last executing test programs: 3m8.738812668s ago: executing program 32 (id=70): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3ff, 0x1, @perf_config_ext={0x5}, 0x0, 0x934, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mq_unlink(&(0x7f0000000080)='..\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000000c0)='./control\x00', 0x201c449, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESHEX], 0x1, 0xa84, &(0x7f0000001740)="$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") syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0), 0x40002, 0x0) mkdir(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100)=0x6, 0x1) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000340)={0x400, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=0x0, {0x30}, &(0x7f0000000100)=""/131, 0x83, &(0x7f0000000280)=""/93, 0x0}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c000000040000ea010000000400000f030000000300000004000000ff0f0000040000000800000002000000030000000800000006000000010000000100000004040000020000000000000000000f0100000084002e2e00"], &(0x7f0000000100)=""/2, 0x68, 0x2, 0x1}, 0x28) r2 = syz_open_procfs(r1, &(0x7f00000003c0)='net/sco\x00') ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000080), 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@nat={'nat\x00', 0x8, 0x5, 0x628, 0x0, 0x208, 0xffffffff, 0x2f8, 0x0, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1d, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@private0, @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, [0x80000000, 0xffffffff, 0x0, 0xff000000], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x33, 0x4, 0x4, 0x42}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@dev, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @icmp_id, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x10c03, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) 2m2.812372071s ago: executing program 33 (id=653): perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff72, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x810, 0x4, 0x7, 0x4, 0x0, 0x1, 0x61f, 0x0, 0x8, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x3, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c1ff07000000000000e558000e0000"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="202400060200000000000000000000000900000000f9ffff5c740f042e2207b96ee1c387"], 0x101100) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendto$inet6(r4, &(0x7f0000000440)="00c4ebdcf84762b80000006f", 0xc, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002060300000000a59a00000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 1m24.725575605s ago: executing program 6 (id=892): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x600, 0x0, 0x4157d}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000002) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000440)={0xb0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netpci0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) 1m23.956089685s ago: executing program 34 (id=898): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x3e8, 0x10, 0x70bd28, 0x25dfdbfd, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24000800}, 0x48800) socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01020000000000000000010002000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b000100657874686472000014000280080001400000000c05000200890000000900010073797a300000001100010000000000000000000700000a"], 0xc4}}, 0x0) 1m23.7565614s ago: executing program 6 (id=904): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0', 0xc) unshare(0x22020600) fchmod(r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8040, 0x0, 0x5}, 0x18) 1m23.605249274s ago: executing program 6 (id=906): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{}, 0x0, &(0x7f0000000240)}, 0x20) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa000000000200"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x94) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd0}}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) 1m23.529885066s ago: executing program 6 (id=907): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m21.466883897s ago: executing program 6 (id=916): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x2000000000000000) file_getattr(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x200000e, 0x50, r0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000000c0)={0x4, {{0x2, 0x4e22, @multicast1}}}, 0x90) r3 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000180), 0x2, 0x0) r4 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, 0x0) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000200)={{r3}, {@val, @max}}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r5, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="033f000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendto$inet_nvme_pdu(r5, &(0x7f0000000240)=@data_c2h={{0x7, 0x0, 0x18, 0x6a, 0x7}, 0x4, 0x67, 0x3, 0xe4, "a969c8c1"}, 0x80, 0x0, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007", @ANYBLOB='\x00\x00'], 0x2c}}, 0x20008000) 1m21.454235138s ago: executing program 6 (id=917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8cd, 0x2}, 0x10ed08, 0x1221, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)='\x00', 0x1, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/105, 0x29, 0x69, 0x1, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x816) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1m21.438440328s ago: executing program 35 (id=917): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8cd, 0x2}, 0x10ed08, 0x1221, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)='\x00', 0x1, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/105, 0x29, 0x69, 0x1, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x816) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1m21.37180637s ago: executing program 0 (id=919): r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000240)={0x2b, @rand_addr=0x64010102, 0x4e20, 0x1, 'nq\x00', 0x20, 0x3, 0x29}, 0x2c) prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4) setrlimit(0xd, &(0x7f0000000140)={0x8000000000000000, 0x51e}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x53, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/109, 0x20001c34}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xf3f, 0x70bd2e, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0x2, 0x3da48c8682330ab8}, {0x0, 0x1}, {0x7, 0xfffa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200058c0}, 0x4880) r6 = getpid() syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), r4) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) prlimit64(r6, 0x7, &(0x7f0000000000)={0x3, 0x5}, &(0x7f00000000c0)) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r2, 0xc61}}, 0x10) 1m21.156555285s ago: executing program 0 (id=920): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="800037bb", 0x4, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0', 0xc) unshare(0x22020600) fchmod(r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8040, 0x0, 0x5}, 0x18) 1m21.028061569s ago: executing program 0 (id=921): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_open_dev$sg(&(0x7f0000000240), 0x200, 0x80c0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc0}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x20000, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000340)=""/128, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8008, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x4, 0x8, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x7, 0x700, 0x3, 0x45139d65}}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) socket(0x27, 0x4, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r6, 0x0, 0x4) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbff, 0x200000}, 0xc) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) writev(r7, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) 1m20.540996931s ago: executing program 0 (id=925): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m19.062789388s ago: executing program 0 (id=932): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r1, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000440)={@link_local={0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @icmp={{0x19, 0x4, 0x0, 0x4, 0x80, 0x80, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x2b, 0xfe, [@multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @multicast2, @multicast2, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @ssrr={0x89, 0x7, 0x2e, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0x7b, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x15, 0x1, [{0x5, 0xf, "6fbb3c2fb46e885a2c7c369c0a"}]}]}}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x6, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x89, 0x0, @rand_addr=0x64010100, @remote}}}}}}, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 1m18.988536389s ago: executing program 0 (id=933): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0', 0xc) unshare(0x22020600) fchmod(r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8040, 0x0, 0x5}, 0x18) 1m18.97928721s ago: executing program 36 (id=933): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1", 0x7, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r3) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0', 0xc) unshare(0x22020600) fchmod(r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) openat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8040, 0x0, 0x5}, 0x18) 1m17.654474003s ago: executing program 5 (id=941): perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff72, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x810, 0x4, 0x7, 0x4, 0x0, 0x1, 0x61f, 0x0, 0x8, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x3, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c1ff07000000000000e558000e0000"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a000000020000", 0x7) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, &(0x7f0000000400), {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 1m16.96487753s ago: executing program 5 (id=946): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) syz_usb_disconnect(r3) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0xc0085504, &(0x7f0000000240)=0x7f) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r6, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1m16.205378059s ago: executing program 8 (id=918): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40040) r4 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r5, 0x40086604, &(0x7f0000000880)=ANY=[]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x39, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000380), 0x8, 0xf, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000006c0)={0x0, r2}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x3, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r6], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r8, 0x0, 0x2d, 0x0, @val=@perf_event={0xa}}, 0x18) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) perf_event_open(0x0, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 1m15.809487739s ago: executing program 5 (id=951): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8cd, 0x2}, 0x10ed08, 0x1221, 0x0, 0x5, 0x8, 0x20005, 0x2, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:01.3/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000500)='\x00', 0x1, 0x40) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@float={0x10, 0x0, 0x0, 0x10, 0xc}]}, {0x0, [0x30, 0x0, 0x5f]}}, &(0x7f00000001c0)=""/105, 0x29, 0x69, 0x1, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000010400000000040000000000000000000d040000000000000000000010040000000400000000000008030000000000000061"], 0x0, 0x52}, 0x28) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x816) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8081}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200810, &(0x7f0000000240)={[{@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nombcache}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@nogrpid}, {@bh}, {@grpjquota}]}, 0xfc, 0x57b, &(0x7f0000000800)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 1m12.366987046s ago: executing program 8 (id=955): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) set_mempolicy(0x8000, &(0x7f0000000540)=0x2, 0x2) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m12.326115427s ago: executing program 5 (id=956): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) set_mempolicy(0x8000, &(0x7f0000000540)=0x2, 0x2) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m11.734952011s ago: executing program 8 (id=961): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x3c, r5, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}]}, 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) syz_usb_disconnect(r3) ioctl$EVIOCRMFF(r3, 0xc0085504, &(0x7f0000000240)=0x7f) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r6, &(0x7f0000000280)=[{&(0x7f0000010a00)=""/255, 0xa00}], 0x1, &(0x7f0000000100)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r7, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1m11.535776756s ago: executing program 5 (id=963): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x114}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000240)={'erspan0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x20, 0x20, 0x5a9, 0x0, {{0x10, 0x4, 0x3, 0x17, 0x40, 0x66, 0x0, 0x3, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@noop, @rr={0x7, 0x17, 0x5b, [@loopback, @empty, @broadcast, @multicast2, @multicast2]}, @rr={0x7, 0x13, 0x1a, [@rand_addr=0x64010102, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x24}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000340)={'ip_vti0\x00', r5, 0x8, 0x7800, 0xf, 0x10000, {{0xb, 0x4, 0x0, 0x7, 0x2c, 0x68, 0x0, 0x57, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp={0x44, 0x18, 0x23, 0x0, 0x9, [0xa, 0x3, 0x13, 0x1, 0x9]}]}}}}}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000040)={0x60000010}) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f00000000c0)=0x1, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013}) close(r2) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)}, {&(0x7f00000003c0)="641a6a2b863c0dd898", 0x9}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c4832713618", 0x7c}], 0x3}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d4", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd4", 0x3f}, {&(0x7f0000000300)="d6f6da22b14bf9ad2fbb765e446f21a90b8d398bc28c67ea1b14", 0x1a}], 0x2}}], 0x3, 0x2090) syz_emit_ethernet(0x260, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x22a, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad96579269748e254c1e4a948b580a9bc430d3be27df3e34060000ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000100000000001995319cff"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x3, 0x1, "d47ae6e8805d"}, {0x21}]}}}}}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000740)="31f1cf2a4727829bb3f5f409140a0798ee1620d3e481277d85d6a9b4b855564c5db4671e9bcc40fc719b37289514ca3cec94ba7990ba7a39a91da428faa811f5b70fce05c3d96c0f05c14bb0e82946db0dfbad3cb1c8e0384e5e752682e1f803fe35a491a25dd22b6d5ab9454a7bc8bcdbfd09cb005d697ac03de182e8209bbb2531a6eaa2c5e731d0707acbc54611f203dc70d5fa3885752e96c9212253252473475e1032abf57ffd9e0ef2add995d47c4b91793c10e7124cf25c865a707cc305144868452f310d9c06f09ae2c1ba07637256976f973afefb6b422228b08abe2e5be4f4c4f693bd2cb395f3c53cbd0dc53b10facf77f7c69869273f052402d20d9f10abefab992606ad", 0x10a, 0x10008095, 0x0, 0x0) 1m11.40054688s ago: executing program 5 (id=964): r0 = socket$kcm(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x6ed51000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x40, 0xfffffffb, 0x5, {{0x21, 0x4, 0x0, 0x15, 0x84, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@lsrr={0x83, 0x27, 0x4f, [@loopback, @remote, @multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x7a}, @broadcast, @loopback, @remote]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x51, [@broadcast, @empty, @multicast2, @empty]}, @timestamp={0x44, 0x18, 0xa6, 0x0, 0x4, [0x4, 0x7fffffff, 0x8, 0x2, 0x3]}, @timestamp={0x44, 0x14, 0x55, 0x0, 0x0, [0x5, 0xfffffbff, 0x2e9, 0x7fffffff]}]}}}}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1221, 0x0, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0064b1", @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf251000000008000600070000000800040081000000080006000400000020000180490008005703000006000100020000000c0007000800000004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14fce400", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m11.40038648s ago: executing program 8 (id=965): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m11.370048561s ago: executing program 37 (id=964): r0 = socket$kcm(0xa, 0x2, 0x3a) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000001, 0x10, r0, 0x6ed51000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x40, 0xfffffffb, 0x5, {{0x21, 0x4, 0x0, 0x15, 0x84, 0x65, 0x0, 0x0, 0x0, 0x0, @empty, @empty, {[@lsrr={0x83, 0x27, 0x4f, [@loopback, @remote, @multicast1, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0x7a}, @broadcast, @loopback, @remote]}, @end, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0x51, [@broadcast, @empty, @multicast2, @empty]}, @timestamp={0x44, 0x18, 0xa6, 0x0, 0x4, [0x4, 0x7fffffff, 0x8, 0x2, 0x3]}, @timestamp={0x44, 0x14, 0x55, 0x0, 0x0, [0x5, 0xfffffbff, 0x2e9, 0x7fffffff]}]}}}}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='pids.max\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x5) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x6080}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x0, 0x2b8, 0xb0000010, 0x280, 0x5c8f0200, 0x378, 0x3a8, 0x3a8, 0x378, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x280, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'ipvlan0\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x3}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0x0, 0x1, 0x2}, {0x1, 0x2, 0x6}, 0x4f6, 0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xb, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1221, 0x0, 0x5, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0064b1", @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf251000000008000600070000000800040081000000080006000400000020000180490008005703000006000100020000000c0007000800000004000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000000) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="14fce400", @ANYRES16, @ANYBLOB="010028bd7000fcdbdf251b000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000046682d562c31630100000000000000b52f0d6086e274aa97a91fa46cdcefe7534fda04ca542b4c4904446290f93bce3177127ebc0c24e7e718c0b1da96d9c9fa8e95238403007cb9806b9641253a7b99504c950fcba378fae7ec90b6da825996012194da80cc7621803fe840ccedca203b30524e6258edbfe64d0900cdf79924bfb82ad5cfe25853d4f3a2841f7d7e692bfb1387c1211d00d4cace5a0ae3fad859bc7cb33f20922abe3780b6d07d9dde639e27dc79daef403b188d618ab4928773db8f"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000040900010073797a300000000068000000060a01040000000000000000010000004000048020000180070001007274000014000280080002400000000108000140000000031c0001800b00010072656a65637400000c000280080001400000000108000b40000000000900010073797a300000000014000000110001"], 0xf0}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m11.348824191s ago: executing program 38 (id=965): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000000, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x10}, 0x10000d, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x103}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 45.45678483s ago: executing program 2 (id=1100): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:gp', 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/248) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x24, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x4040014) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@private, @in6}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000980)=0x2e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000200)="80", 0x1) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x34, 0x0) r5 = socket(0x2d, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x44) setsockopt(r5, 0x11d, 0x1, &(0x7f0000000500)="010000", 0x3) setresgid(0x0, 0x0, 0x0) syz_clone(0x3089011, 0x0, 0x0, 0x0, 0x0, 0x0) 43.301552834s ago: executing program 2 (id=1113): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x2) socket$inet(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0x0, 0xfffffffffffffffc, 0x0, 0x28, 0x7}, {0xfffffffffffffffb, 0x4, 0xffff}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x404d5, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) 41.155473298s ago: executing program 2 (id=1124): connect$unix(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x4581, 0x0, 0x800000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x5, 0x41}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2c, 0x3, 0x0) socket$kcm(0x2c, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = getpid() syz_pidfd_open(r3, 0x0) capget(&(0x7f00000002c0)={0x19980330, r3}, &(0x7f0000000300)={0x5, 0x3, 0x2, 0x4, 0x3, 0x6}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffff0000400001000000050007000000000008000900000000101400200000000000000000000000ffff0000ffef08000a000000000014001f0000000000000000000000000000000000060002"], 0x64}, 0x1, 0x620b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 40.69190769s ago: executing program 2 (id=1128): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) set_mempolicy(0x8000, &(0x7f0000000540)=0x2, 0x2) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39.722256574s ago: executing program 2 (id=1137): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x410, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0x3}, 0x100c, 0x7, 0x0, 0x4, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0x0, 0x800, 0x1}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0x8}, {0x35}, {0x28, 0x0, 0x1, 0x1}, {0xb1, 0xb, 0x28, 0x8001}, {0x16, 0xfc, 0x5, 0xffffffff}]}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'batadv0\x00', 0x401}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000055090200000300006e00000000000000b709000000000000739af0ff00000000b509020000000000c38af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 36.991460572s ago: executing program 2 (id=1140): unshare(0xe040400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) utimensat(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000010c0)=@delchain={0x30, 0x65, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x1, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x14, 0x0, 0x305, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="219c01f0b645a79f191dba04e48653bb10cfabb5b91cbbc421ee2137edc94e00729b887c24330c2e22b03ccc583e5d211c07a0a475dd636d9baf50cfbb661a04274cbec4a927108a60909726fba2", 0x4e}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @timestamping={{0x14}}], 0x78}, 0x4000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7b1afa3db66cecda}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x34e3, 0xd]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008041}, 0x40000) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) 36.980241743s ago: executing program 39 (id=1140): unshare(0xe040400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x23) utimensat(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000010c0)=@delchain={0x30, 0x65, 0x0, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x1, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c080}, 0x20000080) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x14, 0x0, 0x305, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r1 = socket(0x10, 0x803, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$sock(r1, &(0x7f00000003c0)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0x1}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)="219c01f0b645a79f191dba04e48653bb10cfabb5b91cbbc421ee2137edc94e00729b887c24330c2e22b03ccc583e5d211c07a0a475dd636d9baf50cfbb661a04274cbec4a927108a60909726fba2", 0x4e}], 0x1, &(0x7f0000000340)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1000}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff7}}, @timestamping={{0x14, 0x1, 0x25, 0x200}}, @timestamping={{0x14}}], 0x78}, 0x4000) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7b1afa3db66cecda}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x6, 0x34e3, 0xd]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008041}, 0x40000) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)) 13.97174325s ago: executing program 1 (id=1265): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, r3) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10a0804, &(0x7f00000000c0)={[], [{@fowner_gt={'fowner>', r3}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '802.15.4 MAC\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}, 0x1, 0xb69, &(0x7f00000027c0)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8JCDl549epEevEsxKJSeIzPZ3WyTbDZtNh1IPx+Y7Hvzsvu+M9+8ybxhZwJ4aY3kP7KIoxFxN0UMNdZnEVEtSgMRi2u/tzx1/1K+pFhd/fTfFCkilqbuX2p+Vmq8Hm5+wHDEH4sppu5s7nf+5q3L0/X67I1GfWzhyvWx+Zu33p27Mn1x9uLs1YlTp06OT06eOjnes209MXrsp6WvP/zn3vLYk58/OPFLijMx2Ghr345eGYmR1j7Z6LNed1aSvoiotOU+lyolBgQAwLaytnO4ozEUfbF+8jYUtblSgwMAAAB64tuIWAUAAAD2uWT+DwAAAPtc83sAS1P3LzWXcr+RwIu0cnbtPu2lxr3dy638V2KxeB2I/og49DhF+229ae1tuzYSEdfv3pnLl9ij+7DpbPF2RLy11fhPRf6HY6Cobcx/FhG9uDN/ZENd/l+s3eT/TA/6l38AAIAX48HZtYn85vlf1rr+E1vM//q2mLs9j+7zv+xRD7qhg5WzEe+3PdtxuS3/DcN9jdorxfWA/nRhrj47HhGvRsRo9B/I6xPb9DH38W9vdmprv/6XL3n/zWuBjTgeVQ48/Z6Z6YXp3Wwz61ZuR7xd2Sr/qTX+U4frv5/ssI/vv/xhpVNb9/yzl1bvRRzfcvyvP9Ezbf981rHieDDWPCps9vngX0ud+pf/cuXj/9D2+S+O/63n9c4/ex/nq9+91qnteY//1XSuCLDaWPfN9MLCjYmIavpo8/rJZ495v2ruj+b+yvM/emzr///bHf/zv4nzO+zzya+Pz3VqM/7Lled/psv4T0+N/2cv/Pfn72906n9n4/+9IpjRxhrnf93tNEFlxwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANArWUQMRspqrXKW1WoRhyPi9TiU1a/NL5y4cO2rqzN5W8Rw9GcX5uqz4xExtFZPeX2iKK/XJzfUpyLiSET8OHSwqNe+uFafKXvjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDkcEYORslpEZEU5y2q1tba/h8qODgAAAOiZ4bIDAAAAAPac+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu3TknQcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+T40QcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2T+5q3L0/X67A0FBQWFVqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD72f8BAAD//y0T4dE=") bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xe}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 11.16155139s ago: executing program 1 (id=1271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x667e1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10e450, 0x2, 0x0, 0x8, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/route\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f00000003c0)=0x0) io_getevents(r5, 0x4, 0x26, &(0x7f00000019c0), 0x0) io_destroy(r5) preadv(r1, &(0x7f0000000280)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x1f1, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x25, 0xa, 0x0, 0x0, 0x1800, 0x61, 0x11, 0x70}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f34066681fb945bfe585ab6933a6f6514a0eebad4e353700"/60}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 8.716115822s ago: executing program 1 (id=1277): openat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x5, 0x0, 0x0, 0x2, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x5, 0x8}, 0x3205, 0x1224, 0x5b16, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x202, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) gettid() unshare(0x6a040000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x3fffc}, 0x1400, 0x0, 0x7c2, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000100)=0x3, 0x4) sendmsg$nl_route(r2, 0x0, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x0) write(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r4 = io_uring_setup(0x3b7e, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x20002f7}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x25, 0x11, @val=@tcx={@void, @value=r6}}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@multicast, @random="9366f942d32d", @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@mpls_mc={0x8848, {[], @ipv6=@generic={0xc, 0x6, "bab728", 0x0, 0x33, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @private1}}}}}, 0x0) 7.068396873s ago: executing program 9 (id=1287): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x55, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x40, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) fsync(0xffffffffffffffff) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x42001, 0x2c) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000006c0)={0x1b4, 0x40, 0x200, 0x70bd29, 0x25dfdbff, {0xe}, [@typed={0x8, 0x1f, 0x0, 0x0, @uid}, @typed={0xc, 0xe2, 0x0, 0x0, @u64=0x1}, @generic="9f598aeb0027635f7465090e66e64e9637e8fff7a7524d95ce072d94550e8a2b09eefa89bd3ae1e435ec0d18aeab29929840f8e7bb2b91aa7dad2a69b64d481ed1b1d1c7584e885fdc204d0c7ee4a78abd56c143f375ff320aea8c15b4e2cd9449c6c6d3f6ef162d24d8301f884da9e2a4884556480bb900bad8cac3344b6cfe59455221124b732e8cdcd9b6f79b93212c098630ea9e9f821859b4d490638f767ba12ad4c0397247af797bb09c", @generic="ece038de379c68f1c874bc21bfb6b8ecbdf4d45e51266b2233a5a0ba966580db7d23b858948765380c08ba7984049a324ce9a7e72be18ceb393ee1d71b6f790093c4307c2229805527d2b3812c9fab33bebd7a010426c509759bfadbf89ff4e3841797e0c2ec51c8bb4f1b95549f8490a45c34bd348a148726cf9e57fb47c202fec07a7de467c048806c771df427827ef6165faec36ce013366d74524170db88360f37330b6309ce98bd7950dbc20dd84247315d4058daf7", @generic="bc795cdf662235c8b6edf2b6007649afbfd7e57c534ed55bf58fa1c634119e0e9110a2b382"]}, 0x1b4}, 0x1, 0x0, 0x0, 0x20040041}, 0x4040) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x20000004, 0x0, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x7f, @loopback}, {0xa, 0x4e22, 0x80000001, @loopback, 0x2}, 0xffffffffffffffff, 0xf6cd}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x4, 0x5, "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", 0x9, 0xc6, 0x3, 0xeb, 0xe, 0x93, 0x10, 0x3}}}, 0x120) r4 = fsmount(r2, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000002c0)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r5, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x4, @perf_config_ext={0x3a, 0x8}, 0x10c96a, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7.035845713s ago: executing program 1 (id=1288): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) set_mempolicy(0x8000, &(0x7f0000000540)=0x2, 0x2) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.39273399s ago: executing program 9 (id=1290): perf_event_open(&(0x7f0000000480)={0x1, 0xffffffffffffff72, 0x10, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x6}, 0x810, 0x4, 0x7, 0x4, 0x0, 0x1, 0x61f, 0x0, 0x8, 0x0, 0x14}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x25, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x0, {0x2, 0x100000004}}, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x3, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60e400ff00403a00fc020000000000000000000000000000ff020000000000000000000000000001020090780000000060000000000011000000000000000000000000000000000000000000000000000000ffffe000000117c1ff07000000000000e558000e0000"], 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="202400060200000000000000000000000900000000f9ffff5c740f042e2207b96ee1c3878350"], 0x101100) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x100, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xc000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1, 0x2}, 0x1c, &(0x7f00000004c0)}}], 0x1, 0x0) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) close(r3) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000440)="00c4ebdcf84762b80000006f", 0xc, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000002060300000000a59a00000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 6.125779976s ago: executing program 7 (id=1292): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}}}, 0x24}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[], 0x1914}}, 0x4048010) socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) fchmod(0xffffffffffffffff, 0x40) r3 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x118}, 0x0, 0x0, 0x0, 0x43, 0x0, 0x0, 0x2}) sendto$packet(0xffffffffffffffff, &(0x7f0000000240)="09000000e7001400000000803500df8000000088a8000800274e88a800000000", 0x70, 0x4044800, &(0x7f00000000c0)={0x11, 0x88a8, 0x0, 0x1, 0xc, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x48}}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100009500"/24], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$poke(0x4, r5, &(0x7f00000000c0), 0x1fb) remap_file_pages(&(0x7f000076b000/0x1000)=nil, 0x1000, 0x0, 0x605, 0x20000) getpid() 5.737167196s ago: executing program 1 (id=1293): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4f818a20, 0x5, &(0x7f0000006680)) chroot(&(0x7f0000000380)='./file0\x00') 5.384189195s ago: executing program 1 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) add_key(0x0, 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.378444286s ago: executing program 40 (id=1296): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x1c}}, 0x0) add_key(0x0, 0x0, &(0x7f0000000140)="0098bb3c76c3", 0x6, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 5.317020087s ago: executing program 9 (id=1298): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001800050400000000000000001c140000fe00000100000000080009"], 0x2c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0}, 0x10eea8, 0x1224, 0x99e5, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xffc0}}, './file0\x00'}) (async) set_mempolicy(0x3, &(0x7f0000000080)=0x1ff, 0x5) (async, rerun: 32) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0xfffffffffffffff9, 0x8000000000000000}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) socket$key(0xf, 0x3, 0x2) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) unshare(0x2000400) (async) r3 = fsopen(&(0x7f00000001c0)='esdfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) (async) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2000, 0x4712fd6952a42e4a) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00010024bd7000ffffffff022014a0ff00ff0600020000080002007f000001368d7af22fd63cacd3731313b7df575147db593c58203eb055805b379974ba6e14873e9660cab27553362e574950390b095bc069af4694ddbb3777e95120755c9d0e5b18cf50528ff02667b4b476bde74a53a8c5fea34b07ebb6a1061635509818f93e53135438f335e947d3c34536735e725a6f8a55a35383e1f7f05193ac24f75bc963469711cda7839f6b5648ae8b0a34dd962e3b778ebb70e45c8b83624fd7d29d50ced717d45524fdb24965544a863798d6639a107ff5c3408ecf94e00f26c37d8de60c096f0e5cc703e4966361a6c6"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0xea5bc50b619917ee) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002440)={r4, 0x0, 0x0}, 0x10) (async) unshare(0xa000400) (async, rerun: 32) r6 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11f4, &(0x7f0000001280)="$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") (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) (async, rerun: 32) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async, rerun: 32) write(0xffffffffffffffff, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001", 0x21) (async) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, 0x0, 0x0, 0xfffffffffffffffe) (async) getsockopt(r2, 0x6, 0xffffffff, 0x0, 0x0) 5.246606099s ago: executing program 9 (id=1299): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0fc5:1227:gp', 0xc) r1 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000780)=""/248) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x24, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x1, 0x8c0, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{0x4, 0x0, 0x1, 0x1}, 0x38, 0x3, 0x0, 0x0, "649cf69ea3e76f79ccd3238e0834d952b6054bdd457e2802a4c866ea94d240e73fb1c08097bae00c3c267a2b5dcdfb946272ca085f4fa96d531abcde7ae0ca2d"}}, 0x80}, 0x1, 0x0, 0x0, 0x44084}, 0x4040014) sendmsg$can_bcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1, 0x1, 0x3, {}, {0x0, 0x2710}, {0x3, 0x1, 0x1, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x7, 0x2, 0x0, 0x0, "d467aef0f23fe738"}}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000880)={{{@in=@private, @in6}}, {{@in6=@private1}, 0x0, @in6=@private0}}, &(0x7f0000000980)=0x2e) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r4, 0x6, 0xd, &(0x7f0000000200)="80", 0x1) lsetxattr$system_posix_acl(&(0x7f0000000040)='./mnt\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRES32=r1, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x34, 0x0) r5 = socket(0x2d, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x44) setsockopt(r5, 0x11d, 0x1, &(0x7f0000000500)="010000", 0x3) setresgid(0x0, 0x0, 0x0) syz_clone(0x3089011, 0x0, 0x0, 0x0, 0x0, 0x0) 4.982800025s ago: executing program 7 (id=1302): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, 0x0, 0x0) (fail_nth: 1) 4.868239568s ago: executing program 7 (id=1304): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bind$rds(0xffffffffffffffff, 0x0, 0x0) (rerun: 64) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) (async) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) close(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='file0\x00', 0x6) (async) symlink(0x0, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') (async) close(0xffffffffffffffff) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) r1 = perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x308, 0x1}, 0x1a1ed, 0x8004, 0x11000, 0x2, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) (async) r2 = getpgrp(0x0) ptrace$setregset(0x4205, r2, 0x200, &(0x7f0000000080)={&(0x7f0000000000)="9f5544d1a08ed56af989a5b571006e286207533dd4b1a282e2f56915624e054881f0938fc1e318e8fb6aafd1552ee38519b503cc1df7f831ff8a6102e586b75e5a39814e1038b3a8", 0x48}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f00000064c0)={0x0, 0x0, &(0x7f00000063c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14771100d500190001002dbd7000fddbdf252d0000000000000000"], 0x14}], 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, 0x0, &(0x7f00000002c0)) (async, rerun: 32) ftruncate(r1, 0x44) (rerun: 32) 4.733407922s ago: executing program 7 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x1, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES64=r0], 0x108}}], 0x1, 0xc040) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000080)='./file1\x00', 0x22148c8, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) listen(0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x100) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) io_submit(r2, 0x0, &(0x7f0000000540)) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)=ANY=[], 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYRESDEC], 0x1, 0x2bc, &(0x7f00000015c0)="$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") setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0xf2}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e21, 0x6367, @local, 0x5}], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 3.338190846s ago: executing program 3 (id=1307): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4f818a20, 0x5, &(0x7f0000006680)) chroot(&(0x7f0000000380)='./file0\x00') 3.262651238s ago: executing program 4 (id=1308): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000280)) 3.233647129s ago: executing program 3 (id=1309): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x2) socket$inet(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0x0, 0xfffffffffffffffc, 0x0, 0x28, 0x7}, {0xfffffffffffffffb, 0x4, 0xffff}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x404d5, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) socket$packet(0x11, 0x3, 0x300) 3.2025028s ago: executing program 4 (id=1310): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000280)) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3.036652054s ago: executing program 4 (id=1311): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000004280)=[{{&(0x7f0000000500)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000540)='\'', 0x1}], 0x1}}], 0x1, 0x20000040) (async) shutdown(r0, 0x1) (async) readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.528607767s ago: executing program 4 (id=1312): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x10a0804, &(0x7f00000000c0)={[], [{@fowner_gt={'fowner>', r3}}, {@dont_measure}, {@obj_user={'obj_user', 0x3d, '802.15.4 MAC\x00'}}, {@fowner_eq={'fowner', 0x3d, r3}}]}, 0x1, 0xb69, &(0x7f00000027c0)="$eJzs3M9rHFUcAPDvm2y2aRtNiqLWi4EeGihufkmhxUOLeFMQrOCxwaRt7PYHTUTbiym9KhTUP6AHTx5S8JCDl549epEevEsxKJSeIzPZ3WyTbDZtNh1IPx+Y7Hvzsvu+M9+8ybxhZwJ4aY3kP7KIoxFxN0UMNdZnEVEtSgMRi2u/tzx1/1K+pFhd/fTfFCkilqbuX2p+Vmq8Hm5+wHDEH4sppu5s7nf+5q3L0/X67I1GfWzhyvWx+Zu33p27Mn1x9uLs1YlTp06OT06eOjnes209MXrsp6WvP/zn3vLYk58/OPFLijMx2Ghr345eGYmR1j7Z6LNed1aSvoiotOU+lyolBgQAwLaytnO4ozEUfbF+8jYUtblSgwMAAAB64tuIWAUAAAD2uWT+DwAAAPtc83sAS1P3LzWXcr+RwIu0cnbtPu2lxr3dy638V2KxeB2I/og49DhF+229ae1tuzYSEdfv3pnLl9ij+7DpbPF2RLy11fhPRf6HY6Cobcx/FhG9uDN/ZENd/l+s3eT/TA/6l38AAIAX48HZtYn85vlf1rr+E1vM//q2mLs9j+7zv+xRD7qhg5WzEe+3PdtxuS3/DcN9jdorxfWA/nRhrj47HhGvRsRo9B/I6xPb9DH38W9vdmprv/6XL3n/zWuBjTgeVQ48/Z6Z6YXp3Wwz61ZuR7xd2Sr/qTX+U4frv5/ssI/vv/xhpVNb9/yzl1bvRRzfcvyvP9Ezbf981rHieDDWPCps9vngX0ud+pf/cuXj/9D2+S+O/63n9c4/ex/nq9+91qnteY//1XSuCLDaWPfN9MLCjYmIavpo8/rJZ495v2ruj+b+yvM/emzr///bHf/zv4nzO+zzya+Pz3VqM/7Lled/psv4T0+N/2cv/Pfn72906n9n4/+9IpjRxhrnf93tNEFlxwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANArWUQMRspqrXKW1WoRhyPi9TiU1a/NL5y4cO2rqzN5W8Rw9GcX5uqz4xExtFZPeX2iKK/XJzfUpyLiSET8OHSwqNe+uFafKXvjAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaDkcEYORslpEZEU5y2q1tba/h8qODgAAAOiZ4bIDAAAAAPac+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu3TknQcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy+T40QcPU0Qsnj5YLLlqo62/1MiAvZaVHQBQmr6yAwBKUyk7AKA05vhA6tI+0LHFGQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAy2T+5q3L0/X67A0FBQWFVqHsIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD72f8BAAD//y0T4dE=") signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xe}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 2.442936969s ago: executing program 7 (id=1313): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, r3) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xe}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 1.409398985s ago: executing program 4 (id=1314): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000340)={0x2, 0x9e, "6a80d43ff70faa61acb40a8de6d2b7174da6882a6b46d646e5d58fadf55c446c55e806e9a5aad28fa683f8b7c69b6b62ec82a67656282ece8c137c6d12d4127b461046c0a8bf01126eaa2e66f5b0886a95e41f0fee66c49fe88981904d6e0e501fdb0a5b3c0b26bfe7675367ca8fe5cee9bceccd04ae12d1f9cb84ca23738ec71a7168f73a0db9c8c2e8d671ed3089a868f55e8a875b2a3302e3658656fa"}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1c, 0xc07, 0x2000, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x8, 0x10, 0xa}}, 0x1c}}, 0x20024092) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000280)={'syztnl2\x00', &(0x7f0000000180)={'ip6gre0\x00', r2, 0x29, 0x5, 0xfb, 0x5, 0x38, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2, 0x700, 0x7800, 0x401, 0x9}}) setresuid(0x0, 0xee00, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) ioctl$EXT4_IOC_MIGRATE(r6, 0xff07) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0xc3ff, {0x0, 0x0, 0x74, r2, {0xf}, {0x4, 0x1}, {0xa, 0xc}}, [@TCA_CHAIN={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) 1.272093988s ago: executing program 9 (id=1315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) vmsplice(r1, &(0x7f0000001340)=[{&(0x7f0000000040)="15666b", 0x3}], 0x1, 0x2) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0x200}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) sendmsg$netlink(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)={0x28, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x0, 0x0, 0x0, @pid}, @typed={0x8, 0x40, 0x0, 0x0, @fd=r2}]}, 0x28}], 0x1}, 0x8000) 1.251642219s ago: executing program 3 (id=1316): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x7}, 0x50) 1.092410013s ago: executing program 4 (id=1317): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x1f, 0x6, 0x500, 0x300, 0x3d0, 0x3d0, 0x230, 0x160, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f0000000140), {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@local, 0xb, 0x20, 0x1d}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x2}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x14}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0xffffff00, 0xff], [0xffffff00, 0xff000000, 0xffffff00, 0xffffff00], 'geneve0\x00', 'macvtap0\x00', {}, {}, 0x3c, 0x3, 0x1, 0x26}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x4, 0xe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0], 0x9) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x38, &(0x7f0000000380)=[@in6={0xa, 0x4e22, 0xf28c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e22, 0x66, @mcast2, 0x80000000}]}, &(0x7f0000000480)=0x10) creat(&(0x7f0000000240)='./file0/file0\x00', 0x20) setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x835, 0x2) socket$inet(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x4f}, {0x0, 0xfffffffffffffffc, 0x0, 0x28, 0x7}, {0xfffffffffffffffb, 0x4, 0xffff}, 0x0, 0x6e6bbd, 0x0, 0x0, 0x2}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, 0x404d5, 0x2b}, 0x0, @in6=@loopback, 0x0, 0x3}}, 0xe8) socket$packet(0x11, 0x3, 0x300) 1.088477113s ago: executing program 9 (id=1318): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r0, &(0x7f0000000200)='mem\x00', 0x3) 1.045186944s ago: executing program 3 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x0, 0xc}, {0xfff1, 0xffff}, {0x2, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 970.154756ms ago: executing program 7 (id=1320): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x107, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x4}, 0x10edc0, 0x1224, 0x0, 0x5, 0x8, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={&(0x7f0000000300), 0x8}, 0x0, 0x0, 0x10000, 0x2, 0x80000001, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x8000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r1) close(r1) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='coredump_filter\x00') write$cgroup_int(r4, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xeed0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x400000, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000400)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x48000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) accept4(r4, 0x0, 0x0, 0x80000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=ANY=[], 0xc0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d00)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000100fffa0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xcc}}, 0x0) 904.353787ms ago: executing program 3 (id=1321): r0 = socket$inet(0x2, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000890}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r3, 0x0, r3) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x7]}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$igmp(0x2, 0x3, 0x2) r4 = gettid() timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) socket$kcm(0xa, 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x800) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000240)={0xe}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000), 0x4) epoll_pwait2(r6, &(0x7f0000000040)=[{}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 3 (id=1322): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x16, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x2, 0x7, 0xb, 0xffffffffffffffe0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="200000007600ffff0000080000000000080000000000000005000d8076000000"], 0x20}], 0x1}, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000001c0)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x27) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x81000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000180)='./file0/../file0\x00', r4, &(0x7f0000000140)='./file0\x00', 0x200) set_mempolicy(0x8000, &(0x7f0000000540)=0x2, 0x2) sendmsg(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="ecaf6d4fcc96a5287e5c621a818664f466058ac5be92f315974c29f1968689f665b60bf4427ae8f01641c2974c336f95e6d13e5592a3e3885af919eeecbd8fd1d206d808fcc4484c9a5de0ef592e077ea6e45b63cfa9147b5b8b227bf4971e8eb7d7f7bda9531ff963493aba3d1d7bd07bbbac4038f4206e68c841fa317f3274ab497b1d2089db38f97a647e982a385e852b9631ecb12e30e438ca5d9d9930e22024734b5ca39a9a754082bb2aa8f633048b6cebc810ff23642afdf9f83fed283c0f2dc9f475eea0d7a0183cd126bb3da15b8da02810", 0xd6}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="a71990dc237e348500"], 0x20}, 0x3) lgetxattr(&(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000400)=@random={'security.', 'syzkaller\x00'}, 0x0, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) syz_clone3(&(0x7f0000001e80)={0x1e6022000, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): TU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.707929][ T7453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.732046][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.770223][ T7615] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.988'. [ 168.811700][ T7453] hsr_slave_0: entered promiscuous mode [ 168.823004][ T7453] hsr_slave_1: entered promiscuous mode [ 168.840739][ T7453] debugfs: 'hsr0' already exists in 'hsr' [ 168.846553][ T7453] Cannot create hsr debugfs directory [ 169.146824][ T7576] Process accounting paused [ 169.159954][ T3294] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 169.204355][ T7655] syz.7.991 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 169.274512][ T7655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.991'. [ 169.293966][ T7664] FAULT_INJECTION: forcing a failure. [ 169.293966][ T7664] name failslab, interval 1, probability 0, space 0, times 0 [ 169.329895][ T7664] CPU: 0 UID: 0 PID: 7664 Comm: syz.3.992 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 169.329937][ T7664] Tainted: [W]=WARN [ 169.329945][ T7664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 169.329961][ T7664] Call Trace: [ 169.329969][ T7664] [ 169.329979][ T7664] __dump_stack+0x1d/0x30 [ 169.330068][ T7664] dump_stack_lvl+0x95/0xd0 [ 169.330097][ T7664] dump_stack+0x15/0x1b [ 169.330197][ T7664] should_fail_ex+0x25e/0x270 [ 169.330243][ T7664] ? nfnetlink_rcv+0xa41/0x1740 [ 169.330345][ T7664] should_failslab+0x8c/0xb0 [ 169.330385][ T7664] __kmalloc_cache_noprof+0x7b/0x3d0 [ 169.330418][ T7664] ? nfnetlink_rcv+0xa41/0x1740 [ 169.330450][ T7664] nfnetlink_rcv+0xa41/0x1740 [ 169.330554][ T7664] netlink_unicast+0x5a7/0x680 [ 169.330661][ T7664] netlink_sendmsg+0x5be/0x6f0 [ 169.330774][ T7664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.330802][ T7664] ____sys_sendmsg+0x532/0x580 [ 169.330827][ T7664] ___sys_sendmsg+0x195/0x1e0 [ 169.330866][ T7664] __x64_sys_sendmsg+0xd4/0x160 [ 169.330936][ T7664] x64_sys_call+0x194c/0x3020 [ 169.330988][ T7664] do_syscall_64+0x136/0x3c0 [ 169.331112][ T7664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.331206][ T7664] RIP: 0033:0x7f7a30cce0d9 [ 169.331232][ T7664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.331284][ T7664] RSP: 002b:00007f7a2f727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.331310][ T7664] RAX: ffffffffffffffda RBX: 00007f7a30f55fa0 RCX: 00007f7a30cce0d9 [ 169.331329][ T7664] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.331346][ T7664] RBP: 00007f7a2f727090 R08: 0000000000000000 R09: 0000000000000000 [ 169.331368][ T7664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.331395][ T7664] R13: 00007f7a30f56038 R14: 00007f7a30f55fa0 R15: 00007fff3a0c9818 [ 169.331467][ T7664] [ 169.702177][ T7462] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 169.712067][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.720135][ T7462] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 169.728951][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.747387][ T7462] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 169.915514][ T7676] loop3: detected capacity change from 0 to 1024 [ 169.998291][ T7676] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 170.078062][ T7676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.153864][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 170.153882][ T28] audit: type=1400 audit(1786126227.342:1119): avc: denied { write } for pid=7671 comm="syz.3.993" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 171.180653][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.188905][ T7462] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.202316][ T7462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.188962][ T7462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.200286][ T7462] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.219692][ T7462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 172.616901][ T28] audit: type=1400 audit(1786126229.836:1120): avc: denied { write } for pid=7683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.664666][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.947224][ T28] audit: type=1400 audit(1786126230.167:1121): avc: denied { write } for pid=7700 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 172.969677][ T7462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.050977][ T5384] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.058136][ T5384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.092485][ T5384] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.099635][ T5384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.130986][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 173.352243][ T7710] mmap: syz.9.996 (7710) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 173.429211][ T7453] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 173.459433][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 173.481686][ T7453] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 173.513861][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 173.540679][ T7453] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 173.574299][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.593116][ T7453] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 173.623971][ T7453] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.664401][ T28] audit: type=1400 audit(1786126230.888:1122): avc: denied { write } for pid=7721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.722459][ T7462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.752794][ T28] audit: type=1400 audit(1786126230.978:1123): avc: denied { write } for pid=7744 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.783536][ T7453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.802439][ T7453] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.825803][ T5401] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.833051][ T5401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.862928][ T5401] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.870064][ T5401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.899520][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 174.050423][ T7462] veth0_vlan: entered promiscuous mode [ 174.083734][ T7462] veth1_vlan: entered promiscuous mode [ 174.136126][ T7462] veth0_macvtap: entered promiscuous mode [ 174.154877][ T7462] veth1_macvtap: entered promiscuous mode [ 174.206810][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.251423][ T7462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.276825][ T28] audit: type=1400 audit(1786126231.498:1124): avc: denied { write } for pid=7752 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.329917][ T311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.368154][ T311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.491338][ T7779] loop9: detected capacity change from 0 to 1024 [ 174.536585][ T7779] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 174.599429][ T7779] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.882508][ T5401] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.155342][ T5401] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.207232][ T7453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.278581][ T28] audit: type=1400 audit(1786126231.889:1125): avc: denied { write } for pid=7765 comm="syz.9.999" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 175.301522][ T28] audit: type=1400 audit(1786126232.119:1126): avc: denied { write } for pid=7776 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 175.480827][ T7793] loop3: detected capacity change from 0 to 4096 [ 175.580258][ T7787] loop1: detected capacity change from 0 to 8192 [ 175.695056][ T7453] veth0_vlan: entered promiscuous mode [ 175.745581][ T7453] veth1_vlan: entered promiscuous mode [ 175.837371][ T7453] veth0_macvtap: entered promiscuous mode [ 175.885042][ T7453] veth1_macvtap: entered promiscuous mode [ 175.953889][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.003508][ T7453] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.077427][ T5388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.100952][ T28] audit: type=1400 audit(1786126232.900:1127): avc: denied { remount } for pid=7786 comm="syz.1.1000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 176.117621][ T5388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.125277][ T28] audit: type=1400 audit(1786126233.030:1128): avc: denied { write } for pid=7795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.150028][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.155857][ T28] audit: type=1400 audit(1786126233.130:1129): avc: denied { write } for pid=7810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.189437][ T311] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.228692][ T311] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.275374][ T28] audit: type=1400 audit(1786126233.421:1130): avc: denied { mounton } for pid=7786 comm="syz.1.1000" path="/proc/4/task" dev="proc" ino=21017 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 176.329845][ T28] audit: type=1400 audit(1786126233.561:1131): avc: denied { write } for pid=7812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.404166][ T28] audit: type=1400 audit(1786126233.631:1132): avc: denied { write } for pid=7830 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.522806][ T7837] loop1: detected capacity change from 0 to 512 [ 176.544488][ T7837] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 176.676743][ T7847] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1006'. [ 176.715642][ T28] audit: type=1400 audit(1786126233.941:1133): avc: denied { write } for pid=7838 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.776611][ T28] audit: type=1400 audit(1786126233.991:1134): avc: denied { write } for pid=7858 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 176.931934][ T3374] lo speed is unknown, defaulting to 1000 [ 176.972031][ T7859] vlan2: entered promiscuous mode [ 176.988822][ T7859] bond0: entered promiscuous mode [ 177.003717][ T7859] bond_slave_0: entered promiscuous mode [ 177.010197][ T7859] bond_slave_1: entered promiscuous mode [ 177.019316][ T7881] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 177.045846][ T7864] loop1: detected capacity change from 0 to 512 [ 177.092392][ T7864] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 177.140828][ T7883] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 177.147517][ T7864] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1009: bg 0: block 288: padding at end of block bitmap is not set [ 177.168657][ T7864] loop1: lost filesystem error report for type 5 error -117 [ 177.173248][ T7864] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 177.176429][ T7889] netlink: 288 bytes leftover after parsing attributes in process `syz.9.1011'. [ 177.186521][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 177.197823][ T7864] loop1: lost filesystem error report for type 5 error -117 [ 177.201409][ C0] EXT4-fs (loop1): initial error at time 1786126507: ext4_validate_block_bitmap:441 [ 177.201437][ C0] EXT4-fs (loop1): last error at time 1786126507: ext4_validate_block_bitmap:441 [ 177.252898][ T7864] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1009: attempt to clear invalid blocks 1024 len 1 [ 177.276828][ T7864] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.284275][ T7864] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1009: invalid indirect mapped block 1819239214 (level 0) [ 177.321362][ T7864] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 177.324650][ T7864] EXT4-fs (loop1): 1 truncate cleaned up [ 177.488348][ T7912] --map-set only usable from mangle table [ 177.502488][ T7864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.525736][ T7910] netlink: 288 bytes leftover after parsing attributes in process `syz.9.1016'. [ 177.723070][ T7937] loop3: detected capacity change from 0 to 128 [ 177.756843][ T7937] msdos: Unknown parameter '00000000000000000000000' [ 177.859862][ T7927] netlink: 'syz.7.1017': attribute type 12 has an invalid length. [ 177.874354][ T7927] netlink: 'syz.7.1017': attribute type 29 has an invalid length. [ 177.891455][ T7927] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1017'. [ 177.901018][ T7927] netlink: 'syz.7.1017': attribute type 2 has an invalid length. [ 177.927521][ T7927] netlink: 'syz.7.1017': attribute type 2 has an invalid length. [ 177.945933][ T7864] ip6t_rpfilter: unknown options [ 178.070169][ T7968] loop2: detected capacity change from 0 to 4096 [ 178.379772][ T7985] loop9: detected capacity change from 0 to 1024 [ 178.411578][ T7985] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 178.439612][ T7462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.498519][ T7985] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.414839][ T8004] FAULT_INJECTION: forcing a failure. [ 179.414839][ T8004] name failslab, interval 1, probability 0, space 0, times 0 [ 179.470239][ T8007] PM: suspend entry (deep) [ 179.487470][ T8004] CPU: 1 UID: 0 PID: 8004 Comm: syz.1.1032 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 179.487513][ T8004] Tainted: [W]=WARN [ 179.487522][ T8004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.487543][ T8004] Call Trace: [ 179.487550][ T8004] [ 179.487559][ T8004] __dump_stack+0x1d/0x30 [ 179.487622][ T8004] dump_stack_lvl+0x95/0xd0 [ 179.487649][ T8004] dump_stack+0x15/0x1b [ 179.487671][ T8004] should_fail_ex+0x25e/0x270 [ 179.487709][ T8004] ? __se_sys_mount+0xef/0x2e0 [ 179.487842][ T8004] should_failslab+0x8c/0xb0 [ 179.487869][ T8004] __kmalloc_cache_noprof+0x7b/0x3d0 [ 179.487952][ T8004] ? __se_sys_mount+0xef/0x2e0 [ 179.487977][ T8004] ? memdup_user+0x99/0xd0 [ 179.488014][ T8004] __se_sys_mount+0xef/0x2e0 [ 179.488064][ T8004] ? fput+0x8f/0xc0 [ 179.488098][ T8004] ? ksys_write+0x194/0x1a0 [ 179.488123][ T8004] __x64_sys_mount+0x67/0x80 [ 179.488155][ T8004] x64_sys_call+0x2d61/0x3020 [ 179.488245][ T8004] do_syscall_64+0x136/0x3c0 [ 179.488316][ T8004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.488337][ T8004] RIP: 0033:0x7fb03617e0d9 [ 179.488435][ T8004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.488454][ T8004] RSP: 002b:00007fb034bd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 179.488475][ T8004] RAX: ffffffffffffffda RBX: 00007fb036405fa0 RCX: 00007fb03617e0d9 [ 179.488489][ T8004] RDX: 00002000000002c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 179.488542][ T8004] RBP: 00007fb034bd7090 R08: 00002000000014c0 R09: 0000000000000000 [ 179.488559][ T8004] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 179.488576][ T8004] R13: 00007fb036406038 R14: 00007fb036405fa0 R15: 00007ffe44d7e7d8 [ 179.488600][ T8004] [ 179.813740][ T8013] IPVS: persistence engine module ip_vs_pe_À not found [ 179.876791][ T8022] FAULT_INJECTION: forcing a failure. [ 179.876791][ T8022] name failslab, interval 1, probability 0, space 0, times 0 [ 179.908284][ T8022] CPU: 1 UID: 0 PID: 8022 Comm: syz.1.1035 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 179.908334][ T8022] Tainted: [W]=WARN [ 179.908344][ T8022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 179.908360][ T8022] Call Trace: [ 179.908369][ T8022] [ 179.908379][ T8022] __dump_stack+0x1d/0x30 [ 179.908409][ T8022] dump_stack_lvl+0x95/0xd0 [ 179.908432][ T8022] dump_stack+0x15/0x1b [ 179.908450][ T8022] should_fail_ex+0x25e/0x270 [ 179.908479][ T8022] should_failslab+0x8c/0xb0 [ 179.908507][ T8022] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 179.908536][ T8022] ? anon_vma_clone+0xc7/0x460 [ 179.908569][ T8022] ? anon_vma_clone+0xc7/0x460 [ 179.908601][ T8022] anon_vma_clone+0xc7/0x460 [ 179.908630][ T8022] __split_vma+0x2c0/0x640 [ 179.908656][ T8022] vms_gather_munmap_vmas+0x176/0x7f0 [ 179.908689][ T8022] ? mas_find+0x336/0x450 [ 179.908724][ T8022] mmap_region+0x7e3/0x20c0 [ 179.908748][ T8022] ? avc_has_perm_noaudit+0xa3/0x120 [ 179.908780][ T8022] ? avc_has_perm+0x101/0x190 [ 179.908811][ T8022] ? selinux_file_open+0x2e6/0x330 [ 179.908855][ T8022] do_mmap+0x970/0xbc0 [ 179.908883][ T8022] vm_mmap_pgoff+0x183/0x2d0 [ 179.908921][ T8022] ksys_mmap_pgoff+0x250/0x310 [ 179.908956][ T8022] x64_sys_call+0x14df/0x3020 [ 179.908980][ T8022] do_syscall_64+0x136/0x3c0 [ 179.909011][ T8022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.909039][ T8022] RIP: 0033:0x7fb03617e0d9 [ 179.909059][ T8022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.909082][ T8022] RSP: 002b:00007fb034bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 179.909106][ T8022] RAX: ffffffffffffffda RBX: 00007fb036405fa0 RCX: 00007fb03617e0d9 [ 179.909122][ T8022] RDX: 0000000000000003 RSI: 0000000000001000 RDI: 0000200000001000 [ 179.909139][ T8022] RBP: 00007fb034bd7090 R08: 0000000000000004 R09: 0000000000000000 [ 179.909155][ T8022] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 179.909170][ T8022] R13: 00007fb036406038 R14: 00007fb036405fa0 R15: 00007ffe44d7e7d8 [ 179.909190][ T8022] [ 180.139052][ T5387] Filesystems sync: 0.443 seconds [ 180.198945][ T8007] Freezing user space processes [ 180.253831][ T8007] Freezing user space processes completed (elapsed 0.044 seconds) [ 180.261780][ T8007] OOM killer disabled. [ 180.265949][ T8007] Freezing remaining freezable tasks [ 180.272821][ T8007] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 180.281170][ T8007] printk: Suspending console(s) (use no_console_suspend to debug) [ 180.300630][ T8007] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 180.300706][ T8007] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 180.329042][ T8007] PM: Some devices failed to suspend, or early wake event detected [ 180.398883][ T8007] OOM killer enabled. [ 180.402897][ T8007] Restarting tasks: Starting [ 180.469727][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.479128][ T8007] Restarting tasks: Done [ 180.497303][ T8007] random: crng reseeded on system resumption [ 180.514848][ T8007] PM: suspend exit [ 180.601511][ T8091] loop9: detected capacity change from 0 to 1024 [ 180.641658][ T8091] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.679582][ T8091] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.682809][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 180.682880][ T28] audit: type=1400 audit(1786126510.915:1151): avc: denied { write } for pid=8076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.752204][ T8088] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1040'. [ 180.783675][ T28] audit: type=1400 audit(1786126511.006:1152): avc: denied { read append } for pid=8090 comm="syz.9.1038" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.821047][ T28] audit: type=1400 audit(1786126511.006:1153): avc: denied { open } for pid=8090 comm="syz.9.1038" path="/15/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.844897][ T28] audit: type=1400 audit(1786126511.006:1154): avc: denied { setattr } for pid=8090 comm="syz.9.1038" path="/15/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 180.884796][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.909690][ T28] audit: type=1400 audit(1786126511.006:1155): avc: denied { ioctl } for pid=8090 comm="syz.9.1038" path="mnt:[4026532400]" dev="nsfs" ino=4026532400 ioctlcmd=0x586f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 180.973746][ T28] audit: type=1400 audit(1786126511.016:1156): avc: denied { write } for pid=8110 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.051513][ T28] audit: type=1400 audit(1786126511.026:1157): avc: denied { create } for pid=8103 comm="syz.2.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 181.096385][ T8133] PM: suspend entry (deep) [ 181.101478][ T28] audit: type=1400 audit(1786126511.106:1158): avc: denied { firmware_load } for pid=8103 comm="syz.2.1044" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 181.161332][ T28] audit: type=1400 audit(1786126511.136:1159): avc: denied { write } for pid=8114 comm="syz.1.1046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 181.201289][ T8128] loop3: detected capacity change from 0 to 8192 [ 181.207507][ T28] audit: type=1400 audit(1786126511.206:1160): avc: denied { connect } for pid=8119 comm="syz.9.1047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 181.228312][ T8128] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 181.268858][ T8104] loop2: detected capacity change from 0 to 512 [ 181.282844][ T8049] Filesystems sync: 0.146 seconds [ 181.344749][ T8133] Freezing user space processes [ 181.362079][ T8104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.583487][ T8133] Freezing user space processes completed (elapsed 0.229 seconds) [ 181.591328][ T8133] OOM killer disabled. [ 181.595609][ T8133] Freezing remaining freezable tasks [ 181.602752][ T8133] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 181.611098][ T8133] printk: Suspending console(s) (use no_console_suspend to debug) [ 181.627540][ T8133] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 181.627610][ T8133] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 181.628697][ T8133] PM: Some devices failed to suspend, or early wake event detected [ 181.667863][ T8133] OOM killer enabled. [ 181.671879][ T8133] Restarting tasks: Starting [ 181.701006][ T8133] Restarting tasks: Done [ 181.705990][ T8133] random: crng reseeded on system resumption [ 181.712524][ T8133] PM: suspend exit [ 181.730955][ T8149] loop9: detected capacity change from 0 to 512 [ 181.819920][ T8156] loop9: detected capacity change from 0 to 7 [ 181.853541][ T8156] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.889426][ T8156] Buffer I/O error on dev loop9, logical block 0, async page read [ 181.900522][ T8156] loop9: unable to read partition table [ 181.919126][ T7453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.933896][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1055'. [ 181.948280][ T8043] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.967264][ T8156] loop_reread_partitions: partition scan of loop9 (úùƒå¡™‰•¾Sêj̳–¢P=Ãë?ã}X‹ºÐ œëÜ5õ`ÉæÖã«…ˆ) failed (rc=-5) [ 181.983601][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.008889][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.040246][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.058963][ T8149] xt_nat: multiple ranges no longer supported [ 182.070992][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.095084][ T8043] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.112342][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.126025][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.135152][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.143651][ T3285] Buffer I/O error on dev loop9, logical block 0, async page read [ 182.167135][ T8179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1058'. [ 182.222449][ T8043] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.324500][ T8201] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1062'. [ 182.336719][ T8043] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.404788][ T8204] xt_nat: multiple ranges no longer supported [ 182.418893][ T8209] loop1: detected capacity change from 0 to 512 [ 182.463185][ T8209] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 182.507419][ T8043] bridge_slave_1: left allmulticast mode [ 182.524068][ T8209] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1063: bg 0: block 288: padding at end of block bitmap is not set [ 182.529679][ T8043] bridge_slave_1: left promiscuous mode [ 182.552747][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.562073][ T8209] loop1: lost filesystem error report for type 5 error -117 [ 182.562906][ T8209] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 182.579022][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 182.579058][ C0] EXT4-fs (loop1): initial error at time 1786126785: ext4_validate_block_bitmap:441 [ 182.579094][ C0] EXT4-fs (loop1): last error at time 1786126785: ext4_validate_block_bitmap:441 [ 182.604896][ T8209] loop1: lost filesystem error report for type 5 error -117 [ 182.608063][ T8043] bridge_slave_0: left allmulticast mode [ 182.642039][ T8043] bridge_slave_0: left promiscuous mode [ 182.647789][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.649228][ T8209] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.1063: attempt to clear invalid blocks 1024 len 1 [ 182.673644][ T8043] pim6reg9: left allmulticast mode [ 182.685168][ T8209] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 182.692918][ T8209] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1063: invalid indirect mapped block 1819239214 (level 0) [ 182.735905][ T8209] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 182.736265][ T8209] EXT4-fs (loop1): 1 truncate cleaned up [ 182.791946][ T8209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.835314][ T8043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.873198][ T8043] bond_slave_0: left promiscuous mode [ 182.893654][ T8043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.932483][ T8043] bond_slave_1: left promiscuous mode [ 182.938845][ T8043] bond0 (unregistering): Released all slaves [ 182.955828][ T8229] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1067'. [ 182.966944][ T9] syz2: Port: 1 Link DOWN [ 183.096822][ T8202] ip6t_rpfilter: unknown options [ 183.122640][ T8043] hsr_slave_0: left promiscuous mode [ 183.145144][ T8043] hsr_slave_1: left promiscuous mode [ 183.167870][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.197085][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.212443][ T7462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.225680][ T8043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.243201][ T8043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.282664][ T8261] loop1: detected capacity change from 0 to 128 [ 183.294458][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1070'. [ 183.300761][ T8043] veth1_macvtap: left promiscuous mode [ 183.313764][ T8261] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.319937][ T8043] veth0_macvtap: left promiscuous mode [ 183.346198][ T8261] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 183.388779][ T8043] veth1_vlan: left promiscuous mode [ 183.407083][ T8043] veth0_vlan: left promiscuous mode [ 183.509908][ T8280] loop9: detected capacity change from 0 to 1024 [ 183.527509][ T7462] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 183.538657][ T8280] EXT4-fs: Ignoring removed bh option [ 183.570136][ T8280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.649612][ T8043] team0 (unregistering): Port device team_slave_1 removed [ 183.670725][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1068'. [ 183.680469][ T8043] team0 (unregistering): Port device team_slave_0 removed [ 183.709529][ T8042] smc: removing ib device syz2 [ 183.756522][ T8270] netlink: 64 bytes leftover after parsing attributes in process `syz.9.1073'. [ 183.810499][ T8270] tipc: Invalid UDP bearer configuration [ 183.810517][ T8270] tipc: Enabling of bearer rejected, failed to enable media [ 183.968535][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.095454][ T8311] loop9: detected capacity change from 0 to 4096 [ 184.220853][ T8313] FAULT_INJECTION: forcing a failure. [ 184.220853][ T8313] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.325100][ T8313] CPU: 1 UID: 0 PID: 8313 Comm: syz.2.1076 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 184.325162][ T8313] Tainted: [W]=WARN [ 184.325171][ T8313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.325217][ T8313] Call Trace: [ 184.325286][ T8313] [ 184.325295][ T8313] __dump_stack+0x1d/0x30 [ 184.325325][ T8313] dump_stack_lvl+0x95/0xd0 [ 184.325409][ T8313] dump_stack+0x15/0x1b [ 184.325427][ T8313] should_fail_ex+0x25e/0x270 [ 184.325463][ T8313] should_fail+0xb/0x20 [ 184.325505][ T8313] should_fail_usercopy+0x1a/0x20 [ 184.325541][ T8313] _copy_to_user+0x20/0xa0 [ 184.325634][ T8313] simple_read_from_buffer+0xb5/0x130 [ 184.325667][ T8313] proc_fail_nth_read+0x10e/0x150 [ 184.325697][ T8313] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.325725][ T8313] vfs_read+0x18e/0x7c0 [ 184.325765][ T8313] ? __rcu_read_unlock+0x4e/0x70 [ 184.325790][ T8313] ? __fget_files+0x184/0x1c0 [ 184.325889][ T8313] ? mutex_lock+0x57/0x90 [ 184.325912][ T8313] ksys_read+0xdc/0x1a0 [ 184.325931][ T8313] __x64_sys_read+0x40/0x50 [ 184.326036][ T8313] x64_sys_call+0x2886/0x3020 [ 184.326065][ T8313] do_syscall_64+0x136/0x3c0 [ 184.326094][ T8313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.326118][ T8313] RIP: 0033:0x7fc1a902e90e [ 184.326143][ T8313] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 184.326177][ T8313] RSP: 002b:00007fc1a7aa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.326198][ T8313] RAX: ffffffffffffffda RBX: 00007fc1a7aa66c0 RCX: 00007fc1a902e90e [ 184.326211][ T8313] RDX: 000000000000000f RSI: 00007fc1a7aa60a0 RDI: 0000000000000009 [ 184.326236][ T8313] RBP: 00007fc1a7aa6090 R08: 0000000000000000 R09: 0000000000000000 [ 184.326251][ T8313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.326267][ T8313] R13: 00007fc1a92f6128 R14: 00007fc1a92f6090 R15: 00007fff0e580668 [ 184.326350][ T8313] [ 185.112037][ T8335] FAULT_INJECTION: forcing a failure. [ 185.112037][ T8335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.168303][ T8294] syz.1.1075 (8294) used greatest stack depth: 9792 bytes left [ 185.201397][ T8340] netlink: 56 bytes leftover after parsing attributes in process `syz.9.1082'. [ 185.337170][ T8335] CPU: 1 UID: 0 PID: 8335 Comm: syz.3.1079 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 185.337211][ T8335] Tainted: [W]=WARN [ 185.337254][ T8335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 185.337267][ T8335] Call Trace: [ 185.337273][ T8335] [ 185.337280][ T8335] __dump_stack+0x1d/0x30 [ 185.337309][ T8335] dump_stack_lvl+0x95/0xd0 [ 185.337416][ T8335] dump_stack+0x15/0x1b [ 185.337590][ T8335] should_fail_ex+0x25e/0x270 [ 185.337629][ T8335] should_fail+0xb/0x20 [ 185.337704][ T8335] should_fail_usercopy+0x1a/0x20 [ 185.337793][ T8335] _copy_from_user+0x1c/0xb0 [ 185.337813][ T8335] ___sys_recvmsg+0xaa/0x3a0 [ 185.337872][ T8335] ? _parse_integer+0x27/0x40 [ 185.337981][ T8335] do_recvmmsg+0x1e5/0x560 [ 185.338011][ T8335] __x64_sys_recvmmsg+0xe5/0x170 [ 185.338041][ T8335] x64_sys_call+0x80f/0x3020 [ 185.338065][ T8335] do_syscall_64+0x136/0x3c0 [ 185.338094][ T8335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.338136][ T8335] RIP: 0033:0x7f7a30cce0d9 [ 185.338153][ T8335] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.338172][ T8335] RSP: 002b:00007f7a2f706028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.338196][ T8335] RAX: ffffffffffffffda RBX: 00007f7a30f56090 RCX: 00007f7a30cce0d9 [ 185.338215][ T8335] RDX: 0000000000000006 RSI: 0000200000002640 RDI: 0000000000000006 [ 185.338292][ T8335] RBP: 00007f7a2f706090 R08: 0000000000000000 R09: 0000000000000000 [ 185.338305][ T8335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.338320][ T8335] R13: 00007f7a30f56128 R14: 00007f7a30f56090 R15: 00007fff3a0c9818 [ 185.338390][ T8335] [ 185.540962][ T8342] loop1: detected capacity change from 0 to 128 [ 185.803618][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 185.803636][ T28] audit: type=1400 audit(1786126789.054:1183): avc: denied { write } for pid=8333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 185.920249][ T8348] loop9: detected capacity change from 0 to 128 [ 185.954828][ T28] audit: type=1400 audit(1786126789.205:1184): avc: denied { write } for pid=8357 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.000915][ T8350] loop3: detected capacity change from 0 to 128 [ 186.231192][ T8348] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.237134][ T8350] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 186.249691][ T8348] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.284530][ T8350] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 186.429457][ T28] audit: type=1400 audit(1786126789.676:1185): avc: denied { write } for pid=8361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.460551][ T8381] PM: suspend entry (deep) [ 186.501342][ T28] audit: type=1400 audit(1786126789.746:1186): avc: denied { write } for pid=8382 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.525845][ T7195] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 186.545862][ T8386] PM: suspend entry (deep) [ 186.566902][ T8386] PM: suspend exit [ 186.671221][ T28] audit: type=1400 audit(1786126789.927:1187): avc: denied { bind } for pid=8389 comm="syz.9.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 186.693845][ T8042] Filesystems sync: 0.218 seconds [ 186.749359][ T8381] Freezing user space processes [ 186.749365][ T28] audit: type=1400 audit(1786126789.947:1188): avc: denied { mount } for pid=8389 comm="syz.9.1090" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 186.913609][ T8381] Freezing user space processes completed (elapsed 0.146 seconds) [ 186.921580][ T8381] OOM killer disabled. [ 186.925686][ T8381] Freezing remaining freezable tasks [ 186.932646][ T8381] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 186.940964][ T8381] printk: Suspending console(s) (use no_console_suspend to debug) [ 186.960404][ T8381] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 186.960577][ T8381] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 186.987848][ T8381] PM: Some devices failed to suspend, or early wake event detected [ 187.048385][ T8381] OOM killer enabled. [ 187.052380][ T8381] Restarting tasks: Starting [ 187.063983][ T8381] Restarting tasks: Done [ 187.082518][ T8381] random: crng reseeded on system resumption [ 187.107177][ T28] audit: type=1400 audit(1786126790.368:1189): avc: denied { write } for pid=8388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.116145][ T8381] PM: suspend exit [ 187.160406][ T8404] netlink: 288 bytes leftover after parsing attributes in process `syz.2.1092'. [ 187.176907][ T8360] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1086'. [ 187.223528][ T28] audit: type=1400 audit(1786126790.478:1190): avc: denied { write } for pid=8409 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.299004][ T3294] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.829845][ T8435] loop1: detected capacity change from 0 to 1024 [ 188.444913][ T8435] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 189.480718][ T28] audit: type=1400 audit(1786126792.745:1191): avc: denied { write } for pid=8413 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.534536][ T8446] loop2: detected capacity change from 0 to 128 [ 189.613637][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1099'. [ 189.672735][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.689246][ T28] audit: type=1400 audit(1786126792.935:1192): avc: denied { write } for pid=8451 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 189.717049][ T8446] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.795770][ T8446] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.979358][ T7462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.275563][ T8505] PM: suspend entry (deep) [ 190.317210][ T8452] vlan2: entered promiscuous mode [ 190.338895][ T8065] Filesystems sync: 0.045 seconds [ 190.350040][ T8452] bond0: entered promiscuous mode [ 190.370437][ T8452] bond_slave_0: entered promiscuous mode [ 190.393008][ T8452] bond_slave_1: entered promiscuous mode [ 190.468694][ T8505] Freezing user space processes [ 190.538519][ T8502] infiniband syz2: set active [ 190.543503][ T8502] infiniband syz2: added bond_slave_0 [ 190.559197][ T8502] RDS/IB: syz2: added [ 190.563232][ T8502] smc: adding ib device syz2 with port count 1 [ 190.571098][ T8502] smc: ib device syz2 port 1 has no pnetid [ 190.763463][ T8505] Freezing user space processes completed (elapsed 0.290 seconds) [ 190.771571][ T8505] OOM killer disabled. [ 190.775728][ T8505] Freezing remaining freezable tasks [ 190.782698][ T8505] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 190.791032][ T8505] printk: Suspending console(s) (use no_console_suspend to debug) [ 190.807286][ T8505] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 190.807359][ T8505] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 190.808805][ T8505] PM: Some devices failed to suspend, or early wake event detected [ 190.847106][ T8505] OOM killer enabled. [ 190.851116][ T8505] Restarting tasks: Starting [ 190.877220][ T8505] Restarting tasks: Done [ 190.881733][ T8505] random: crng reseeded on system resumption [ 190.887883][ T8505] PM: suspend exit [ 190.889890][ T7453] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 191.011100][ T8523] lo speed is unknown, defaulting to 1000 [ 191.019697][ T8497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1109'. [ 191.127212][ T8527] lo speed is unknown, defaulting to 1000 [ 191.164470][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 191.164487][ T28] audit: type=1400 audit(1786126794.429:1204): avc: denied { write } for pid=8522 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 191.333073][ T8542] loop2: detected capacity change from 0 to 1024 [ 191.423751][ T8542] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 191.545634][ T8542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.698617][ T28] audit: type=1400 audit(1786126794.860:1205): avc: denied { write } for pid=8528 comm="syz.2.1113" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 192.032149][ T28] audit: type=1400 audit(1786126795.190:1206): avc: denied { write } for pid=8548 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.117788][ T8558] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1119'. [ 192.198969][ T28] audit: type=1400 audit(1786126795.451:1207): avc: denied { ioctl } for pid=8547 comm="syz.3.1117" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 192.323138][ T28] audit: type=1400 audit(1786126795.501:1208): avc: denied { write } for pid=8547 comm="syz.3.1117" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 193.028274][ T7453] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.130792][ T8578] loop1: detected capacity change from 0 to 128 [ 193.182713][ T8578] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 193.210163][ T8578] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 193.251295][ T8580] loop3: detected capacity change from 0 to 164 [ 193.265152][ T8580] iso9660: Unknown parameter 'Žú6x¡&Jl OZnorock' [ 193.367992][ T8589] capability: warning: `syz.2.1124' uses deprecated v2 capabilities in a way that may be insecure [ 193.402701][ T8589] capability: warning: `syz.2.1124' uses 32-bit capabilities (legacy support in use) [ 193.452074][ T28] audit: type=1400 audit(1786126796.734:1209): avc: denied { write } for pid=8562 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.524606][ T8598] lo speed is unknown, defaulting to 1000 [ 193.532200][ T28] audit: type=1400 audit(1786126796.814:1210): avc: denied { write } for pid=8599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.704511][ T8603] lo speed is unknown, defaulting to 1000 [ 193.791737][ T28] audit: type=1400 audit(1786126797.064:1211): avc: denied { write } for pid=8605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.821317][ T8616] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1131'. [ 193.864221][ T28] audit: type=1400 audit(1786126797.114:1212): avc: denied { write } for pid=8623 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.929540][ T28] audit: type=1400 audit(1786126797.184:1213): avc: denied { ioctl } for pid=8625 comm="syz.3.1132" path="socket:[22866]" dev="sockfs" ino=22866 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.976575][ T8592] netlink: 180904 bytes leftover after parsing attributes in process `syz.9.1126'. [ 194.018289][ T8592] netlink: zone id is out of range [ 194.044586][ T8592] netlink: zone id is out of range [ 194.176723][ T7462] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 194.370316][ T8651] loop3: detected capacity change from 0 to 1024 [ 195.354280][ T8651] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 197.197543][ T8651] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 197.199568][ T8651] EXT4-fs: failed to create workqueue [ 197.216351][ T8651] EXT4-fs (loop3): mount failed [ 197.518715][ T8655] loop9: detected capacity change from 0 to 1024 [ 197.544395][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 197.544413][ T28] audit: type=1400 audit(1786126800.831:1215): avc: denied { write } for pid=8660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 197.707268][ T8659] lo speed is unknown, defaulting to 1000 [ 197.903458][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1139'. [ 198.085859][ T8675] loop3: detected capacity change from 0 to 1024 [ 198.118094][ T8675] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 198.178996][ T8675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.272200][ T28] audit: type=1400 audit(1786126801.532:1216): avc: denied { write } for pid=8671 comm="syz.3.1142" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.400168][ T8665] lo speed is unknown, defaulting to 1000 [ 198.525692][ T8065] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.719797][ T28] audit: type=1400 audit(1786126801.612:1217): avc: denied { execute } for pid=8679 comm="syz.9.1143" path=2F6D656D66643AFF202864656C6574656429 dev="hugetlbfs" ino=22980 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 198.792777][ T8687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1145'. [ 198.961411][ T8702] netlink: 'syz.7.1149': attribute type 1 has an invalid length. [ 199.000252][ T8065] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.016005][ T8702] netlink: 101600 bytes leftover after parsing attributes in process `syz.7.1149'. [ 199.036388][ T8704] loop9: detected capacity change from 0 to 512 [ 199.052363][ T8704] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 199.067273][ T28] audit: type=1400 audit(1786126802.343:1218): avc: denied { bind } for pid=8701 comm="syz.7.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 199.118166][ T8704] EXT4-fs (loop9): orphan cleanup on readonly fs [ 199.156482][ T8704] Quota error (device loop9): find_block_dqentry: Quota for id 0 referenced but not present [ 199.195428][ T28] audit: type=1400 audit(1786126802.343:1219): avc: denied { node_bind } for pid=8701 comm="syz.7.1149" saddr=fe80::26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 199.228259][ T8704] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 199.256836][ T8065] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.274777][ T8704] EXT4-fs error (device loop9): ext4_acquire_dquot:7041: comm syz.9.1150: Failed to acquire dquot type 1 [ 199.313953][ T28] audit: type=1400 audit(1786126802.573:1220): avc: denied { write } for pid=8673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.349457][ T8704] loop9: lost filesystem error report for type 5 error -5 [ 199.350668][ T8704] EXT4-fs (loop9): Remounting filesystem read-only [ 199.357853][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 199.357884][ C0] EXT4-fs (loop9): initial error at time 1786126802: ext4_acquire_dquot:7041 [ 199.357914][ C0] EXT4-fs (loop9): last error at time 1786126802: ext4_acquire_dquot:7041 [ 199.455286][ T28] audit: type=1400 audit(1786126802.743:1221): avc: denied { write } for pid=8717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.504822][ T8666] lo speed is unknown, defaulting to 1000 [ 199.528625][ T8704] EXT4-fs (loop9): 1 truncate cleaned up [ 199.559051][ T8704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 199.588319][ T8065] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.706544][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.760296][ T8674] Process accounting resumed [ 199.838773][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.855986][ T28] audit: type=1400 audit(1786126803.144:1222): avc: denied { write } for pid=8720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.946634][ T8065] bridge_slave_1: left allmulticast mode [ 199.954606][ T8065] bridge_slave_1: left promiscuous mode [ 199.982547][ T8065] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.027423][ T8065] bridge_slave_0: left allmulticast mode [ 200.036406][ T8065] bridge_slave_0: left promiscuous mode [ 200.052595][ T8065] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.198657][ T8065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.221649][ T8065] bond_slave_0: left promiscuous mode [ 200.230109][ T8065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.239204][ T8065] bond_slave_1: left promiscuous mode [ 200.247338][ T8065] bond0 (unregistering): Released all slaves [ 200.472694][ T8763] FAULT_INJECTION: forcing a failure. [ 200.472694][ T8763] name failslab, interval 1, probability 0, space 0, times 0 [ 200.525397][ T8763] CPU: 0 UID: 0 PID: 8763 Comm: syz.1.1160 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 200.525437][ T8763] Tainted: [W]=WARN [ 200.525446][ T8763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 200.525462][ T8763] Call Trace: [ 200.525473][ T8763] [ 200.525483][ T8763] __dump_stack+0x1d/0x30 [ 200.525566][ T8763] dump_stack_lvl+0x95/0xd0 [ 200.525593][ T8763] dump_stack+0x15/0x1b [ 200.525618][ T8763] should_fail_ex+0x25e/0x270 [ 200.525656][ T8763] should_failslab+0x8c/0xb0 [ 200.525766][ T8763] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 200.525795][ T8763] ? sk_prot_alloc+0x3f/0x180 [ 200.525836][ T8763] ? sk_prot_alloc+0x3f/0x180 [ 200.525877][ T8763] ? kmem_cache_alloc_noprof+0x198/0x3c0 [ 200.525978][ T8763] sk_prot_alloc+0x3f/0x180 [ 200.526014][ T8763] sk_alloc+0x34/0x3e0 [ 200.526044][ T8763] inet_create+0x3cb/0x790 [ 200.526083][ T8763] __sock_create+0x2e5/0x580 [ 200.526120][ T8763] sock_create_kern+0x38/0x50 [ 200.526187][ T8763] mptcp_subflow_create_socket+0x81/0x500 [ 200.526289][ T8763] __mptcp_nmpc_sk+0xb5/0x3d0 [ 200.526321][ T8763] mptcp_setsockopt+0xfad/0x24f0 [ 200.526354][ T8763] sock_common_setsockopt+0x69/0x80 [ 200.526429][ T8763] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 200.526541][ T8763] __sys_setsockopt+0x184/0x200 [ 200.526585][ T8763] __x64_sys_setsockopt+0x64/0x80 [ 200.526631][ T8763] x64_sys_call+0x2327/0x3020 [ 200.526662][ T8763] do_syscall_64+0x136/0x3c0 [ 200.526728][ T8763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.526757][ T8763] RIP: 0033:0x7fb03617e0d9 [ 200.526840][ T8763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.526865][ T8763] RSP: 002b:00007fb034bd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 200.526897][ T8763] RAX: ffffffffffffffda RBX: 00007fb036405fa0 RCX: 00007fb03617e0d9 [ 200.526916][ T8763] RDX: 0000000000000017 RSI: 0000000000000006 RDI: 0000000000000003 [ 200.526932][ T8763] RBP: 00007fb034bd7090 R08: 0000000000000028 R09: 0000000000000000 [ 200.526950][ T8763] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 200.526968][ T8763] R13: 00007fb036406038 R14: 00007fb036405fa0 R15: 00007ffe44d7e7d8 [ 200.527053][ T8763] [ 200.530357][ T8761] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1159'. [ 200.891828][ T8744] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1155'. [ 200.910160][ T8065] hsr_slave_0: left promiscuous mode [ 200.916735][ T8065] hsr_slave_1: left promiscuous mode [ 200.954945][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.962575][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.995996][ T8065] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.164546][ T8782] loop1: detected capacity change from 0 to 1024 [ 201.190986][ T8782] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 201.283033][ T8782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.381832][ T8777] process '/newroot/64/file0' started with executable stack [ 201.958039][ T8065] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.010046][ T8065] veth1_macvtap: left promiscuous mode [ 202.015575][ T8065] veth0_macvtap: left promiscuous mode [ 202.021162][ T8065] veth1_vlan: left promiscuous mode [ 202.026418][ T8065] veth0_vlan: left promiscuous mode [ 202.784174][ T8809] loop3: detected capacity change from 0 to 1024 [ 202.994707][ T8065] team0 (unregistering): Port device team_slave_1 removed [ 203.013395][ T7462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.024476][ T8809] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 203.066526][ T8809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.092321][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 203.092348][ T28] audit: type=1400 audit(1786126806.378:1228): avc: denied { write } for pid=8803 comm="syz.3.1168" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.160228][ T8065] team0 (unregistering): Port device team_slave_0 removed [ 203.305575][ T8817] tmpfs: Bad value for 'mpol' [ 203.385796][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 203.423938][ T8819] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1170'. [ 203.847128][ T8815] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1172'. [ 203.948984][ T8831] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1175'. [ 203.967594][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1175'. [ 204.106207][ T28] audit: type=1400 audit(1786126807.399:1229): avc: denied { create } for pid=8841 comm="syz.9.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 204.137800][ T8842] loop9: detected capacity change from 0 to 512 [ 204.152198][ T8842] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 204.174920][ T28] audit: type=1400 audit(1786126807.419:1230): avc: denied { setopt } for pid=8841 comm="syz.9.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 204.218092][ T8842] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 204.233624][ T8842] EXT4-fs (loop9): orphan cleanup on readonly fs [ 204.241725][ T28] audit: type=1400 audit(1786126807.419:1231): avc: denied { bind } for pid=8841 comm="syz.9.1179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 204.264108][ T8842] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:517: comm syz.9.1179: Block bitmap for bg 0 marked uninitialized [ 204.292089][ T8842] loop9: lost filesystem error report for type 5 error -117 [ 204.292213][ T8842] EXT4-fs (loop9): Remounting filesystem read-only [ 204.299565][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 204.299580][ C0] EXT4-fs (loop9): initial error at time 1786126807: ext4_read_block_bitmap_nowait:517 [ 204.299609][ C0] EXT4-fs (loop9): last error at time 1786126807: ext4_read_block_bitmap_nowait:517 [ 204.371267][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.400081][ T8842] EXT4-fs (loop9): 1 orphan inode deleted [ 204.406603][ T8842] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 204.448749][ T8666] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.468427][ T8666] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.475900][ T8666] bridge_slave_0: entered allmulticast mode [ 204.482452][ T8666] bridge_slave_0: entered promiscuous mode [ 204.489737][ T8666] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.496930][ T8666] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.504156][ T8666] bridge_slave_1: entered allmulticast mode [ 204.511002][ T8666] bridge_slave_1: entered promiscuous mode [ 204.529381][ T8666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.539984][ T8666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.564853][ T8666] team0: Port device team_slave_0 added [ 204.571665][ T8666] team0: Port device team_slave_1 added [ 204.578875][ T28] audit: type=1400 audit(1786126807.869:1232): avc: denied { accept } for pid=8841 comm="syz.9.1179" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.611856][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.618979][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.647062][ T8666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.665722][ T8666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.676235][ T8666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.705068][ T28] audit: type=1400 audit(1786126807.989:1233): avc: denied { write } for pid=8852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.728063][ T8666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.862298][ T8666] hsr_slave_0: entered promiscuous mode [ 204.868478][ T8666] hsr_slave_1: entered promiscuous mode [ 204.874528][ T8666] debugfs: 'hsr0' already exists in 'hsr' [ 204.880601][ T8666] Cannot create hsr debugfs directory [ 205.077501][ T8882] loop3: detected capacity change from 0 to 1024 [ 205.144566][ T8882] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 205.211402][ T8882] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.298480][ T28] audit: type=1400 audit(1786126808.550:1234): avc: denied { write } for pid=8876 comm="syz.3.1186" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 205.329837][ T8666] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.410839][ T8666] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.510594][ T8666] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.623477][ T8666] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.738785][ T28] audit: type=1400 audit(1786126809.030:1235): avc: denied { write } for pid=8881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 205.860199][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 206.054813][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1185'. [ 206.752403][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.081348][ T8898] lo speed is unknown, defaulting to 1000 [ 207.095130][ T8900] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1190'. [ 207.162507][ T8901] lo speed is unknown, defaulting to 1000 [ 207.170442][ T8842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 207.192359][ T8666] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 207.206625][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.218178][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 207.274692][ T8666] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 207.295988][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 207.332234][ T8666] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 207.384095][ T28] audit: type=1400 audit(1786126810.681:1236): avc: denied { read } for pid=8911 comm="syz.9.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 207.451802][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 207.519656][ T8666] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 207.558167][ T8666] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 207.598664][ T8912] lo speed is unknown, defaulting to 1000 [ 207.631302][ T28] audit: type=1400 audit(1786126810.922:1237): avc: denied { write } for pid=8913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.822032][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.905294][ T8666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.966029][ T8666] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.006007][ T8065] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.013146][ T8065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.073440][ T8064] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.080565][ T8064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.196642][ T8947] loop3: detected capacity change from 0 to 256 [ 208.406973][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 208.406990][ T28] audit: type=1400 audit(1786126811.702:1240): avc: denied { write } for pid=8941 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.417707][ T28] audit: type=1400 audit(1786126812.503:1241): avc: denied { mount } for pid=8964 comm="syz.9.1200" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 209.439506][ T28] audit: type=1400 audit(1786126812.683:1242): avc: denied { open } for pid=8975 comm="syz.9.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 209.585905][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 209.653925][ T8984] loop9: detected capacity change from 0 to 4096 [ 209.665802][ T8985] loop1: detected capacity change from 0 to 4096 [ 209.675821][ T8666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.088512][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1199'. [ 210.232199][ T28] audit: type=1400 audit(1786126812.683:1243): avc: denied { kernel } for pid=8975 comm="syz.9.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 210.251995][ T28] audit: type=1400 audit(1786126812.793:1244): avc: denied { write } for pid=8978 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.274393][ T28] audit: type=1400 audit(1786126813.433:1245): avc: denied { write } for pid=8991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.299593][ T28] audit: type=1400 audit(1786126813.574:1246): avc: denied { write } for pid=9012 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.359670][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 210.411262][ T8666] veth0_vlan: entered promiscuous mode [ 210.433609][ T8666] veth1_vlan: entered promiscuous mode [ 210.469303][ T28] audit: type=1400 audit(1786126813.764:1247): avc: denied { tracepoint } for pid=9020 comm="syz.9.1206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 210.492008][ T9021] FAULT_INJECTION: forcing a failure. [ 210.492008][ T9021] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 210.511942][ T8666] veth0_macvtap: entered promiscuous mode [ 210.528489][ T8666] veth1_macvtap: entered promiscuous mode [ 210.539807][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.547339][ T28] audit: type=1400 audit(1786126813.764:1248): avc: denied { mount } for pid=9020 comm="syz.9.1206" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 210.578023][ T9021] CPU: 1 UID: 0 PID: 9021 Comm: syz.9.1206 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 210.578096][ T9021] Tainted: [W]=WARN [ 210.578104][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.578121][ T9021] Call Trace: [ 210.578130][ T9021] [ 210.578140][ T9021] __dump_stack+0x1d/0x30 [ 210.578169][ T9021] dump_stack_lvl+0x95/0xd0 [ 210.578259][ T9021] dump_stack+0x15/0x1b [ 210.578287][ T9021] should_fail_ex+0x25e/0x270 [ 210.578318][ T9021] should_fail+0xb/0x20 [ 210.578343][ T9021] should_fail_usercopy+0x1a/0x20 [ 210.578415][ T9021] _copy_to_iter+0x248/0xea0 [ 210.578458][ T9021] ? __kmalloc_cache_noprof+0x30e/0x3d0 [ 210.578490][ T9021] ? memtype_seq_next+0x95/0xc0 [ 210.578593][ T9021] ? kfree+0x108/0x370 [ 210.578628][ T9021] seq_read_iter+0x728/0x8f0 [ 210.578666][ T9021] seq_read+0x279/0x2c0 [ 210.578711][ T9021] full_proxy_read+0xbf/0x150 [ 210.578740][ T9021] ? __pfx_full_proxy_read+0x10/0x10 [ 210.578800][ T9021] vfs_read+0x18e/0x7c0 [ 210.578822][ T9021] ? __rcu_read_unlock+0x4e/0x70 [ 210.578934][ T9021] ? __fget_files+0x184/0x1c0 [ 210.578967][ T9021] ? mutex_lock+0x57/0x90 [ 210.579066][ T9021] ksys_read+0xdc/0x1a0 [ 210.579103][ T9021] __x64_sys_read+0x40/0x50 [ 210.579128][ T9021] x64_sys_call+0x2886/0x3020 [ 210.579160][ T9021] do_syscall_64+0x136/0x3c0 [ 210.579242][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.579270][ T9021] RIP: 0033:0x7f7fdf9de0d9 [ 210.579290][ T9021] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.579314][ T9021] RSP: 002b:00007f7fde437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 210.579339][ T9021] RAX: ffffffffffffffda RBX: 00007f7fdfc65fa0 RCX: 00007f7fdf9de0d9 [ 210.579430][ T9021] RDX: 0000000000001000 RSI: 0000200000007000 RDI: 0000000000000004 [ 210.579508][ T9021] RBP: 00007f7fde437090 R08: 0000000000000000 R09: 0000000000000000 [ 210.579525][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.579539][ T9021] R13: 00007f7fdfc66038 R14: 00007f7fdfc65fa0 R15: 00007ffe0f470f98 [ 210.579558][ T9021] [ 210.897223][ T9028] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 211.240463][ T28] audit: type=1400 audit(1786126814.504:1249): avc: denied { remount } for pid=9023 comm="syz.1.1207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 211.407766][ T8666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.470649][ T8064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.479485][ T8064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.519940][ T8045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.544798][ T8045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.584037][ T9040] loop4: detected capacity change from 0 to 164 [ 211.631717][ T9040] iso9660: Unknown parameter 'Žú6x¡&Jl OZnorock' [ 211.803151][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 211.999023][ T9075] loop4: detected capacity change from 0 to 4096 [ 212.214958][ T9087] lo speed is unknown, defaulting to 1000 [ 212.290833][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 212.369793][ T9090] lo speed is unknown, defaulting to 1000 [ 213.012844][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 213.132709][ T9115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1221'. [ 213.338805][ T9098] loop3: detected capacity change from 0 to 512 [ 213.422973][ T9098] ext4: Unknown parameter 'noacl' [ 213.490329][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 213.490348][ T28] audit: type=1400 audit(1786126816.785:1267): avc: denied { write } for pid=9125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.561017][ T9138] FAULT_INJECTION: forcing a failure. [ 213.561017][ T9138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.591703][ T28] audit: type=1400 audit(1786126816.875:1268): avc: denied { write } for pid=9141 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.635895][ T9138] CPU: 0 UID: 0 PID: 9138 Comm: syz.1.1223 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 213.635976][ T9138] Tainted: [W]=WARN [ 213.635985][ T9138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.636000][ T9138] Call Trace: [ 213.636008][ T9138] [ 213.636018][ T9138] __dump_stack+0x1d/0x30 [ 213.636048][ T9138] dump_stack_lvl+0x95/0xd0 [ 213.636074][ T9138] dump_stack+0x15/0x1b [ 213.636152][ T9138] should_fail_ex+0x25e/0x270 [ 213.636186][ T9138] should_fail+0xb/0x20 [ 213.636364][ T9138] should_fail_usercopy+0x1a/0x20 [ 213.636402][ T9138] _copy_from_user+0x1c/0xb0 [ 213.636426][ T9138] ___sys_sendmsg+0xc1/0x1e0 [ 213.636560][ T9138] __x64_sys_sendmsg+0xd4/0x160 [ 213.636664][ T9138] x64_sys_call+0x194c/0x3020 [ 213.636692][ T9138] do_syscall_64+0x136/0x3c0 [ 213.636757][ T9138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.636785][ T9138] RIP: 0033:0x7fb03617e0d9 [ 213.636806][ T9138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.636830][ T9138] RSP: 002b:00007fb034bb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.636856][ T9138] RAX: ffffffffffffffda RBX: 00007fb036406090 RCX: 00007fb03617e0d9 [ 213.636904][ T9138] RDX: 000000002004c8d4 RSI: 0000200000000000 RDI: 0000000000000008 [ 213.636921][ T9138] RBP: 00007fb034bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.636977][ T9138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.636993][ T9138] R13: 00007fb036406128 R14: 00007fb036406090 R15: 00007ffe44d7e7d8 [ 213.637021][ T9138] [ 213.841485][ T9098] syz.3.1219 (9098) used greatest stack depth: 9504 bytes left [ 214.547839][ T9183] loop4: detected capacity change from 0 to 512 [ 214.557493][ T9185] loop3: detected capacity change from 0 to 4096 [ 214.568756][ T9183] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 214.593391][ T9185] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.610593][ T9183] EXT4-fs (loop4): 1 truncate cleaned up [ 214.630409][ T9183] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.681180][ T9185] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 214.700256][ T9180] FAULT_INJECTION: forcing a failure. [ 214.700256][ T9180] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 214.723717][ T9180] CPU: 0 UID: 0 PID: 9180 Comm: syz.9.1232 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 214.723755][ T9180] Tainted: [W]=WARN [ 214.723762][ T9180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.723773][ T9180] Call Trace: [ 214.723780][ T9180] [ 214.723787][ T9180] __dump_stack+0x1d/0x30 [ 214.723814][ T9180] dump_stack_lvl+0x95/0xd0 [ 214.723845][ T9180] dump_stack+0x15/0x1b [ 214.723863][ T9180] should_fail_ex+0x25e/0x270 [ 214.723956][ T9180] should_fail_alloc_page+0xf2/0x100 [ 214.723987][ T9180] __alloc_frozen_pages_noprof+0x108/0x350 [ 214.724028][ T9180] alloc_pages_mpol+0xa9/0x1d0 [ 214.724082][ T9180] alloc_migration_target_by_mpol+0x11b/0x2a0 [ 214.724118][ T9180] migrate_pages_batch+0x33f/0x1f90 [ 214.724178][ T9180] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 214.724218][ T9180] migrate_pages+0x1073/0x1890 [ 214.724273][ T9180] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 214.724378][ T9180] ? mas_next_slot+0x873/0x8c0 [ 214.724500][ T9180] ? mbind_range+0x169/0x430 [ 214.724542][ T9180] __se_sys_mbind+0xc9c/0xdd0 [ 214.724602][ T9180] __x64_sys_mbind+0x78/0x90 [ 214.724635][ T9180] x64_sys_call+0x2b72/0x3020 [ 214.724665][ T9180] do_syscall_64+0x136/0x3c0 [ 214.724733][ T9180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.724761][ T9180] RIP: 0033:0x7f7fdf9de0d9 [ 214.724780][ T9180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.724803][ T9180] RSP: 002b:00007f7fde437028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 214.724828][ T9180] RAX: ffffffffffffffda RBX: 00007f7fdfc65fa0 RCX: 00007f7fdf9de0d9 [ 214.724897][ T9180] RDX: 0000000000000000 RSI: 0000000000c00000 RDI: 0000200000000000 [ 214.724909][ T9180] RBP: 00007f7fde437090 R08: 0000000000000000 R09: 0000000000000002 [ 214.724924][ T9180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.724938][ T9180] R13: 00007f7fdfc66038 R14: 00007f7fdfc65fa0 R15: 00007ffe0f470f98 [ 214.724957][ T9180] [ 214.950406][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.966540][ T8666] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.097129][ T9196] lo speed is unknown, defaulting to 1000 [ 215.117799][ T9204] FAULT_INJECTION: forcing a failure. [ 215.117799][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 215.135936][ T9202] loop3: detected capacity change from 0 to 1024 [ 215.139765][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.9.1240 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 215.139875][ T9204] Tainted: [W]=WARN [ 215.139903][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.139931][ T9204] Call Trace: [ 215.139944][ T9204] [ 215.139974][ T9204] __dump_stack+0x1d/0x30 [ 215.140048][ T9204] dump_stack_lvl+0x95/0xd0 [ 215.140112][ T9204] dump_stack+0x15/0x1b [ 215.140184][ T9204] should_fail_ex+0x25e/0x270 [ 215.140310][ T9204] should_failslab+0x8c/0xb0 [ 215.140416][ T9204] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 215.140492][ T9204] ? do_getname_kernel+0x53/0x190 [ 215.140570][ T9204] ? do_getname_kernel+0x53/0x190 [ 215.140694][ T9204] do_getname_kernel+0x53/0x190 [ 215.140782][ T9204] start_creating_path+0x25/0xf0 [ 215.140845][ T9204] unix_bind+0x236/0xb80 [ 215.140949][ T9204] ? selinux_socket_bind+0x2d/0x40 [ 215.141073][ T9204] __sys_bind+0x1d0/0x290 [ 215.141187][ T9204] __x64_sys_bind+0x3f/0x50 [ 215.141273][ T9204] x64_sys_call+0x2b30/0x3020 [ 215.141355][ T9204] do_syscall_64+0x136/0x3c0 [ 215.141510][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.141575][ T9204] RIP: 0033:0x7f7fdf9de0d9 [ 215.141642][ T9204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.141745][ T9204] RSP: 002b:00007f7fde437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 215.141808][ T9204] RAX: ffffffffffffffda RBX: 00007f7fdfc65fa0 RCX: 00007f7fdf9de0d9 [ 215.141890][ T9204] RDX: 000000000000006e RSI: 0000200000000100 RDI: 0000000000000003 [ 215.141933][ T9204] RBP: 00007f7fde437090 R08: 0000000000000000 R09: 0000000000000000 [ 215.141974][ T9204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.142015][ T9204] R13: 00007f7fdfc66038 R14: 00007f7fdfc65fa0 R15: 00007ffe0f470f98 [ 215.142079][ T9204] [ 215.331324][ T28] audit: type=1400 audit(1786126818.626:1269): avc: denied { accept } for pid=9199 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 215.338166][ T9202] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 215.371902][ T9202] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 5: comm syz.3.1239: lblock 5 mapped to illegal pblock 5 (length 1) [ 215.390616][ T28] audit: type=1400 audit(1786126818.656:1270): avc: denied { create } for pid=9199 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.397837][ T9202] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.416365][ T9202] Quota error (device loop3): write_blk: dquota write failed [ 215.425471][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 215.425491][ C1] EXT4-fs (loop3): initial error at time 1786126818: ext4_map_blocks:833: inode 3: block 5 [ 215.425538][ C1] EXT4-fs (loop3): last error at time 1786126818: ext4_map_blocks:833: inode 3: block 5 [ 215.440452][ T28] audit: type=1400 audit(1786126818.676:1271): avc: denied { write } for pid=9199 comm="syz.7.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 215.478775][ T9202] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 215.487924][ T9202] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 215.497977][ T9202] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1239: Failed to acquire dquot type 0 [ 215.509331][ T9202] loop3: lost filesystem error report for type 5 error -117 [ 215.510776][ T9202] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.1239: lblock 5 mapped to illegal pblock 5 (length 1) [ 215.536714][ T9202] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 215.554159][ T9206] lo speed is unknown, defaulting to 1000 [ 215.618757][ T9202] Quota error (device loop3): do_insert_tree: Can't read tree quota block 5 [ 215.696163][ T9202] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 215.711693][ T9202] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1239: Failed to acquire dquot type 0 [ 215.767300][ T9202] loop3: lost filesystem error report for type 5 error -117 [ 215.883554][ T9223] loop9: detected capacity change from 0 to 1024 [ 215.922403][ T9223] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 215.947335][ T9202] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.1239: Freeing blocks not in datazone - block = 0, count = 4096 [ 216.015734][ T9223] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.216875][ T9202] loop3: lost filesystem error report for type 5 error -117 [ 216.217622][ T9202] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #3: block 5: comm syz.3.1239: lblock 5 mapped to illegal pblock 5 (length 1) [ 216.550456][ T9202] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.550837][ T9202] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.1239: Failed to acquire dquot type 0 [ 216.687204][ T9202] loop3: lost filesystem error report for type 5 error -117 [ 216.687440][ T9202] EXT4-fs (loop3): 1 orphan inode deleted [ 216.727906][ T9202] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.723056][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.870083][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.020638][ T9247] loop3: detected capacity change from 0 to 4096 [ 218.122859][ T9249] loop9: detected capacity change from 0 to 128 [ 218.194752][ T9249] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.223997][ T9249] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.777547][ T9236] lo speed is unknown, defaulting to 1000 [ 218.827439][ T7195] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.831532][ T9244] lo speed is unknown, defaulting to 1000 [ 218.866818][ T9257] loop4: detected capacity change from 0 to 128 [ 218.917334][ T9257] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 218.917546][ T9257] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 218.917990][ T9257] FAULT_INJECTION: forcing a failure. [ 218.917990][ T9257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.918029][ T9257] CPU: 1 UID: 0 PID: 9257 Comm: syz.4.1254 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 218.918103][ T9257] Tainted: [W]=WARN [ 218.918112][ T9257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.918128][ T9257] Call Trace: [ 218.918136][ T9257] [ 218.918145][ T9257] __dump_stack+0x1d/0x30 [ 218.918176][ T9257] dump_stack_lvl+0x95/0xd0 [ 218.918315][ T9257] dump_stack+0x15/0x1b [ 218.918341][ T9257] should_fail_ex+0x25e/0x270 [ 218.918459][ T9257] should_fail+0xb/0x20 [ 218.918493][ T9257] should_fail_usercopy+0x1a/0x20 [ 218.918534][ T9257] _copy_from_user+0x1c/0xb0 [ 218.918560][ T9257] ext4_ioctl+0xa1f/0x3210 [ 218.918648][ T9257] ? __pfx_ext4_ioctl+0x10/0x10 [ 218.918687][ T9257] __se_sys_ioctl+0xce/0x140 [ 218.918744][ T9257] __x64_sys_ioctl+0x43/0x50 [ 218.918764][ T9257] x64_sys_call+0x1563/0x3020 [ 218.918862][ T9257] do_syscall_64+0x136/0x3c0 [ 218.918930][ T9257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.918952][ T9257] RIP: 0033:0x7f92a63fe0d9 [ 218.918973][ T9257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.919000][ T9257] RSP: 002b:00007f92a4e57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 218.919059][ T9257] RAX: ffffffffffffffda RBX: 00007f92a6685fa0 RCX: 00007f92a63fe0d9 [ 218.919078][ T9257] RDX: 0000000000000000 RSI: 0000000040e8662e RDI: 0000000000000003 [ 218.919095][ T9257] RBP: 00007f92a4e57090 R08: 0000000000000000 R09: 0000000000000000 [ 218.919112][ T9257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.919129][ T9257] R13: 00007f92a6686038 R14: 00007f92a6685fa0 R15: 00007ffcfae3db08 [ 218.919153][ T9257] [ 218.919684][ T9255] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1252'. [ 218.942753][ T8666] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 218.977927][ T9263] loop9: detected capacity change from 0 to 512 [ 218.980429][ T9263] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 218.980448][ T9263] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 218.981866][ T9262] loop4: detected capacity change from 0 to 128 [ 218.994868][ T9263] EXT4-fs (loop9): warning: checktime reached, running e2fsck is recommended [ 219.098428][ T9262] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 219.098601][ T9262] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 219.147339][ T9263] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 219.172836][ T8048] netdevsim netdevsim100 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.212791][ T9263] System zones: [ 219.271390][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 219.271426][ T28] audit: type=1400 audit(1786126822.568:1274): avc: denied { mount } for pid=9268 comm="syz.1.1256" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 219.323102][ T9263] 0-2, 18-18, 34-34 [ 219.357112][ T8666] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 219.368833][ T9263] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1253: bad orphan inode 15 [ 219.379657][ T9263] loop9: lost filesystem error report for type 5 error -117 [ 219.379849][ T9263] ext4_test_bit(bit=14, block=18) = 1 [ 219.387273][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 219.387290][ C1] EXT4-fs (loop9): initial error at time 1786126822: ext4_orphan_get:1425 [ 219.387310][ C1] EXT4-fs (loop9): last error at time 1786126822: ext4_orphan_get:1425 [ 219.407259][ T9273] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 219.408131][ T9263] is_bad_inode(inode)=0 [ 219.416011][ T9273] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 219.423126][ T9263] NEXT_ORPHAN(inode)=2264924160 [ 219.442930][ T9273] vhci_hcd vhci_hcd.0: Device attached [ 219.454339][ T9274] vhci_hcd: cannot find a urb of seqnum 4294901760 max seqnum 0 [ 219.481362][ T8062] vhci_hcd vhci_hcd.1: stop threads [ 219.487402][ T8062] vhci_hcd vhci_hcd.1: release socket [ 219.495597][ T8062] vhci_hcd vhci_hcd.1: disconnect device [ 219.497362][ T9263] max_ino=32 [ 219.511250][ T9263] i_nlink=0 [ 219.526246][ T9263] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.1253: corrupted inode contents [ 219.559799][ T9263] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.560060][ T9263] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #15: comm syz.9.1253: mark_inode_dirty error [ 219.581594][ T9263] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.581817][ T9263] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.1253: corrupted inode contents [ 219.609645][ T9263] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.609833][ T9263] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3001: inode #15: comm syz.9.1253: mark_inode_dirty error [ 219.632937][ T9263] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.633912][ T9263] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3004: inode #15: comm syz.9.1253: mark inode dirty (error -117) [ 219.656370][ T9263] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 219.656651][ T9263] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -117) [ 219.708388][ T9289] PM: suspend entry (deep) [ 219.708888][ T8048] bridge_slave_1: left allmulticast mode [ 219.713960][ T9263] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 219.722289][ T8048] bridge_slave_1: left promiscuous mode [ 219.770847][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.780742][ T9287] loop3: detected capacity change from 0 to 8192 [ 219.787087][ T28] audit: type=1400 audit(1786126823.078:1275): avc: denied { name_bind } for pid=9258 comm="syz.9.1253" src=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 219.787669][ T8048] bridge_slave_0: left allmulticast mode [ 219.816748][ T9259] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1253'. [ 219.850499][ T28] audit: type=1400 audit(1786126823.108:1276): avc: denied { bind } for pid=9258 comm="syz.9.1253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 219.878297][ T8048] bridge_slave_0: left promiscuous mode [ 219.880856][ T9259] netlink: 'syz.9.1253': attribute type 1 has an invalid length. [ 219.893065][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.904793][ T9259] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1253'. [ 219.920490][ T8064] Filesystems sync: 0.184 seconds [ 219.931091][ T8048] pim6reg9: left allmulticast mode [ 219.954012][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.981276][ T28] audit: type=1400 audit(1786126823.278:1277): avc: denied { mounton } for pid=9291 comm="syz.9.1263" path="/syzcgroup/unified/syz9" dev="cgroup2" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 219.997073][ T9287] netlink: 'syz.3.1261': attribute type 21 has an invalid length. [ 220.069829][ T28] audit: type=1400 audit(1786126823.368:1278): avc: denied { unmount } for pid=7462 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 220.112166][ T9296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 220.113113][ T8048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.136056][ T28] audit: type=1400 audit(1786126823.438:1279): avc: denied { map } for pid=9286 comm="syz.3.1261" path="socket:[25672]" dev="sockfs" ino=25672 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 220.164237][ T8048] bond_slave_0: left promiscuous mode [ 220.183212][ T8048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.193024][ T9292] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 220.202989][ T8048] bond_slave_1: left promiscuous mode [ 220.220332][ T8048] bond0 (unregistering): Released all slaves [ 220.356533][ T9300] loop1: detected capacity change from 0 to 4096 [ 220.403355][ T9292] md: could not open device unknown-block(1,1). [ 220.412961][ T9289] Freezing user space processes [ 220.507898][ T8048] hsr_slave_0: left promiscuous mode [ 220.513889][ T8048] hsr_slave_1: left promiscuous mode [ 220.523720][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.534228][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.542042][ T8048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.550082][ T8048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.561204][ T8048] veth1_macvtap: left promiscuous mode [ 220.567667][ T8048] veth0_macvtap: left promiscuous mode [ 220.573567][ T8048] veth1_vlan: left promiscuous mode [ 220.579200][ T8048] veth0_vlan: left promiscuous mode [ 220.656767][ T8048] team0 (unregistering): Port device team_slave_1 removed [ 220.668773][ T8048] team0 (unregistering): Port device team_slave_0 removed [ 221.681998][ T9289] Freezing user space processes completed (elapsed 1.223 seconds) [ 221.689880][ T9289] OOM killer disabled. [ 221.693975][ T9289] Freezing remaining freezable tasks [ 221.700822][ T9289] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 221.709140][ T9289] printk: Suspending console(s) (use no_console_suspend to debug) [ 221.757018][ T9289] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 221.757146][ T9289] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 221.757266][ T9289] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 221.757310][ T9289] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 221.757353][ T9289] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 221.757391][ T9289] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 221.757505][ T9289] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 221.758082][ T9289] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 221.758122][ T9289] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 221.758152][ T9289] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 221.758241][ T9289] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 221.758297][ T9289] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 221.758323][ T9289] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 221.758396][ T9289] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 221.758425][ T9289] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 221.758453][ T9289] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 221.795526][ T8061] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 222.449548][ T9289] ACPI: PM: Preparing to enter system sleep state S3 [ 222.449768][ T9289] ACPI: PM: Saving platform NVS memory [ 222.449832][ T9289] Disabling non-boot CPUs ... [ 222.459627][ T9289] smpboot: CPU 1 is now offline [ 222.468378][ T9289] ACPI: PM: Low-level resume complete [ 222.468470][ T9289] ACPI: PM: Restoring platform NVS memory [ 222.481722][ T9289] Enabling non-boot CPUs ... [ 222.481982][ T9289] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 222.487708][ T9289] CPU1 is up [ 222.487913][ T9289] ACPI: PM: Waking up from system sleep state S3 [ 222.531039][ T8036] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 222.705385][ T9289] OOM killer enabled. [ 222.706129][ T9289] Restarting tasks: Starting [ 222.727452][ T9289] Restarting tasks: Done [ 222.728299][ T9289] random: crng reseeded on system resumption [ 222.731728][ T9289] PM: suspend exit [ 222.739423][ T9302] loop3: detected capacity change from 0 to 1024 [ 222.746696][ T9302] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 222.805321][ T28] audit: type=1400 audit(1786126826.100:1280): avc: denied { write } for pid=9305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.834359][ T9376] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1267'. [ 222.836147][ T9302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.860123][ T28] audit: type=1400 audit(1786126826.160:1281): avc: denied { write } for pid=9301 comm="syz.3.1266" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.912457][ T9378] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 222.916320][ T28] audit: type=1400 audit(1786126826.210:1282): avc: denied { write } for pid=9377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 222.936026][ T9378] SELinux: failed to load policy [ 222.974934][ T9376] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 222.983330][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 223.008197][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.044506][ T9392] netlink: 288 bytes leftover after parsing attributes in process `syz.7.1268'. [ 223.072654][ T28] audit: type=1326 audit(1786126826.370:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03617e0d9 code=0x7ffc0000 [ 223.090066][ T9394] ib_srp: bad source parameter '127' [ 223.756587][ T9404] loop1: detected capacity change from 0 to 4096 [ 223.947749][ T9404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.159805][ T9418] loop3: detected capacity change from 0 to 1024 [ 224.937181][ T28] kauditd_printk_skb: 172 callbacks suppressed [ 224.937202][ T28] audit: type=1326 audit(1786126827.301:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03617e0d9 code=0x7ffc0000 [ 224.966628][ T28] audit: type=1326 audit(1786126827.301:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03617e0d9 code=0x7ffc0000 [ 224.970893][ T28] audit: type=1326 audit(1786126827.301:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03617e0d9 code=0x7ffc0000 [ 224.975526][ T28] audit: type=1326 audit(1786126827.301:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb03617e0d9 code=0x7ffc0000 [ 224.980035][ T28] audit: type=1326 audit(1786126827.301:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 224.984838][ T28] audit: type=1326 audit(1786126827.311:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 225.010164][ T28] audit: type=1326 audit(1786126827.311:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 225.014688][ T28] audit: type=1326 audit(1786126827.311:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 225.019168][ T28] audit: type=1326 audit(1786126827.311:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 225.023580][ T28] audit: type=1326 audit(1786126827.311:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9393 comm="syz.1.1271" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb03613e90e code=0x7ffc0000 [ 225.036018][ T9418] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 225.082766][ T9418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.459974][ T7462] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.607783][ T9436] loop4: detected capacity change from 0 to 512 [ 225.626834][ T9436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.651098][ T9436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.669980][ T9436] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.681963][ T9441] FAULT_INJECTION: forcing a failure. [ 225.681963][ T9441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 225.702681][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.9.1279 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 225.702796][ T9441] Tainted: [W]=WARN [ 225.702806][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.702822][ T9441] Call Trace: [ 225.702830][ T9441] [ 225.702838][ T9441] __dump_stack+0x1d/0x30 [ 225.702904][ T9441] dump_stack_lvl+0x95/0xd0 [ 225.702931][ T9441] dump_stack+0x15/0x1b [ 225.702990][ T9441] should_fail_ex+0x25e/0x270 [ 225.703020][ T9441] should_fail+0xb/0x20 [ 225.703059][ T9441] should_fail_usercopy+0x1a/0x20 [ 225.703095][ T9441] _copy_to_user+0x20/0xa0 [ 225.703115][ T9441] pagemap_read+0x3af/0x610 [ 225.703138][ T9441] ? __pfx_pagemap_read+0x10/0x10 [ 225.703211][ T9441] vfs_read+0x18e/0x7c0 [ 225.703228][ T9441] ? __fget_files+0x184/0x1c0 [ 225.703254][ T9441] ? __rcu_read_unlock+0x4e/0x70 [ 225.703287][ T9441] ? __fget_files+0x184/0x1c0 [ 225.703381][ T9441] ? mutex_unlock+0x4e/0x90 [ 225.703427][ T9441] __x64_sys_pread64+0xfd/0x150 [ 225.703499][ T9441] x64_sys_call+0x27b5/0x3020 [ 225.703524][ T9441] do_syscall_64+0x136/0x3c0 [ 225.703562][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.703589][ T9441] RIP: 0033:0x7f7fdf9de0d9 [ 225.703619][ T9441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.703637][ T9441] RSP: 002b:00007f7fde437028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 225.703682][ T9441] RAX: ffffffffffffffda RBX: 00007f7fdfc65fa0 RCX: 00007f7fdf9de0d9 [ 225.703703][ T9441] RDX: 0000000000019000 RSI: 0000200000001240 RDI: 0000000000000004 [ 225.703774][ T9441] RBP: 00007f7fde437090 R08: 0000000000000000 R09: 0000000000000000 [ 225.703789][ T9441] R10: 0000000fffff7ff8 R11: 0000000000000246 R12: 0000000000000001 [ 225.703802][ T9441] R13: 00007f7fdfc66038 R14: 00007f7fdfc65fa0 R15: 00007ffe0f470f98 [ 225.703877][ T9441] [ 225.763566][ T9436] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 3: comm syz.4.1276: bad entry in directory: inode out of bounds - offset=24, inode=65547, rec_len=20, size=2048 fake=0 [ 225.895095][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.980929][ T9452] loop9: detected capacity change from 0 to 512 [ 226.008572][ T9457] netlink: 'syz.7.1280': attribute type 10 has an invalid length. [ 226.011166][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.012563][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.014660][ T9457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.016096][ T9457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.055635][ T9458] lo speed is unknown, defaulting to 1000 [ 226.095364][ T9452] EXT4-fs (loop9): blocks per group (34) and clusters per group (32768) inconsistent [ 226.299001][ T9465] loop3: detected capacity change from 0 to 1024 [ 226.324599][ T9465] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 226.388850][ T9465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.489313][ T9452] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1282'. [ 226.752798][ T8666] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.773127][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1283'. [ 226.955715][ T9475] loop9: detected capacity change from 0 to 512 [ 226.965104][ T9475] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 226.970448][ T9475] EXT4-fs (loop9): orphan cleanup on readonly fs [ 226.971697][ T9475] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.1285: bad orphan inode 15 [ 226.975949][ T9477] netlink: 'syz.4.1284': attribute type 4 has an invalid length. [ 226.981236][ T9475] loop9: lost filesystem error report for type 5 error -117 [ 226.981337][ T9475] ext4_test_bit(bit=14, block=5) = 0 [ 226.983637][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 226.983664][ C0] EXT4-fs (loop9): initial error at time 1786126830: ext4_orphan_get:1425 [ 226.983683][ C0] EXT4-fs (loop9): last error at time 1786126830: ext4_orphan_get:1425 [ 227.002977][ T9475] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 227.062783][ T7195] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.148198][ T9479] lo speed is unknown, defaulting to 1000 [ 227.300742][ T9492] lo speed is unknown, defaulting to 1000 [ 227.433979][ T9491] lo speed is unknown, defaulting to 1000 [ 227.435824][ T9493] lo speed is unknown, defaulting to 1000 [ 227.839332][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.261913][ T9512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 228.643646][ T9540] loop4: detected capacity change from 0 to 8192 [ 228.689297][ T9540] loop4: p1 < > p3 < p5 > p4 [ 228.691839][ T9540] loop4: p4 size 33557760 extends beyond EOD, truncated [ 228.694122][ T9540] loop4: p5 size 33557760 extends beyond EOD, truncated [ 228.701300][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1294'. [ 228.703899][ T9551] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1294'. [ 228.820483][ T9336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.896694][ T9564] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1298'. [ 228.912656][ T9336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.955087][ T6447] udevd[6447]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 228.958805][ T3500] udevd[3500]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 228.960585][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 228.972024][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 228.992555][ T9336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.106561][ T9336] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 229.109297][ T9336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.168732][ T9516] loop3: detected capacity change from 0 to 1024 [ 229.178797][ T9568] lo speed is unknown, defaulting to 1000 [ 229.251066][ T9573] loop9: detected capacity change from 0 to 128 [ 229.303164][ T9336] bridge_slave_1: left allmulticast mode [ 229.304166][ T9336] bridge_slave_1: left promiscuous mode [ 229.305459][ T9336] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.351833][ T9336] bridge_slave_0: left allmulticast mode [ 229.353378][ T9611] PM: suspend entry (deep) [ 229.356835][ T9516] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 229.357209][ T9336] bridge_slave_0: left promiscuous mode [ 229.357363][ T9336] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.384954][ T9516] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 229.390306][ T9516] EXT4-fs error (device loop3): ext4_get_journal_inode:5900: inode #32: comm syz.3.1291: iget: special inode unallocated [ 229.395573][ T9516] loop3: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 229.398944][ T9516] EXT4-fs (loop3): no journal found [ 229.403127][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 229.403910][ T9516] EXT4-fs (loop3): can't get journal size [ 229.405396][ C0] EXT4-fs (loop3): initial error at time 1786126832: ext4_get_journal_inode:5900: inode 32 [ 229.406417][ C0] EXT4-fs (loop3): last error at time 1786126832: ext4_get_journal_inode:5900: inode 32 [ 229.485451][ T9336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.489844][ T9573] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.495469][ T9336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.498366][ T9336] bond0 (unregistering): Released all slaves [ 229.500831][ T9573] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 229.565675][ T9516] EXT4-fs (loop3): filesystem is read-only [ 229.588816][ T9516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 229.656890][ T9337] Filesystems sync: 0.294 seconds [ 229.705792][ T9611] Freezing user space processes [ 229.729156][ T9336] hsr_slave_0: left promiscuous mode [ 229.730703][ T9336] hsr_slave_1: left promiscuous mode [ 229.731944][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.733441][ T9611] Freezing user space processes completed (elapsed 0.025 seconds) [ 229.734001][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.734928][ T9611] OOM killer disabled. [ 229.736774][ T9611] Freezing remaining freezable tasks [ 229.737805][ T9336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.739108][ T9336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.740332][ T9611] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 229.741809][ T9611] printk: Suspending console(s) (use no_console_suspend to debug) [ 229.745948][ T9336] veth1_macvtap: left promiscuous mode [ 229.745976][ T9336] veth0_macvtap: left promiscuous mode [ 229.746059][ T9336] veth1_vlan: left promiscuous mode [ 229.746111][ T9336] veth0_vlan: left promiscuous mode [ 229.787444][ T9611] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 229.787495][ T9611] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 229.787548][ T9611] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 229.787683][ T9611] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 229.787726][ T9611] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 229.787806][ T9611] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 229.787923][ T9611] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 229.787970][ T9611] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 229.788125][ T9611] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 229.788156][ T9611] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 229.788199][ T9611] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 229.788294][ T9611] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 229.788325][ T9611] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 229.788367][ T9611] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 229.788519][ T9611] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 229.788603][ T9611] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 229.815154][ T9336] team0 (unregistering): Port device team_slave_1 removed [ 229.818111][ T9336] team0 (unregistering): Port device team_slave_0 removed [ 229.873135][ T9354] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 230.538557][ T9611] ACPI: PM: Preparing to enter system sleep state S3 [ 230.538697][ T9611] ACPI: PM: Saving platform NVS memory [ 230.538861][ T9611] Disabling non-boot CPUs ... [ 230.545120][ T9611] smpboot: CPU 1 is now offline [ 230.551104][ T9611] ACPI: PM: Low-level resume complete [ 230.551171][ T9611] ACPI: PM: Restoring platform NVS memory [ 230.563328][ T9611] Enabling non-boot CPUs ... [ 230.563498][ T9611] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 230.568185][ T9611] CPU1 is up [ 230.568373][ T9611] ACPI: PM: Waking up from system sleep state S3 [ 230.609221][ T9360] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 230.766894][ T9611] OOM killer enabled. [ 230.767685][ T9611] Restarting tasks: Starting [ 230.800738][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 230.800758][ T28] audit: type=1400 audit(1786126834.103:1522): avc: denied { write } for pid=9620 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.822786][ T9515] Process accounting paused [ 230.830168][ T9611] Restarting tasks: Done [ 230.831071][ T9611] random: crng reseeded on system resumption [ 230.835716][ T9611] PM: suspend exit [ 230.845611][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.911666][ T28] audit: type=1400 audit(1786126834.213:1523): avc: denied { write } for pid=9637 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.958343][ T9568] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.959586][ T9568] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.971169][ T9568] bridge_slave_0: entered allmulticast mode [ 230.976397][ T9568] bridge_slave_0: entered promiscuous mode [ 230.982302][ T9568] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.983659][ T9568] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.984910][ T9568] bridge_slave_1: entered allmulticast mode [ 230.986580][ T9568] bridge_slave_1: entered promiscuous mode [ 231.000579][ T9568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.003676][ T9568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.017618][ T9568] team0: Port device team_slave_0 added [ 231.019921][ T9568] team0: Port device team_slave_1 added [ 231.054476][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.058852][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.073498][ T9568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.079175][ T9568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.084857][ T9568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.099928][ T9568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.119204][ T9568] hsr_slave_0: entered promiscuous mode [ 231.120775][ T9568] hsr_slave_1: entered promiscuous mode [ 231.121994][ T9568] debugfs: 'hsr0' already exists in 'hsr' [ 231.122973][ T9568] Cannot create hsr debugfs directory [ 231.352654][ T9660] loop3: detected capacity change from 0 to 1024 [ 231.379251][ T9660] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 231.423499][ T9660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.506901][ T28] audit: type=1400 audit(1786126834.773:1524): avc: denied { write } for pid=9646 comm="syz.3.1309" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.045672][ T9664] loop4: detected capacity change from 0 to 4096 [ 232.201168][ T28] audit: type=1400 audit(1786126835.503:1525): avc: denied { write } for pid=9657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.366635][ T28] audit: type=1400 audit(1786126835.663:1526): avc: denied { write } for pid=9679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.378895][ T9568] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 232.401022][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 232.414284][ T9568] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 232.438426][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 232.451130][ T9568] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 232.466431][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 232.479889][ T9568] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 232.497679][ T9568] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 232.676086][ T9568] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.707202][ T9568] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.726035][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.727349][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.760191][ T5397] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.761460][ T5397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.834193][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1314'. [ 232.866973][ T9696] erspan0: entered promiscuous mode [ 232.877048][ T9696] macvtap1: entered promiscuous mode [ 232.885675][ T9696] macvtap1: entered allmulticast mode [ 232.886909][ T9696] erspan0: entered allmulticast mode [ 232.903564][ T7195] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 232.922122][ T28] audit: type=1400 audit(1786126836.223:1527): avc: denied { write } for pid=9689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.930368][ T3294] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.964325][ T28] audit: type=1400 audit(1786126836.263:1528): avc: denied { write } for pid=9708 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.106390][ T9726] PM: suspend entry (deep) [ 233.204554][ T9738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1319'. [ 233.206626][ T28] audit: type=1400 audit(1786126836.503:1529): avc: denied { bind } for pid=9727 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.215340][ T9348] Filesystems sync: 0.108 seconds [ 233.216183][ T28] audit: type=1400 audit(1786126836.503:1530): avc: denied { setopt } for pid=9727 comm="syz.3.1319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 233.232309][ T28] audit: type=1400 audit(1786126836.533:1531): avc: denied { write } for pid=9718 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.409993][ T9745] loop4: detected capacity change from 0 to 1024 [ 233.431590][ T9745] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 233.494391][ T9745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.210140][ T9568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.213804][ T9726] Freezing user space processes [ 234.831273][ T9726] Freezing user space processes completed (elapsed 0.614 seconds) [ 234.832605][ T9726] OOM killer disabled. [ 234.833360][ T9726] Freezing remaining freezable tasks [ 234.835911][ T9726] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 234.837324][ T9726] printk: Suspending console(s) (use no_console_suspend to debug) [ 234.878831][ T9726] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 234.878957][ T9726] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 234.879001][ T9726] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 234.879052][ T9726] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 234.879091][ T9726] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 234.879133][ T9726] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 234.879219][ T9726] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 234.879349][ T9726] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 234.879478][ T9726] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 234.879517][ T9726] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 234.879552][ T9726] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 234.879629][ T9726] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 234.879658][ T9726] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 234.879695][ T9726] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 234.879779][ T9726] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 234.879829][ T9726] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 234.916600][ T5421] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 235.568791][ T9726] ACPI: PM: Preparing to enter system sleep state S3 [ 235.568910][ T9726] ACPI: PM: Saving platform NVS memory [ 235.568963][ T9726] Disabling non-boot CPUs ... [ 235.573387][ T9726] smpboot: CPU 1 is now offline [ 235.578354][ T9726] ACPI: PM: Low-level resume complete [ 235.578465][ T9726] ACPI: PM: Restoring platform NVS memory [ 235.590902][ T9726] Enabling non-boot CPUs ... [ 235.591352][ T9726] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 235.595355][ T9726] CPU1 is up [ 235.595612][ T9726] ACPI: PM: Waking up from system sleep state S3 [ 235.628816][ T5384] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 235.640704][ T5384] ================================================================== [ 235.640740][ T5384] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_load [ 235.640810][ T5384] [ 235.640834][ T5384] write to 0xffff8881043b0e00 of 8 bytes by task 5404 on cpu 1: [ 235.640901][ T5384] mas_wr_store_entry+0x3b95/0x5a90 [ 235.641016][ T5384] mas_store_gfp+0x5cd/0x6c0 [ 235.642160][ T5384] __irq_alloc_descs+0x361/0x4d0 [ 235.642239][ T5384] irq_domain_alloc_irqs_locked+0x89/0x6d0 [ 235.642640][ T5384] __irq_domain_alloc_irqs+0x80/0xd0 [ 235.642664][ T5384] __msi_domain_alloc_irqs+0x435/0xa00 [ 235.642695][ T5384] msi_domain_alloc_locked+0x357/0x3e0 [ 235.642722][ T5384] msi_domain_alloc_irqs_all_locked+0xd2/0x110 [ 235.642808][ T5384] pci_msi_setup_msi_irqs+0x7a/0x90 [ 235.643832][ T5384] msix_capability_init+0x566/0x960 [ 235.643861][ T5384] __pci_enable_msix_range+0x41d/0x4b0 [ 235.643890][ T5384] pci_alloc_irq_vectors_affinity+0xac/0x1e0 [ 235.643963][ T5384] vp_find_vqs_msix+0x3f0/0x8b0 [ 235.644264][ T5384] vp_find_vqs+0x4a/0x490 [ 235.644288][ T5384] probe_common+0x1e8/0x3c0 [ 235.644308][ T5384] virtrng_restore+0x1a/0xc0 [ 235.644327][ T5384] virtio_device_restore_priv+0x23c/0x410 [ 235.644350][ T5384] virtio_device_restore+0x1a/0x30 [ 235.644372][ T5384] virtio_pci_resume+0xfa/0x140 [ 235.644397][ T5384] pci_pm_resume+0x160/0x340 [ 235.644416][ T5384] dpm_run_callback+0x53/0x2f0 [ 235.644438][ T5384] device_resume+0x76f/0x7a0 [ 235.644458][ T5384] async_resume+0x2c/0x40 [ 235.644479][ T5384] async_run_entry_fn+0x52/0x180 [ 235.644506][ T5384] process_scheduled_works+0x4d4/0x9a0 [ 235.644531][ T5384] worker_thread+0x569/0x750 [ 235.644556][ T5384] kthread+0x221/0x270 [ 235.644571][ T5384] ret_from_fork+0x146/0x330 [ 235.644596][ T5384] ret_from_fork_asm+0x1a/0x30 [ 235.644656][ T5384] [ 235.644662][ T5384] read to 0xffff8881043b0e00 of 8 bytes by task 5384 on cpu 0: [ 235.644678][ T5384] mtree_load+0x3fd/0x600 [ 235.644704][ T5384] __irq_get_desc_lock+0x29/0x130 [ 235.644726][ T5384] irq_set_msi_desc_off+0x59/0x160 [ 235.644745][ T5384] __msi_domain_alloc_irqs+0x486/0xa00 [ 235.644773][ T5384] msi_domain_alloc_locked+0x357/0x3e0 [ 235.644797][ T5384] msi_domain_alloc_irqs_all_locked+0xd2/0x110 [ 235.644824][ T5384] pci_msi_setup_msi_irqs+0x7a/0x90 [ 235.644850][ T5384] msix_capability_init+0x566/0x960 [ 235.644874][ T5384] __pci_enable_msix_range+0x41d/0x4b0 [ 235.644900][ T5384] pci_alloc_irq_vectors_affinity+0xac/0x1e0 [ 235.644925][ T5384] vp_find_vqs_msix+0x3f0/0x8b0 [ 235.644948][ T5384] vp_find_vqs+0x4a/0x490 [ 235.644977][ T5384] virtscsi_init+0x50b/0x8b0 [ 235.645002][ T5384] virtscsi_restore+0x3a/0xf0 [ 235.645027][ T5384] virtio_device_restore_priv+0x23c/0x410 [ 235.645050][ T5384] virtio_device_restore+0x1a/0x30 [ 235.645072][ T5384] virtio_pci_resume+0xfa/0x140 [ 235.645098][ T5384] pci_pm_resume+0x160/0x340 [ 235.645116][ T5384] dpm_run_callback+0x53/0x2f0 [ 235.645138][ T5384] device_resume+0x76f/0x7a0 [ 235.645157][ T5384] async_resume+0x2c/0x40 [ 235.645176][ T5384] async_run_entry_fn+0x52/0x180 [ 235.645203][ T5384] process_scheduled_works+0x4d4/0x9a0 [ 235.645227][ T5384] worker_thread+0x569/0x750 [ 235.645252][ T5384] kthread+0x221/0x270 [ 235.645267][ T5384] ret_from_fork+0x146/0x330 [ 235.645291][ T5384] ret_from_fork_asm+0x1a/0x30 [ 235.645312][ T5384] [ 235.645316][ T5384] value changed: 0xffff888103eb280e -> 0xffff8881043b0e00 [ 235.645327][ T5384] [ 235.645331][ T5384] Reported by Kernel Concurrency Sanitizer on: [ 235.645344][ T5384] CPU: 0 UID: 0 PID: 5384 Comm: kworker/u8:20 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 235.645371][ T5384] Tainted: [W]=WARN [ 235.645378][ T5384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.645391][ T5384] Workqueue: async async_run_entry_fn [ 235.645420][ T5384] ================================================================== [ 235.867040][ T9726] OOM killer enabled. [ 235.867772][ T9726] Restarting tasks: Starting [ 235.885315][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 235.885333][ T28] audit: type=1400 audit(1786126839.181:1533): avc: denied { write } for pid=9750 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.922502][ T9726] Restarting tasks: Done [ 235.923415][ T9726] random: crng reseeded on system resumption [ 235.937441][ T9726] PM: suspend exit [ 235.938936][ T8666] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.958072][ T9741] netlink: 124 bytes leftover after parsing attributes in process `syz.7.1320'. [ 236.003155][ T9751] lo speed is unknown, defaulting to 1000 [ 236.040427][ T9759] lo speed is unknown, defaulting to 1000 [ 236.088958][ T28] audit: type=1400 audit(1786126839.391:1534): avc: denied { write } for pid=9757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.101135][ T9568] veth0_vlan: entered promiscuous mode [ 236.110161][ T9568] veth1_vlan: entered promiscuous mode [ 236.119690][ T28] audit: type=1400 audit(1786126839.421:1535): avc: denied { write } for pid=9774 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.148704][ T9568] veth0_macvtap: entered promiscuous mode [ 236.157453][ T9568] veth1_macvtap: entered promiscuous mode [ 236.171966][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.179782][ T9568] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.241897][ T408] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.246919][ T408] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.261138][ T9322] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.262852][ T9322] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.285761][ T28] audit: type=1400 audit(1786126839.591:1536): avc: denied { write } for pid=9778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.314680][ T28] audit: type=1400 audit(1786126839.621:1537): avc: denied { write } for pid=9791 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.446142][ T28] audit: type=1400 audit(1786126839.751:1538): avc: denied { write } for pid=9794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.470436][ T28] audit: type=1400 audit(1786126839.771:1539): avc: denied { write } for pid=9805 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.485607][ T408] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.535880][ T408] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.566926][ T28] audit: type=1400 audit(1786126839.871:1540): avc: denied { write } for pid=9808 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.591818][ T28] audit: type=1400 audit(1786126839.901:1541): avc: denied { write } for pid=9819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.598009][ T408] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.655310][ T408] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.711584][ T28] audit: type=1400 audit(1786126840.021:1542): avc: denied { write } for pid=9823 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.738824][ T408] bridge_slave_1: left allmulticast mode [ 236.739926][ T408] bridge_slave_1: left promiscuous mode [ 236.745428][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.749132][ T408] bridge_slave_0: left allmulticast mode [ 236.750202][ T408] bridge_slave_0: left promiscuous mode [ 236.752184][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.816151][ T408] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.817842][ T408] bond_slave_0: left promiscuous mode [ 236.820030][ T408] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.821940][ T408] bond_slave_1: left promiscuous mode [ 236.823678][ T408] bond0 (unregistering): Released all slaves [ 236.837772][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 236.956989][ T408] hsr_slave_0: left promiscuous mode [ 236.959884][ T408] hsr_slave_1: left promiscuous mode [ 236.961188][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.962959][ T408] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.964557][ T408] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.965860][ T408] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.972478][ T408] veth1_macvtap: left promiscuous mode [ 236.973497][ T408] veth0_macvtap: left promiscuous mode [ 236.974600][ T408] veth1_vlan: left promiscuous mode [ 236.975623][ T408] veth0_vlan: left promiscuous mode [ 237.060395][ T408] team0 (unregistering): Port device team_slave_1 removed [ 237.070433][ T408] team0 (unregistering): Port device team_slave_0 removed [ 237.109377][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 237.253936][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 237.392578][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 238.850399][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 238.995809][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 239.128719][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 239.279623][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 242.742851][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 242.742870][ T28] audit: type=1400 audit(1786126846.041:1582): avc: denied { write } for pid=10117 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 242.794262][ T28] audit: type=1400 audit(1786126846.091:1583): avc: denied { write } for pid=10128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1