last executing test programs: 2m21.289425793s ago: executing program 32 (id=147): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000002e"], 0x0, 0x34}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6c, '\x00', 0x0, r0, 0x1, 0x3}, 0x50) 1m45.643537638s ago: executing program 33 (id=482): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) 1m40.219309304s ago: executing program 2 (id=524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002540)={0x38, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x52}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4044004) 1m40.172991275s ago: executing program 2 (id=525): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chown(&(0x7f0000001140)='./cgroup.cpu/cgroup.procs\x00', 0xee00, 0x0) 1m40.084324057s ago: executing program 2 (id=529): r0 = socket$can_raw(0x1d, 0x3, 0x1) getpeername(r0, &(0x7f00000000c0)=@alg, 0x0) 1m40.065790738s ago: executing program 2 (id=531): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r0, r1, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f0000000100)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$eJzs3EFII1cYwPHPGGMSa5JDaWmh+Ggv7WXQtOfSUBRKAxU1pVoojDppQ6aJZIIlpVQ97XXZ+54W9iAevQm73vbkZW+7sOxlb14W9qCHZWfJZMYkY4wxRuIm/x/IvLz3Pue9mRf4ZsjM8W93/85nLS2rlyUQVvKRiMipSEIC4hlxtwGnHJJG2ycy8ebZF4vLKz+n0unZBaXmUkvfJpVSsalH//wXcbsdjMtR4o/j18lXR58cfXb8bumvnKVylioUy0pXq8WXZX3VNNR6zsprSs2bhm4ZKlewjFKtvVhrz5rFjY2K0gvrk9GNkmFZSi9UVN6oqHJRlUsVpf+p5wpK0zQ1GZX2Xjy5pMMQyOwuLOipLoPXejwY3JBSKaWPikjkXEtmty8DAgAAfeXP/wMi21fK/+UbN/+XmJP/VzvX8/+9Lw/LE7/ux9z8/yDUKv//7nntfzXl/2ER6Sb/vy8d5v/SMiMaLtfK/3E7TIXOVY00farm/1H3++vY+X1v2imQ/wMAAAAAAAAAAAAAAAAAAAAA8CE4te24bdtxb+v91R8hcD9jIF10/sdFJFw9+zbnf5AtLq9I2HlwLxgTMe9sZjYzta3b4VBETDFkWuLy1lkPrmrZe/JIVSXksbnlxm9tZkadllRWck78jMQl4Y+37bmf0rMzqsaNP3tMKdoYn5S4fNw6Ptkc7+4/JF9/1RCvSVyerklRTFl31nU9/v8ZpX78Je2Ljzj9AAAAAAAYBJo60/L6XdMuaq+9ZeTs+rrl/YHa9fV0y+vzYPzzYL9nDwAAAADAcLAq/+Z10zRKbQoRubxP94VgZ51Dvpqxdp1HG2bY6XhCzu9dRHxNARG50rwedHhUmwreDymamsJuZXeH15t/z87XdvNh6SAq6B/8VLVCXXc83m2j0AXHWebPRwXarISxnq3nT+89POndF+T7fW8FXN55p9t9hf2rzimMuTvmDh0AAAAwQOpJv1fzQ2PzSF8GBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkLmRV/r5Cv2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBbvA8AAP//KbT7SA==") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) 1m38.930898446s ago: executing program 2 (id=539): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r1, 0x0) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2000) keyctl$chown(0x4, 0x0, 0xee01, r2) keyctl$setperm(0x5, 0x0, 0x30925) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 1m37.676031758s ago: executing program 2 (id=550): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m37.507570002s ago: executing program 34 (id=550): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d649379071c33390e418ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa55c59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afcc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab2e4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea13201bafe4f0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc8bef9cb85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e5a61561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c3c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a0600adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cd50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282b6caa2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33320253af570f4ef9c0254afdd89ac3943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b74c516647652bfb6e93002494a5cd74e2a9a4734487062437da23e1efa6ef7674108aaa3ffac859c3577c2637bb3bdc69bc365b1f20dba96b8acca62f3f80045318de0facf2ed44b814e842c2a520159bb6c320cec0910c0b8bd3d547bdfba2e0bb24d117ed0388afd37affbad2f9c77c9c1314a16ffe64f5e3744a2fffd7039670f5706e589a4c3868"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m31.551314252s ago: executing program 6 (id=616): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x7, 0x8, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) 1m31.535035603s ago: executing program 6 (id=618): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m30.485850078s ago: executing program 6 (id=623): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r0, &(0x7f0000000280)}, 0x20) 1m30.455787979s ago: executing program 6 (id=626): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r7, r7, 0x0, 0x2000000000006) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r10, 0x4) ftruncate(r0, 0x2007ffa) 1m29.752253977s ago: executing program 6 (id=631): mlockall(0x7) mlockall(0x5) 1m29.555896062s ago: executing program 6 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc010000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x2c000010) 1m29.555644552s ago: executing program 35 (id=633): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="bc010000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x1bc}}, 0x2c000010) 1m27.704130068s ago: executing program 5 (id=651): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000d00)="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", 0x559, r0) 1m27.698094268s ago: executing program 5 (id=652): syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./bus\x00', 0x3010050, &(0x7f0000000600)=ANY=[], 0x41, 0x14fe, &(0x7f0000000700)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x46) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r3, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 1m26.718661203s ago: executing program 5 (id=661): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.022188546s ago: executing program 5 (id=673): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f0000000100)=ANY=[], 0x2, 0x32e, &(0x7f0000000a40)="$eJzs3EFII1cYwPHPGGMSa5JDaWmh+Ggv7WXQtOfSUBRKAxU1pVoojDppQ6aJZIIlpVQ97XXZ+54W9iAevQm73vbkZW+7sOxlb14W9qCHZWfJZMYkY4wxRuIm/x/IvLz3Pue9mRf4ZsjM8W93/85nLS2rlyUQVvKRiMipSEIC4hlxtwGnHJJG2ycy8ebZF4vLKz+n0unZBaXmUkvfJpVSsalH//wXcbsdjMtR4o/j18lXR58cfXb8bumvnKVylioUy0pXq8WXZX3VNNR6zsprSs2bhm4ZKlewjFKtvVhrz5rFjY2K0gvrk9GNkmFZSi9UVN6oqHJRlUsVpf+p5wpK0zQ1GZX2Xjy5pMMQyOwuLOipLoPXejwY3JBSKaWPikjkXEtmty8DAgAAfeXP/wMi21fK/+UbN/+XmJP/VzvX8/+9Lw/LE7/ux9z8/yDUKv//7nntfzXl/2ER6Sb/vy8d5v/SMiMaLtfK/3E7TIXOVY00farm/1H3++vY+X1v2imQ/wMAAAAAAAAAAAAAAAAAAAAA8CE4te24bdtxb+v91R8hcD9jIF10/sdFJFw9+zbnf5AtLq9I2HlwLxgTMe9sZjYzta3b4VBETDFkWuLy1lkPrmrZe/JIVSXksbnlxm9tZkadllRWck78jMQl4Y+37bmf0rMzqsaNP3tMKdoYn5S4fNw6Ptkc7+4/JF9/1RCvSVyerklRTFl31nU9/v8ZpX78Je2Ljzj9AAAAAAAYBJo60/L6XdMuaq+9ZeTs+rrl/YHa9fV0y+vzYPzzYL9nDwAAAADAcLAq/+Z10zRKbQoRubxP94VgZ51Dvpqxdp1HG2bY6XhCzu9dRHxNARG50rwedHhUmwreDymamsJuZXeH15t/z87XdvNh6SAq6B/8VLVCXXc83m2j0AXHWebPRwXarISxnq3nT+89POndF+T7fW8FXN55p9t9hf2rzimMuTvmDh0AAAAwQOpJv1fzQ2PzSF8GBQAAAAAAAAAAAAAAAAAAAAAAAAAAAADAkLmRV/r5Cv2eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBbvA8AAP//KbT7SA==") r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r6, 0x2007ffc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r6, r6, 0x0, 0x2000000000006) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ftruncate(r0, 0x2007ffa) 1m24.47121204s ago: executing program 5 (id=679): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r1, 0xcd2e8000) r5 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r5, &(0x7f0000000fc0)=""/211, 0xd3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x4, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 1m24.465109869s ago: executing program 7 (id=680): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r7, r7, 0x0, 0x2000000000006) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ftruncate(r0, 0x2007ffa) 1m24.227996376s ago: executing program 5 (id=683): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sched_rr_get_interval(r0, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) 1m24.227816926s ago: executing program 36 (id=683): socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x7fff, 0x0, 0x0, 0x2}, 0x10) sched_rr_get_interval(r0, 0x0) r4 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r4, 0x0, 0x8, &(0x7f0000000340)=ANY=[@ANYRES32], 0x1) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x0, r5}) r7 = socket(0xa, 0x1, 0x0) ioctl(r7, 0x8936, &(0x7f0000000000)) 1m23.030620306s ago: executing program 7 (id=690): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m21.930974693s ago: executing program 7 (id=697): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 1m21.877778105s ago: executing program 7 (id=700): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r7 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r7, 0x2007ffc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r8, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r7, r7, 0x0, 0x2000000000006) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ftruncate(r0, 0x2007ffa) 1m20.617995457s ago: executing program 7 (id=709): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r1, 0xcd2e8000) r5 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r5, &(0x7f0000000fc0)=""/211, 0xd3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x4, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 1m20.284602015s ago: executing program 7 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m20.284453795s ago: executing program 37 (id=719): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 46.141242502s ago: executing program 8 (id=1014): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000002c0)='./file0\x00', 0xa, &(0x7f0000001480)=ANY=[@ANYRES8=0x0], 0xfd, 0x5546, &(0x7f000000c080)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) 44.438068474s ago: executing program 8 (id=1026): ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x40) 44.244133849s ago: executing program 8 (id=1029): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000240)=[{0x30, 0x4, 0x40, 0x4}, {0x2, 0x4, 0xa, 0x8e8e}, {0x400, 0x5, 0x5, 0x1}, {0x5, 0xa0, 0x3, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000300)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 43.095919678s ago: executing program 8 (id=1033): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r2, r3, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r5 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r5, 0x2007ffc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r5, r5, 0x0, 0x2000000000006) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000000)=r8, 0x4) ftruncate(r0, 0x2007ffa) 42.151443882s ago: executing program 8 (id=1039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000000f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 41.977007246s ago: executing program 8 (id=1043): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000240)=[{0x30, 0x4, 0x40, 0x4}, {0x2, 0x4, 0xa, 0x8e8e}, {0x400, 0x5, 0x5, 0x1}, {0x5, 0xa0, 0x3, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000300)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 41.713053673s ago: executing program 38 (id=1043): socket$pppl2tp(0x18, 0x1, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000400)={[{@usrjquota}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@oldalloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000240)=[{0x30, 0x4, 0x40, 0x4}, {0x2, 0x4, 0xa, 0x8e8e}, {0x400, 0x5, 0x5, 0x1}, {0x5, 0xa0, 0x3, 0x7}]}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000300)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r4, 0x0, 0x0) getdents64(r4, 0x0, 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.473114188s ago: executing program 9 (id=1379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\x00\t', 0x14, 0x6, 0xff, @remote, @local, {[], {{0x4e23, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000740)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 4.419754959s ago: executing program 9 (id=1380): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.877919003s ago: executing program 3 (id=1381): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x8, 0x6, 0x7, 0x3, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x9, 0x5, 0x101, 0x7}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000846000/0xa000)=nil, 0xa000, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 3.344089546s ago: executing program 9 (id=1385): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@newqdisc={0xa8, 0x24, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0x6}, {0xd, 0x3}, {0x5, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @qdisc_kind_options=@q_tbf={{0x8}, {0x50, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0xd3f01e3d6ff37fc7}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cd3}, @TCA_TBF_BURST={0x8, 0x6, 0x8001}, @TCA_TBF_PARMS={0x28, 0x1, {{0x72, 0x2, 0x1ff, 0xff, 0x5, 0xffff}, {0x9, 0x2, 0x6, 0x2, 0x8, 0x1}, 0x40, 0x7, 0x11e7}}, @TCA_TBF_PBURST={0x8, 0x7, 0x22a6}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000880}, 0x20048084) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) syz_usb_connect$uac1(0x5, 0x85, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x15ca, 0x1806, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x10, 0x56, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xfff, 0x16}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x205, 0x3, 0x7, 0xd, 0x7, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xc, 0xab, 0x2, {0x7, 0x25, 0x1, 0x4, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0xb, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x3, 0x1, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xf8, 0x7}}}}}}}}]}}, 0x0) userfaultfd(0x80001) 3.318613237s ago: executing program 1 (id=1386): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xec776000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) getpid() r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/27, 0x1b) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$sock(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2.860544608s ago: executing program 3 (id=1387): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0xfffffe70) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'netpci0\x00', @multicast}) chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) write$FUSE_LSEEK(r5, &(0x7f0000000200)={0x18, 0x0, r6, {0x3}}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100000000000000001c8159ca000800336b01000002"], 0x1c}}, 0x0) 2.852514749s ago: executing program 0 (id=1388): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xec776000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) getpid() r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$sock(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 2.39998167s ago: executing program 1 (id=1390): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r6, 0x2007ffc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r6, r6, 0x0, 0x2000000000006) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ftruncate(r0, 0x2007ffa) 2.0054655s ago: executing program 3 (id=1391): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.99403905s ago: executing program 0 (id=1392): socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000240)=[{0x30, 0x4, 0x40, 0x4}, {0x2, 0x4, 0xa, 0x8e8e}, {0x400, 0x5, 0x5, 0x1}, {0x5, 0xa0, 0x3, 0x7}]}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc9, &(0x7f0000000300)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, 0x10, 0xffffffffffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x18) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0x0) getdents64(r5, 0x0, 0x0) getdents64(r5, 0x0, 0x0) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 1.927950681s ago: executing program 4 (id=1394): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8fffdffb702000008000000b7030000000000008500000008000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.927581092s ago: executing program 4 (id=1395): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f00000004c0)={@multicast, @random="bad4f9431624", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @initdev={0xfe, 0x4, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0xa, 0x1, 0xe1, 0x5}}}}}}, 0x0) 1.919593162s ago: executing program 4 (id=1396): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.117475682s ago: executing program 1 (id=1397): r0 = fsopen(&(0x7f0000000340)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 1.116989382s ago: executing program 3 (id=1398): r0 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f00000001c0)=r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x8, 0x6, 0x7, 0x3, 0x5}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x9, 0x5, 0x101, 0x7}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000846000/0xa000)=nil, 0xa000, 0xc) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) 1.093341593s ago: executing program 0 (id=1399): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) 1.092968883s ago: executing program 0 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x200c8) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000030303"], 0x1c}}, 0x0) 1.057639503s ago: executing program 4 (id=1401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') read$FUSE(r5, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0xfffffe70) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000001c0)={'netpci0\x00', @multicast}) chdir(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r7, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) write$FUSE_LSEEK(r5, &(0x7f0000000200)={0x18, 0x0, r6, {0x3}}, 0x18) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000000c0)=0x5, 0x4) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x400}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="0100000000000000001c8159ca000800336b01000002"], 0x1c}}, 0x0) 1.057316383s ago: executing program 0 (id=1402): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x20010, 0xffffffffffffffff, 0xec776000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0) getpid() r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x4}, 0x3}) write(r4, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmmsg$sock(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 1.054006294s ago: executing program 1 (id=1403): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84022, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x3000002, 0x2010, r1, 0xcd2e8000) r5 = open(&(0x7f0000000040)='.\x00', 0x101480, 0x24) getdents64(r5, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r5, &(0x7f0000000fc0)=""/211, 0xd3) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x14, r6, 0x321, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c811}, 0x4) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}, 0xddda}, {{0x0, 0x0, 0x0}, 0x60000000}, {{0x0, 0x0, 0x0}, 0x871}, {{0x0, 0x0, 0x0}, 0x6c2}], 0x4, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {0x3}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x80000}, 0x0) 179.066426ms ago: executing program 3 (id=1404): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000020000000000000014085000000050000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfd02, &(0x7f0000000000)=ANY=[], 0x0) 174.763536ms ago: executing program 4 (id=1405): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 164.822796ms ago: executing program 9 (id=1406): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1100, 0x2}) r0 = request_key(0x0, 0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, r0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 150.076826ms ago: executing program 4 (id=1407): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 145.606446ms ago: executing program 0 (id=1408): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x82) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000d80)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@nojournal_checksum}, {@test_dummy_encryption}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(0x0, r2, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4a1e, &(0x7f00000012c0)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYBLOB="1a390f8112561a51009b843ead5e14a31d53b926968c3e66575486258beaa6c61ecfadbded5385ddd80752eb74234499ebfc12cfccbb1263e8b89b6f15a95988ab2d544995107ed7f0948f2a036b709abbaa015b55ed4eb5cd05bb9a95d0d4a0ced37c30d66d966525b0e78d1c15b8352af6c739a865f25f1577adf2a03d10a81e2e652e6e7f465b248dfbefd789e66423ce97ce5a41fd4d445102d151ee2716750f5ab040c71a44cb4c6de4dc9fe38b7502a66e1c129216c8163458faf16c766a045f103d82631fea029f85b4bd519b6f5ee7ebed39ff000000000000"], 0x2, 0x334, &(0x7f0000000e40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r6, 0x2007ffc) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/13, @ANYRES32, @ANYBLOB="00000000010000002c00000000000000180000000000000000000000000000009500000000000000a700000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r7, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x8, 0x0, 0x0}}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000021000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}, 0x1, 0x0, 0x0, 0x404c080}, 0x4008840) sendfile(r6, r6, 0x0, 0x2000000000006) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) ftruncate(r0, 0x2007ffa) 138.518377ms ago: executing program 9 (id=1409): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 132.830517ms ago: executing program 3 (id=1410): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x0, 0x0, 0x0) syz_create_resource$binfmt(0x0) 58.738529ms ago: executing program 9 (id=1411): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xdd008d5803396e68}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x488, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xd}, {}, {0x7, 0x17}}, [@filter_kind_options=@f_basic={{0xa}, {0x450, 0x2, [@TCA_BASIC_POLICE={0x44c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7, 0x7fff, {0x6, 0x1, 0x6, 0xb92, 0x600, 0x9}, {0x9, 0x1, 0x6, 0x100, 0x6}, 0x10000, 0x11e4, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x3, 0x0, 0x2, 0x2, 0x9, 0x2, 0xfffffff9, 0x8, 0x101, 0xff, 0x9, 0x4, 0x9, 0x0, 0xf, 0x5, 0x4, 0x4a96, 0x4, 0xffffffff, 0x5, 0x1000, 0x2, 0x2, 0x1, 0x6, 0x7, 0x9, 0x68a2, 0x6, 0x7, 0x3, 0x4, 0x7, 0x7ff, 0x2, 0x4, 0xfffffff9, 0x6, 0x7, 0x1, 0x5, 0xffffff7f, 0x6e, 0x0, 0x5, 0x0, 0x4003, 0x9674, 0x9, 0x401, 0x7, 0x5, 0x5, 0x101, 0x5, 0x6, 0xa8e, 0xfe, 0xa9, 0x60, 0x80000003, 0x5, 0x1, 0x401, 0x800, 0x5, 0x6, 0x6, 0x9, 0x0, 0x2, 0xc32, 0x6, 0xfffffff8, 0x9, 0x3, 0x3, 0x77a, 0x7, 0x7, 0x31, 0x9, 0x4, 0x6, 0x5, 0xa58, 0x8, 0xffff, 0x8000, 0x9, 0x6, 0x2, 0x1, 0x0, 0x1, 0x2, 0x0, 0x6, 0xe1f, 0x7, 0x8, 0x1, 0xc4, 0x2, 0x80000001, 0x28, 0xe, 0xff, 0x4cd2, 0xfffffffa, 0x6e, 0xff, 0x0, 0x2, 0x57c6, 0x8, 0x80000001, 0x7, 0x7, 0x2, 0x3ff, 0xa, 0x5, 0x81a, 0x3, 0x5, 0x3, 0x8, 0x2, 0x9, 0x9, 0x91, 0x9, 0x8, 0x800, 0x2, 0x3, 0x7, 0x4, 0x10, 0xfffffffb, 0xfff, 0x4, 0x7, 0x1, 0x8, 0x1, 0x6, 0x4000020, 0x2026ee35, 0x0, 0x7fffffff, 0xfffffffc, 0x1, 0x4, 0x6, 0xf, 0x9, 0x1, 0xc, 0x4, 0xc166, 0x6, 0xfffffffa, 0xfffff466, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7fffffff, 0xe5f, 0x5, 0xe0, 0x4, 0xfffffffd, 0x1, 0x247800, 0x0, 0xa6f7, 0x2, 0x5, 0xf, 0x0, 0x9, 0x9, 0x9, 0x2, 0x2, 0xb91, 0x405, 0x73a7, 0x0, 0xa9fd, 0x4, 0x0, 0x10001, 0x0, 0xff, 0xfffffff3, 0x2, 0xb8ec, 0x8, 0x1, 0x8, 0xb, 0x7fff, 0x0, 0xa2a, 0xe, 0x80000001, 0xfffffff7, 0x2, 0xfffffffe, 0x1, 0x80000000, 0x8, 0x7e54, 0x2, 0xe6, 0x9, 0x5b, 0x9, 0x5, 0x3, 0x1, 0xd25, 0x3, 0xa, 0x8, 0x0, 0xdd55, 0x6, 0x1, 0x8400, 0x4, 0x8, 0xe8, 0x8bef, 0x4, 0x400, 0x2, 0x2, 0x1, 0x6, 0x3fb9, 0x7, 0x5, 0x4, 0x0, 0xb, 0x9, 0x4, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfff}]}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x488}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000d80)={{r2, &(0x7f0000000ec0)='\x00\x00\x00\x00G\x17\xb7\xcd\xca\xcam\xb3\x1b\xaa\xff\xfe\xf6kCV>\xd3D\x1d\f\x81\xaa@~\x9bg\xfb\x97\xf5\xd5\xd1%C\x15\x87\x8e\xa2C!%M\xdd\r\x13\xaa\xba\xc8:\xe99\x97\x9c\xf9f\x00\xdc\x84\xfa\xadC\xb7\x13G\xbb\x9a\xb9\xd49H\xa3i\x89\xa3\x8f\xf47\xbfg\x92\xf2c\x9d\xf3\xd8\xe0\xa9p\xb6\x01n\xd3 $\\\v]|M', 0x2800c1, &(0x7f0000000200)={@_ha_fsid={[0xd375, 0x9b]}, {0x9, 0x0, 0x7fff, 0x9}}, 0x7fffffff, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000003c0)=0xfffffff9}, 0x0, &(0x7f0000000d00)}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_lsm={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$pptp(0x18, 0x1, 0x2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) syz_emit_ethernet(0x4f, &(0x7f0000000600)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd60122d9200193afffe8000000000000000000000000000aaff020000000000000000000000000001870090780000000000000000000000000000000000000000a5f4d187334e54846d314f7e7bfc365cf38ce826e3d75f2d967151e716cfb3f28e5dcfde381184780682d87f74f4eb6c1eb78fa218382a3a1a2588172359dc70230a17249d4e6643d508b9ed1f014b09483143297a73770ef14eed630e19c3849aba234e8a17b129a7cee0204efc5e138acf23c6e1fa0690db7d774cfc831a90662cae657c6f2c37e87f610eef41a980cc6dbc0ec202f6b01ef7add7606e1751caf1c1f0189ed47012e647d771319a96c1ecb106a208e7262c81b464c0"], 0x0) connect$pptp(r6, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xab}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x2b2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=@ipv6_newroute={0x4c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0xff, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x0, {0x4, 0x2, 0x4, 0x1, 0x80, 0x30, 0xb9, [@loopback]}}}}}]}, 0x4c}}, 0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 56.555879ms ago: executing program 1 (id=1412): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$EXT4_IOC_GETFSUUID(r2, 0x40047452, 0x0) 0s ago: executing program 1 (id=1413): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000580000000400000003"], 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0x0, &(0x7f0000000080)=""/169}, 0x20) kernel console output (not intermixed with test programs): (loop2): Directory bread(block 65) failed [ 30.136184][ T485] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 30.157217][ T485] F2FS-fs (loop3): Start checkpoint disabled! [ 30.160986][ T488] FAT-fs (loop2): Directory bread(block 66) failed [ 30.165126][ T485] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 30.169818][ T488] FAT-fs (loop2): Directory bread(block 67) failed [ 30.184144][ T488] FAT-fs (loop2): Directory bread(block 68) failed [ 30.190879][ T488] FAT-fs (loop2): Directory bread(block 69) failed [ 30.205229][ T488] FAT-fs (loop2): Directory bread(block 70) failed [ 30.212014][ T488] FAT-fs (loop2): Directory bread(block 71) failed [ 30.226286][ T488] FAT-fs (loop2): Directory bread(block 72) failed [ 30.232915][ T488] FAT-fs (loop2): Directory bread(block 73) failed [ 30.836204][ T514] netlink: 'syz.4.62': attribute type 5 has an invalid length. [ 31.000924][ C0] hrtimer: interrupt took 20125 ns [ 31.040011][ T496] F2FS-fs (loop0): Test dummy encryption mode enabled [ 31.047656][ T496] F2FS-fs (loop0): invalid crc value [ 31.054333][ T496] F2FS-fs (loop0): Current segment's next free block offset is inconsistent with bitmap, logtype:2, segno:0, type:0, next_blkoff:0, blkofs:0 [ 31.068986][ T496] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-117) [ 31.379093][ T530] xt_CT: No such helper "netbios-ns" [ 31.761293][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 31.761303][ T24] audit: type=1400 audit(1786146256.810:163): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 31.803123][ T24] audit: type=1400 audit(1786146256.850:164): avc: denied { connect } for pid=534 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 31.838090][ T24] audit: type=1326 audit(1786146256.880:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.862914][ T24] audit: type=1326 audit(1786146256.910:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.892600][ T24] audit: type=1326 audit(1786146256.910:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.917391][ T24] audit: type=1326 audit(1786146256.910:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.942489][ T24] audit: type=1326 audit(1786146256.910:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.960752][ T542] exfat: Deprecated parameter 'utf8' [ 31.967224][ T24] audit: type=1326 audit(1786146256.910:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 31.977684][ T542] exfat: Deprecated parameter 'namecase' [ 31.996946][ T24] audit: type=1326 audit(1786146256.910:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=536 comm="syz.1.68" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc3d687e0d9 code=0x7ffc0000 [ 32.027726][ T542] exfat: Deprecated parameter 'namecase' [ 32.039087][ T24] audit: type=1400 audit(1786146257.090:172): avc: denied { create } for pid=552 comm="syz.2.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.096144][ T542] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x9420891b, utbl_chksum : 0xe619d30d) [ 32.194338][ T562] __nla_validate_parse: 6 callbacks suppressed [ 32.194359][ T562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.74'. [ 32.209713][ T562] netlink: 43 bytes leftover after parsing attributes in process `syz.4.74'. [ 32.218532][ T562] netlink: 'syz.4.74': attribute type 5 has an invalid length. [ 32.226103][ T562] netlink: 43 bytes leftover after parsing attributes in process `syz.4.74'. [ 32.593452][ T574] netlink: 44 bytes leftover after parsing attributes in process `syz.3.77'. [ 32.602334][ T574] netlink: 43 bytes leftover after parsing attributes in process `syz.3.77'. [ 32.611317][ T574] netlink: 'syz.3.77': attribute type 5 has an invalid length. [ 32.618876][ T574] netlink: 43 bytes leftover after parsing attributes in process `syz.3.77'. [ 33.110035][ T585] netlink: 44 bytes leftover after parsing attributes in process `syz.2.78'. [ 33.118907][ T585] netlink: 43 bytes leftover after parsing attributes in process `syz.2.78'. [ 33.127823][ T585] netlink: 'syz.2.78': attribute type 5 has an invalid length. [ 33.135392][ T585] netlink: 43 bytes leftover after parsing attributes in process `syz.2.78'. [ 33.149961][ T588] netlink: 44 bytes leftover after parsing attributes in process `syz.1.80'. [ 33.158903][ T588] netlink: 'syz.1.80': attribute type 5 has an invalid length. [ 33.626727][ T600] EXT4-fs (loop3): Ignoring removed nobh option [ 33.633091][ T600] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 33.640474][ T600] EXT4-fs (loop3): Test dummy encryption mode enabled [ 33.647411][ T600] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.661131][ T600] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.672549][ T600] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #16: comm syz.3.88: invalid indirect mapped block 32768 (level 2) [ 33.686102][ T600] EXT4-fs (loop3): Remounting filesystem read-only [ 33.692895][ T600] EXT4-fs (loop3): 1 orphan inode deleted [ 33.698645][ T600] EXT4-fs (loop3): 1 truncate cleaned up [ 33.704448][ T600] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,nobh,mblk_io_submit,test_dummy_encryption=v1,nolazytime,inode_readahead_blks=0x0000000000000000,block_validity, [ 33.747825][ T600] EXT4-fs error (device loop3): ext4_search_dir:1521: inode #12: block 7: comm syz.3.88: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0 [ 33.766445][ T600] EXT4-fs (loop3): Remounting filesystem read-only [ 34.393471][ T617] xt_CT: No such helper "netbios-ns" [ 35.156087][ T640] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.171579][ T640] device bridge_slave_1 left promiscuous mode [ 35.177727][ T640] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.013562][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.025470][ T658] device bridge_slave_1 left promiscuous mode [ 36.031637][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.999444][ T692] netlink: 'syz.1.107': attribute type 5 has an invalid length. [ 37.182274][ T681] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 37.191349][ T681] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.064766][ T707] __nla_validate_parse: 9 callbacks suppressed [ 38.064780][ T707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 38.140249][ T706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.114'. [ 38.150732][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.159179][ T706] device bridge_slave_1 left promiscuous mode [ 38.165324][ T706] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.873995][ T24] kauditd_printk_skb: 4 callbacks suppressed [ 38.874005][ T24] audit: type=1400 audit(1786146263.790:177): avc: denied { append } for pid=714 comm="syz.2.117" name="rtc0" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 39.464309][ T746] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 39.476386][ T746] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.812402][ T763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.128'. [ 39.821310][ T763] netlink: 43 bytes leftover after parsing attributes in process `syz.2.128'. [ 39.830148][ T763] netlink: 'syz.2.128': attribute type 5 has an invalid length. [ 39.837813][ T763] netlink: 43 bytes leftover after parsing attributes in process `syz.2.128'. [ 40.783399][ T746] sched: RT throttling activated [ 40.945018][ T24] audit: type=1400 audit(1786146265.990:178): avc: denied { create } for pid=780 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 40.966270][ T24] audit: type=1400 audit(1786146265.990:179): avc: denied { getopt } for pid=780 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.194216][ T784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.136'. [ 42.648564][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.670292][ T817] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.677743][ T817] device bridge_slave_0 entered promiscuous mode [ 42.706390][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.715751][ T817] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.770702][ T817] device bridge_slave_1 entered promiscuous mode [ 42.935790][ T835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.149'. [ 42.944751][ T835] netlink: 43 bytes leftover after parsing attributes in process `syz.2.149'. [ 42.953638][ T835] netlink: 'syz.2.149': attribute type 5 has an invalid length. [ 42.961293][ T835] netlink: 43 bytes leftover after parsing attributes in process `syz.2.149'. [ 43.069436][ T817] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.076511][ T817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.083794][ T817] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.090821][ T817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.394357][ T843] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 43.404342][ T844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 43.527866][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.537314][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.545193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.559989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.577240][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 43.586025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.594520][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.601600][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.611128][ T7] device bridge_slave_0 left promiscuous mode [ 43.617314][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.625142][ T7] device veth1_macvtap left promiscuous mode [ 43.631267][ T7] device veth0_vlan left promiscuous mode [ 43.692218][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 43.711001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.727002][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.734081][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.745078][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 43.753179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.777954][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 43.793029][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.824144][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.832732][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.848540][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.857979][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.858702][ T859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 43.866111][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.882200][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.889675][ T817] device veth0_vlan entered promiscuous mode [ 43.907485][ T817] device veth1_macvtap entered promiscuous mode [ 43.917870][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.927601][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.937046][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.946444][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 43.957545][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.966074][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.974663][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.989599][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.157656][ T24] audit: type=1400 audit(1786146269.180:180): avc: denied { ioctl } for pid=865 comm="syz.3.162" path="socket:[16703]" dev="sockfs" ino=16703 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.845765][ T877] netlink: 44 bytes leftover after parsing attributes in process `syz.4.164'. [ 44.854733][ T877] netlink: 43 bytes leftover after parsing attributes in process `syz.4.164'. [ 44.863723][ T877] netlink: 'syz.4.164': attribute type 5 has an invalid length. [ 44.871356][ T877] netlink: 43 bytes leftover after parsing attributes in process `syz.4.164'. [ 45.129484][ T24] audit: type=1400 audit(1786146270.140:181): avc: denied { write } for pid=879 comm="syz.3.166" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 45.717132][ T895] usb usb6: usbfs: process 895 (syz.5.169) did not claim interface 0 before use [ 45.908709][ T24] audit: type=1400 audit(1786146270.920:182): avc: denied { create } for pid=894 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.961464][ T24] audit: type=1400 audit(1786146276.010:183): avc: denied { setopt } for pid=951 comm="syz.5.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 51.063190][ T959] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'. [ 51.072154][ T959] netlink: 43 bytes leftover after parsing attributes in process `syz.4.186'. [ 51.081053][ T959] netlink: 'syz.4.186': attribute type 5 has an invalid length. [ 51.088702][ T959] netlink: 43 bytes leftover after parsing attributes in process `syz.4.186'. [ 51.755098][ T967] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 51.826849][ T24] audit: type=1400 audit(1786146276.870:184): avc: denied { getopt } for pid=970 comm="syz.3.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 52.501939][ T991] netlink: 124 bytes leftover after parsing attributes in process `syz.0.198'. [ 52.881872][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.199'. [ 53.020928][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.074601][ T1001] device bridge_slave_1 left promiscuous mode [ 53.080722][ T1001] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.129205][ T1017] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 53.152092][ T1017] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 53.187964][ T1017] overlayfs: missing 'lowerdir' [ 54.020200][ T24] audit: type=1400 audit(1786146279.060:185): avc: denied { read } for pid=1036 comm="syz.2.212" name="ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.044143][ T24] audit: type=1400 audit(1786146279.070:186): avc: denied { open } for pid=1036 comm="syz.2.212" path="/dev/ashmem" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 54.301935][ T1043] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 54.311130][ T24] audit: type=1400 audit(1786146279.360:187): avc: denied { mount } for pid=1042 comm="syz.2.215" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.311160][ T1043] ext4 filesystem being mounted at /47/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.384278][ T24] audit: type=1400 audit(1786146280.420:188): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 55.460147][ T1033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 55.467424][ T1033] IPv6: NLM_F_CREATE should be set when creating new route [ 55.833188][ T1077] capability: warning: `syz.4.221' uses deprecated v2 capabilities in a way that may be insecure [ 56.970956][ T1109] netlink: 44 bytes leftover after parsing attributes in process `syz.3.226'. [ 56.979858][ T1109] netlink: 43 bytes leftover after parsing attributes in process `syz.3.226'. [ 56.988759][ T1109] netlink: 'syz.3.226': attribute type 5 has an invalid length. [ 56.996406][ T1109] netlink: 43 bytes leftover after parsing attributes in process `syz.3.226'. [ 57.116357][ T24] audit: type=1400 audit(1786146282.160:189): avc: denied { write } for pid=1122 comm="syz.4.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 57.185455][ T24] audit: type=1400 audit(1786146282.230:190): avc: denied { getopt } for pid=1128 comm="syz.4.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.304723][ T1167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 58.653834][ T1187] netlink: 44 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.662799][ T1187] netlink: 43 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.671693][ T1187] netlink: 'syz.0.255': attribute type 5 has an invalid length. [ 58.679341][ T1187] netlink: 43 bytes leftover after parsing attributes in process `syz.0.255'. [ 58.869110][ T24] audit: type=1400 audit(1786146283.910:191): avc: denied { shutdown } for pid=1183 comm="syz.2.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 58.912449][ T1192] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 58.914175][ T24] audit: type=1400 audit(1786146283.950:192): avc: denied { sys_module } for pid=1194 comm="syz.2.260" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.944783][ T24] audit: type=1400 audit(1786146283.960:193): avc: denied { create } for pid=1189 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.970173][ T24] audit: type=1400 audit(1786146284.010:194): avc: denied { read } for pid=1202 comm="syz.5.264" name="usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.993551][ T24] audit: type=1400 audit(1786146284.040:195): avc: denied { open } for pid=1202 comm="syz.5.264" path="/dev/usbmon2" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.017267][ T24] audit: type=1400 audit(1786146284.040:196): avc: denied { read } for pid=1203 comm="syz.3.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.036870][ T24] audit: type=1400 audit(1786146284.040:197): avc: denied { ioctl } for pid=1202 comm="syz.5.264" path="/dev/usbmon2" dev="devtmpfs" ino=160 ioctlcmd=0x9204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 59.103827][ T1201] EXT4-fs (loop2): Ignoring removed oldalloc option [ 59.137252][ T1201] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 59.187668][ T1201] EXT4-fs (loop2): 1 truncate cleaned up [ 59.193394][ T1201] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 59.347679][ T1218] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 59.370031][ T1218] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 59.453801][ T24] audit: type=1400 audit(1786146284.500:198): avc: denied { ioctl } for pid=1231 comm="syz.5.273" path="socket:[17983]" dev="sockfs" ino=17983 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.951041][ T1218] EXT4-fs error (device loop3): ext4_free_branches:1026: inode #16: comm syz.3.270: invalid indirect mapped block 32768 (level 2) [ 59.984267][ T1218] EXT4-fs (loop3): Remounting filesystem read-only [ 60.009045][ T1218] EXT4-fs (loop3): 1 orphan inode deleted [ 60.029111][ T1218] EXT4-fs (loop3): 1 truncate cleaned up [ 60.035705][ T1243] netlink: 12 bytes leftover after parsing attributes in process `syz.5.276'. [ 60.040932][ T1218] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,noblock_validity,lazytime,jqfmt=vfsv0,nolazytime,dioread_nolock,journal_ioprio=0x0000000000000006, [ 60.227233][ T1258] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 60.239923][ T1258] EXT4-fs (loop2): Test dummy encryption mode enabled [ 60.281561][ T1258] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,noinit_itable,test_dummy_encryption,inode_readahead_blks=0x0000000000008000,nodelalloc,minixdf,debug_want_extra_isize=0x0000000000000040,,errors=continue [ 60.417021][ T738] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 60.912096][ T738] usb 4-1: Using ep0 maxpacket: 16 [ 60.956571][ T1290] exfat: Deprecated parameter 'namecase' [ 60.973829][ T1290] exfat: Deprecated parameter 'utf8' [ 60.984785][ T1290] exfat: Deprecated parameter 'namecase' [ 60.991822][ T1290] exfat: Deprecated parameter 'namecase' [ 61.024467][ T1290] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x89b2d127, utbl_chksum : 0xe619d30d) [ 61.140367][ T738] usb 4-1: config 0 has no interfaces? [ 61.421230][ T1305] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 61.430212][ T1305] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.472459][ T738] usb 4-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 62.498138][ T738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.509042][ T738] usb 4-1: Product: syz [ 62.513495][ T738] usb 4-1: Manufacturer: syz [ 62.518176][ T738] usb 4-1: SerialNumber: syz [ 62.525895][ T738] usb 4-1: config 0 descriptor?? [ 62.550601][ T738] usb 4-1: can't set config #0, error -71 [ 62.557117][ T738] usb 4-1: USB disconnect, device number 2 [ 63.159377][ T1339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.308'. [ 63.201299][ T24] kauditd_printk_skb: 7 callbacks suppressed [ 63.201309][ T24] audit: type=1400 audit(1786146288.250:206): avc: denied { read } for pid=1350 comm="syz.2.314" name="event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.232685][ T24] audit: type=1400 audit(1786146288.250:207): avc: denied { open } for pid=1350 comm="syz.2.314" path="/dev/input/event0" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.256913][ T24] audit: type=1400 audit(1786146288.250:208): avc: denied { ioctl } for pid=1348 comm="syz.3.313" path="socket:[18153]" dev="sockfs" ino=18153 ioctlcmd=0x7453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 64.217463][ T24] audit: type=1400 audit(1786146289.260:209): avc: denied { mounton } for pid=1380 comm="syz.0.325" path="/71/file0" dev="tmpfs" ino=405 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.081037][ T1446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.345'. [ 66.453834][ T24] audit: type=1400 audit(1786146291.500:210): avc: denied { setopt } for pid=1456 comm="syz.4.349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.583712][ T1463] netlink: 44 bytes leftover after parsing attributes in process `syz.0.347'. [ 66.592645][ T1463] netlink: 43 bytes leftover after parsing attributes in process `syz.0.347'. [ 66.601538][ T1463] netlink: 'syz.0.347': attribute type 5 has an invalid length. [ 66.609182][ T1463] netlink: 43 bytes leftover after parsing attributes in process `syz.0.347'. [ 67.129029][ T1475] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 67.139760][ T1475] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 67.150071][ T1475] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 68.366934][ T1503] netlink: 36 bytes leftover after parsing attributes in process `syz.2.364'. [ 68.377335][ T24] audit: type=1326 audit(1786146293.420:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 68.509703][ T24] audit: type=1326 audit(1786146293.480:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 68.574394][ T24] audit: type=1326 audit(1786146293.500:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 68.599469][ T24] audit: type=1326 audit(1786146293.510:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 68.713684][ T24] audit: type=1326 audit(1786146293.510:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 69.087953][ T24] audit: type=1326 audit(1786146293.510:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 69.178992][ T24] audit: type=1326 audit(1786146293.510:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 69.273919][ T24] audit: type=1326 audit(1786146293.510:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 69.450452][ T24] audit: type=1326 audit(1786146293.510:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1502 comm="syz.0.366" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f1789a0d9 code=0x7ffc0000 [ 69.560116][ T1551] netlink: 28 bytes leftover after parsing attributes in process `syz.5.381'. [ 70.177598][ T1555] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue [ 70.199346][ T1555] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.255159][ T24] audit: type=1400 audit(1786146295.300:220): avc: denied { create } for pid=1569 comm="syz.4.387" dev="anon_inodefs" ino=18336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 71.882760][ T1634] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.909354][ T1634] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 71.970793][ T1634] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 72.465761][ T1664] netlink: 44 bytes leftover after parsing attributes in process `syz.4.416'. [ 72.474726][ T1664] netlink: 43 bytes leftover after parsing attributes in process `syz.4.416'. [ 72.483734][ T1664] netlink: 'syz.4.416': attribute type 5 has an invalid length. [ 72.491393][ T1664] netlink: 43 bytes leftover after parsing attributes in process `syz.4.416'. [ 73.364387][ T1702] netlink: 'syz.4.429': attribute type 5 has an invalid length. [ 73.380817][ T1696] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.391671][ T1696] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 73.402107][ T1696] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.555167][ T24] kauditd_printk_skb: 5 callbacks suppressed [ 73.555177][ T24] audit: type=1400 audit(1786146298.580:226): avc: denied { write } for pid=1709 comm="syz.5.437" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.585290][ T24] audit: type=1400 audit(1786146298.580:227): avc: denied { open } for pid=1709 comm="syz.5.437" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 73.611747][ T1715] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.623551][ T1715] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 73.635862][ T1715] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 73.880302][ T301] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 74.520389][ T301] usb 6-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 74.538523][ T301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.603867][ T301] usb 6-1: Product: syz [ 74.612090][ T301] usb 6-1: Manufacturer: syz [ 74.616699][ T301] usb 6-1: SerialNumber: syz [ 74.716713][ T1743] netlink: 44 bytes leftover after parsing attributes in process `syz.4.444'. [ 74.725666][ T1743] netlink: 43 bytes leftover after parsing attributes in process `syz.4.444'. [ 74.734585][ T1743] netlink: 'syz.4.444': attribute type 5 has an invalid length. [ 74.742262][ T1743] netlink: 43 bytes leftover after parsing attributes in process `syz.4.444'. [ 75.090423][ T301] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 75.130497][ T301] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 75.163384][ T301] usb 6-1: USB disconnect, device number 2 [ 75.170770][ T1755] EXT4-fs (loop3): Ignoring removed oldalloc option [ 75.178632][ T1755] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 75.192414][ T1755] EXT4-fs (loop3): 1 truncate cleaned up [ 75.201237][ T1755] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 75.528552][ T1763] netlink: 44 bytes leftover after parsing attributes in process `syz.0.452'. [ 75.537455][ T1763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.452'. [ 75.546319][ T1763] netlink: 'syz.0.452': attribute type 5 has an invalid length. [ 75.553961][ T1763] netlink: 43 bytes leftover after parsing attributes in process `syz.0.452'. [ 75.777685][ T24] audit: type=1400 audit(1786146300.820:228): avc: denied { accept } for pid=1766 comm="syz.5.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.835372][ T1774] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 75.846140][ T1774] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 75.856427][ T1774] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 76.160324][ T24] audit: type=1326 audit(1786146301.200:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.463" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4a4330d9 code=0x7ffc0000 [ 76.510092][ T24] audit: type=1326 audit(1786146301.200:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.463" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0x7f4c4a4330d9 code=0x7ffc0000 [ 76.602569][ T24] audit: type=1326 audit(1786146301.200:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1792 comm="syz.3.463" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c4a4330d9 code=0x7ffc0000 [ 76.752453][ T24] audit: type=1400 audit(1786146301.700:232): avc: denied { setopt } for pid=1800 comm="syz.2.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 77.620128][ T1842] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 77.901038][ T7] device bridge_slave_0 left promiscuous mode [ 77.917810][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.977431][ T7] device veth1_macvtap left promiscuous mode [ 78.007244][ T7] device veth0_vlan left promiscuous mode [ 78.045370][ T1854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 78.127411][ T24] audit: type=1400 audit(1786146303.170:233): avc: denied { mounton } for pid=1856 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 78.181301][ T1856] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.188590][ T1856] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.196098][ T1856] device bridge_slave_0 entered promiscuous mode [ 78.207013][ T1856] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.215036][ T1856] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.224173][ T1856] device bridge_slave_1 entered promiscuous mode [ 78.727902][ T1856] device veth0_vlan entered promiscuous mode [ 78.747736][ T24] audit: type=1400 audit(1786146303.790:234): avc: denied { bind } for pid=1875 comm="syz.0.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.749756][ T1883] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 78.781002][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.797626][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.807395][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.810748][ T24] audit: type=1400 audit(1786146303.860:235): avc: denied { wake_alarm } for pid=1886 comm="syz.0.494" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 78.820493][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.853029][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.860673][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.868102][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.877710][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.885932][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 78.894451][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.903007][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.910041][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.917546][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 78.926132][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.934356][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.941403][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.964020][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.336067][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.344267][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.354195][ T1856] device veth1_macvtap entered promiscuous mode [ 79.371026][ T1906] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.382327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 79.392446][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 79.401032][ T1906] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 79.409730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.423693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 79.432387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.433831][ T1906] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 79.600243][ T1916] netlink: 44 bytes leftover after parsing attributes in process `syz.2.498'. [ 79.609233][ T1916] netlink: 43 bytes leftover after parsing attributes in process `syz.2.498'. [ 79.618143][ T1916] netlink: 'syz.2.498': attribute type 5 has an invalid length. [ 79.625946][ T1916] netlink: 43 bytes leftover after parsing attributes in process `syz.2.498'. [ 80.417121][ T1931] EXT4-fs (loop6): Ignoring removed oldalloc option [ 80.486336][ T1931] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 80.600735][ T1931] EXT4-fs (loop6): 1 truncate cleaned up [ 80.676730][ T1931] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 81.516361][ T1962] xt_hashlimit: max too large, truncated to 1048576 [ 81.598626][ T1939] F2FS-fs (loop5): Invalid segment/section count (24 != 3 * 1) [ 81.606346][ T1939] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 81.615235][ T1939] F2FS-fs (loop5): invalid crc value [ 81.689131][ T1939] F2FS-fs (loop5): Found nat_bits in checkpoint [ 81.734208][ T1939] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 81.749255][ T1939] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 82.073181][ T24] audit: type=1400 audit(1786146307.120:236): avc: denied { write } for pid=1978 comm="syz.2.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 82.225072][ T1984] process 'syz.0.521' launched './file2' with NULL argv: empty string added [ 82.267414][ T24] audit: type=1400 audit(1786146307.280:237): avc: denied { execute } for pid=1983 comm="syz.0.521" name="file2" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.305785][ T24] audit: type=1400 audit(1786146307.280:238): avc: denied { execute_no_trans } for pid=1983 comm="syz.0.521" path="/118/file2" dev="tmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 83.368627][ T24] audit: type=1400 audit(1786146308.410:239): avc: denied { getopt } for pid=1998 comm="syz.4.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.635442][ T24] audit: type=1400 audit(1786146309.680:240): avc: denied { read } for pid=2041 comm="syz.6.542" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 84.995928][ T2057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.541'. [ 85.004840][ T2057] netlink: 43 bytes leftover after parsing attributes in process `syz.4.541'. [ 85.013709][ T2057] netlink: 'syz.4.541': attribute type 5 has an invalid length. [ 85.021336][ T2057] netlink: 43 bytes leftover after parsing attributes in process `syz.4.541'. [ 86.042816][ T24] audit: type=1400 audit(1786146311.090:241): avc: denied { lock } for pid=2074 comm="syz.0.555" path="socket:[20054]" dev="sockfs" ino=20054 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.361645][ T24] audit: type=1400 audit(1786146311.090:242): avc: denied { ioctl } for pid=2078 comm="syz.5.557" path="/dev/input/event1" dev="devtmpfs" ino=256 ioctlcmd=0x4503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 87.015046][ T2081] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.037531][ T2081] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.055594][ T2081] device bridge_slave_0 entered promiscuous mode [ 87.073469][ T2081] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.080551][ T2081] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.087953][ T2081] device bridge_slave_1 entered promiscuous mode [ 87.900329][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 87.908111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.931765][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.942469][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.950859][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.957904][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.965346][ T24] audit: type=1400 audit(1786146313.000:243): avc: denied { ioctl } for pid=2140 comm="syz.6.577" path="socket:[20796]" dev="sockfs" ino=20796 ioctlcmd=0x52d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.965421][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.999571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.009148][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.016202][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.579456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.591292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.623713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.624859][ T2156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.582'. [ 88.632160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.654890][ T2152] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 88.660431][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.672408][ T2152] ext4 filesystem being mounted at /75/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.672737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.715110][ T2081] device veth0_vlan entered promiscuous mode [ 88.722107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.730043][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.744572][ T2081] device veth1_macvtap entered promiscuous mode [ 88.754485][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.774573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.782247][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.797433][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.806961][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.825991][ T2170] overlayfs: empty lowerdir [ 88.830743][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.842800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.277829][ T2179] netlink: 44 bytes leftover after parsing attributes in process `syz.0.587'. [ 89.286863][ T2179] netlink: 43 bytes leftover after parsing attributes in process `syz.0.587'. [ 89.295737][ T2179] netlink: 'syz.0.587': attribute type 5 has an invalid length. [ 89.303362][ T2179] netlink: 43 bytes leftover after parsing attributes in process `syz.0.587'. [ 89.334979][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.471396][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.483041][ T855] device bridge_slave_1 left promiscuous mode [ 89.496447][ T855] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.504267][ T855] device bridge_slave_0 left promiscuous mode [ 89.510774][ T855] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.518895][ T855] device veth1_macvtap left promiscuous mode [ 89.525416][ T855] device veth0_vlan left promiscuous mode [ 89.831179][ T2194] netlink: 'syz.5.591': attribute type 13 has an invalid length. [ 89.912412][ T2199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.592'. [ 89.921379][ T2199] netlink: 43 bytes leftover after parsing attributes in process `syz.0.592'. [ 89.930280][ T2199] netlink: 'syz.0.592': attribute type 5 has an invalid length. [ 89.937921][ T2199] netlink: 43 bytes leftover after parsing attributes in process `syz.0.592'. [ 90.165712][ T24] audit: type=1400 audit(1786146315.210:244): avc: denied { nlmsg_write } for pid=2206 comm="syz.4.596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 90.191152][ T24] audit: type=1400 audit(1786146315.210:245): avc: denied { audit_write } for pid=2206 comm="syz.4.596" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.613240][ T2220] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue [ 90.626341][ T2220] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.664412][ T2229] netlink: 'syz.0.603': attribute type 32 has an invalid length. [ 91.396648][ T24] audit: type=1400 audit(1786146316.440:246): avc: denied { write } for pid=2245 comm="syz.5.608" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 91.444598][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 91.454230][ T2249] netlink: 8 bytes leftover after parsing attributes in process `syz.5.609'. [ 91.928068][ T2258] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 93.047989][ T2296] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue [ 93.057872][ T2296] ext4 filesystem being mounted at /86/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.427922][ T2315] netlink: 44 bytes leftover after parsing attributes in process `syz.6.626'. [ 93.436882][ T2315] netlink: 43 bytes leftover after parsing attributes in process `syz.6.626'. [ 93.445816][ T2315] netlink: 'syz.6.626': attribute type 5 has an invalid length. [ 93.453488][ T2315] netlink: 43 bytes leftover after parsing attributes in process `syz.6.626'. [ 93.895782][ T2326] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 94.110509][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.117591][ T2333] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.126243][ T2333] device bridge_slave_0 entered promiscuous mode [ 94.148761][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.156126][ T2333] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.164850][ T2333] device bridge_slave_1 entered promiscuous mode [ 94.683911][ T2333] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.690987][ T2333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.698277][ T2333] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.705318][ T2333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.804048][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 94.811794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 94.813791][ T2351] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 94.820123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 94.845332][ T2351] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 94.891200][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 94.947912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 94.960668][ T2351] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.017135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 95.111159][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 95.147331][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.620790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.632075][ T2374] netlink: 'syz.4.646': attribute type 32 has an invalid length. [ 95.667820][ T2333] device veth0_vlan entered promiscuous mode [ 95.678989][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.707343][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.764736][ T2333] device veth1_macvtap entered promiscuous mode [ 95.775443][ T24] audit: type=1400 audit(1786146320.820:247): avc: denied { getopt } for pid=2381 comm="syz.4.650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.811745][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.819698][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.837363][ T2391] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.872116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.899902][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.908052][ T2391] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 95.918907][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 95.928400][ T2391] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 95.941379][ T2400] xt_l2tp: v2 sid > 0xffff: 4294967292 [ 95.965593][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 95.977167][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 95.990902][ T2402] netlink: 8 bytes leftover after parsing attributes in process `syz.4.656'. [ 96.018741][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.035181][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.528090][ T2422] netlink: 44 bytes leftover after parsing attributes in process `syz.0.658'. [ 96.536995][ T2422] netlink: 43 bytes leftover after parsing attributes in process `syz.0.658'. [ 96.545858][ T2422] netlink: 'syz.0.658': attribute type 5 has an invalid length. [ 96.553529][ T2422] netlink: 43 bytes leftover after parsing attributes in process `syz.0.658'. [ 98.481921][ T2460] overlayfs: missing 'lowerdir' [ 98.723140][ T2477] netlink: 44 bytes leftover after parsing attributes in process `syz.5.673'. [ 98.732085][ T2477] netlink: 43 bytes leftover after parsing attributes in process `syz.5.673'. [ 98.741262][ T2477] netlink: 'syz.5.673': attribute type 5 has an invalid length. [ 98.748950][ T2477] netlink: 43 bytes leftover after parsing attributes in process `syz.5.673'. [ 99.047320][ T2486] exfat: Deprecated parameter 'namecase' [ 99.054417][ T2486] exfat: Deprecated parameter 'namecase' [ 99.122731][ T2486] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x9e96ffa0, utbl_chksum : 0xe619d30d) [ 99.160608][ T2486] exFAT-fs (loop8): invalid start cluster (4278190088) [ 99.170422][ T24] audit: type=1400 audit(1786146324.200:248): avc: denied { write } for pid=2485 comm="syz.8.681" name="file1" dev="loop8" ino=1048753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.193216][ T24] audit: type=1400 audit(1786146324.210:249): avc: denied { open } for pid=2485 comm="syz.8.681" path="/4/file0/file1" dev="loop8" ino=1048753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.217071][ T855] device bridge_slave_1 left promiscuous mode [ 99.223448][ T855] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.231455][ T855] device bridge_slave_0 left promiscuous mode [ 99.237635][ T855] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.245962][ T855] device veth1_macvtap left promiscuous mode [ 99.252038][ T855] device veth0_vlan left promiscuous mode [ 99.828454][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.835618][ T2497] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.843043][ T2497] device bridge_slave_0 entered promiscuous mode [ 99.850816][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.858059][ T2497] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.004752][ T2512] netlink: 44 bytes leftover after parsing attributes in process `syz.8.682'. [ 100.013708][ T2512] netlink: 43 bytes leftover after parsing attributes in process `syz.8.682'. [ 100.022696][ T2512] netlink: 'syz.8.682': attribute type 5 has an invalid length. [ 100.030475][ T2512] netlink: 43 bytes leftover after parsing attributes in process `syz.8.682'. [ 100.048947][ T2497] device bridge_slave_1 entered promiscuous mode [ 100.082154][ T2497] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.089193][ T2497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.096450][ T2497] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.103474][ T2497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.123574][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.131163][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.138352][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.147530][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.155873][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.162946][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.171774][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.180004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.188350][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.195387][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.207151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.215299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.224800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.233006][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.245719][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.254271][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.267403][ T2497] device veth0_vlan entered promiscuous mode [ 100.274495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.282495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.290816][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.298363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.309259][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.317584][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.326717][ T2497] device veth1_macvtap entered promiscuous mode [ 100.335682][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.343301][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.352413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.507415][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.515837][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.698498][ T2529] netlink: 44 bytes leftover after parsing attributes in process `syz.0.691'. [ 100.707474][ T2529] netlink: 'syz.0.691': attribute type 5 has an invalid length. [ 101.321645][ T2538] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 101.330747][ T2538] ext4 filesystem being mounted at /7/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.617676][ T24] audit: type=1400 audit(1786146326.660:250): avc: denied { ioctl } for pid=2546 comm="syz.9.695" path="socket:[22816]" dev="sockfs" ino=22816 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 101.663775][ T24] audit: type=1400 audit(1786146326.710:251): avc: denied { connect } for pid=2560 comm="syz.9.702" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.673867][ T2564] 9pnet: p9_fd_create_tcp (2564): problem binding to privport [ 102.851761][ T24] audit: type=1400 audit(1786146327.900:252): avc: denied { read write } for pid=2582 comm="syz.8.708" name="ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.886604][ T24] audit: type=1400 audit(1786146327.920:253): avc: denied { open } for pid=2582 comm="syz.8.708" path="/dev/ppp" dev="devtmpfs" ino=153 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.911020][ T24] audit: type=1400 audit(1786146327.930:254): avc: denied { ioctl } for pid=2582 comm="syz.8.708" path="/dev/ppp" dev="devtmpfs" ino=153 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.221156][ T855] device bridge_slave_0 left promiscuous mode [ 103.227396][ T855] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.247957][ T855] device veth1_macvtap left promiscuous mode [ 103.254180][ T855] device veth0_vlan left promiscuous mode [ 103.588506][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.595677][ T2617] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.603140][ T2617] device bridge_slave_0 entered promiscuous mode [ 103.610103][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.617242][ T2617] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.625314][ T2617] device bridge_slave_1 entered promiscuous mode [ 103.686904][ T2617] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.694025][ T2617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.701319][ T2617] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.708343][ T2617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.731379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.739319][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.746979][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.764848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.776746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.796934][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.804026][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.821757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.833396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.842822][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.849848][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.858388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 103.867379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.875625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.883737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.989746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.000670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.014222][ T2617] device veth0_vlan entered promiscuous mode [ 104.017669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.017863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.018120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.018265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.029164][ T2617] device veth1_macvtap entered promiscuous mode [ 104.084764][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.093524][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.103261][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.115610][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.128369][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.391975][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.401495][ T2396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.849534][ T2675] __nla_validate_parse: 2 callbacks suppressed [ 104.849551][ T2675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 104.869576][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.889713][ T2675] device bridge_slave_1 left promiscuous mode [ 104.896019][ T2675] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.528637][ T2696] FAT-fs (loop8): Directory bread(block 64) failed [ 105.535268][ T2696] FAT-fs (loop8): Directory bread(block 65) failed [ 105.543100][ T2696] FAT-fs (loop8): Directory bread(block 66) failed [ 105.549650][ T2696] FAT-fs (loop8): Directory bread(block 67) failed [ 105.556480][ T2696] FAT-fs (loop8): Directory bread(block 68) failed [ 105.564305][ T2700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.744'. [ 105.665979][ T2701] netlink: 44 bytes leftover after parsing attributes in process `syz.1.740'. [ 105.674923][ T2701] netlink: 43 bytes leftover after parsing attributes in process `syz.1.740'. [ 105.683869][ T2701] netlink: 'syz.1.740': attribute type 5 has an invalid length. [ 105.692096][ T2701] netlink: 43 bytes leftover after parsing attributes in process `syz.1.740'. [ 105.734068][ T2696] FAT-fs (loop8): Directory bread(block 69) failed [ 105.740704][ T2696] FAT-fs (loop8): Directory bread(block 70) failed [ 105.747248][ T2696] FAT-fs (loop8): Directory bread(block 71) failed [ 105.753859][ T2696] FAT-fs (loop8): Directory bread(block 72) failed [ 105.760445][ T2696] FAT-fs (loop8): Directory bread(block 73) failed [ 105.771644][ T855] device bridge_slave_1 left promiscuous mode [ 105.797224][ T855] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.815515][ T855] device bridge_slave_0 left promiscuous mode [ 105.821869][ T855] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.830206][ T855] device veth1_macvtap left promiscuous mode [ 105.853750][ T855] device veth0_vlan left promiscuous mode [ 106.443598][ T2723] netlink: 4 bytes leftover after parsing attributes in process `syz.9.750'. [ 106.469861][ T2723] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.520413][ T2723] device bridge_slave_1 left promiscuous mode [ 106.526551][ T2723] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.586410][ T24] audit: type=1400 audit(1786146331.630:255): avc: denied { create } for pid=2722 comm="syz.4.752" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.611843][ T24] audit: type=1400 audit(1786146331.650:256): avc: denied { unlink } for pid=285 comm="syz-executor" name="file0" dev="tmpfs" ino=930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 107.281195][ T24] audit: type=1400 audit(1786146332.320:257): avc: denied { append } for pid=2740 comm="syz.9.757" name="uinput" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.536644][ T2771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 107.846960][ T2777] netlink: 44 bytes leftover after parsing attributes in process `syz.1.768'. [ 107.855915][ T2777] netlink: 43 bytes leftover after parsing attributes in process `syz.1.768'. [ 107.864986][ T2777] netlink: 'syz.1.768': attribute type 5 has an invalid length. [ 107.872654][ T2777] netlink: 43 bytes leftover after parsing attributes in process `syz.1.768'. [ 108.623758][ T24] audit: type=1400 audit(1786146333.670:258): avc: denied { connect } for pid=2793 comm="syz.9.774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 109.665190][ T24] audit: type=1326 audit(1786146334.710:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2824 comm="syz.9.788" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f24eb3d00d9 code=0x0 [ 110.220961][ T2809] F2FS-fs (loop8): Test dummy encryption mode enabled [ 110.228441][ T2809] F2FS-fs (loop8): invalid crc value [ 110.235837][ T2809] F2FS-fs (loop8): Found nat_bits in checkpoint [ 110.281710][ T2809] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 110.338794][ T2386] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.347278][ T2386] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.360329][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 110.638457][ T24] audit: type=1400 audit(1786146335.680:260): avc: denied { mount } for pid=2843 comm="syz.9.792" name="/" dev="ramfs" ino=23200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 110.661113][ T24] audit: type=1400 audit(1786146335.700:261): avc: denied { mounton } for pid=2843 comm="syz.9.792" path="/23/file0" dev="ramfs" ino=23200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 111.060326][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.140351][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 111.413019][ T2869] __nla_validate_parse: 1 callbacks suppressed [ 111.413037][ T2869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.799'. [ 111.428405][ T2869] netlink: 43 bytes leftover after parsing attributes in process `syz.4.799'. [ 111.437314][ T2869] netlink: 'syz.4.799': attribute type 5 has an invalid length. [ 111.444977][ T2869] netlink: 43 bytes leftover after parsing attributes in process `syz.4.799'. [ 111.550360][ T24] audit: type=1400 audit(1786146336.580:262): avc: denied { unmount } for pid=2497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 111.599005][ T2872] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 111.612422][ T2872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 111.638637][ T2872] EXT4-fs (loop1): 1 truncate cleaned up [ 111.644821][ T2872] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,usrjquota=,mblk_io_submit,,errors=continue [ 111.665285][ T24] audit: type=1400 audit(1786146336.710:263): avc: denied { append } for pid=2871 comm="syz.1.801" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.690356][ T24] audit: type=1400 audit(1786146336.710:264): avc: denied { open } for pid=2871 comm="syz.1.801" path="/13/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 112.043536][ T2867] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 112.105729][ T2867] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 112.138180][ T2867] F2FS-fs (loop8): invalid crc value [ 112.182667][ T2867] F2FS-fs (loop8): Found nat_bits in checkpoint [ 112.247440][ T2867] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 112.266668][ T2867] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 112.298345][ T24] audit: type=1400 audit(1786146337.340:265): avc: denied { remove_name } for pid=2866 comm="syz.8.791" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.372522][ T24] audit: type=1400 audit(1786146337.390:266): avc: denied { rename } for pid=2866 comm="syz.8.791" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 112.422223][ T24] audit: type=1400 audit(1786146337.390:267): avc: denied { rmdir } for pid=2866 comm="syz.8.791" name="file0" dev="loop8" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.452359][ T2925] xt_hashlimit: size too large, truncated to 1048576 [ 113.697819][ T24] audit: type=1400 audit(1786146338.740:268): avc: denied { append } for pid=2932 comm="syz.8.818" name="001" dev="devtmpfs" ino=180 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 113.725423][ T2935] erofs: (device loop8): mounted with root inode @ nid 36. [ 113.738342][ T2931] netlink: 44 bytes leftover after parsing attributes in process `syz.9.817'. [ 113.747444][ T2931] netlink: 43 bytes leftover after parsing attributes in process `syz.9.817'. [ 113.756375][ T2931] netlink: 'syz.9.817': attribute type 5 has an invalid length. [ 113.764027][ T2931] netlink: 43 bytes leftover after parsing attributes in process `syz.9.817'. [ 113.775150][ T24] audit: type=1400 audit(1786146338.820:269): avc: denied { read } for pid=2934 comm="syz.8.819" name="file2" dev="loop8" ino=89 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 113.798965][ T41] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[9000] [ 113.819737][ T2935] erofs: (device loop8): z_erofs_lz4_decompress_mem: failed to decompress 4876 in[4096, 0] out[8192] [ 113.938745][ T2944] netlink: 'syz.1.822': attribute type 4 has an invalid length. [ 113.939587][ T2943] xt_hashlimit: size too large, truncated to 1048576 [ 113.963279][ T2944] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.663215][ T2959] erofs: (device loop8): mounted with root inode @ nid 36. [ 114.677777][ T24] audit: type=1400 audit(1786146339.720:270): avc: denied { mounton } for pid=2958 comm="syz.8.828" path="/33/file3/file0" dev="loop8" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.685720][ T2959] 9pnet: p9_fd_create_unix (2959): problem connecting socket: ./file0: -30 [ 114.706257][ T2964] device vlan3 entered promiscuous mode [ 114.715161][ T2964] device bridge0 entered promiscuous mode [ 114.820329][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 115.065830][ T24] audit: type=1400 audit(1786146340.110:271): avc: denied { read } for pid=2973 comm="syz.0.835" path="socket:[23342]" dev="sockfs" ino=23342 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 115.101636][ T24] audit: type=1400 audit(1786146340.150:272): avc: denied { setcheckreqprot } for pid=2977 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 115.134322][ T2980] netlink: 44 bytes leftover after parsing attributes in process `syz.8.832'. [ 115.143676][ T2980] netlink: 43 bytes leftover after parsing attributes in process `syz.8.832'. [ 115.152580][ T2980] netlink: 'syz.8.832': attribute type 5 has an invalid length. [ 115.160243][ T2980] netlink: 43 bytes leftover after parsing attributes in process `syz.8.832'. [ 115.475829][ T2998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.839'. [ 115.484773][ T2998] netlink: 'syz.1.839': attribute type 5 has an invalid length. [ 116.351521][ T3030] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue [ 116.360680][ T3030] ext4 filesystem being mounted at /39/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.563187][ T3040] __nla_validate_parse: 3 callbacks suppressed [ 116.563196][ T3040] netlink: 44 bytes leftover after parsing attributes in process `syz.4.853'. [ 116.578267][ T3040] netlink: 43 bytes leftover after parsing attributes in process `syz.4.853'. [ 116.587127][ T3040] netlink: 'syz.4.853': attribute type 5 has an invalid length. [ 116.594771][ T3040] netlink: 43 bytes leftover after parsing attributes in process `syz.4.853'. [ 116.895092][ T3049] xt_hashlimit: size too large, truncated to 1048576 [ 117.786181][ T3073] netlink: 44 bytes leftover after parsing attributes in process `syz.4.863'. [ 117.795127][ T3073] netlink: 43 bytes leftover after parsing attributes in process `syz.4.863'. [ 117.804011][ T3073] netlink: 'syz.4.863': attribute type 5 has an invalid length. [ 117.811699][ T3073] netlink: 43 bytes leftover after parsing attributes in process `syz.4.863'. [ 117.969925][ T3083] netlink: 4 bytes leftover after parsing attributes in process `syz.8.864'. [ 117.983868][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.145296][ T3083] device bridge_slave_1 left promiscuous mode [ 118.151481][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.075396][ T3109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.870'. [ 119.084316][ T3109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.870'. [ 119.093183][ T3109] netlink: 'syz.1.870': attribute type 5 has an invalid length. [ 119.100819][ T3109] netlink: 43 bytes leftover after parsing attributes in process `syz.1.870'. [ 119.622072][ T3127] netlink: 'syz.0.878': attribute type 5 has an invalid length. [ 120.666543][ T3156] xt_hashlimit: size too large, truncated to 1048576 [ 120.753139][ T3159] EXT4-fs (loop8): Mount option "noacl" will be removed by 3.5 [ 120.753139][ T3159] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 120.753139][ T3159] [ 120.940355][ T3159] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a0164118, mo2=0002] [ 120.948546][ T3159] System zones: 0-1, 3-12 [ 120.955026][ T3159] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,debug,nodioread_nolock,min_batch_time=0x0000000000000006,noacl,grpquota,nodelalloc,jqfmt=vfsv1,norecovery,,errors=continue [ 121.173666][ T3177] xt_hashlimit: size too large, truncated to 1048576 [ 121.387580][ T3187] netlink: 'syz.4.895': attribute type 5 has an invalid length. [ 121.638723][ T3193] __nla_validate_parse: 9 callbacks suppressed [ 121.638747][ T3193] netlink: 4 bytes leftover after parsing attributes in process `syz.9.897'. [ 122.229864][ T3199] netlink: 44 bytes leftover after parsing attributes in process `syz.0.898'. [ 122.238827][ T3199] netlink: 43 bytes leftover after parsing attributes in process `syz.0.898'. [ 122.247952][ T3199] netlink: 'syz.0.898': attribute type 5 has an invalid length. [ 122.255642][ T3199] netlink: 43 bytes leftover after parsing attributes in process `syz.0.898'. [ 122.418263][ T24] audit: type=1400 audit(1786146347.460:273): avc: denied { name_bind } for pid=3206 comm="syz.8.902" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 122.687648][ T3216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.903'. [ 123.460322][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 123.840109][ T24] audit: type=1400 audit(1786146348.880:274): avc: denied { mount } for pid=3256 comm="syz.1.920" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.867760][ T24] audit: type=1400 audit(1786146348.880:275): avc: denied { search } for pid=3256 comm="syz.1.920" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 123.894932][ T3264] tipc: Started in network mode [ 123.896036][ T24] audit: type=1400 audit(1786146348.890:276): avc: denied { unmount } for pid=2617 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 123.900994][ T3264] tipc: Own node identity , cluster identity 4711 [ 124.849683][ T24] audit: type=1400 audit(1786146349.890:277): avc: denied { read } for pid=3293 comm="syz.8.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 124.910385][ T3295] netlink: 36 bytes leftover after parsing attributes in process `syz.8.933'. [ 125.044902][ T3308] EXT4-fs (loop1): Ignoring removed bh option [ 125.071752][ T3308] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,max_dir_size_kb=0x0000000000000003,nombcache,abort,bsddf,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc, [ 125.141757][ T24] audit: type=1400 audit(1786146350.190:278): avc: denied { write } for pid=3307 comm="syz.1.940" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.903166][ T3306] F2FS-fs (loop8): Test dummy encryption mode enabled [ 125.911881][ T3306] F2FS-fs (loop8): invalid crc value [ 125.923916][ T3306] F2FS-fs (loop8): Found nat_bits in checkpoint [ 125.974709][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 125.991311][ T3306] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 126.001817][ T3306] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 126.008391][ T3306] F2FS-fs (loop8): Start checkpoint disabled! [ 126.018960][ T3306] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 126.880335][ T24] audit: type=1400 audit(1786146351.920:279): avc: denied { ioctl } for pid=3304 comm="syz.8.938" path="/56/file0/file1" dev="loop8" ino=7 ioctlcmd=0xf514 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.930766][ T855] F2FS-fs (loop8): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 127.190670][ T20] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 127.212416][ T20] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.252392][ T20] usb 2-1: Product: syz [ 127.273840][ T20] usb 2-1: Manufacturer: syz [ 127.297370][ T20] usb 2-1: SerialNumber: syz [ 127.670467][ T20] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 127.700542][ T20] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 127.754165][ T20] usb 2-1: USB disconnect, device number 2 [ 128.087529][ T3370] netlink: 44 bytes leftover after parsing attributes in process `syz.0.954'. [ 128.096427][ T3370] netlink: 43 bytes leftover after parsing attributes in process `syz.0.954'. [ 128.105296][ T3370] netlink: 'syz.0.954': attribute type 5 has an invalid length. [ 128.112938][ T3370] netlink: 43 bytes leftover after parsing attributes in process `syz.0.954'. [ 128.556423][ T3374] netlink: 44 bytes leftover after parsing attributes in process `syz.8.953'. [ 128.565407][ T3374] netlink: 43 bytes leftover after parsing attributes in process `syz.8.953'. [ 128.574311][ T3374] netlink: 'syz.8.953': attribute type 5 has an invalid length. [ 128.582157][ T3374] netlink: 43 bytes leftover after parsing attributes in process `syz.8.953'. [ 128.882004][ T1759] udevd[1759]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 129.963530][ T3412] EXT4-fs (loop1): Ignoring removed oldalloc option [ 130.000548][ T3412] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 130.105413][ T3412] EXT4-fs (loop1): 1 truncate cleaned up [ 130.116518][ T3412] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 130.463109][ T3421] program syz.8.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.761800][ T3431] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 130.762664][ T3431] @0Ù: renamed from bond_slave_1 [ 131.309130][ T24] audit: type=1400 audit(1786146356.350:280): avc: denied { view } for pid=3440 comm="syz.9.979" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 131.577633][ T3451] netlink: 4 bytes leftover after parsing attributes in process `syz.9.981'. [ 131.760957][ T24] audit: type=1400 audit(1786146356.810:281): avc: denied { mount } for pid=3456 comm="syz.8.983" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 131.900860][ T24] audit: type=1400 audit(1786146356.890:282): avc: denied { unmount } for pid=2333 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 132.430687][ T3469] EXT4-fs (loop1): Ignoring removed oldalloc option [ 132.446468][ T3467] netlink: 44 bytes leftover after parsing attributes in process `syz.9.986'. [ 132.452503][ T3469] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 132.455363][ T3467] netlink: 43 bytes leftover after parsing attributes in process `syz.9.986'. [ 132.465194][ T3469] EXT4-fs (loop1): 1 truncate cleaned up [ 132.472388][ T3467] netlink: 'syz.9.986': attribute type 5 has an invalid length. [ 132.478154][ T3469] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 132.485630][ T3467] netlink: 43 bytes leftover after parsing attributes in process `syz.9.986'. [ 134.478957][ T3494] FAT-fs (loop1): Directory bread(block 64) failed [ 134.492313][ T3494] FAT-fs (loop1): Directory bread(block 65) failed [ 134.561225][ T3504] netlink: 44 bytes leftover after parsing attributes in process `syz.0.996'. [ 134.570190][ T3504] netlink: 43 bytes leftover after parsing attributes in process `syz.0.996'. [ 134.579068][ T3504] netlink: 'syz.0.996': attribute type 5 has an invalid length. [ 134.586718][ T3504] netlink: 43 bytes leftover after parsing attributes in process `syz.0.996'. [ 134.674348][ T3494] FAT-fs (loop1): Directory bread(block 66) failed [ 134.680924][ T3494] FAT-fs (loop1): Directory bread(block 67) failed [ 134.687462][ T3494] FAT-fs (loop1): Directory bread(block 68) failed [ 134.693997][ T3494] FAT-fs (loop1): Directory bread(block 69) failed [ 134.700550][ T3494] FAT-fs (loop1): Directory bread(block 70) failed [ 134.707058][ T3494] FAT-fs (loop1): Directory bread(block 71) failed [ 134.713702][ T3494] FAT-fs (loop1): Directory bread(block 72) failed [ 134.725671][ T3494] FAT-fs (loop1): Directory bread(block 73) failed [ 134.884125][ T3511] EXT4-fs (loop8): Ignoring removed oldalloc option [ 134.933116][ T3511] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 134.952942][ T24] audit: type=1400 audit(1786146360.000:283): avc: denied { read } for pid=3519 comm="syz.1.1001" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 135.080861][ T3511] EXT4-fs (loop8): 1 truncate cleaned up [ 135.089616][ T3511] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 135.441426][ T2390] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.040419][ T2390] usb 2-1: Using ep0 maxpacket: 16 [ 136.269557][ T2390] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.281194][ T2390] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.292004][ T2390] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 136.305683][ T2390] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.312948][ T2390] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 137.101771][ T2390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.341520][ T2390] usb 2-1: config 0 descriptor?? [ 138.341995][ T2390] hid (null): nested delimiters [ 138.365144][ T2390] hid (null): nested delimiters [ 138.370249][ T2390] hid (null): nested delimiters [ 138.375518][ T2390] hid (null): report_id 24797 is invalid [ 138.501212][ T886] usb 2-1: USB disconnect, device number 3 [ 138.869999][ T3561] F2FS-fs (loop8): invalid crc value [ 138.974056][ T3561] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 139.001994][ T3561] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 139.029804][ T24] audit: type=1400 audit(1786146364.070:284): avc: denied { read write open } for pid=3558 comm="syz.8.1014" path="/72/file0/file1" dev="loop8" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.061039][ T2333] attempt to access beyond end of device [ 139.061039][ T2333] loop8: rw=2049, want=45104, limit=40427 [ 139.203078][ T3601] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.233533][ T3606] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 139.242591][ T3606] ext4 filesystem being mounted at /51/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.281764][ T3614] EXT4-fs (loop8): Ignoring removed oldalloc option [ 139.291836][ T3614] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 139.301917][ T3614] EXT4-fs (loop8): 1 truncate cleaned up [ 139.307616][ T3614] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 140.525669][ T3630] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1035'. [ 140.534682][ T3630] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1035'. [ 140.543639][ T3630] netlink: 'syz.9.1035': attribute type 5 has an invalid length. [ 140.551366][ T3630] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1035'. [ 140.910292][ T3634] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1033'. [ 140.919296][ T3634] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1033'. [ 140.928245][ T3634] netlink: 'syz.8.1033': attribute type 5 has an invalid length. [ 140.935962][ T3634] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1033'. [ 141.087266][ T3643] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1037'. [ 141.096245][ T3643] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1037'. [ 141.105186][ T3643] netlink: 'syz.4.1037': attribute type 5 has an invalid length. [ 141.112904][ T3643] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1037'. [ 141.380340][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 141.992501][ T3678] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1050'. [ 142.001526][ T3678] netlink: 'syz.9.1050': attribute type 5 has an invalid length. [ 142.143936][ T3673] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.186089][ T3673] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.207508][ T3673] device bridge_slave_0 entered promiscuous mode [ 142.230402][ T2396] device bridge_slave_0 left promiscuous mode [ 142.237833][ T2396] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.278429][ T2396] device veth1_macvtap left promiscuous mode [ 142.304741][ T2396] device veth0_vlan left promiscuous mode [ 142.581628][ T3673] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.609084][ T3673] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.629649][ T3673] device bridge_slave_1 entered promiscuous mode [ 143.459066][ T24] audit: type=1400 audit(1786146368.500:285): avc: denied { mount } for pid=3701 comm="syz.0.1057" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 143.517655][ T3707] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 143.591981][ T3711] ------------[ cut here ]------------ [ 143.597463][ T3711] trace type BPF program uses run-time allocation [ 143.605924][ T3711] WARNING: CPU: 0 PID: 3711 at kernel/bpf/verifier.c:10518 check_map_prog_compatibility+0x5d8/0x740 [ 143.616839][ T24] audit: type=1400 audit(1786146368.660:286): avc: denied { name_bind } for pid=3712 comm="syz.0.1063" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 143.621161][ T3711] Modules linked in: [ 143.638961][ T24] audit: type=1400 audit(1786146368.660:287): avc: denied { node_bind } for pid=3712 comm="syz.0.1063" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 143.639062][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 143.644149][ T3711] [ 143.667022][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.093516][ T3711] CPU: 1 PID: 3711 Comm: syz.1.1062 Not tainted syzkaller #0 [ 144.103025][ T3711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 144.114130][ T3711] RIP: 0010:check_map_prog_compatibility+0x5d8/0x740 [ 144.121337][ T3711] Code: 85 e9 14 fe ff ff e8 07 dc ef ff 31 c0 e9 15 fe ff ff e8 fb db ef ff c6 05 65 c7 4b 05 01 48 c7 c7 c0 d9 25 85 e8 88 21 04 03 <0f> 0b e9 7d fc ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 9b fa ff [ 144.141828][ T3711] RSP: 0018:ffffc9000143f430 EFLAGS: 00010246 [ 144.158982][ T3711] RAX: c9b16c2d7446c000 RBX: 0000000000000001 RCX: 0000000000080000 [ 144.167057][ T3711] RDX: ffffc900093ed000 RSI: 0000000000002a16 RDI: 0000000000002a17 [ 144.178014][ T3711] RBP: ffffc9000143f470 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 144.186504][ T3711] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff88812316c000 [ 144.203291][ T3711] R13: 0000000000000011 R14: dffffc0000000000 R15: ffff8881145fb000 [ 144.206251][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.211491][ T3711] FS: 00007ff0e5f3a6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 144.223359][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.228733][ T3711] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 144.243084][ T3711] CR2: 00007f24e9e07f88 CR3: 0000000121df5000 CR4: 00000000003506a0 [ 144.251104][ T3711] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 144.259113][ T3711] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 144.267539][ T855] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.268471][ T3711] Call Trace: [ 144.274602][ T855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.275048][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 144.278671][ T3711] ? __fdget+0x1a1/0x230 [ 144.285653][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 144.293467][ T3711] resolve_pseudo_ldimm64+0x557/0x10b0 [ 144.297947][ T855] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.305781][ T3711] ? bpf_check+0xdce0/0xdce0 [ 144.311024][ T855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.318195][ T3711] ? kvmalloc_node+0x88/0x130 [ 144.322938][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 144.337054][ T3711] bpf_check+0x91f9/0xdce0 [ 144.346889][ T3711] ? get_page_from_freelist+0x225f/0x23f0 [ 144.352906][ T3711] ? __alloc_pages_nodemask+0x29a/0x640 [ 144.361022][ T3711] ? bpf_get_btf_vmlinux+0x60/0x60 [ 144.364748][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 144.378255][ T3711] ? 0xffffffffa0028000 [ 144.388021][ T3711] ? is_bpf_text_address+0x177/0x190 [ 144.393968][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.398483][ T3711] ? selinux_bpf_prog_alloc+0x51/0x140 [ 144.407249][ T3711] ? __kernel_text_address+0xa0/0x100 [ 144.410787][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 144.412677][ T3711] ? unwind_get_return_address+0x4d/0x90 [ 144.427066][ T3711] ? stack_trace_save+0xf0/0xf0 [ 144.431968][ T3711] ? arch_stack_walk+0xee/0x140 [ 144.437103][ T3711] ? stack_trace_save+0xa6/0xf0 [ 144.443034][ T3711] ? stack_trace_snprint+0xe0/0xe0 [ 144.448266][ T3711] ? selinux_bpf_prog_alloc+0x51/0x140 [ 144.464728][ T3711] ? selinux_bpf_prog_alloc+0x51/0x140 [ 144.470228][ T3711] ? __kasan_kmalloc+0xe6/0x100 [ 144.470619][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 144.483008][ T24] audit: type=1400 audit(1786146369.520:288): avc: denied { read write } for pid=3734 comm="syz.9.1069" name="fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 144.484655][ T3711] ? __kasan_kmalloc+0xd4/0x100 [ 144.511349][ T3673] device veth0_vlan entered promiscuous mode [ 144.520063][ T24] audit: type=1400 audit(1786146369.520:289): avc: denied { open } for pid=3734 comm="syz.9.1069" path="/dev/fuse" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 144.529640][ T3711] ? kmem_cache_alloc_trace+0x179/0x2e0 [ 144.544072][ T24] audit: type=1400 audit(1786146369.530:290): avc: denied { unmount } for pid=2497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 144.549371][ T3711] ? selinux_bpf_prog_alloc+0x51/0x140 [ 144.574500][ T3711] ? security_bpf_prog_alloc+0x62/0x90 [ 144.580017][ T3711] ? bpf_prog_load+0x9fa/0x14e0 [ 144.585114][ T3711] ? __se_sys_bpf+0x49a/0x740 [ 144.590210][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 144.599964][ T3711] ? __x64_sys_bpf+0x7b/0x90 [ 144.605514][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 144.614417][ T3711] ? do_syscall_64+0x31/0x40 [ 144.619023][ T3711] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 144.625598][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 144.633584][ T3711] ? memset+0x35/0x40 [ 144.637913][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 144.645820][ T3711] ? bpf_obj_name_cpy+0x193/0x1e0 [ 144.651206][ T3711] bpf_prog_load+0x1004/0x14e0 [ 144.655968][ T3711] ? map_freeze+0x330/0x330 [ 144.664628][ T3673] device veth1_macvtap entered promiscuous mode [ 144.672620][ T3711] ? selinux_bpf+0xc7/0xf0 [ 144.672649][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 144.684674][ T3711] ? security_bpf+0x82/0xa0 [ 144.689183][ T3711] __se_sys_bpf+0x49a/0x740 [ 144.694301][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 144.702114][ T3711] ? rcu_panic+0x50/0x50 [ 144.706364][ T3711] ? __x64_sys_bpf+0x90/0x90 [ 144.711393][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 144.719352][ T3711] ? asm_sysvec_call_function_single+0xa/0x20 [ 144.726021][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.733496][ T3711] ? debug_smp_processor_id+0x17/0x20 [ 144.734437][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.743571][ T3711] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 144.769003][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.780995][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.783197][ T3711] __x64_sys_bpf+0x7b/0x90 [ 144.804932][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.820590][ T855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.828750][ T3711] do_syscall_64+0x31/0x40 [ 144.839103][ T3711] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 144.859003][ T3711] RIP: 0033:0x7ff0e74e10d9 [ 144.869089][ T3711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.889194][ T3711] RSP: 002b:00007ff0e5f3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 144.920491][ T3711] RAX: ffffffffffffffda RBX: 00007ff0e7768fa0 RCX: 00007ff0e74e10d9 [ 144.938654][ T3711] RDX: 0000000000000094 RSI: 0000200000000780 RDI: 0000000000000005 [ 144.958795][ T3711] RBP: 00007ff0e7578024 R08: 0000000000000000 R09: 0000000000000000 [ 144.978981][ T3711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.260176][ T3711] R13: 00007ff0e7769038 R14: 00007ff0e7768fa0 R15: 00007ffe88b7a018 [ 145.288668][ T3711] ---[ end trace aff6639a76e024b6 ]--- [ 146.185843][ T3767] __nla_validate_parse: 2 callbacks suppressed [ 146.185852][ T3767] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1079'. [ 146.189672][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1076'. [ 146.192061][ T3767] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1079'. [ 146.192068][ T3767] netlink: 'syz.0.1079': attribute type 5 has an invalid length. [ 146.192074][ T3767] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1079'. [ 146.679641][ T3793] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1083'. [ 146.693893][ T3793] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1083'. [ 146.714225][ T3793] netlink: 'syz.1.1083': attribute type 5 has an invalid length. [ 146.818667][ T3793] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1083'. [ 147.077225][ T3811] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1091'. [ 147.086244][ T3811] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1091'. [ 147.095287][ T3811] netlink: 'syz.0.1091': attribute type 5 has an invalid length. [ 147.103019][ T3811] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1091'. [ 148.149879][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.159626][ T3824] device bridge_slave_1 left promiscuous mode [ 148.165765][ T3824] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.243057][ T3843] netlink: 'syz.9.1104': attribute type 5 has an invalid length. [ 148.437090][ T3853] device ip6erspan0 entered promiscuous mode [ 148.843354][ T24] audit: type=1400 audit(1786146373.890:291): avc: denied { watch watch_reads } for pid=3893 comm="syz.0.1122" path="/243/file0" dev="tmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 148.986625][ T3903] netlink: 'syz.3.1115': attribute type 5 has an invalid length. [ 149.737004][ T3905] netlink: 'syz.1.1121': attribute type 5 has an invalid length. [ 149.980737][ T24] audit: type=1400 audit(1786146374.980:292): avc: denied { read } for pid=3908 comm="syz.4.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 150.201207][ T24] audit: type=1400 audit(1786146375.250:293): avc: denied { read write } for pid=3921 comm="syz.4.1130" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.258469][ T24] audit: type=1400 audit(1786146375.250:294): avc: denied { open } for pid=3921 comm="syz.4.1130" path="/256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1393 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 150.744141][ T24] audit: type=1400 audit(1786146375.790:295): avc: denied { bind } for pid=3944 comm="syz.1.1138" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 150.767521][ T24] audit: type=1400 audit(1786146375.790:296): avc: denied { node_bind } for pid=3944 comm="syz.1.1138" saddr=172.20.20.53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 150.907435][ T24] audit: type=1400 audit(1786146375.920:297): avc: denied { write } for pid=3947 comm="syz.1.1140" name="raw" dev="proc" ino=4026533014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 150.963307][ T3920] F2FS-fs (loop3): Test dummy encryption mode enabled [ 150.979120][ T3920] F2FS-fs (loop3): invalid crc value [ 151.031884][ T3920] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.125606][ T3920] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 151.136164][ T3920] F2FS-fs (loop3): Cannot turn on quotas: -2 on 0 [ 151.143019][ T3920] F2FS-fs (loop3): Start checkpoint disabled! [ 151.149725][ T3920] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 151.214992][ T3920] F2FS-fs (loop3): Found FS corruption, run fsck to fix. [ 151.231078][ T3965] __nla_validate_parse: 12 callbacks suppressed [ 151.231086][ T3965] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1142'. [ 151.257769][ T3965] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1142'. [ 151.269247][ T3966] device sit0 entered promiscuous mode [ 151.290581][ T3965] netlink: 'syz.0.1142': attribute type 5 has an invalid length. [ 151.302721][ T3966] netlink: 'syz.1.1143': attribute type 1 has an invalid length. [ 151.308641][ T3965] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1142'. [ 151.330287][ T3966] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1143'. [ 151.407237][ T3973] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,inlinecrypt,,errors=continue [ 151.430394][ T3973] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.449075][ T3973] EXT4-fs (loop1): shut down requested (0) [ 151.623720][ T24] audit: type=1400 audit(1786146376.670:298): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 151.688680][ T24] audit: type=1400 audit(1786146376.690:299): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.710283][ T24] audit: type=1400 audit(1786146376.700:300): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.742549][ T24] audit: type=1400 audit(1786146376.700:301): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.982569][ T4002] EXT4-fs (loop3): Ignoring removed oldalloc option [ 151.989207][ T4002] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 151.998936][ T4002] EXT4-fs (loop3): 1 truncate cleaned up [ 152.004619][ T4002] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 152.630308][ T2641] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 152.713120][ T4035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1160'. [ 152.733837][ T4035] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1160'. [ 152.752069][ T4035] netlink: 'syz.4.1160': attribute type 5 has an invalid length. [ 152.768064][ T4035] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1160'. [ 153.001946][ T2641] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 153.011871][ T2641] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 153.022276][ T4042] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 153.600516][ T2641] usb 10-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 153.609870][ T2641] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.618685][ T2641] usb 10-1: Product: syz [ 153.632817][ T2641] usb 10-1: Manufacturer: syz [ 153.637766][ T2641] usb 10-1: SerialNumber: syz [ 154.367830][ T4072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1171'. [ 154.415180][ T2641] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 155.258045][ T24] kauditd_printk_skb: 3 callbacks suppressed [ 155.258056][ T24] audit: type=1400 audit(1786146636.306:305): avc: denied { read write } for pid=4015 comm="syz.9.1157" name="lp0" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 155.296766][ T24] audit: type=1400 audit(1786146636.346:306): avc: denied { open } for pid=4015 comm="syz.9.1157" path="/dev/usb/lp0" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 155.464636][ T4085] EXT4-fs (loop1): Ignoring removed oldalloc option [ 155.565054][ T20] usb 10-1: USB disconnect, device number 2 [ 155.612627][ T4085] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 155.634367][ T20] usblp0: removed [ 155.638834][ T4085] EXT4-fs (loop1): 1 truncate cleaned up [ 155.644650][ T4085] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 155.766092][ T4104] EXT4-fs (loop3): Ignoring removed oldalloc option [ 155.772881][ T4104] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 155.784022][ T4104] EXT4-fs (loop3): 1 truncate cleaned up [ 155.789732][ T4104] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 156.368563][ T4121] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1184'. [ 156.461069][ T24] audit: type=1400 audit(1786146637.516:307): avc: denied { read write } for pid=4123 comm="syz.9.1185" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 156.496510][ T4124] mtrr: base(0x7375662f7665642f000) is not aligned on a size(0x65000) boundary [ 156.555154][ T24] audit: type=1400 audit(1786146637.546:308): avc: denied { open } for pid=4123 comm="syz.9.1185" path="/101/proc/mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 156.584066][ T24] audit: type=1400 audit(1786146637.546:309): avc: denied { ioctl } for pid=4123 comm="syz.9.1185" path="/101/proc/mtrr" dev="proc" ino=4026532003 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 156.683139][ T24] audit: type=1400 audit(1786146637.606:310): avc: denied { unmount } for pid=2497 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 157.445337][ T24] audit: type=1400 audit(1786146638.496:311): avc: denied { read } for pid=4138 comm="syz.9.1190" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.487415][ T4143] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1191'. [ 157.497995][ T24] audit: type=1400 audit(1786146638.496:312): avc: denied { ioctl } for pid=4138 comm="syz.9.1190" path="/103/file0/.pending_reads" dev="incremental-fs" ino=2 ioctlcmd=0x6723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 157.506577][ T4143] tipc: Started in network mode [ 157.546057][ T4143] tipc: Own node identity 7, cluster identity 4711 [ 157.559794][ T4143] tipc: 32-bit node address hash set to 7 [ 157.782403][ T4157] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 157.826490][ T4157] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.836006][ T4147] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 157.849359][ T4157] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 157.859472][ T4147] ext4 filesystem being mounted at /82/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.181196][ T4176] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1200'. [ 158.190205][ T4176] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1200'. [ 158.199179][ T4176] netlink: 'syz.3.1200': attribute type 5 has an invalid length. [ 158.206900][ T4176] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1200'. [ 160.402470][ T4227] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.424545][ T4227] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 160.434160][ T4227] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 161.452172][ T24] audit: type=1400 audit(1786146642.506:313): avc: denied { write } for pid=4246 comm="syz.1.1218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 162.534635][ T4282] device batadv_slave_1 entered promiscuous mode [ 162.542060][ T4280] device batadv_slave_1 left promiscuous mode [ 162.952258][ T15] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.471488][ T4321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1246'. [ 163.500836][ T15] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 163.511309][ T15] usb 2-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 163.521266][ T15] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 163.534973][ T15] usb 2-1: config 220 interface 0 has no altsetting 0 [ 163.542030][ T15] usb 2-1: config 220 interface 1 has no altsetting 0 [ 163.773791][ T4331] tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 163.831700][ T15] usb 2-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=6c.b9 [ 163.842766][ T4333] netlink: 44 bytes leftover after parsing attributes in process `syz.9.1248'. [ 163.851744][ T4333] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1248'. [ 163.860720][ T4333] netlink: 'syz.9.1248': attribute type 5 has an invalid length. [ 163.868437][ T4333] netlink: 43 bytes leftover after parsing attributes in process `syz.9.1248'. [ 163.975448][ T15] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.990740][ T15] usb 2-1: Product: syz [ 163.996764][ T15] usb 2-1: Manufacturer: syz [ 164.001577][ T15] usb 2-1: SerialNumber: syz [ 164.023971][ T4338] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 164.033674][ T4338] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 164.380497][ T15] usb 2-1: selecting invalid altsetting 0 [ 164.428060][ T15] usb 2-1: USB disconnect, device number 4 [ 164.837273][ T4362] EXT4-fs (loop1): Ignoring removed orlov option [ 164.855254][ T4362] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 165.124057][ T24] audit: type=1400 audit(1786146646.176:314): avc: denied { rename } for pid=4361 comm="syz.1.1257" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.160194][ T24] audit: type=1400 audit(1786146646.206:315): avc: denied { unlink } for pid=4361 comm="syz.1.1257" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 165.940481][ T4410] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1267'. [ 165.949504][ T4410] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1267'. [ 165.958534][ T4410] netlink: 'syz.0.1267': attribute type 5 has an invalid length. [ 165.966287][ T4410] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1267'. [ 166.177108][ T24] audit: type=1400 audit(1786146647.226:316): avc: denied { mounton } for pid=4413 comm="syz.3.1270" path="/38/file0" dev="tmpfs" ino=221 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 166.304823][ T24] audit: type=1326 audit(1786146647.356:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4422 comm="syz.1.1274" exe="/root/ci2-android-5-10/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0e74e10d9 code=0x0 [ 166.405684][ T24] audit: type=1400 audit(1786146647.456:318): avc: denied { mounton } for pid=4422 comm="syz.1.1274" path="/100/file0" dev="tmpfs" ino=549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 166.606111][ T4426] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1275'. [ 166.707017][ T24] audit: type=1400 audit(1786146647.756:319): avc: denied { bind } for pid=4431 comm="syz.4.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 166.752760][ T4434] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1279'. [ 166.795208][ T24] audit: type=1400 audit(1786146647.846:320): avc: denied { setopt } for pid=4437 comm="syz.4.1280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 167.188583][ T4451] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 168.240865][ T4483] overlayfs: failed to clone upperpath [ 168.304559][ T4485] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 168.320393][ T4485] ext4 filesystem being mounted at /104/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 168.617897][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 168.637117][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 168.655360][ T4505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 169.054759][ T4518] 9pnet: Insufficient options for proto=fd [ 169.139468][ T4534] fuse: Bad value for 'fd' [ 170.484077][ T24] audit: type=1400 audit(1786146651.536:321): avc: denied { read } for pid=4558 comm="syz.4.1321" name="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.520348][ T2389] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.537038][ T24] audit: type=1400 audit(1786146651.556:322): avc: denied { open } for pid=4558 comm="syz.4.1321" path="/" dev="configfs" ino=13716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 170.561277][ T4564] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1322'. [ 171.130357][ T2389] usb 2-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 171.139497][ T2389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.147536][ T2389] usb 2-1: Product: syz [ 171.152258][ T2389] usb 2-1: Manufacturer: syz [ 171.156852][ T2389] usb 2-1: SerialNumber: syz [ 171.328594][ T24] audit: type=1400 audit(1786146652.376:323): avc: denied { append } for pid=4590 comm="syz.3.1331" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 171.353173][ T24] audit: type=1400 audit(1786146652.386:324): avc: denied { block_suspend } for pid=4590 comm="syz.3.1331" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.537806][ T2389] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 171.570456][ T2389] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 171.671641][ T4606] fuse: Bad value for 'fd' [ 171.745055][ T2389] usb 2-1: USB disconnect, device number 5 [ 172.840088][ T4631] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1341'. [ 172.849130][ T4631] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1341'. [ 172.858135][ T4631] netlink: 'syz.4.1341': attribute type 5 has an invalid length. [ 172.865888][ T4631] netlink: 43 bytes leftover after parsing attributes in process `syz.4.1341'. [ 172.959489][ T4625] EXT4-fs (loop1): Ignoring removed oldalloc option [ 172.978202][ T24] audit: type=1400 audit(1786146654.026:325): avc: denied { read } for pid=4639 comm="syz.9.1347" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 172.986661][ T4625] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 173.004221][ T24] audit: type=1400 audit(1786146654.056:326): avc: denied { open } for pid=4639 comm="syz.9.1347" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.312937][ T24] audit: type=1400 audit(1786146654.356:327): avc: denied { write } for pid=4639 comm="syz.9.1347" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 173.325671][ T4625] EXT4-fs (loop1): 1 truncate cleaned up [ 173.345456][ T4625] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrjquota=,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,oldalloc,,errors=continue [ 173.735688][ T4656] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1348'. [ 173.744729][ T4656] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1348'. [ 173.753890][ T4656] netlink: 'syz.3.1348': attribute type 5 has an invalid length. [ 173.761639][ T4656] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1348'. [ 174.860513][ T2390] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 176.189846][ T4696] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1361'. [ 176.198871][ T4696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1361'. [ 176.207828][ T4696] netlink: 'syz.1.1361': attribute type 5 has an invalid length. [ 176.215556][ T4696] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1361'. [ 176.499609][ T2390] usb 4-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 176.525984][ T2390] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.567947][ T2390] usb 4-1: Product: syz [ 176.668200][ T2390] usb 4-1: Manufacturer: syz [ 176.676965][ T2390] usb 4-1: SerialNumber: syz [ 176.889360][ T4718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1365'. [ 176.898417][ T4718] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1365'. [ 176.907450][ T4718] netlink: 'syz.0.1365': attribute type 5 has an invalid length. [ 176.915294][ T4718] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1365'. [ 177.899689][ T24] audit: type=1400 audit(1786146658.946:328): avc: denied { bind } for pid=4724 comm="syz.1.1370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 177.940379][ T2390] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 177.960447][ T2390] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 178.357979][ T2390] usb 4-1: USB disconnect, device number 3 [ 178.446281][ T24] audit: type=1400 audit(1786146659.496:329): avc: denied { create } for pid=4738 comm="syz.4.1373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 178.486368][ T24] audit: type=1400 audit(1786146659.496:330): avc: denied { write } for pid=4738 comm="syz.4.1373" path="socket:[29718]" dev="sockfs" ino=29718 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 179.208852][ T4765] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1376'. [ 179.217990][ T4765] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1376'. [ 179.227122][ T4765] netlink: 'syz.0.1376': attribute type 5 has an invalid length. [ 179.234899][ T4765] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1376'. [ 180.700326][ T2643] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 181.054410][ T4796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1389'. [ 181.317098][ T4802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1390'. [ 181.326135][ T4802] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1390'. [ 181.335132][ T4802] netlink: 'syz.1.1390': attribute type 5 has an invalid length. [ 181.342891][ T4802] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1390'. [ 182.250675][ T2643] usb 10-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 182.259868][ T2643] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.268417][ T2643] usb 10-1: Product: syz [ 182.272701][ T2643] usb 10-1: Manufacturer: syz [ 182.277387][ T2643] usb 10-1: SerialNumber: syz [ 182.404787][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'. [ 183.305714][ T4840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 183.340907][ T4848] Illegal XDP return value 4294967282, expect packet loss! [ 183.441480][ T2643] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 183.525547][ T4873] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1408'. [ 183.534607][ T4873] netlink: 'syz.0.1408': attribute type 5 has an invalid length. [ 183.692553][ T4866] ================================================================== [ 183.700666][ T4866] BUG: KASAN: use-after-free in pppol2tp_sock_to_session+0x1a0/0x1b0 [ 183.708730][ T4866] Read of size 4 at addr ffff88810cea9400 by task syz.1.1412/4866 [ 183.716522][ T4866] [ 183.718852][ T4866] CPU: 1 PID: 4866 Comm: syz.1.1412 Tainted: G W syzkaller #0 [ 183.727598][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 183.737657][ T4866] Call Trace: [ 183.740949][ T4866] __dump_stack+0x21/0x24 [ 183.745281][ T4866] dump_stack_lvl+0x1a7/0x208 [ 183.749956][ T4866] ? show_regs_print_info+0x18/0x18 [ 183.754185][ T2643] usb 10-1: 2:1 : no UAC_FORMAT_TYPE desc [ 183.755152][ T4866] ? thaw_kernel_threads+0x220/0x220 [ 183.766109][ T4866] ? __local_bh_enable_ip+0x53/0x80 [ 183.771291][ T4866] print_address_description+0x7f/0x2c0 [ 183.776817][ T4866] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 183.782516][ T4866] kasan_report+0x100/0x140 [ 183.784802][ T2643] usb 10-1: USB disconnect, device number 3 [ 183.787014][ T4866] ? pppol2tp_sock_to_session+0x1a0/0x1b0 [ 183.798568][ T4866] __asan_report_load4_noabort+0x14/0x20 [ 183.804178][ T4866] pppol2tp_sock_to_session+0x1a0/0x1b0 [ 183.809692][ T4866] pppol2tp_release+0x150/0x2b0 [ 183.814512][ T4866] sock_close+0xb8/0x200 [ 183.818726][ T4866] ? sock_mmap+0xa0/0xa0 [ 183.822939][ T4866] __fput+0x2dc/0x730 [ 183.826897][ T4866] ____fput+0x15/0x20 [ 183.830852][ T4866] task_work_run+0x127/0x190 [ 183.835414][ T4866] do_exit+0xa7c/0x24e0 [ 183.839570][ T4866] ? __kasan_check_write+0x14/0x20 [ 183.844666][ T4866] ? switch_fpu_return+0x19c/0x330 [ 183.849749][ T4866] ? put_task_struct+0x90/0x90 [ 183.854490][ T4866] ? fpu__clear_all+0x20/0x20 [ 183.859138][ T4866] ? __kasan_check_read+0x11/0x20 [ 183.864150][ T4866] __x64_sys_exit+0x40/0x40 [ 183.868625][ T4866] do_syscall_64+0x31/0x40 [ 183.873014][ T4866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 183.878878][ T4866] RIP: 0033:0x7ff0e74e10d9 [ 183.883264][ T4866] Code: Unable to access opcode bytes at RIP 0x7ff0e74e10af. [ 183.890601][ T4866] RSP: 002b:00007ff0e5f39ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 183.898998][ T4866] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff0e74e10d9 [ 183.906942][ T4866] RDX: 00007ff0e5f3a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 183.914903][ T4866] RBP: 00007ff0e7578024 R08: 0000000000000000 R09: 0000000000000058 [ 183.922857][ T4866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.930806][ T4866] R13: 00007ff0e7769038 R14: 00007ff0e7768fa0 R15: 00007ffe88b7a018 [ 183.938756][ T4866] [ 183.941063][ T4866] Allocated by task 4865: [ 183.945374][ T4866] __kasan_kmalloc+0xd4/0x100 [ 183.950038][ T4866] __kmalloc+0x19f/0x330 [ 183.954253][ T4866] l2tp_session_create+0x39/0xb60 [ 183.959251][ T4866] pppol2tp_connect+0xbf5/0x1640 [ 183.964162][ T4866] __sys_connect+0x3ce/0x450 [ 183.968736][ T4866] __x64_sys_connect+0x7a/0x90 [ 183.973474][ T4866] do_syscall_64+0x31/0x40 [ 183.977861][ T4866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 183.983720][ T4866] [ 183.986034][ T4866] Freed by task 7: [ 183.989731][ T4866] kasan_set_track+0x4a/0x70 [ 183.994300][ T4866] kasan_set_free_info+0x23/0x40 [ 183.999214][ T4866] ____kasan_slab_free+0x125/0x160 [ 184.004307][ T4866] __kasan_slab_free+0x11/0x20 [ 184.009044][ T4866] slab_free_freelist_hook+0xc5/0x190 [ 184.014402][ T4866] kfree+0xc0/0x270 [ 184.018187][ T4866] l2tp_session_put+0xb2/0x1a0 [ 184.022936][ T4866] l2tp_session_delete+0x3a9/0x4a0 [ 184.028041][ T4866] l2tp_tunnel_del_work+0x180/0x3d0 [ 184.033210][ T4866] process_one_work+0x6fd/0xbc0 [ 184.038047][ T4866] worker_thread+0xa8e/0x13c0 [ 184.042694][ T4866] kthread+0x324/0x3b0 [ 184.046747][ T4866] ret_from_fork+0x1f/0x30 [ 184.051147][ T4866] [ 184.053449][ T4866] The buggy address belongs to the object at ffff88810cea9400 [ 184.053449][ T4866] which belongs to the cache kmalloc-512 of size 512 [ 184.067491][ T4866] The buggy address is located 0 bytes inside of [ 184.067491][ T4866] 512-byte region [ffff88810cea9400, ffff88810cea9600) [ 184.080564][ T4866] The buggy address belongs to the page: [ 184.086185][ T4866] page:ffffea000433aa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10cea8 [ 184.096392][ T4866] head:ffffea000433aa00 order:2 compound_mapcount:0 compound_pincount:0 [ 184.104686][ T4866] flags: 0x4000000000010200(slab|head) [ 184.110119][ T4866] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 184.118675][ T4866] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 184.127227][ T4866] page dumped because: kasan: bad access detected [ 184.133624][ T4866] page_owner tracks the page as allocated [ 184.139316][ T4866] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 65, ts 3350820691, free_ts 0 [ 184.157254][ T4866] prep_new_page+0x176/0x190 [ 184.161829][ T4866] get_page_from_freelist+0x225f/0x23f0 [ 184.167366][ T4866] __alloc_pages_nodemask+0x29a/0x640 [ 184.172713][ T4866] new_slab+0x84/0x3f0 [ 184.176762][ T4866] ___slab_alloc+0x2f8/0x4c0 [ 184.181341][ T4866] __slab_alloc+0x63/0xa0 [ 184.185663][ T4866] __kmalloc+0x1f9/0x330 [ 184.189878][ T4866] __seq_open_private+0x28/0x1b0 [ 184.194788][ T4866] seq_open_private+0x23/0x40 [ 184.199436][ T4866] mounts_open_common+0x320/0x560 [ 184.204434][ T4866] mounts_open+0x24/0x30 [ 184.208648][ T4866] do_dentry_open+0x7a5/0x10a0 [ 184.213392][ T4866] vfs_open+0x73/0x80 [ 184.217346][ T4866] path_openat+0x26c3/0x3040 [ 184.221908][ T4866] do_filp_open+0x1df/0x400 [ 184.226380][ T4866] do_sys_openat2+0x19f/0x750 [ 184.231040][ T4866] page_owner free stack trace missing [ 184.236384][ T4866] [ 184.238681][ T4866] Memory state around the buggy address: [ 184.244282][ T4866] ffff88810cea9300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.252313][ T4866] ffff88810cea9380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 184.260364][ T4866] >ffff88810cea9400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 184.268392][ T4866] ^ [ 184.272428][ T4866] ffff88810cea9480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 184.280486][ T4866] ffff88810cea9500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 184.288534][ T4866] ================================================================== [ 184.296567][ T4866] Disabling lock debugging due to kernel taint [ 184.326517][ T4866] ------------[ cut here ]------------ [ 184.332074][ T4866] WARNING: CPU: 1 PID: 4866 at net/l2tp/l2tp_ppp.c:156 pppol2tp_sock_to_session+0x167/0x1b0 [ 184.343537][ T4866] Modules linked in: [ 184.347482][ T4866] CPU: 1 PID: 4866 Comm: syz.1.1412 Tainted: G B W syzkaller #0 [ 184.357422][ T4869] EXT4-fs (loop1): Ignoring removed nobh option [ 184.361652][ T4866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.380209][ T4866] RIP: 0010:pppol2tp_sock_to_session+0x167/0x1b0 [ 184.381559][ T1759] udevd[1759]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 184.386607][ T4866] Code: 5d c3 e8 8c dc 35 fd be 02 00 00 00 eb 0a e8 80 dc 35 fd be 01 00 00 00 4c 89 f7 e8 f3 32 0f fe e9 0f ff ff ff e8 69 dc 35 fd <0f> 0b 48 89 df e8 ef 00 00 00 eb bd e8 58 dc 35 fd 4c 89 f7 be 03 [ 184.412403][ T24] audit: type=1400 audit(1786146665.466:331): avc: denied { mounton } for pid=4876 comm="syz.3.1414" path="/64/file0" dev="tmpfs" ino=356 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 184.422974][ T4866] RSP: 0018:ffffc900012ffc40 EFLAGS: 00010293 [ 184.445790][ T4869] fscrypt (loop1, inode 2): Error -61 getting encryption context [ 184.451767][ T4866] RAX: ffffffff842ec977 RBX: ffff888127e8e800 RCX: ffff888130f44f00 [ 184.474801][ T4869] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 184.483192][ T4866] RDX: 0000000000000000 RSI: 000000000f754c00 RDI: 000000000c04eb7d [ 184.491225][ T4869] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #13: comm syz.1.1413: inode has both inline data and extents flags [ 184.504375][ T4866] RBP: ffffc900012ffc60 R08: 0000000000000003 R09: 0000000000000004 [ 184.511885][ T4869] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1413: couldn't read orphan inode 13 (err -117) [ 184.512675][ T4866] R10: dffffc0000000000 R11: fffffbfff0dcf648 R12: dffffc0000000000 [ 184.532454][ T4866] R13: dffffc0000000000 R14: 000000000f754c00 R15: ffff88810cea9400 [ 184.540594][ T4866] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 184.549522][ T4866] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.554655][ T4869] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,nouid32,nobh,stripe=0x000000000000ffff,block_validity,grpjquota=",errors=continue [ 184.556129][ T4866] CR2: 00007f60dd695ff8 CR3: 000000000640f000 CR4: 00000000003506b0 [ 184.579896][ T4866] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 184.587978][ T4866] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.596031][ T4866] Call Trace: [ 184.603303][ T4866] pppol2tp_release+0x150/0x2b0 [ 184.608180][ T4866] sock_close+0xb8/0x200 [ 184.612475][ T4866] ? sock_mmap+0xa0/0xa0 [ 184.616724][ T4866] __fput+0x2dc/0x730 [ 184.620868][ T4866] ____fput+0x15/0x20 [ 184.624887][ T4866] task_work_run+0x127/0x190 [ 184.629463][ T4866] do_exit+0xa7c/0x24e0 [ 184.633750][ T4866] ? __kasan_check_write+0x14/0x20 [ 184.638907][ T4866] ? switch_fpu_return+0x19c/0x330 [ 184.644215][ T4866] ? put_task_struct+0x90/0x90 [ 184.649007][ T4866] ? fpu__clear_all+0x20/0x20 [ 184.654118][ T4866] ? __kasan_check_read+0x11/0x20 [ 184.663394][ T4866] __x64_sys_exit+0x40/0x40 [ 184.667903][ T4866] do_syscall_64+0x31/0x40 [ 184.672355][ T4866] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 184.678257][ T4866] RIP: 0033:0x7ff0e74e10d9 [ 184.682681][ T4866] Code: Unable to access opcode bytes at RIP 0x7ff0e74e10af. [ 184.690036][ T4866] RSP: 002b:00007ff0e5f39ef8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 184.698454][ T4866] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007ff0e74e10d9 [ 184.706439][ T4866] RDX: 00007ff0e5f3a9c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 184.714430][ T4866] RBP: 00007ff0e7578024 R08: 0000000000000000 R09: 0000000000000058 [ 184.722409][ T4866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.730389][ T4866] R13: 00007ff0e7769038 R14: 00007ff0e7768fa0 R15: 00007ffe88b7a018 [ 184.738345][ T4866] ---[ end trace aff6639a76e024b7 ]---