 Tainted: G W syzkaller #0 PREEMPT(full) [ 438.599739][T12020] Tainted: [W]=WARN [ 438.599748][T12020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 438.599762][T12020] Call Trace: [ 438.599769][T12020] [ 438.599779][T12020] __dump_stack+0x1d/0x30 [ 438.599807][T12020] dump_stack_lvl+0x95/0xd0 [ 438.599830][T12020] dump_stack+0x15/0x1b [ 438.599894][T12020] should_fail_ex+0x263/0x280 [ 438.599921][T12020] should_fail+0xb/0x20 [ 438.600000][T12020] should_fail_usercopy+0x1a/0x20 [ 438.600023][T12020] _copy_from_user+0x1c/0xb0 [ 438.600143][T12020] ___sys_sendmsg+0xc1/0x1e0 [ 438.600188][T12020] __x64_sys_sendmsg+0xd4/0x160 [ 438.600218][T12020] x64_sys_call+0x194c/0x3020 [ 438.600336][T12020] do_syscall_64+0x12c/0x370 [ 438.600374][T12020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.600395][T12020] RIP: 0033:0x7f1b2306c799 [ 438.600427][T12020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.600451][T12020] RSP: 002b:00007f1b21ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.600597][T12020] RAX: ffffffffffffffda RBX: 00007f1b232e5fa0 RCX: 00007f1b2306c799 [ 438.600611][T12020] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 438.600629][T12020] RBP: 00007f1b21ac7090 R08: 0000000000000000 R09: 0000000000000000 [ 438.600646][T12020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.600661][T12020] R13: 00007f1b232e6038 R14: 00007f1b232e5fa0 R15: 00007fff3c8474f8 [ 438.600714][T12020] [ 439.258237][T12027] loop8: detected capacity change from 0 to 512 [ 439.353484][T12030] loop9: detected capacity change from 0 to 128 [ 439.353521][T12027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.423243][T12027] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.447979][T12030] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 439.479789][T12027] tipc: Started in network mode [ 439.484765][T12027] tipc: Node identity ac141441, cluster identity 4711 [ 439.493191][T12027] tipc: Enabled bearer , priority 10 [ 439.528904][T12030] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.630444][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.295308][T12078] loop5: detected capacity change from 0 to 256 [ 440.357174][ T6143] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 440.381844][ T28] kauditd_printk_skb: 903 callbacks suppressed [ 440.381862][ T28] audit: type=1400 audit(1772308015.641:12663): avc: denied { setopt } for pid=12079 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 440.461805][ T28] audit: type=1400 audit(1772308015.651:12664): avc: denied { write } for pid=12079 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 440.580001][ T28] audit: type=1400 audit(1772308015.681:12665): avc: denied { search } for pid=12099 comm="sed" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.618671][ T23] tipc: Node number set to 2886997057 [ 440.666577][ T28] audit: type=1400 audit(1772308015.681:12666): avc: denied { read } for pid=12099 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 440.711712][ T28] audit: type=1400 audit(1772308015.681:12667): avc: denied { open } for pid=12099 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=513 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 440.728157][T12111] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.763118][T12113] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.766193][T12111] audit: audit_lost=115 audit_rate_limit=0 audit_backlog_limit=64 [ 440.771461][T12113] audit: audit_lost=116 audit_rate_limit=0 audit_backlog_limit=64 [ 440.790351][T12115] audit: audit_backlog=65 > audit_backlog_limit=64 [ 440.870436][T12113] FAULT_INJECTION: forcing a failure. [ 440.870436][T12113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.885368][T12113] CPU: 0 UID: 0 PID: 12113 Comm: syz.9.2341 Tainted: G W syzkaller #0 PREEMPT(full) [ 440.885408][T12113] Tainted: [W]=WARN [ 440.885417][T12113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.885432][T12113] Call Trace: [ 440.885440][T12113] [ 440.885449][T12113] __dump_stack+0x1d/0x30 [ 440.885476][T12113] dump_stack_lvl+0x95/0xd0 [ 440.885536][T12113] dump_stack+0x15/0x1b [ 440.885581][T12113] should_fail_ex+0x263/0x280 [ 440.885606][T12113] should_fail+0xb/0x20 [ 440.885624][T12113] should_fail_usercopy+0x1a/0x20 [ 440.885646][T12113] _copy_from_user+0x1c/0xb0 [ 440.885698][T12113] do_sock_getsockopt+0xf1/0x210 [ 440.885734][T12113] __x64_sys_getsockopt+0x11d/0x1a0 [ 440.885845][T12113] x64_sys_call+0x2dcf/0x3020 [ 440.885883][T12113] do_syscall_64+0x12c/0x370 [ 440.885912][T12113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.885961][T12113] RIP: 0033:0x7f4f0184c799 [ 440.886054][T12113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.886077][T12113] RSP: 002b:00007f4f002a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 440.886136][T12113] RAX: ffffffffffffffda RBX: 00007f4f01ac5fa0 RCX: 00007f4f0184c799 [ 440.886209][T12113] RDX: 0000000000002720 RSI: 0000200000000114 RDI: 0000000000000003 [ 440.886223][T12113] RBP: 00007f4f002a7090 R08: 0000200000000000 R09: 0000000000000000 [ 440.886238][T12113] R10: 0000200000c35fff R11: 0000000000000246 R12: 0000000000000001 [ 440.886300][T12113] R13: 00007f4f01ac6038 R14: 00007f4f01ac5fa0 R15: 00007ffd4e558608 [ 440.886322][T12113] [ 441.419598][T12125] loop9: detected capacity change from 0 to 128 [ 442.151318][T12140] loop8: detected capacity change from 0 to 128 [ 442.793693][T12177] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2350'. [ 442.889990][T12100] bio_check_eod: 282 callbacks suppressed [ 442.890009][T12100] syz.5.2335: attempt to access beyond end of device [ 442.890009][T12100] loop5: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 443.057304][T12100] syz.5.2335: attempt to access beyond end of device [ 443.057304][T12100] loop5: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 443.199568][T12100] syz.5.2335: attempt to access beyond end of device [ 443.199568][T12100] loop5: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 443.334550][T12100] syz.5.2335: attempt to access beyond end of device [ 443.334550][T12100] loop5: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 443.398527][T12100] syz.5.2335: attempt to access beyond end of device [ 443.398527][T12100] loop5: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 443.424251][T12100] syz.5.2335: attempt to access beyond end of device [ 443.424251][T12100] loop5: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 443.460534][T12100] syz.5.2335: attempt to access beyond end of device [ 443.460534][T12100] loop5: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 443.474275][T12100] syz.5.2335: attempt to access beyond end of device [ 443.474275][T12100] loop5: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 443.487869][T12100] syz.5.2335: attempt to access beyond end of device [ 443.487869][T12100] loop5: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 443.501777][T12100] syz.5.2335: attempt to access beyond end of device [ 443.501777][T12100] loop5: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 443.677408][T12186] loop0: detected capacity change from 0 to 512 [ 443.696104][T12186] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 443.739645][T12187] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2353'. [ 443.751111][T12186] EXT4-fs (loop0): 1 truncate cleaned up [ 443.773660][T12186] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.051226][ T6663] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.287242][T12213] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.721205][ T28] kauditd_printk_skb: 872 callbacks suppressed [ 445.721232][ T28] audit: type=1400 audit(1772308020.991:13426): avc: denied { prog_load } for pid=12229 comm="syz.5.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 445.749897][T12230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2362'. [ 446.004115][ T28] audit: type=1400 audit(1772308020.991:13427): avc: denied { bpf } for pid=12229 comm="syz.5.2362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.026039][ T28] audit: type=1400 audit(1772308021.101:13428): avc: denied { prog_load } for pid=12229 comm="syz.5.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 446.064916][ T28] audit: type=1400 audit(1772308021.101:13429): avc: denied { bpf } for pid=12229 comm="syz.5.2362" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 446.086753][ T28] audit: type=1400 audit(1772308021.161:13430): avc: denied { create } for pid=12229 comm="syz.5.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.114638][ T28] audit: type=1400 audit(1772308021.161:13431): avc: denied { write } for pid=12229 comm="syz.5.2362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 446.139355][ T28] audit: type=1400 audit(1772308021.181:13432): avc: denied { read } for pid=12229 comm="syz.5.2362" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 446.163527][ T28] audit: type=1400 audit(1772308021.181:13433): avc: denied { open } for pid=12229 comm="syz.5.2362" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 446.188474][ T28] audit: type=1400 audit(1772308021.321:13434): avc: denied { read write } for pid=6140 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.213384][ T28] audit: type=1400 audit(1772308021.321:13435): avc: denied { open } for pid=6140 comm="syz-executor" path="/dev/loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 446.335007][T12241] loop8: detected capacity change from 0 to 512 [ 446.344875][T12241] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 446.364012][T12241] EXT4-fs (loop8): 1 truncate cleaned up [ 446.374017][T12241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.765972][T12254] loop5: detected capacity change from 0 to 2048 [ 446.819038][T12254] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 446.954540][T12254] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2370: bg 0: block 234: padding at end of block bitmap is not set [ 447.011410][T12260] ================================================================== [ 447.019564][T12260] BUG: KCSAN: data-race in bq_flush_to_queue / cpu_map_kthread_run [ 447.027526][T12260] [ 447.029886][T12260] write to 0xffff8881307b1500 of 8 bytes by task 12262 on cpu 0: [ 447.039519][T12260] cpu_map_kthread_run+0x4fe/0x1680 [ 447.044919][T12260] kthread+0x22a/0x280 [ 447.049024][T12260] ret_from_fork+0x150/0x360 [ 447.053695][T12260] ret_from_fork_asm+0x1a/0x30 [ 447.058521][T12260] [ 447.060873][T12260] read to 0xffff8881307b1500 of 8 bytes by task 12260 on cpu 1: [ 447.068540][T12260] bq_flush_to_queue+0x124/0x360 [ 447.073543][T12260] cpu_map_enqueue+0x1a5/0x1c0 [ 447.078356][T12260] xdp_do_redirect_frame+0x27b/0x580 [ 447.083714][T12260] bpf_test_run_xdp_live+0xac3/0x1360 [ 447.089143][T12260] bpf_prog_test_run_xdp+0x57b/0xa10 [ 447.094541][T12260] bpf_prog_test_run+0x204/0x340 [ 447.099523][T12260] __sys_bpf+0x52e/0x7e0 [ 447.101806][T12254] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 314 with error 28 [ 447.103801][T12260] __x64_sys_bpf+0x41/0x50 [ 447.116948][T12254] EXT4-fs (loop5): This should not happen!! Data will be lost [ 447.116948][T12254] [ 447.120638][T12260] x64_sys_call+0x10cb/0x3020 [ 447.120678][T12260] do_syscall_64+0x12c/0x370 [ 447.120699][T12260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.120724][T12260] [ 447.120729][T12260] value changed: 0xffff88812bfb0070 -> 0x0000000000000000 [ 447.120742][T12260] [ 447.120746][T12260] Reported by Kernel Concurrency Sanitizer on: [ 447.137319][T12254] EXT4-fs (loop5): Total free blocks count 0 [ 447.139697][T12260] CPU: 1 UID: 0 PID: 12260 Comm: syz.0.2371 Tainted: G W syzkaller #0 PREEMPT(full) [ 447.139736][T12260] Tainted: [W]=WARN [ 447.149072][T12254] EXT4-fs (loop5): Free/Dirty block details [ 447.155099][T12260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.155119][T12260] ================================================================== [ 447.157750][T12254] EXT4-fs (loop5): free_blocks=0 [ 447.219871][T12254] EXT4-fs (loop5): dirty_blocks=320 [ 447.225214][T12254] EXT4-fs (loop5): Block reservation details [ 447.231865][T12254] EXT4-fs (loop5): i_reserved_data_blocks=20 [ 447.551171][ T9680] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.660320][ T6140] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.