last executing test programs: 5m33.35766309s ago: executing program 32 (id=499): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000ffff0700000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001edd0ea400"/20], 0x50) 5m23.53191169s ago: executing program 33 (id=565): recvmsg$unix(0xffffffffffffffff, 0x0, 0x2000) syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x103402, 0x59) io_setup(0x20fe, &(0x7f00000001c0)) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1c0102, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) write$vga_arbiter(r0, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock '], 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000026c0)={{0xffffffffffffffff, &(0x7f00000000c0)=')*@\x00', 0x0, &(0x7f0000000140)={@_ha_fsid={[0x2, 0xd1]}, {0xb, 0x8, 0x6, 0x62f3}}, 0x5, &(0x7f0000000b00)={@_ha_fsid}, 0x0}, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000a700000095"], &(0x7f0000000180)='GPL\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) 3m53.74402454s ago: executing program 34 (id=944): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) symlink(0x0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c000000090a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, 0x0, 0x24008040) 3m41.952301702s ago: executing program 7 (id=1004): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='system_u:mbject_r:dhcpd_initrc_exec_t:s0 /usr/sbin/cupsd 0'], 0x4e) 3m41.922339483s ago: executing program 7 (id=1005): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x5e, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) sendfile(r5, r5, 0x0, 0xe3aa6ea) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = epoll_create1(0x80000) r8 = fcntl$dupfd(r6, 0x406, r6) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, 0x0) r9 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = getpid() kcmp$KCMP_EPOLL_TFD(r10, r9, 0x7, r8, &(0x7f0000000100)={r7, r8}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00', 0x1, 0x2, 0x0, 0x9, 0x4, 0x6}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0xfc5f}, 0x28) 3m39.792208208s ago: executing program 7 (id=1017): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x4004000) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000060000000800000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB='discard,nfs,dots,check=strict,uid=', @ANYRESHEX, @ANYBLOB='B\x00'], 0x1, 0x22d, &(0x7f0000000300)="$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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107"], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4048801}, 0x40041) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0xf983e000) close(r3) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002dbd7000fddbdf2510000000080004009a2500000800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x8000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f00000001c0)) creat(0x0, 0x20) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) lsetxattr$system_posix_acl(0x0, &(0x7f0000000340)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = gettid() process_vm_writev(r5, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1}], 0x1, 0x0, 0x0, 0x0) 3m39.447209406s ago: executing program 7 (id=1018): io_uring_setup(0x414a, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000240), 0x5, 0x596, &(0x7f0000000400)="$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") socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000c1b000/0x4000)=nil, 0x4000, 0x3000, 0x4, &(0x7f0000c1a000/0x3000)=nil) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone3(&(0x7f0000000900)={0x23800100, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syncfs(0xffffffffffffffff) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x125) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/229, 0xe5}], 0x1, 0x3, 0x0) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r3, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x0, 0x0, &(0x7f0000000140)) 3m39.081713334s ago: executing program 7 (id=1022): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x1, @perf_bp={0x0}, 0x8000, 0x1, 0x0, 0x3, 0x4, 0x8001, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0xc2, 0x20}, 0x18) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x5c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vti={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @private=0xa010101}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x2}, @IFLA_VTI_IKEY={0x8, 0x2, 0xb99d}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000000040)='`', 0x1}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) getuid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r2 = perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000280)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002480)=@newtfilter={0x8ac, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x878, 0x2, [@TCA_U32_POLICE={0x850, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x80000, 0x3, 0xf, 0xfdb, 0x1, 0x80, 0x7, 0x7, 0x40000000, 0xaa04, 0x80000001, 0x99, 0x8000, 0x1000, 0x3, 0x0, 0x7fffffff, 0x80, 0x1, 0x7, 0x0, 0x9, 0x4, 0x5, 0x80000001, 0x2, 0xe0, 0x9, 0x1, 0x80000000, 0x1, 0xffff8001, 0x9, 0x10001, 0x7, 0x10000, 0x30, 0x807, 0x1000, 0xfff, 0x7, 0x2, 0x5, 0x48a, 0x9, 0x1000, 0x7, 0x7198, 0x8, 0x80000001, 0x1, 0x101, 0x3, 0x7, 0x2, 0x8, 0x10000, 0x2, 0x1, 0x2, 0x6, 0x9, 0x13, 0x2, 0xffff, 0x80, 0xbf77, 0x8, 0xc52, 0x6, 0x9, 0x7, 0x9, 0x5, 0x8, 0x3, 0x8, 0x5, 0x8, 0x1, 0x3, 0x7fffffff, 0x8, 0x2845, 0x2, 0xe9, 0x2a, 0x3, 0x891, 0x8, 0x1, 0x12, 0x6, 0xfff, 0xffffc9b5, 0x80000000, 0x2, 0x6, 0x6, 0xaa, 0x0, 0x8, 0x0, 0x0, 0x5, 0x1, 0x2, 0x40, 0x4, 0x7, 0x8, 0x8000, 0x4, 0xffffff2d, 0x0, 0xffff7fff, 0x2, 0x3, 0x6, 0x2f1e, 0x8, 0xfcb, 0x8, 0x1, 0x9, 0x6fe68a84, 0x200, 0x1, 0xfffffff9, 0xb, 0x1, 0xab, 0x9, 0x7, 0x0, 0xe, 0x10001, 0x8, 0x9, 0x6, 0x6, 0x9f, 0x7, 0xffff519d, 0x9, 0x4, 0x2, 0x3, 0x1, 0x2, 0x9, 0x4ae, 0x8, 0x1e9, 0x9, 0x105, 0x200, 0x4, 0x4, 0x1, 0x5, 0x5, 0x7, 0x5, 0x0, 0x7, 0x80, 0x2, 0x2, 0x1, 0x5, 0x101, 0x7, 0x4, 0x9, 0x7e32, 0x8800, 0x4, 0xf85f, 0x10000, 0x800, 0xffffffff, 0x7, 0x4af, 0x7e21, 0x1, 0x5027, 0x8, 0x10000, 0x4, 0x3, 0x7, 0x680, 0xc1, 0x2, 0x7, 0x8, 0x401, 0x74dc, 0x400000, 0x401, 0x92c, 0xffff32d2, 0x4, 0xafcf, 0x7f, 0x5, 0xffff0000, 0x0, 0x8, 0x200, 0x4a, 0x4000, 0x0, 0x9, 0x10000, 0x4d4fbb35, 0xb2, 0x4, 0x5, 0x0, 0x100, 0x8001, 0x6, 0xfffffff8, 0x9, 0x2, 0x81, 0x2, 0xc, 0xa, 0x94, 0x3b0, 0x401, 0x118966c9, 0xe56, 0x8, 0x4, 0x1800000, 0x6a, 0x9d6, 0x200, 0x2, 0x40, 0x7, 0x8000, 0x7e, 0x6, 0x5, 0x7, 0x4, 0x3, 0xff, 0xe, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x1, 0x5, 0x53e5, 0x7f, 0x4, 0x3000000, 0x0, 0xf0000000, 0x3, 0xfff, 0xe, 0x7, 0xf8, 0x1ff, 0x3, 0x800001, 0xfffffffb, 0x8001, 0xff, 0x0, 0xfff, 0x80, 0x1, 0x5, 0xffff, 0x6, 0x1, 0x7, 0x9, 0x10000, 0x0, 0x5, 0xe184, 0x4, 0x1, 0xadd, 0x1, 0x16, 0x4, 0xa35c, 0xc, 0x80, 0xff, 0x6, 0x2, 0xd, 0x4, 0x3, 0x5, 0x4, 0x401, 0x4, 0x4, 0x1, 0x3, 0x8, 0xfffffffc, 0x3, 0xc1, 0x2, 0xffff, 0x80, 0xfffffff1, 0x7ff, 0x9, 0xfffffffe, 0x2, 0x6, 0x80, 0x200, 0x1000, 0xb11a, 0x0, 0x5, 0x8, 0xf49d, 0x5, 0x3361, 0x435, 0x7fffffff, 0x2, 0x6, 0xc4, 0x9, 0x0, 0xee2, 0x4, 0x401, 0xfffffffa, 0x8000, 0x2, 0x0, 0x5, 0x5dd3c81c, 0xffffffff, 0x7, 0x3, 0x81, 0x9, 0x5, 0xfffffffc, 0x2, 0x1, 0x8, 0x6, 0x0, 0x6, 0xc, 0x8, 0x6, 0x100, 0x1, 0xb5a, 0x7, 0x4, 0x18, 0x8, 0x31, 0x1ff, 0x4, 0x9, 0x400, 0x2, 0x6, 0x7, 0x9, 0x91e7, 0x5, 0x7, 0x81eb, 0x400, 0xffff, 0x9, 0x9, 0x6, 0x7, 0x6, 0xea, 0x3, 0x9, 0x4, 0x3, 0x7, 0x0, 0x8, 0x1, 0xbf0, 0x7, 0x7, 0x66, 0x7, 0x6, 0x3, 0x9, 0x0, 0x9c4, 0x7fff, 0x7, 0x800, 0x5, 0x9, 0x10001, 0x4, 0x2a64aeea, 0x0, 0x5, 0x2, 0x1, 0xf, 0x1ff, 0x400, 0x3, 0x3ff, 0xb, 0x39, 0x0, 0x8, 0xffffffff, 0x0, 0x8, 0x6, 0x9, 0x2, 0xffffffff, 0x401, 0x9, 0x800, 0x9, 0xeb, 0x8, 0x6ed, 0x5, 0x2004, 0x4c3e, 0x1bd, 0x381, 0x4282, 0x4, 0x7, 0x1, 0x4, 0xfffffff7, 0x5, 0x7, 0x0, 0x46, 0x9, 0x3, 0x3, 0x6, 0x9, 0x4, 0x1, 0x4, 0xfffeffff, 0xe, 0x3ff, 0x80000000, 0x7, 0x80, 0x7, 0x10042b, 0x7, 0x7, 0xfff, 0x5, 0x8, 0xffffffff, 0xffff671f, 0x7, 0x4, 0x80, 0x6, 0x4, 0xd, 0x1, 0xff, 0x2, 0x5be228d5, 0x2, 0x0, 0x8, 0xaff0, 0x8001, 0x3, 0x1, 0x7, 0x0, 0x51e, 0x2, 0x6, 0x4, 0xfffffffc, 0xd97, 0xa8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0x4, 0x6, 0x0, {0x7, 0x2, 0x3, 0x10, 0x4, 0x8}, {0x6, 0x0, 0x9, 0xe23, 0x100, 0x5}, 0x7, 0x99, 0xef2}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xadd1}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x8ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) inotify_init() removexattr(0x0, &(0x7f0000000500)=@known='system.posix_acl_default\x00') pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file1\x00') socket$pppoe(0x18, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x4, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x48, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x100}, 0x4008004) 3m38.676421502s ago: executing program 7 (id=1032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x100008}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x803}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 3m38.676117172s ago: executing program 35 (id=1032): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x100008}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x803}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 2m52.222740976s ago: executing program 2 (id=1300): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000092910000000000000000000018110000", @ANYRES16=r2, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000b8000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) getdents64(0xffffffffffffffff, 0x0, 0x43) (async) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYBLOB="1300000065ffff070000000600395032303030"], 0x13) (async) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) (async, rerun: 64) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) mount$bpf(0x200000000000, 0x0, 0x0, 0x198d044, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) mount$bpf(0x0, 0x0, 0x0, 0x140068, &(0x7f0000012100)=ANY=[@ANYBLOB="b2"]) (rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x2) (async, rerun: 64) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa19, &(0x7f0000000d00)="$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") (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01005848dd4800000400000009003c0000010000", @ANYRES64=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000ac0), 0x0, 0x8, r4}, 0x38) (async, rerun: 64) execve(0x0, 0x0, 0x0) (async, rerun: 64) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) mkdir(&(0x7f0000000080)='./bus\x00', 0x3) (async) setresuid(0x0, 0xee00, 0x0) (async, rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x208004, 0x21fffc, 0xc, 0x0, 0x2, 0xfffffffe}) (async, rerun: 32) open(&(0x7f0000000000)='./bus\x00', 0x40000, 0x0) listen(r5, 0x5) (async) accept4(r5, 0x0, 0x0, 0x80000) 2m52.00630742s ago: executing program 2 (id=1306): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r7, 0x403, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r7, &(0x7f0000000340)="cccdd26fd6ed38fa3e41954595c5092dc3d9475e35e5f4237f242c76143df0ef9a74651c0ca346e5464ad3bb46b2a3809d67d7ffe2571b498ff32006972e1b812f3cd2258adc360a546d6b0e3f1fb5bcaf4a6190886e75ff1826dffc0892bedec47393f52996728d61170c102e573b8644f18cf741855dda27107edb360010ef3bb7d04518ee84850f0601f92b180340a981725f3ecaf27e85e9ffa6cb9a3184f3c9bd5d7b96f0e9c0fde70b5a689d389e6ca59dd7cefd86420d9dbbe25d877a90dbb201ded512ba4c61497d10be0107e6db0796", &(0x7f0000000680)=""/135}, 0x20) r8 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r8, 0x0, 0xffffffffffffff9c, 0x0, 0x274) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 2m49.943922404s ago: executing program 2 (id=1307): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240040d4) r1 = io_uring_setup(0x41a2, &(0x7f0000000040)={0x0, 0xc8e2, 0x84085, 0xc, 0x30002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0xfffffffffffffcd8, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x0, 0xffff}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08004e01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$ARPT_SO_GET_INFO(r4, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x0, [0xd4c, 0x81, 0x5]}, &(0x7f00000003c0)=0x44) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000004bc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a80000000060a010400000000000000000a0004050900010073797a310000000054000480500001800a000100696e6e65720000004000028008000440000000171c000580040001007061796c6f6164000c00028008000240000000000800034000000002080002400000008408000140000000000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x17, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0xd9, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) shutdown(r0, 0x1) 2m49.517391893s ago: executing program 2 (id=1314): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0, 0xfc}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xa, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1200000000000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 2m49.435359035s ago: executing program 2 (id=1315): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x23}, [@ldst={0x1, 0x0, 0x4, 0x1, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) r0 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r3 = socket(0x2, 0x80805, 0x0) (async) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r5, 0x0, 0x10}, &(0x7f0000000380)=0xc) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={r5, 0x200}, 0x8) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100, 0x80800, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x4000, 0x0, 0x4a03, 0x1, 0x0, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x1f}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) (async) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800799, &(0x7f0000000580)={[{@nodioread_nolock}, {@prjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@oldalloc}, {@resgid}, {@acl}, {@grpquota}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@pcr={'pcr', 0x3d, 0x6}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'prjquota'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'prjquota'}}]}, 0x0, 0x48b, &(0x7f0000000a00)="$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") openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0xc103, 0x0) (async) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000001340)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c6e6f6e756d7461696c003130dbbb3121258e322c262b537f5d0000006e695f7804590000000000003d312c696f63686172538c6c90392bc69373686f72746e616d65653ff959f53d6d6978d000e360032113e63541351c65642c636f6465706167653d3821332ccf9a55fc291acd38019ca76de423696f6368617273650000000031323831e54f1bb0a3d72c007e3db5a829498e2a721ae5804ff8ccb41e27af3a3a924308cb010100003ceeeac934b3165b4a0ea182cdd0666ab32f2d0499ac9fc865ba946f1bb7759d02742dfcc68937ff86d7a54d6de8823119c767d45d6047209f44363853e21373a9c3f450cb6d7c37b59a34407d4a0e6a382108ddd52580281f1d8ad71c4cea22d95bd7bea39c5dcffb49960f1429b090d1429f519f9c2b0cb88ffa6fc04fa61c275bf560b9ee0f000c8b3ddeb56783f9908c21cf9b2ba0b76b9b60c991bb17c7d0accad1cdaf3259b7dc405d72e2bc3abe0cf37bda3dbfc05e2e55f8aa272b5ea736019c3c0a9b34115a445e0c5da1bd7352ec9529f5dda71f1ae71b36b500c79fffb487ed081232b5d93d3162c7f71f4d572ed87cf12b9ce4e527266a0c15dac9171edda86b148d17a48d4d90470e79620eeab5acf6f78f807298315e2b80fe1874098d75ab47837a96699e2a7db456f2a4368bece813135ed970951c7471ac16703820a799421cb24f327b3669c159abfa125ee992a5f49ab45bec637c38bcbdae4da3a05f96b2162c47d0b1277e1b1bcc981cce8f6f7f3dd8d06352eb387997b498a732d8442115755ff14d508891abd401b3cafcba75ab901fbe08002674d8663b8c40e9cf13fa4c4a092cb8004a1d2a6fe18cd5d702493d52a7110b17e64b9fa22fb3ace98b9ca35cb98c65f0902dd430373f6ae43c4a60c423b6f65b5ecc2093698072abc857ab2d36a261a7fc5776d39c3d5d5fad291c88ff9726d5ee32c6bcac1799ade9459eb39b56d985d29b988c72c9ad7e82b589f454a58d7cd5ace9436cf69acc217737c863d8938cc95767a0c9b14cb79f5b450c894a3e95d26e14259fdb65aa49761847cc1c13f18742072e80cbed0d5622618817583d0365f807882e539ff07c9205d3ee72efb8dd6853a02f49abd1b38d4571666a4d7d98c4f34f082eea025ac7b9e9fd030791df5d98a03ed76cdbb3241f96f22b6dd0da2b34172a5d7546ffd6467b1301da6dae71a0dff8ed18dc45d4536f7ee785f5f5fbf99947fd02acf56ad0db0279474340a7966a2dadc969db4aebb3e02262f2d04e915b72fefa0ede578f872dead70df9aa0f76569ecf9148ecf955f9e98151034a78ae1986cad2c794a5815e4da5ae99070b5eb95288889b13d857d2736a820ea2ebb27179e5c1105bf17f95be53"], 0x4, 0x272, &(0x7f0000001f40)="$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") clock_adjtime(0x3, &(0x7f0000000680)={0x4, 0x1000, 0xfffffffffffffff6, 0x8001, 0x934, 0x80000001, 0x0, 0x0, 0x10001, 0x6, 0x773, 0x8c8, 0x8000000000000000, 0x3ff, 0xfff, 0x0, 0x4, 0xf, 0x0, 0x3, 0x4, 0x0, 0x6, 0xfffffffffffffe00, 0x5, 0x5}) mknod$loop(0x0, 0x0, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40002100) socket(0x10, 0x3, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) (async, rerun: 32) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 2m48.332411308s ago: executing program 2 (id=1318): socket$inet6(0xa, 0x2, 0x8000) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x7ffffd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "00000080072000", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66c", 0x4}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x17) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 2m32.649235064s ago: executing program 36 (id=1318): socket$inet6(0xa, 0x2, 0x8000) mknod(&(0x7f0000000040)='./file0\x00', 0x1, 0x1) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x7ffffd, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x6a040000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "0e57b3d487e2db32", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "00000080072000", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="c800b66c", 0x4}], 0x1) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4099, 0x1003}], 0x17) socket$rds(0x15, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) 1m57.346185239s ago: executing program 1 (id=1652): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="64020000", @ANYRES16=r2, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x20000010}, 0x20020000) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x8, @private2, 0x686}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x18}, 0x20040004) 1m57.228142521s ago: executing program 1 (id=1656): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x8850}, 0x4004) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ptrace$setregs(0xd, r1, 0xd583, &(0x7f0000000180)="5f0aaa220eaf6a5975526572aeea966ad919628ca6b52af7751802803f830110ff8f1743f2dd8da324ab2580b818816c9a78c5ffb07bdcbe9401c4779360ce6acd67b877c63e89f4c509250d89f17b3fe618d822ada6f572946d2f2a78896dc94a8b28df9f0c72c7da0e1a0f98e0a165249fa30ec19698ff91f253bb17b5236ddedbe77cd8c21163bccf51d7fb8e0a716fd71a69620bde0cf50b097288ba24f5f35d7a03d016e0ee05a1cd85ed664afe41725034dee5529bd37aa48a0be35cf762555bcd33e52a7c77f0718b77a7abee069fdbb53cd20ab38118aa3a4aff711cfb39e42afb926f22") syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$eJzs3bFra1UcB/DfTdMkT5FEcBLBCzo4PV7f6pIifVDMpGRQBy22BUmCkEKhVYydXF0cXV0Ewc1/wsX/QHAV3CxYuHKTe03SpiFB06rv81l6eu755vzOyS0lQ8794KVB7zCN44tPf45GI4lKO9pxmUQrKlH6POa0vwwA4L/sMsvit2xinVwSEY3NlQUAbNDa//+/33hJAMCGvf3Ou2/udjp7b6VpI54Mvjjt5p/s858RDyJi9zg+in4cxaNoxlVE9pdJ+0mWZaNqmmvFq4PRaTdPDt7/sXj93V8bMc7vRDNa4675/H5nbyedmMmP8jqeKeZv5/nH0YwXFsy/39l7vCAf3Vq89spM/Q+jGT99GB9HPw7HRUzyUYn4bCdN38i++v2T9/Ly8nwyOu3Wx+Omsq27f3cAAAAAAAAAAAAAAAAAAAAAAPi/elicnVOP8fk9eVdx/s7WVf7LdqSl1vz5PJN8Ur7QtfOBRll8XZ7P8yhN06wYOM1X48VqVO9n1QAAAAAAAAAAAAAAAAAAAPDvcnJ23jvo94+G/0ijPA2g/Fr/qvGLaz3tmTEvx/J4fTpXpWgumSu2yjFJxNLC8kWsvPY/imMPVt2oasz2PH9bzd9+t/Jb8M3ta38wf2l72f78jUatmObsvFfeXb2DZPEe1qPsaZQ3yQ+zY2qx6qS3XcrWuP2GJ7WFl5prb0Lt2XFjtGRMJMsKe/2Xyc6d9w6e6x8Nk+urqI13dWF8u2gU8ZtjGqvfz/lfyg2J0zoAAAAAAAAAAAAAAAAAAGCjpl/6neuePK7/Ymm0ktU3WxsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3JXp8//XaIyK8AqDazE8ueclAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BT4MwAA//9YnFw0") socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000096000a000200aaaaaaaaaa0c"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x24018, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x9, 0x2, 0x0, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) close(r4) getpid() sched_setscheduler(r1, 0x6, &(0x7f0000000100)=0x800005) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) socket$xdp(0x2c, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r5, 0x0, r7, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r6, 0x407, 0x100004) write$eventfd(r6, &(0x7f0000000240), 0xffffff14) socket$packet(0x11, 0x2, 0x300) epoll_create(0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r8) 1m56.079082516s ago: executing program 1 (id=1672): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 1m55.992945327s ago: executing program 1 (id=1674): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000001c0), 0x2}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f6873"], 0xe8}}, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x22) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r3, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r4, 0x0, 0x0, 0x4000) setsockopt$inet_int(r4, 0x0, 0x17, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setuid(0xee01) r5 = gettid() r6 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000001100)={0x0, 0xfffffffffffffffe, 0x57b5, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000800)={0x0, 0x2, 0x1, [0x81, 0xf7, 0x400, 0x7fffffff, 0x4794], [0x6, 0x7, 0x9, 0x0, 0x0, 0xea, 0x5, 0x7fff, 0x7, 0x7, 0x8, 0x3, 0x100000001, 0xfffffffffffffffa, 0xc0c, 0x4, 0xfff, 0x7ff, 0x7, 0x0, 0xf, 0x80000001, 0x8, 0x4, 0x8000000000000001, 0x9, 0x1, 0xa9, 0x50, 0x3, 0x200, 0x5, 0xfffffffffffff110, 0x7, 0x3, 0x9, 0x7f, 0xbd10, 0x10000, 0x8, 0x9, 0x1ff, 0x4, 0x1, 0xea, 0x80, 0x9, 0x400, 0xff, 0x1, 0x1, 0xa000000000000000, 0x9, 0x9, 0x5, 0x5, 0x2, 0x3, 0x7f, 0x8, 0x10000, 0x72146447, 0x10001, 0x4, 0xe49f, 0x5c7, 0x3, 0x9, 0x9, 0x6, 0xf, 0x7, 0x2, 0x8, 0x7, 0x1, 0x2, 0x1d, 0x7, 0x2, 0x3, 0x2a53df85, 0x8, 0x8, 0x8000000000000001, 0x9, 0x86ea, 0x100, 0xaa, 0x2, 0x101, 0x3, 0x90000000, 0x2, 0x3, 0x51, 0x6, 0x0, 0x8, 0x8, 0x3, 0x1, 0x6, 0xffffffffffff7fff, 0x0, 0x0, 0x0, 0x9, 0x2, 0x101, 0x40, 0xe6, 0x81, 0x5, 0xfffffffffffffff7, 0x9, 0x6, 0x2, 0x3, 0x3ff, 0x8]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000c40)={0x2, 0x5, {0x7, @usage=0x1000, r7, 0x1, 0x7, 0x8000, 0x3, 0x8, 0x2, @usage=0x5, 0xffffffff, 0x0, [0x1, 0x1, 0x7, 0x2, 0x4, 0x31]}, {0x81, @struct={0x5, 0x7}, 0x0, 0x5, 0xfffffffffffffff7, 0x6, 0x7, 0x3, 0x401, @struct={0x6, 0x8}, 0xffff, 0x9, [0x3, 0x4, 0x3, 0x4, 0x86c, 0x2]}, {0xfffffffffffffeff, @usage=0x5, r8, 0x2426, 0xd26, 0x3, 0x3, 0x18, 0x20, @usage=0x7, 0x6, 0x484, [0x62, 0x3, 0xffffffff, 0x7af7, 0xba, 0x8000000000000000]}, {0x10001, 0x9, 0x7}}) setns(0xffffffffffffffff, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x2, 0x80000}, 0x20) socketpair(0x1, 0x1, 0x0, 0x0) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f0000000080), 0x10) 1m55.132369326s ago: executing program 1 (id=1681): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000140)="897a00ccf6042d99", 0x8}, {&(0x7f00000003c0)="4b8f4b3b6a2fef7448e991adcf305fdb26f525f22dd3d62b8401309806a26f79923a5972e6b7f3e165e12ffcf5b1259f168f2a521661e76a52f922de20b8ff151dfdb5032574662407b2900fbd6801976569274f337ffe23cbb6360d15c3b2348af12318c41e67447a911a1c3e41cace67dc280a36ce681691e96cfd2caa669722ae2028352f1898dd513bb707b616530d350bb046ef3c36101d9eb45f99ab1a41a9acfcdc030762f15758456b44f8c6b671c48396777cfd009a814b8947d5559353b1bdd23112c2", 0xfee9}], 0x2, 0x0, 0x0, 0x900}, 0x20) 1m52.496284023s ago: executing program 1 (id=1702): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semtimedop(0x0, &(0x7f0000000200)=[{0x91fab96db41338bf, 0x0, 0x1000}], 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m52.461559793s ago: executing program 37 (id=1702): socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semtimedop(0x0, &(0x7f0000000200)=[{0x91fab96db41338bf, 0x0, 0x1000}], 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1m50.606453303s ago: executing program 6 (id=1713): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@rand_addr=0x64010100, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x2, 0x0, 0xee00}, {@in6=@empty, 0xffffffff, 0x2b}, @in6=@private0, {0x0, 0x4, 0x7, 0x0, 0x200000000}, {0x0, 0x200000, 0x7}, {0x40000, 0x1000000, 0xae8}, 0x70bd2b, 0x0, 0xa, 0x2, 0x40, 0x70}, [@coaddr={0x14, 0xe, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m50.412318247s ago: executing program 6 (id=1717): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 1m50.340552868s ago: executing program 6 (id=1718): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x3, 0x5003) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x7e3bfe4fa73db39f}, 0x18}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r3, 0x25, 0x0, @val=@tracing={0x0, 0x8}}, 0x20) syz_emit_ethernet(0xdc1, &(0x7f0000001a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @val={@val={0x88a8, 0x3, 0x0, 0x4}, {0x8100, 0x3, 0x1, 0x3}}, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0xd, 0x6, "ae71fe", 0xd83, 0x2f, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xb81, 0x3, [], "7ba5a9b474093f65cdfa120784153cf441d9039477bf0e43510896c0f6032f87ab841fdd4a0163c682dee140f0f78ed9b5235d9facae2c4d4b5ca4404f5b2bd94c76b2f7b7e53570138462e6e9757fb8aad22c5a099308a05ee7773a3ef9bade2b2af88554d535acd6cf3dc20c075fd4b32272f40720efb2a07d33ac5801477f643aa8223f88d665c7e9f9ebfd5c29057134d28ad648925e63a45869d1fc35d16a485e17c1e55bed4d1337fc6fc58afeec3ed7055d61d2f89917194fbc6e964e11cd270012b94247ad33942ff0f34bf548b5859e3f98a5e678ec3b61d00e767c48c6dcf20bce9bde1544ed611dbf7b177d3b05a503ae059684b7b2a251a93e78c9423bfc71069c5a9ea551a9503ccd5a952817c1719b2af9336cc689495c75d0d7dfd05238aac72ca7fd6b4c9431c15167474934e4503ae043786ab5e8b023e57385c736cc05feb22f1453ecb5f57ed783c3e118e2aef88a169aed534b7951ef941ab169db21391b2dda92d3fd417e6823cfe26bd1467f22896d82b59964c274e6ef616b3250c79a39875c8426287329177267b136cf5615957705aed3c97ac3ea51c16941a092ded20aba0246cf059a8a6d1c92791a85f9220c8a79e0944299ea02bd61385670afbfb289fd5f38448d011b9521199f674bc35f4873fea0cf1cb452ef4151bb414095cbc63afc7c1b25c4066c3d78bbc0d1f33d1095b838094c52f8bfa31061bd82606bbd9619fa0ff8915eb5150661fe139f2bbc903b728766b3670b8fa341ec3788d8e7c182fe56209ee136dd64d4c8a2f2cd1558193ab0f414d7bdef896f661961fdde331c03fa5f2471c8a1d77eca2c666573902a4d23fa7d2d7856222213c68528a27169876e92c998af2928e9648b23c49a89d72cc92aed42ad2d6d350d02006bad72ad273e7898438f0e1a5e9e12f6dec8acdf5102c09fca691e966c40699af85dee235282259516accbfd4940f1c54a44f9fb00ad30c482f37168afc65bc85fce96813f68f6bc5df6c4812809112df35fe2ffa7b8a8c7a93ed4aaf0052f34bc4a45cf27a6415186dcc58ae419a5e4ed349737314d856e221d2e23d4a80de52a3a7f5b4336f68b2afe1d04e259579979bb7905b04920c6b95ec7cf48a8ac47345aac848668cf1b39054a2848286524c339b7cff87b9fe67bd341abffb2dde6e02f331894512d2f197dc19d8f05ead1149f2fdc5b7bc4a1606d3aa773d869d1b80fc4cdf7a8b82294efeaf14d1c46324bb2ebcede58457299eae7d3f0160b888f112fba987d30713676927da815517b6b209623d10cb2fd607a5b141811cd2749ca7da15e29868381e34ccc8ff65604874ba8687542173f477f88ec36656dcb581e413b7a69d000a6eec5b8e7d250c84b1567fb43b44ee61ec9281449c243998a77850b72d0cf1a2f5b74a400069aa6396a1d0f4aea909313ef1d651cc3ecaf9fef7a673dccd8f38bb49749a8cdcb1a70a41a149edc20f8488c36747592180923771ab2493d4a3b5bda786736936b0b8fa8594d54a31d210b7a57056a88bd30eafe3534eb1e3fa553b94bfd6cd1a61bf776e76b22e1a426efbc8e225b1266568eabb929ec540d225775749ba68777948e494a37555d5b202e24932cde84a41f1a0d34ea24fef726a8764fbb9c9208d99ee72a696b8d91082f250001e3c1774e599e3d991d303123c60151d9df4578329bdaf4cbc558a6b3fcd7056fe0567b7fa6f9b430d6080bafee70a87150c1893266e1f56e05a45613aed35bfac5ead2bb76bdc28f3abb4d92752ce387b35cb821613657d70d32709a844df2e1e46aa09203288e70917080a740deec67a50d8937f498eb7a146e905be7fc1d470f04962be807255a7c95997def0d0e5e7d87bf0b680677c26af105f3792f84696c65c82756d47880f396f5a3fed0053b1f106dab6482356781708c62c382dc20a67ab7d15577d22aa1186cce240dc1717cb2acdf1108b069730c1ac7811e44bd4452ceacef3acdd1a024799425784ddc5443a86858d2dc2d65c4e572faea224e6e7978e908d100bfbb99bdab86f0c38f07ce928bed887b9915e2d1919100a9c5b1481730425fa8ec737d7b3ba2e6c9528b2789c73191c793891c7aa599d54498885b4a1843969c8eec36168c8a4051031016653ddc0de1939cecb8ad0cd141fc98808402ebdfd7b50093b6f17dd01982d73a6e28deac9103b3a8afc726c8ca23cc13d9e15536d466e4e46f3749acb4041960cde1405002690fcb7bb74618215721c0204983ed11e9933a0c344feed3846f070c029273e4c36b832908921c3621ff0bbf0c9bdee97333596417175acb85ed72942875708b7007c211b45b5b81370395bbcf572cbafaa6bd4876a1f9867b50af5e5d5449882174bd46840f7d7eb765127393668e06c74ca569382b45e88e2015957060ef3c22a05fbfad6715131ea26d252137a7b267ed23052907059b4f4c29dda5798c96fd4acf9da95f3612a7d72f46a3d4667cec928043231be891e02b9035e8006eff071b7e3f46b28a4135c58865bedc19a7ffc3cd107eaf5dab204111b31fdde0aa9c0da747b2c8823ffad853ba152193dc670bbe589e38cf3a1be5564640c24ba5d90b3af81d0ba5a779efec1b449f03df3c245c5df1e42a9fd4b4dae18180dac51e1c03d4908141cfb8ee109a102a21e47533eb2a6ae67f84db2f8843b3a48759fde1c4b44b1434a2db89849d7c2f9aca0705a03f01c169bafebec3a024d5ceef25ecacb1c1a52663f2e119d7b432ccc97bb76960455514b89dc7d2bed8169cf68838d9082cbb07668f08d8e6ebe7321add3b0c2ee4ba28868fd04e4c3729e710257408ea86474cc3dfa21ad6cde0475d3722c364c322ad1267eb7f989f76b094e2b077f23d0d3e37005aa47a3db9002ebba0d829c536761a48035714534757b2bce1955fa17f58225d685941f57f85cc1e1a88e2ea9992d5cb21611aeba7e92665848663f1747d68c2772f6e89d65ed9910f21c7825e5ca8b8905429f85181967b29dd0969c22526385538ddcc60588fc6b2d3f451619bc3a7f35d3879bcbb24971ee2b35133b1a350ef096a98ea79ed3de250fbfef8c839bc3b5666decd3204d9d281588619e3c1dcbfde0d2412e7b8825ff8e000b079abd2faed1b6a28168f35ffe172f3618b36b8a987de59b6ff0f2ae29df12087868d54019c005c5b72a2219f4dc1893f3b6089248c1da464e4e2b7e3bc7e8c80cdc7138f00782a166868d2f468487340a06577795e13fe2d7d78e0881ab01e83f6cc5815ef14da2df522ce1a608591da4a94bcb629784bfafabfa0e0e6be67a71ba76f8746febb81168316edb8324220ab3aacfb6805ee5223d5b8e6c7a97fda055d9353ac186ef8d566f4104e68790ca0916d40f5130611f8805a48395cb9c76e4567490857baac0bf59c6dfa85bcd4a1959cfaad72590c992330567681eb216ecc88a635492ce48f52f877da6e06a3a04228a8579a06e1ac6f28352f723cb1b8b875b6a0608dfed706d58534896242803199e294fd468b0c8cc3212a4c5972e5676640ec3b83e010fdf1ee97e905552a6116d89f192ff62579a8c2df4e83f2fa3a1e4dc5b1f3735309ce63947e24b3e3c0a92d67b4aaf7e0e4203c54ae9e88f93e2d493837299b2405b1b990476b26e985d430fcdafb0c47d35edb48443fba60da650a0361a2330a1f33a8cb6c06b36afa49895d13de02df4da6da517b54ef3213252b93077b9fe6058630d904b7bd1105b837cee9d16e269007cc39149ef027e995c554485a5ec4b561f0a8dbdb11eaccaec08bfdd74079290f2550e41f4fa96cb7fe1598194232ffa8b6ba68f568893143b815bf1f8bbd21621a3f5dcc634c58d27dd24fec87782798063f993562d7f00ead936dc0e58e9db8a97986ebfd062725f71b0dba02b0a4aba6d47c800a1536576faa8525fcce4ee041ea95e1cd8ee69c6d3e7de661fbff4c291b666767b4d6f9fd5aeac3da2cd569c743952e9d5eb6bb9748d1dcc18715e302ae480f2abfb1e8b42791ee28ab4ee74eaab1cef2b33d87713058356daf6973ab9dd2847b1aeafef228a7c58615c202f02657edd47b7e8a4a02882a476bb1410f23c5bbf555a98d843e9235f817c68da0e1f787ad8a691ba84ba816c791f4ab6751cbee"}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "2a8ca3126fae8643080283361aa4f4f649b562f09cebec9b99bfd3ac51adafd469de349638f5d534ebb386b028a9dc909588351a7eec12f3c555a2eee06c19013b69a703ee1aed8450d9ed459b8d81419fdc23ebc66d889daffd2dc47e2d724be3938310ed71c4f52ec4a9094dd75cf5b414e91c4807cc0d3984e93625713d64bbeddb1d5671749cf1af7dbecf2938ffe9621d74aafd7541cb1edcd15b2cd0"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [], "a27fcde703f6388871ae3e99208e1a0f6f9053edbe14b53dad3e8cc5b7bd72e2b8b45140700a40c1ea1d938b1c42e1940c4d63783ad50974a3a079ed3133b01774af464efe12e83c984d0c7bd18da4115e0268c4544900976d6920a8cca48992dfc5a6a2111ed7c1d29a811dcc4b37684120a824395f56acbe8a65e05eadedcd831d4cb4a96cee32540958382801f21c57"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x9, 0x2, 0x0, 0x1, 0x7, 0x8}, 0x1, {0x2}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x6, 0x1, 0x1, 0x2, 0x3, 0x5}, 0x2, {0x3, 0x5f, 0x0, 0x4, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "99b77ff3a342b54d5adaf33cef888776e6b6397640adb24385042a2374189a8a71a3abc2bd357819777e3bff6db91a7fae2428397ffc590ca5bdc03a4c6e6799fcf9c01eefa268afd2239367d754bb7b5dbb82c4cc1461cade8f78e10d4482062fe6480a9a4d556c6984e56e73caa2d026617e7298e96472cbebc558cf2f44c70d62d4f86ca15335ebef3deb2365"}}}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 1m50.143159603s ago: executing program 6 (id=1722): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r2) wait4(r2, 0x0, 0x8, &(0x7f0000000380)) perf_event_open(0x0, r2, 0xfffffffffffffffd, r0, 0x8) r3 = syz_clone3(&(0x7f0000000040)={0x21000080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x58) timer_gettime(0x0, 0x0) process_vm_readv(r3, &(0x7f0000001140), 0x0, &(0x7f0000000e00), 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$update(0x2, r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) ftruncate(r5, 0xc17a) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000042c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000001000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20008040) 1m49.551041585s ago: executing program 6 (id=1728): perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x100000000000}, 0x0, 0xe, 0x0, 0x3, 0xfff, 0x8001, 0x1000, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x376, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x119111, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x2, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x74}}, 0x4000840) (async) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) socket$kcm(0x22, 0x3, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e03"], 0x0, 0x52}, 0x28) poll(&(0x7f0000000040)=[{r1, 0x9000}, {r2}], 0x2, 0x9) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x7, &(0x7f0000000a40)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x20031, 0xffffffffffffffff, 0x3b762000) (async) pivot_root(0x0, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0xe, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0, 0xd3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32=0x0, @ANYBLOB="08000200", @ANYRES32=r6, @ANYBLOB="0500070001000000"], 0x48}}, 0x0) (async) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x400) r7 = shmget$private(0x0, 0x4000, 0x1a81, &(0x7f0000ffa000/0x4000)=nil) ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) (async) shmctl$IPC_RMID(r7, 0x0) (async) shmat(r7, &(0x7f0000154000/0x4000)=nil, 0x1000) syz_emit_ethernet(0x56, &(0x7f0000000c40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd611cc82500203cfffe80000000000000000000000000000bfe8000000000000000000000000000aa2c0300000000000004043be5c637c9102001000000000000000000000000000108969bd8d732c3112e6fdc26c829e16c65f7688dcf2f236a19c18e042150d70b41c89a040000000311f6f58237e2275c12221655bc5fff88e3440f99ad6a256c2d8a2ba21f32e5b5"], 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) kexec_load(0x0, 0x0, 0x0, 0x0) 1m49.32139034s ago: executing program 6 (id=1732): socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe2(0x0, 0x4880) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1c0, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0x2b0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff, 0x0, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0xc, 0x0, 0x0, 0x2}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xfffffffffffff001, {0xfffffffd}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x2, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) 1m49.299043941s ago: executing program 38 (id=1732): socketpair$unix(0x1, 0x3, 0x0, 0x0) pipe2(0x0, 0x4880) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000001980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1c0, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'macsec0\x00', 'dvmrp1\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth0_to_bond\x00', {0x1, 0x3, 0x3, 0x3, 0x1, 0x80000001, 0x7fff, 0x18, 0x40}, {0x1}}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0x2b0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x9, 0x3ff, 0x372, 0xfff, 'pptp\x00', 'syz1\x00', {0x4}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}, [], [0xff, 0x0, 0xff], 'erspan0\x00', 'gre0\x00', {}, {}, 0xc, 0x0, 0x0, 0x2}, 0x0, 0x238, 0x2a0, 0x0, {}, [@common=@unspec=@quota={{0x38}, {0x0, 0x0, 0xfffffffffffff001, {0xfffffffd}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0xff, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x2, 0x3}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x9, 0xfffe, 0x3, 0x0, 'netbios-ns\x00', 'syz1\x00', {0x5}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) 33.239350189s ago: executing program 8 (id=2284): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$nl_generic(0x10, 0x3, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x0, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @local, @loopback}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r2 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) io_setup(0x6, &(0x7f0000000540)) mq_notify(r2, &(0x7f0000001580)={0x0, 0x3d, 0x0, @thr={0x0, 0x0}}) mq_timedsend(r2, 0x0, 0x0, 0x5, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000002240)="37bcb398", 0x4}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x74, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x44, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @mcast1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x5}, @IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_LINK={0x8}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x800}, 0x4000) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(r5, &(0x7f0000003cc0)=[{&(0x7f0000001bc0)=""/4096, 0x1000}], 0x1) signalfd4(r5, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 32.377408657s ago: executing program 8 (id=2289): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x7fffffff, 0x4}, 0x0, 0x0, 0xfffffffe, 0x7, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r0, &(0x7f0000000080), &(0x7f0000000140)=""/241}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT, @ANYRES16=r0], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 32.258111949s ago: executing program 8 (id=2290): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)=@deltaction={0xe4, 0x31, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x18}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) write$binfmt_register(0xffffffffffffffff, 0x0, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) 31.871390947s ago: executing program 8 (id=2292): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20000e, &(0x7f0000000c80)={[{@i_version}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000040)=""/5, 0x5}], 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@mcast1, 0x0}, &(0x7f0000000200)=0x14) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r10, r9, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000e80)={@link_local, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x2, 0x0, 0xfe, 0x11, 0x0, @local, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000d4a000/0x4000)=nil, 0x4000, 0x6, 0x31, 0xffffffffffffffff, 0x1000000) r11 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$XFS_IOC_FREE_EOFBLOCKS(r11, 0x8080583a, &(0x7f0000000040)={0x1, 0x9, 0x6, 0x8, 0x3ff, 0x0, 0x96}) connect$rxrpc(r11, &(0x7f00000000c0)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e24, 0xffffffff, @empty, 0xfff}}, 0x24) r12 = syz_clone3(&(0x7f0000001fc0)={0x84020000, &(0x7f0000000380), &(0x7f00000004c0), &(0x7f0000000500), {0x2b}, &(0x7f0000000ec0)=""/4096, 0x1000, &(0x7f0000001ec0)=""/153, &(0x7f0000001f80)=[0xffffffffffffffff, 0x0], 0x2, {r0}}, 0x58) sendmsg$AUDIT_SET(r0, &(0x7f00000020c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x2, 0x1, 0x2, r12, 0x85fe, 0x9, 0x8, 0xa, 0x0, 0xfffffff7, 0x6}, ["", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x81) 30.516070715s ago: executing program 8 (id=2298): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @mcast2={0xff, 0x3}, 0x7}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) (async) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async, rerun: 64) sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x18, 0x6000, 0x0, 0x0) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)=ANY=[@ANYBLOB="380000004900010000000000000000000a0000000000080000020000140001"], 0x38}}, 0x20048800) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000d40)={&(0x7f0000001980)=ANY=[@ANYBLOB="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"], 0xc14}}, 0x8001) 29.461464127s ago: executing program 8 (id=2304): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110a1000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x100) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe96fd) 29.429604028s ago: executing program 39 (id=2304): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110a1000000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x3, 0x100) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0xe96fd) 15.416898104s ago: executing program 5 (id=2373): r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000080)) syz_clone3(&(0x7f0000001e80)={0x1e6102400, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x4e) 14.580374221s ago: executing program 5 (id=2380): socket$kcm(0x2, 0x3, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x10000c40}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 14.531914442s ago: executing program 5 (id=2381): io_setup(0x7, &(0x7f0000000280)=0x0) r1 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_trace', 0x42, 0x0) io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffc98}]) perf_event_open(&(0x7f0000000300)={0x5, 0x80, 0x6c, 0x6, 0x9, 0x0, 0x0, 0x8, 0x1063, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={&(0x7f0000000000), 0x4}, 0x1a1ed, 0x0, 0x73, 0x7, 0x4, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0xdffffffffffeffff, r1, 0x9) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8, 0x2, 0x80}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0xe}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x483) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0x5, 0x3, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000003c0)={r8, &(0x7f0000000300)}, 0x20) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10.479139585s ago: executing program 5 (id=2402): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r6, 0x403, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r6, &(0x7f0000000340)="cccdd26fd6ed38fa3e41954595c5092dc3d9475e35e5f4237f242c76143df0ef9a74651c0ca346e5464ad3bb46b2a3809d67d7ffe2571b498ff32006972e1b812f3cd2258adc360a546d6b0e3f1fb5bcaf4a6190886e75ff1826dffc0892bedec47393f52996728d61170c102e573b8644f18cf741855dda27107edb360010ef3bb7d04518ee84850f0601f92b180340a981725f3ecaf27e85e9ffa6", &(0x7f0000000680)=""/135}, 0x20) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 8.461590437s ago: executing program 5 (id=2410): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$loop(0x0, 0x7, 0x103482) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x2, 0x80805, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3e, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, 0x0, 0x0, 0x2390024, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, 0x0) r4 = fsopen(0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000080)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6e99}, r6}}, 0x30) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x20008080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xc, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0xa5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xd, 0x4, 0x4, 0x10000, 0x5, r9, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800000, 0x4}, 0x50) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4048044}, 0x404c094) r10 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r10, 0x8008551d, &(0x7f0000000000)={0xa8d1, 0x1, [{0x1, 0x1}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000140)=@sco={0x1f, @none}, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)="d9c6f6219813cb186de05ab01dbf5ec8ecb4bad9e0fb07", 0x17}, {&(0x7f0000000200)="afc7331f3efa71f79aa0649b74ea71471714f6bf6510ec5ccbea04b7d22d178e5685fd2a0028ccf8878b2a149bef49a422353882e53f0ec6f08350282e8d76b101b54e41ae3bce6cbf19b4c602f714d6061c", 0x52}], 0x2, &(0x7f0000000340)=[{0x110, 0x113, 0xa2, "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"}, {0x30, 0x119, 0x5, "28bc0891ca08c70e931f1b87572b67efeb5fdbfecbe4f36a857841077b"}, {0x20, 0x3a, 0x8, "01cb5d91a713e7a226"}], 0x160}, 0x4000004) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x490283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4, 0x1, @perf_config_ext={0x5, 0x4a45}, 0x7606, 0x4, 0x0, 0x2, 0x6, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 5.194548563s ago: executing program 0 (id=2422): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_tid_address(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x40, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}]}]}, 0x40}}, 0x44000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) setns(r0, 0x2000000) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) open_by_handle_at(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="100000062b9e10803dc7f000020000000100000001000080"], 0x402002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, r0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2, 0x3, 0x5, 0x0, 0x0, {0x2}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x5, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c9d1}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x5, &(0x7f0000000000)=0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001400038010000180"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) 4.38722457s ago: executing program 4 (id=2425): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x34, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x56}, 0x28) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0xac}}, 0x24000840) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x8000003a, 0x4, 0x0, 0xffffffff}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000005f0ffff711095000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000100)={{0x1, 0x1, 0x18, r4, {0x8774}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r0], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0xffffffffffffff9d, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES8=r6, @ANYBLOB="76b196a5cf12900a07667accfb81ffb7adc1ebf5ea6bbfbf060f575e54cb25357a0040beeab4d2dfee0854e1de8b2541f23b6fae", @ANYRES16=r3], 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r8, &(0x7f0000000080)={0x11, 0x800, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 4.068273556s ago: executing program 3 (id=2426): eventfd(0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x6, 0x0, 0x2, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x7ef3, 0x5, 0x809, 0x20005, 0x0, 0x0, 0x40000103}, 0x0, 0xfffffffffffffff8, 0xffffffffffffffff, 0x8) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x0) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0xe5, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x200c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x48af, 0x6}, 0x0, 0xfffffffffffffffd, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0xb) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x1, 0x3}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1, 0x8, 0x40000) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x440940, 0x4) sendmsg$nl_route_sched(r3, 0x0, 0x2400c800) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50001b3a4842fd686025e5ad3b155985a10dedb8", @ANYRES32=0x0, @ANYRESDEC=r1], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008850) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000340)={0x3, 0xffff, 0x8, 0x200}, 0x10) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, 0x0) 3.940259649s ago: executing program 0 (id=2427): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x65, 0x0, 0x0, 0x2, 0x0, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x1, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000340)=""/120) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)}], 0x1}, 0x48043) r1 = dup(0xffffffffffffffff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x40088, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x0, 0x6, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x13296, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x5ae43, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$IP_VS_SO_SET_EDITDEST(0xffffffffffffffff, 0x0, 0x489, &(0x7f0000000000)={{0x87, @dev={0xac, 0x14, 0x14, 0x3e}, 0x4e20, 0x4, 'ovf\x00', 0x8, 0x8000}, {@loopback, 0x4e21, 0x1, 0x7ffff2d2, 0x7, 0x1}}, 0x44) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) listen(r3, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa22}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r4, 0xffffffffffffffff}, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000100)=0x5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.939753519s ago: executing program 3 (id=2428): r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/141) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40044) semtimedop(0x0, &(0x7f0000000200), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/259], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 3.937024629s ago: executing program 9 (id=2429): ioperm(0x1, 0x9, 0x4) clock_nanosleep(0xffffffffffffffff, 0x1, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000b98bc2c900000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000021c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="7f00000000002296d88e6ccdefc5", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000140)={0x30, r2, 0x211, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004014}, 0x8000) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) r4 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r4, &(0x7f0000000040)=ANY=[], 0x69) close(r4) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0xc0406618, &(0x7f0000000280)={@desc={0x1, 0x0, @desc2}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x8000, 0x1b6) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r6, 0x402, 0x1a) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x0, 0x4, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(0xffffffffffffffff, r7, 0x0, 0x20000023896) futimesat(r5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) sendmsg$NL80211_CMD_SET_REG(r9, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000300)={0x20, r10, 0x831b97362602f4f3, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000841}, 0x4004000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="50000099", @ANYRES16=r3, @ANYBLOB="04002dbd7000ffdbdf251500000008000100", @ANYRES32=r8, @ANYBLOB="0d0014006e6c383032313534000000000a0014007770616e3300000008000100", @ANYRES32=r11, @ANYBLOB="0700140028242a0006001400fa7b0000"], 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x44) 3.862094961s ago: executing program 3 (id=2430): mknodat(0xffffffffffffff9c, 0x0, 0xc0e99db6de761f86, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) lseek(r3, 0xffffffffffffffed, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x18, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x1000006}, 0x0, 0x8000, 0x800000, 0x6, 0x3ff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xb8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) add_key$keyring(&(0x7f0000000180), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x4000, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) sendmmsg$inet_sctp(r4, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="20002791773f3486edb402ff0000000818000045170e121911bcfd7b49fa7f8806c0df90edd152c44a7c0674fc44e6e5665dbbf1c2e7a1ce800a03db2274c76f09e1f211091ade6f15b361c3", @ANYRES32], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={r5, 0x2}, &(0x7f0000000140)=0x8) request_key(&(0x7f0000000040)='dns_resolver\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000000880)='y\xa9n\x1a:e\x00\x00\x00O\xbbj\x9f\a\xa3c\x85\'\x9d[@\x9a\xd7O\x9al~\xadTs\xab\b\'\xdc5\xd4\xd8N>\x13\xff\x0f\xff\xc1l\x16\x0e\xac0\x10\xf4(\'\x82\xfd,\xda_\xd30\x1d3;H\x97SS\xe2\xac\x8a)\xdc\xe2\x8d\xf5\x04\x00\x00\x00\n\xe7~\x05\x8e\xae\x94\xeeuOAa\xcd\xdbV^\x87 \xde\xd6\xf0\xe5\x81\x82\x16Q\xc9\xf3#e\x9a4\xa26\xa9\x1b\xda\x863u\x8b8d\xde\f\xd4Vk<\x9c\x17\x00\x00\x00\x00\x00\x00\x00\f\xa8 \xd1T\xee\xdd\x15\xab\xc1&\xf5Fw\x8f8\x89\xa1\xee\xe7\xefW\xbb\x0e\x91\xe6I\x92\xc4w]\xb1\xf2\xbc\xc7\xba\x13M\r~\xac:\xea\x8e\xce\x94\xde\x9e\x941u& r\xdf\xf4\xd27\xc4?\x99\x12\xbf\xfa\xc9\xfb4\x9e\xb3\x95\xd1\xfb\x92\x9b\x01\v\xa3\xd3ZE\xdb<\xba\xc1\xfee\x93\x00\x18\x1a\x97\xa2\x91\xde\x1bf\xd9\xd9\xfa\xc8\xdd\x88\x11\x86\xc3\xb1\n5\x99\b\xaf\xdcD2j\x9f\x86\xdd\x92\x16\xe1%\xc0\xee\xe7\xf7\xfb\xf2v!\x93\xf8\x98\x86\xe3\xef\xde7\xc9\xe7\xaa\x16\xdc\xdbd\xdf\xd9\x8b\xfc\xcd\xac\xce\x1b\x9b\xf0\xbfU\x19\xe0/A\xc7\xf2\x04g\xf8\xe3{\xb9\xc5\xbe\x99t\xd0~\x82FT\xb6\x91S\x9bv\x91\xfb\x9fW\xe6\xa38\x02\xa5\x1c\xad\xe8\xed\xd8Z{\x92\x8b\xfe=\x00'/354, 0xfffffffffffffffe) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000140), 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xaf, 0x0, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0xbffffffc, 0x8, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 3.055770417s ago: executing program 0 (id=2431): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0xfffe, 0x0, 0x53, 0x7fffffff}, 0x10) r1 = syz_open_procfs(0x0, 0x0) fchdir(r1) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "9d95901d59c7a4b0f4bba13df9ac2010"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x18000000}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, 0x10, 0xc}}) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4000080) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) sendfile(r2, r2, 0x0, 0xa) 3.038728037s ago: executing program 9 (id=2432): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, &(0x7f0000000000)) 2.9099251s ago: executing program 9 (id=2433): unlink(&(0x7f0000000000)='.\x00') r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, 0x0, &(0x7f0000000000)) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='p\x00\t'], 0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0xfffe, 0x0, 0x53, 0x7fffffff}, 0x10) r6 = syz_open_procfs(r4, 0x0) fchdir(r6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x161a82, 0x149) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000500)={0x0, "9d95901d59c7a4b0f4bba13df9ac2010"}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000280000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000f8ff0000351e84d23f589e1b74dc7c06ed00000000000000"], 0x50) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000240)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, 0x10, 0xc}}) socket$kcm(0x2, 0x1000000000000002, 0x0) readahead(r6, 0x1, 0x2800000000000000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4000080) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$eJzs3b9rVFkUAOAzmcmvbSYsCwvLLjuwLGw1JIHtsyy7bNigYhgkIsGJmUjIhICBgBZJrAQrG0vLdBFBCzv9HwQbG7ERS9NZSJ4kL0xmzEQTMfMk833NPbx7znv33vDeyxRz5/LPiwuzS8tzW1uvY2AgF4Wxq9tJkouh6Il8pNYDADhN3iVJvE1SWY8FAOgM738A6D6Hvf//60nb3rQ5l8XYAICT8eWf/+9OPXlZrY39eYTUpL8Rvpg+/hgBgK9rcuri/9tPfx8cj0d3IhZvrVRWKmmb9v81F/NRj1oMRzHeRyQNafzv+MQ/w6UdgxGVxbW9+rWVSr61fiSKMRRx4czB+pFSqrW+N75rrh+NYvzQ/vqjbev74o/fmurLUYxnV2Ip6jG78y9JU/3qSKn099mJj+r7d/NiI5/p3wcAAAAAAAAAAAAAAAAAAAAAgNOpXGoYard/T7l8WH9af/T9gfb357m9W1+InwpxM9vZAwAAAAAAAAAAAAAAAAAAwLdh+fqNhWq9XrvWCGbOz3/feuRzQa5NV37v/Mc5T9cEOwtzgpf4NSJOehYPN2vPN6YvTWa/mB0M2q/qg8wHNvOJnJ6I2A1+vDdWfbz66s3BnFhvupcL6X1bradtX/PDotThhxMAAAAAAAAAAAAAAAAAAHSZ/a8BH5aRdHZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCB/d//P3bQ1ziyOZierNH1y0Bzctp5v+W6ufUMJgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNf6EAAA//9rIKjm") ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001780)={'vlan1\x00', &(0x7f0000001500)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x8, 0x800, 0x354, 0xc6, 0x0, 0x3, 0x2, 0x3, 0x0, 0xb, 0x7fffffff, 0x8, 0xffff, 0x7f, 0x2564339f, 0x9, 0x3, 0x401, 0x4, 0x2, 0x96, 0xffff, 0xe1e7, 0x5, 0x100, 0x7ff, 0x8000, 0x12, 0x1, 0x59, 0x47e4, 0x7, 0x9, 0x7, 0x5, 0x2, 0x7fff, 0x7, 0x539, 0x4, 0xfffffff9, 0x3, 0x5, 0x8001, 0x10001, 0x1, 0xb8, 0x5, 0x5, 0x8, 0x3, 0x8000, 0x9b4, 0x5, 0x4, 0xffffffff, 0xfffffffb, 0x4, 0x7, 0x9, 0x10001, 0xfffffffb, 0x0, 0x9, 0x8, 0x7, 0x6, 0x5, 0x7fff, 0x6, 0x4, 0x6, 0xffff, 0xf24, 0x8, 0x3, 0xd, 0x3, 0x1, 0x6, 0x3, 0x1ff, 0x1, 0x6, 0x0, 0x2, 0x3, 0x1, 0x8, 0x5, 0x2000000, 0x10000, 0x9, 0x6, 0x0, 0x8, 0x8800, 0x10001, 0x9, 0x4734, 0x8, 0x9, 0x3, 0xa4d0, 0x5, 0x2, 0x10000, 0x2, 0x5, 0x8, 0xfffffe02, 0x0, 0x80000001, 0x35, 0x7fff, 0x17, 0x80000001, 0x1000, 0x8000, 0xadf, 0x100, 0x2, 0x7, 0x5, 0x4, 0x2, 0x6], "a46f34e13426475d65c0b214fff3ff38acc368713f4b7d86ce9e0084f926070e647e294b5f20b7dbc234873f0da1ba33519468cce08723fc728e44394b3c7b7555fcbe7bc58f4d850fdb73a3d093cefc0192d6dba45d86eb492c67359a78f565dcdef6eb0a1acf748763e79fc9bf9177411eb46c65b7ad"}}) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x100, 0x2aa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x5}, 0x0, 0x934, 0x0, 0x6, 0x3, 0x7, 0x11, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) getgroups(0x0, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000040)=0x100000000000404, 0x6, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0) 2.864314331s ago: executing program 3 (id=2434): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r6, 0x403, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r6, &(0x7f0000000340)="cccdd26fd6ed38fa3e41954595c5092dc3d9475e35e5f4237f242c76143df0ef9a74651c0ca346e5464ad3bb46b2a3809d67d7ffe2571b498ff32006972e1b812f3cd2258adc360a546d6b0e3f1fb5bcaf4a6190886e75ff1826dffc0892bedec47393f52996728d61170c102e573b8644f18cf741855dda27107edb360010ef3bb7d04518ee84850f0601f92b180340a981725f3ecaf27e85e9ffa6cb9a31", &(0x7f0000000680)=""/135}, 0x20) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 2.751811383s ago: executing program 4 (id=2435): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = getpgrp(0x0) perf_event_open(0x0, r1, 0xffffffffffffffff, r0, 0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c811}, 0x24000000) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01002ba17000fbdbdf25030000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r7], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="bc010000190001000000000001000000ac14143f0000000000000000000000000000000000000000000019000000000100000000000000000200000000000000f0eea733ea28fb6f9ec4449772e6cd768b", @ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004010500fe8000000000000000000000000000bb000000003300000000000000fe8000000000000000000000000000bb00000000030000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000fc0200000000000000000000000000010000000000000000000000000000000000000000fe8000000000000000000000000000aa000000003300000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000ac1414bb000000000000000000000000000000002b0000000000000000000000000000000000ffffffffffff0635000005000000000000000900000000000000"], 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000fdffffff00"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) 966.41539ms ago: executing program 3 (id=2436): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x28000600) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x684, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) close(0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="6c0000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002c00028014000180080001000800ffee08000200ac1e00010c000280050001000000000006000340000100000800074000000001"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002640)={0x2c, r4, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x8000) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x3b000484}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20000014) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x10000, 0x5}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 824.848163ms ago: executing program 3 (id=2437): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x703f, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x5fad, 0xfffffffffffffda0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x50}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) write$binfmt_elf64(r0, &(0x7f0000001b40)=ANY=[], 0xfffffe3e) 680.501616ms ago: executing program 0 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0xfffffffffffffe71, &(0x7f00000001c0)={&(0x7f0000000180)={0x4a, r1, 0x11, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x24044054) 600.459018ms ago: executing program 0 (id=2439): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14b442, 0x82) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = dup2(r7, r6) getsockname$packet(r8, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000121401002abd70000000000008004f000000000008004b00f1dffe560800030001000000080015000200000008000100"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8084) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x6, &(0x7f0000000080)=[{0x0, 0x10, 0x8, 0x8}, {0x6, 0x4, 0x2, 0xfffffffd}, {0x101, 0x99, 0x3, 0x81}, {0x40, 0x6, 0x0, 0x10000}, {0xb, 0x7, 0x7, 0x4}, {0x6, 0x7, 0x4, 0x80}]}) r10 = openat$cgroup_procs(r9, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000100)=r4, 0x12) r11 = openat$cgroup_ro(r9, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000040)=0x1, 0x12) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="010701000000000000bedde58235b30728d34e27af9a2ecc23153f28a556deaad79fcbeb28bbc07915a0a47cd01beddb8da8503d9774d2110112f43c5bfe024034a92cd4a45ef1df3f40ea42186ba5ca3549bfab3614f694fc835213f9898561f68ff36955b121062db0ca6371f7298bba3c8edc07914bdf85730c406bd40187a1a632d83496b21b27cbc2ae016526ef4cd72e792ec9f2b5457683f3aaf5f32ecd4dbcd1f3c874c24cf7509758e08e5bc7beff5044dd29e48bc4a6ec444939"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000400)=ANY=[@ANYBLOB="0120000000000000000000002326c3555157e13d9101db252d19e8b046d10e11ca7876e145a39976baf3ae8360fcd400d6f6ccef5a4949bff9eddf41b6c1df9666ea8bfb00c7a7d4e8255fe72a392f369e332c54f120733cd918186ce539cec0ea494afe8d16979926b2aa4b5bd4d3"]) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x50, r13, 0x4, 0x70bd27, 0x2, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}, 0x1, 0x0, 0x0, 0x46004}, 0x20040090) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 599.717478ms ago: executing program 9 (id=2440): r0 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000040)=""/141) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, 0x0, 0x40044) semtimedop(0x0, &(0x7f0000000200), 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/260], 0x119) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) 489.60988ms ago: executing program 4 (id=2441): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = dup(r0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0xfffff001, 0x6, 0x10001, 0x5, 0x8, 0x3, 0xce47, 0x200}}) sched_setscheduler(0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000080)={0x180801600, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) process_madvise(r2, 0x0, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x10) 436.45548ms ago: executing program 9 (id=2442): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000ac0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x81881f, &(0x7f0000000c80)={[{@data_writeback}, {@nogrpid}, {@journal_async_commit}], [{@measure}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@euid_lt}, {@uid_lt}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000b80)='net/sctp\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000000)='.\x00', 0x50007a2) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7f454c4604040b00010000000000000003003e00ebfffffff00100000000000040000000000000000000000000000000000000002d8f38003b"], 0xcb) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x2000000, 0x0, 0x0, 0xa0090199) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x482200, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) cachestat(r1, &(0x7f0000000040)={0x7f, 0x57}, &(0x7f000009de80), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001240)={0x0, 0x0, 0xfffffffffffffd12}, 0x28) sendmsg$NFT_BATCH(r0, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001200)={&(0x7f0000000d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x2a0, 0x18, 0xa, 0x0, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x224, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14}, {0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'macsec0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_DELTABLE={0xe8, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x90, 0x6, "992dd53ba7118b6d6f460296b576d414b692cf7e47258480e2e0ea2f7017542ea33436f1b91194b3ce4089898c4351ecb1296b1c29bafc5a0d3862b58519ad7178ff49a7cf0871405d730efb9176df47e4b51a70b4c36edfb2562133a790e0dfcd114c37610dddad742393a0e96e38d426a747dbcce2619362a38023c73213cbe3b7a4fbedffbab16ee5979b"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0x6c, 0x5, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x488}, 0x1, 0x0, 0x0, 0x40054}, 0x24040015) 233.431715ms ago: executing program 0 (id=2443): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x11e, 0x1, 0x0, 0x0) 232.903395ms ago: executing program 4 (id=2444): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$inet6(0xa, 0x80002, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 170.074686ms ago: executing program 4 (id=2445): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000001, &(0x7f0000000340)={[{@nojournal_checksum}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}], [{@audit}, {@uid_gt}, {@hash}, {@smackfstransmute={'smackfstransmute', 0x3d, 'syz0\x00'}}, {@flag='posixacl'}, {@euid_lt}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (rerun: 64) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) (async, rerun: 64) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) (rerun: 64) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006b00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r7) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) (rerun: 64) 96.315438ms ago: executing program 4 (id=2446): socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1f00, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) poll(0x0, 0x0, 0xb) r5 = syz_pidfd_open(0x0, 0x0) setns(r5, 0x24020000) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r6, 0x403, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000740)={r6, &(0x7f0000000340)="cccdd26fd6ed38fa3e41954595c5092dc3d9475e35e5f4237f242c76143df0ef9a74651c0ca346e5464ad3bb46b2a3809d67d7ffe2571b498ff32006972e1b812f3cd2258adc360a546d6b0e3f1fb5bcaf4a6190886e75ff1826dffc0892bedec47393f52996728d61170c102e573b8644f18cf741855dda27107edb360010ef3bb7d04518ee84850f0601f92b180340a981725f3ecaf27e85e9ffa6cb9a31", &(0x7f0000000680)=""/135}, 0x20) r7 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r7, 0x0, 0xffffffffffffff9c, 0x0, 0x274) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) semtimedop(0x0, &(0x7f0000000000)=[{0x4, 0xc49, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) 21.771249ms ago: executing program 9 (id=2447): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) sched_getattr(r0, &(0x7f0000000100)={0x38}, 0x38, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x25, &(0x7f0000000000)={0x200, 0x0, 0x4bb8, 0x965f, 0x8}, 0x14) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, &(0x7f0000000100)) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010034bd7000fcdbdf25100000000c0006000100af30ec7856b64f01fe7000000100c86bb392b7", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4000891}, 0x4040000) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000280)=""/229, 0x26, 0xe5, 0x8, 0xfffffffc}, 0x28) syz_init_net_socket$llc(0x1a, 0x3, 0x0) setsockopt$llc_int(r5, 0x10c, 0x1, &(0x7f0000000000)=0xd5b, 0x4) 0s ago: executing program 5 (id=2448): syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000240)='./file1\x00', 0x200000, &(0x7f0000000200), 0x43, 0x572, &(0x7f0000000c40)="$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") quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f0000000180)='./file1\x00') r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x50, 0x1, 0x0, 0x80000000}, {0x6, 0x80, 0xfd, 0xfffffffd}]}, 0x10) write$tun(r1, &(0x7f00000028c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x14, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x28, 0x2c, 0x0, @local, @ipv4={'\x00', '\xff\xff', @empty}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0}}}}}, 0x5e) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3c, 0x0, 0x0, 0x0, 0x0, 0xfffff800, 0x80000001, 0x2}}) socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast2, @initdev}, &(0x7f00000000c0)=0xc) prctl$PR_SCHED_CORE(0x41, 0x3, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) sendto$packet(r0, &(0x7f0000000000)="e155d5a79a4e61b188e5667b37a97f5af026f4a1fd910c5e9f07db01a89e29581bd5", 0x22, 0x10, &(0x7f00000001c0)={0x11, 0x1b, r4, 0x1, 0x7}, 0x14) r5 = accept4$tipc(r0, 0x0, &(0x7f0000000080), 0x800) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000004, 0x100810, r5, 0xc1a6000) kernel console output (not intermixed with test programs): llbacks suppressed [ 359.085725][ T28] audit: type=1400 audit(1783094024.308:2311): avc: denied { write } for pid=11059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.155333][ T28] audit: type=1400 audit(1783094024.358:2312): avc: denied { setopt } for pid=11074 comm="syz.4.1807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 359.213152][ T28] audit: type=1400 audit(1783094024.368:2313): avc: denied { write } for pid=11075 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.409753][ T28] audit: type=1400 audit(1783094024.628:2314): avc: denied { write } for pid=11080 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.489980][ T28] audit: type=1400 audit(1783094024.698:2315): avc: denied { write } for pid=11100 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 359.796745][ T28] audit: type=1400 audit(1783094024.988:2316): avc: denied { getopt } for pid=11113 comm="syz.8.1812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 360.216725][ T28] audit: type=1400 audit(1783094025.048:2317): avc: denied { write } for pid=11102 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.307016][T11128] loop8: detected capacity change from 0 to 512 [ 360.349316][T11129] netlink: 'syz.9.1814': attribute type 4 has an invalid length. [ 360.369075][ T28] audit: type=1400 audit(1783094025.568:2318): avc: denied { write } for pid=11127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.411718][ T129] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 360.446152][ T129] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.541318][T11128] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.554743][T11128] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 360.710063][ T28] audit: type=1400 audit(1783094025.918:2319): avc: denied { write } for pid=11133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.799071][ T28] audit: type=1400 audit(1783094025.918:2320): avc: denied { write } for pid=11150 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.972348][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.243938][T11162] SELinux: security_context_str_to_sid (~) failed with errno=-22 [ 361.396199][T11165] veth1_to_bond: entered allmulticast mode [ 361.484254][T11166] veth0_vlan: entered allmulticast mode [ 361.601574][T11164] veth1_to_bond: left allmulticast mode [ 361.877766][T11179] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1822'. [ 361.986755][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1823'. [ 363.080849][T11195] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1825'. [ 363.471469][T11183] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 363.903570][T11207] loop9: detected capacity change from 0 to 8192 [ 363.998228][T11214] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1829'. [ 364.023459][T11210] netlink: 'syz.5.1827': attribute type 2 has an invalid length. [ 364.086465][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1828'. [ 364.104152][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1828'. [ 364.172238][T11206] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1828'. [ 364.206825][ T6874] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.216125][T11207] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1828'. [ 364.227981][T11220] loop0: detected capacity change from 0 to 128 [ 364.283991][T11202] loop5: detected capacity change from 0 to 8192 [ 364.294849][ T6874] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.303094][ T6874] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.311402][ T6874] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 364.319868][T11206] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1828'. [ 364.356656][T11220] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 364.434291][T11220] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.506679][T11226] netlink: 'syz.4.1826': attribute type 4 has an invalid length. [ 364.540455][T10474] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 364.551929][T10474] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 364.587034][ T28] kauditd_printk_skb: 182 callbacks suppressed [ 364.587052][ T28] audit: type=1400 audit(1783094029.808:2503): avc: denied { write } for pid=11217 comm="syz.0.1830" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 364.615743][T11220] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 364.654386][T11220] audit: out of memory in audit_log_start [ 364.658146][T11202] loop5: p2 p3 [ 364.673726][T11202] loop5: p3 start 117440512 is beyond EOD, truncated [ 364.696369][T11230] fido_id[11230]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 364.759470][T10230] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 364.772179][T11238] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1834'. [ 364.774264][ T28] audit: type=1400 audit(1783094029.978:2504): avc: denied { getopt } for pid=11233 comm="syz.8.1834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 364.824230][ T5646] udevd[5646]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 364.859116][T11242] loop5: detected capacity change from 0 to 128 [ 364.880388][T11242] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 364.880555][T11242] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.935118][ T28] audit: type=1400 audit(1783094030.128:2505): avc: denied { write } for pid=11240 comm="syz.5.1836" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 365.006426][ T28] audit: type=1400 audit(1783094030.228:2506): avc: denied { create } for pid=11239 comm="syz.0.1835" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 365.056055][ T28] audit: type=1400 audit(1783094030.228:2507): avc: denied { name_connect } for pid=11239 comm="syz.0.1835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 365.059264][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.076416][ T28] audit: type=1400 audit(1783094030.268:2508): avc: denied { listen } for pid=11239 comm="syz.0.1835" lport=34290 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.108525][ T28] audit: type=1400 audit(1783094030.268:2509): avc: denied { accept } for pid=11239 comm="syz.0.1835" lport=34290 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 365.108560][ T28] audit: type=1400 audit(1783094030.268:2510): avc: denied { setopt } for pid=11239 comm="syz.0.1835" lport=34290 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 365.304797][T11255] loop9: detected capacity change from 0 to 512 [ 365.313719][T11255] ext4: Unknown parameter 'noacl' [ 365.542113][T11277] netlink: 'syz.0.1843': attribute type 4 has an invalid length. [ 365.556630][T11279] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1841'. [ 365.572009][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1841'. [ 365.714164][T11280] xt_hashlimit: max too large, truncated to 1048576 [ 366.552275][T11297] loop5: detected capacity change from 0 to 4096 [ 366.558975][T11297] EXT4-fs: Ignoring removed bh option [ 366.586193][T11297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.907348][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.019957][T11318] netlink: 'syz.5.1856': attribute type 4 has an invalid length. [ 367.063328][ T3396] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 367.072540][ T3396] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.125389][T11321] fido_id[11321]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 367.183920][T11323] xt_hashlimit: size too large, truncated to 1048576 [ 367.648634][ T6880] bridge_slave_1: left allmulticast mode [ 367.654954][ T6880] bridge_slave_1: left promiscuous mode [ 367.660730][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.683342][ T6880] bridge_slave_0: left allmulticast mode [ 367.689115][ T6880] bridge_slave_0: left promiscuous mode [ 367.705048][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.815867][ T6880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.845579][ T6880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.854739][ T6880] bond0 (unregistering): Released all slaves [ 367.882235][ T6880] bond1 (unregistering): Released all slaves [ 367.893309][ T6880] bond2 (unregistering): Released all slaves [ 367.898793][ T6880] bond3 (unregistering): Released all slaves [ 367.936062][ T6880] tipc: Disabling bearer [ 367.942849][ T6880] tipc: Left network mode [ 368.056399][ T6880] hsr_slave_0: left promiscuous mode [ 368.063627][ T6880] hsr_slave_1: left promiscuous mode [ 368.064015][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.066206][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.144262][ T6880] team0 (unregistering): Port device team_slave_1 removed [ 368.147066][ T6880] team0 (unregistering): Port device team_slave_0 removed [ 368.166603][T11360] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=11360 comm=syz.8.1862 [ 368.255736][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 368.349228][T11367] loop0: detected capacity change from 0 to 512 [ 368.406007][ T6880] IPVS: stop unused estimator thread 0... [ 368.541658][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 369.069654][T11423] __nla_validate_parse: 2 callbacks suppressed [ 369.069674][T11423] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1877'. [ 369.106574][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 369.445255][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 369.506846][T11458] lo speed is unknown, defaulting to 1000 [ 369.592643][T11437] loop9: detected capacity change from 0 to 512 [ 369.663361][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 369.663379][ T28] audit: type=1400 audit(1783094034.848:2548): avc: denied { setopt } for pid=11451 comm="syz.8.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 369.733796][T11437] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.750075][T11437] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.766970][ T28] audit: type=1400 audit(1783094034.988:2549): avc: denied { write } for pid=11435 comm="syz.9.1881" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 369.796457][T11458] xfrm0 speed is unknown, defaulting to 1000 [ 369.901787][T11471] loop7: detected capacity change from 1024 to 0 [ 369.969464][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1889'. [ 370.152977][T11486] loop8: detected capacity change from 0 to 512 [ 370.172775][T11486] ext4: Unknown parameter 'noacl' [ 370.349153][ T8938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.372976][T11477] loop0: detected capacity change from 0 to 512 [ 370.477526][T11496] netlink: 'syz.4.1895': attribute type 178 has an invalid length. [ 370.512931][T11494] xt_hashlimit: max too large, truncated to 1048576 [ 370.515233][T11498] loop5: detected capacity change from 0 to 128 [ 370.548961][T11498] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 370.569854][T11498] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.578426][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1899'. [ 370.590014][ T28] audit: type=1400 audit(1783094035.798:2550): avc: denied { bind } for pid=11504 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.666501][ T28] audit: type=1400 audit(1783094035.818:2551): avc: denied { write } for pid=11504 comm="syz.4.1899" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 370.689921][T11510] loop9: detected capacity change from 0 to 256 [ 370.698618][T11498] lo speed is unknown, defaulting to 1000 [ 370.708293][T11506] loop7: detected capacity change from 0 to 1024 [ 370.714499][T11510] vfat: Unknown parameter 'mask' [ 370.788969][T11514] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1901'. [ 370.818650][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1901'. [ 370.830709][T11514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1901'. [ 370.927445][ T28] audit: type=1400 audit(1783094036.028:2552): avc: denied { setattr } for pid=11513 comm="syz.4.1901" name="NETLINK" dev="sockfs" ino=32609 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 371.063971][T11517] netlink: 'syz.5.1896': attribute type 16 has an invalid length. [ 371.108816][T11525] loop0: detected capacity change from 0 to 512 [ 371.126818][T11517] netlink: 'syz.5.1896': attribute type 17 has an invalid length. [ 371.139468][T11525] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 371.153501][T11498] xfrm0 speed is unknown, defaulting to 1000 [ 371.214082][T11525] EXT4-fs (loop0): 1 truncate cleaned up [ 371.224632][T11528] loop9: detected capacity change from 0 to 1764 [ 371.238597][T11525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.255213][T11528] iso9660: Bad value for 'uid' [ 371.271855][T11517] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.279079][T11517] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.295281][T11528] iso9660: Bad value for 'uid' [ 371.348820][ T28] audit: type=1400 audit(1783094036.528:2553): avc: denied { write } for pid=11524 comm="syz.0.1903" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 371.395024][T11517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 371.431899][T11517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 371.433296][ T28] audit: type=1400 audit(1783094036.528:2554): avc: denied { read append } for pid=11524 comm="syz.0.1903" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.537616][ T28] audit: type=1400 audit(1783094036.528:2555): avc: denied { open } for pid=11524 comm="syz.0.1903" path="/33/file2/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 371.600203][ T28] audit: type=1400 audit(1783094036.598:2556): avc: denied { append } for pid=11524 comm="syz.0.1903" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 371.670282][ T28] audit: type=1400 audit(1783094036.628:2557): avc: denied { ioctl } for pid=11524 comm="syz.0.1903" path="/33/file2/file1" dev="loop0" ino=15 ioctlcmd=0x662a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 372.842546][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.112373][T11551] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1909'. [ 373.112479][ T77] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.112587][ T77] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.112627][ T77] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.112664][ T77] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.259529][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 373.687390][T11580] loop5: detected capacity change from 0 to 512 [ 373.727545][T11580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.751733][T11584] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 373.790641][T11580] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 374.064031][T11605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.072497][T11605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.084089][T11604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.226543][T11604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.484884][T11614] vfat: Unknown parameter 'shortnama' [ 374.639943][T11617] set_capacity_and_notify: 2 callbacks suppressed [ 374.639961][T11617] loop0: detected capacity change from 0 to 1764 [ 375.189287][T11607] EXT4-fs error (device loop5): ext4_lookup:1785: inode #12: comm syz.5.1911: iget: bad i_size value: 2533274857506816 [ 375.214728][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 375.214745][ T28] audit: type=1400 audit(1783094040.388:2570): avc: denied { write } for pid=11579 comm="syz.5.1911" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 375.461629][ T28] audit: type=1400 audit(1783094040.678:2571): avc: denied { write } for pid=11612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.612747][ T28] audit: type=1400 audit(1783094040.818:2572): avc: denied { write } for pid=11639 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.038887][ T28] audit: type=1400 audit(1783094041.258:2573): avc: denied { write } for pid=11642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.085777][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.140716][ T28] audit: type=1400 audit(1783094041.358:2574): avc: denied { write } for pid=11661 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.186331][T11653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1932'. [ 376.217657][T11667] lo speed is unknown, defaulting to 1000 [ 376.368113][ T28] audit: type=1400 audit(1783094041.548:2575): avc: denied { write } for pid=11666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.393689][T11667] xfrm0 speed is unknown, defaulting to 1000 [ 376.409063][T11683] loop9: detected capacity change from 0 to 256 [ 376.421659][ T28] audit: type=1400 audit(1783094041.598:2576): avc: denied { write } for pid=11682 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.452118][T11683] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 376.489144][ T28] audit: type=1400 audit(1783094041.708:2577): avc: denied { write } for pid=11680 comm="syz.9.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 376.793157][ T28] audit: type=1400 audit(1783094042.008:2578): avc: denied { write } for pid=11686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.767379][ T28] audit: type=1400 audit(1783094042.908:2579): avc: denied { write } for pid=11713 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.818995][T11710] syzkaller1: entered promiscuous mode [ 377.819019][T11710] syzkaller1: entered allmulticast mode [ 378.186721][T11747] IPVS: length: 4096 != 8 [ 378.613448][T11773] loop8: detected capacity change from 0 to 2048 [ 378.655027][T11782] syzkaller1: entered promiscuous mode [ 378.672849][T11782] syzkaller1: entered allmulticast mode [ 378.781690][T11773] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 378.886486][T11805] loop5: detected capacity change from 0 to 128 [ 378.921596][T11805] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 379.001974][T11801] netlink: 73804 bytes leftover after parsing attributes in process `syz.4.1959'. [ 379.007875][T11805] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.080521][T11813] loop9: detected capacity change from 0 to 512 [ 379.092571][T11805] lo speed is unknown, defaulting to 1000 [ 379.105290][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.179649][T11813] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #11: comm syz.9.1961: ea_inode with extended attributes [ 379.250519][T11813] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.251178][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 379.266834][ C0] EXT4-fs (loop9): initial error at time 1783094044: ext4_xattr_inode_iget:441: inode 11 [ 379.276693][ C0] EXT4-fs (loop9): last error at time 1783094044: ext4_xattr_inode_iget:441: inode 11 [ 379.287341][T11813] EXT4-fs (loop9): Remounting filesystem read-only [ 379.308863][T11831] SELinux: Context system_u:object is not valid (left unmapped). [ 379.356022][T11826] netlink: 'syz.5.1960': attribute type 16 has an invalid length. [ 379.369742][T11826] netlink: 'syz.5.1960': attribute type 17 has an invalid length. [ 379.489283][T11813] EXT4-fs warning (device loop9): ext4_evict_inode:287: xattr delete (err -30) [ 379.570196][T11829] loop8: detected capacity change from 0 to 512 [ 379.673253][T11829] EXT4-fs error (device loop8): ext4_map_blocks:791: inode #11: block 992: comm syz.8.1963: lblock 6 mapped to illegal pblock 992 (length 1) [ 379.733277][T11813] EXT4-fs (loop9): 1 orphan inode deleted [ 379.765527][T11805] xfrm0 speed is unknown, defaulting to 1000 [ 379.812820][T11829] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 379.816002][T11829] ------------[ cut here ]------------ [ 379.825231][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 379.825254][ C0] EXT4-fs (loop8): initial error at time 1783094045: ext4_map_blocks:791: inode 11: block 992 [ 379.825288][ C0] EXT4-fs (loop8): last error at time 1783094045: ext4_map_blocks:791: inode 11: block 992 [ 379.857823][T11829] EA inode 11 i_nlink=2 [ 379.857869][T11829] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.8.1963/11829 [ 379.872938][T11829] Modules linked in: [ 379.876967][T11829] CPU: 0 UID: 0 PID: 11829 Comm: syz.8.1963 Not tainted syzkaller #0 PREEMPT(lazy) [ 379.886738][T11829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.896837][T11829] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 379.903485][T11829] Code: 26 cf 96 ff 49 8d 7e 40 4c 8d 2d db 8c 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 47 d9 03 90 90 90 90 90 90 90 [ 379.923205][T11829] RSP: 0000:ffffc90004a4f7f8 EFLAGS: 00010246 [ 379.929382][T11829] RAX: ffff888101d2bef0 RBX: ffff88811b98ab10 RCX: ffffffff81c2a836 [ 379.937499][T11829] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3500 [ 379.945691][T11829] RBP: 000000000000000b R08: 000188811b98aac3 R09: 0000000000000000 [ 379.953724][T11829] R10: ffffc90004a4f728 R11: 0001c90004a4f728 R12: ffff88811b98aac0 [ 379.961745][T11829] R13: ffffffff871d3500 R14: ffff88811b98aa78 R15: 0000000000000001 [ 379.969736][T11829] FS: 00007f339c6376c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 379.978736][T11829] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 379.985534][T11829] CR2: 00007fa4e2d1e000 CR3: 0000000111020000 CR4: 00000000003506f0 [ 379.993780][T11829] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 380.001791][T11829] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 380.009811][T11829] Call Trace: [ 380.013227][T11829] [ 380.016232][T11829] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 380.022193][T11829] ext4_xattr_delete_inode+0x6b5/0x790 [ 380.027738][T11829] ext4_evict_inode+0xb18/0xdf0 [ 380.032652][T11829] ? __pfx_ext4_evict_inode+0x10/0x10 [ 380.038056][T11829] evict+0x2a5/0x510 [ 380.042016][T11829] iput+0x430/0x5a0 [ 380.045857][T11829] ext4_process_orphan+0x1a4/0x1c0 [ 380.051025][T11829] ext4_orphan_cleanup+0x6a6/0xa10 [ 380.056255][T11829] ? ext4_register_li_request+0x14c/0x440 [ 380.062174][T11829] ext4_fill_super+0x33ab/0x3760 [ 380.067221][T11829] ? set_blocksize+0x14c/0x270 [ 380.072111][T11829] ? __pfx_ext4_fill_super+0x10/0x10 [ 380.077537][T11829] get_tree_bdev_flags+0x291/0x300 [ 380.083148][T11829] ? __pfx_ext4_fill_super+0x10/0x10 [ 380.088872][T11829] get_tree_bdev+0x1f/0x30 [ 380.093336][T11829] ext4_get_tree+0x1c/0x30 [ 380.097812][T11829] vfs_get_tree+0x57/0x1d0 [ 380.102278][T11829] do_new_mount+0x288/0x8d0 [ 380.106968][T11829] path_mount+0x4ad/0xb90 [ 380.111343][T11829] __se_sys_mount+0x28c/0x2e0 [ 380.116067][T11829] __x64_sys_mount+0x67/0x80 [ 380.120683][T11829] x64_sys_call+0x2d61/0x3020 [ 380.125539][T11829] do_syscall_64+0x136/0x3c0 [ 380.130283][T11829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.136260][T11829] RIP: 0033:0x7f339dbdf0ca [ 380.140697][T11829] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.160453][T11829] RSP: 002b:00007f339c636e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.169122][T11829] RAX: ffffffffffffffda RBX: 00007f339c636ee0 RCX: 00007f339dbdf0ca [ 380.177247][T11829] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f339c636ea0 [ 380.185404][T11829] RBP: 00002000000009c0 R08: 00007f339c636ee0 R09: 0000000000800718 [ 380.193512][T11829] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 380.201696][T11829] R13: 00007f339c636ea0 R14: 000000000000048d R15: 0000200000000200 [ 380.209790][T11829] [ 380.212887][T11829] ---[ end trace 0000000000000000 ]--- [ 380.252438][T11831] syz.0.1962 (11831) used greatest stack depth: 9536 bytes left [ 380.306335][T11813] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.436479][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 380.436497][ T28] audit: type=1400 audit(1783094045.658:2593): avc: denied { write } for pid=11822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.566279][ T28] audit: type=1400 audit(1783094045.688:2594): avc: denied { write } for pid=11844 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.606346][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.716535][T11829] EXT4-fs (loop8): 1 orphan inode deleted [ 380.744553][T11829] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.837056][T11848] xt_hashlimit: max too large, truncated to 1048576 [ 380.989482][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.110355][T11872] syzkaller1: entered promiscuous mode [ 381.147497][T11872] syzkaller1: entered allmulticast mode [ 381.209092][ T8938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.240505][ T28] audit: type=1400 audit(1783094046.458:2595): avc: denied { write } for pid=11864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.330970][ T28] audit: type=1400 audit(1783094046.548:2596): avc: denied { write } for pid=11891 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.362426][T11897] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1976'. [ 381.554372][T11900] loop9: detected capacity change from 0 to 8192 [ 381.658726][T11900] loop9: p1[EZD] p2 p3 p4 [ 381.663543][T11900] loop9: p1 size 32768 extends beyond EOD, truncated [ 381.723914][ T28] audit: type=1400 audit(1783094046.948:2598): avc: denied { lock } for pid=11896 comm="syz.5.1976" path="socket:[34118]" dev="sockfs" ino=34118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 381.749724][T11900] loop9: p2 start 930308 is beyond EOD, truncated [ 381.749751][T11900] loop9: p3 start 117772289 is beyond EOD, truncated [ 381.749771][T11900] loop9: p4 size 262144 extends beyond EOD, truncated [ 381.754566][ T28] audit: type=1400 audit(1783094046.978:2599): avc: denied { write } for pid=11893 comm="syz.9.1973" name="loop9p1" dev="devtmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.754607][ T28] audit: type=1400 audit(1783094046.978:2600): avc: denied { open } for pid=11893 comm="syz.9.1973" path="/dev/loop9p1" dev="devtmpfs" ino=1758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 381.758368][ T28] audit: type=1400 audit(1783094046.978:2601): avc: denied { write } for pid=11893 comm="syz.9.1973" name="file2" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.758409][ T28] audit: type=1400 audit(1783094046.978:2602): avc: denied { open } for pid=11893 comm="syz.9.1973" path="/121/file2" dev="tmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.758451][ T28] audit: type=1400 audit(1783094046.978:2603): avc: denied { ioctl } for pid=11893 comm="syz.9.1973" path="/121/file2" dev="tmpfs" ino=662 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 381.771350][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11897 comm=syz.5.1976 [ 382.284902][T11910] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1978'. [ 382.588422][T11915] lo speed is unknown, defaulting to 1000 [ 382.614209][T11920] xt_l2tp: invalid flags combination: 0 [ 382.618280][T11918] loop0: detected capacity change from 0 to 512 [ 382.644285][T11918] EXT4-fs: quotafile must be on filesystem root [ 382.731361][T11924] loop8: detected capacity change from 0 to 1024 [ 382.776541][T11928] syzkaller1: entered promiscuous mode [ 382.780321][T11924] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 382.787047][T11928] syzkaller1: entered allmulticast mode [ 382.830141][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.842804][T11931] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1987'. [ 382.876804][T11915] xfrm0 speed is unknown, defaulting to 1000 [ 383.033767][T11940] xt_l2tp: v2 doesn't support IP mode [ 383.046872][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 383.056205][T11931] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1987'. [ 383.161262][T11942] lo speed is unknown, defaulting to 1000 [ 383.275391][T11942] xfrm0 speed is unknown, defaulting to 1000 [ 383.699687][T11969] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2000'. [ 383.962589][T11971] loop0: detected capacity change from 0 to 512 [ 384.155966][T11971] EXT4-fs (loop0): 1 orphan inode deleted [ 384.197560][T11971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.216195][T11971] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 384.292037][T11973] syzkaller1: entered promiscuous mode [ 384.550804][T11973] syzkaller1: entered allmulticast mode [ 384.677976][ T3985] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:9: Failed to release dquot type 1 [ 384.932711][T11982] loop9: detected capacity change from 0 to 512 [ 384.957087][T11982] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 384.957209][T11982] EXT4-fs: error: could not find journal device path [ 385.167154][T11982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.196599][T11990] loop5: detected capacity change from 0 to 512 [ 385.209291][T11982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.234062][T11990] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 385.429681][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.498609][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 385.498627][ T28] audit: type=1400 audit(1783094050.718:2615): avc: denied { write } for pid=11986 comm="syz.8.2005" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 385.649850][T12002] loop0: detected capacity change from 0 to 4096 [ 385.683762][ T28] audit: type=1400 audit(1783094050.898:2616): avc: denied { write } for pid=11991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 385.731401][T12002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.744073][T12004] loop5: detected capacity change from 0 to 512 [ 385.851310][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.862551][ T28] audit: type=1400 audit(1783094051.018:2617): avc: denied { write } for pid=12013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.006827][T12021] loop0: detected capacity change from 0 to 512 [ 386.027738][T12021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 386.099101][T12021] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.2011: iget: bad i_size value: 38620345925642 [ 386.099969][ T28] audit: type=1400 audit(1783094051.308:2618): avc: denied { ioctl } for pid=12015 comm="syz.9.2012" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 386.112534][T12021] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 386.138428][T12021] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.2011: couldn't read orphan inode 15 (err -117) [ 386.148048][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 386.148096][ C1] EXT4-fs (loop0): initial error at time 1783094051: ext4_orphan_get:1399: inode 15 [ 386.148192][ C1] EXT4-fs (loop0): last error at time 1783094051: ext4_orphan_get:1399: inode 15 [ 386.189403][T12021] loop0: lost filesystem error report for type 5 error -117 [ 386.192645][T12021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 386.327623][ T28] audit: type=1400 audit(1783094051.448:2619): avc: denied { write } for pid=12020 comm="syz.0.2011" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 386.355828][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2013'. [ 386.383627][T12023] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2013'. [ 386.434812][ T28] audit: type=1400 audit(1783094051.548:2620): avc: denied { write } for pid=12022 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.458115][ T28] audit: type=1400 audit(1783094051.638:2621): avc: denied { write } for pid=12041 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.506567][T12050] syzkaller1: entered promiscuous mode [ 386.512194][T12050] syzkaller1: entered allmulticast mode [ 386.522129][T12004] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.2009: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 386.612057][T12004] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 386.630323][T12004] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.2009: Bad quota inode: 4, type: 1 [ 386.631202][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 386.631282][ C0] EXT4-fs (loop5): initial error at time 1783094051: ext4_ext_check_inode:521: inode 4 [ 386.631823][ C0] EXT4-fs (loop5): last error at time 1783094051: ext4_ext_check_inode:521: inode 4 [ 386.722186][T12004] loop5: lost filesystem error report for type 5 error -117 [ 386.732353][T12004] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 386.761009][ T28] audit: type=1400 audit(1783094051.978:2622): avc: denied { write } for pid=12047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.826471][T12004] EXT4-fs (loop5): mount failed [ 386.836183][ T28] audit: type=1400 audit(1783094052.058:2623): avc: denied { write } for pid=12067 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.893195][ T77] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm kworker/u8:5: bg 0: block 5: invalid block bitmap [ 386.894855][ T77] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1076 with error 28 [ 386.894883][ T77] EXT4-fs (loop0): This should not happen!! Data will be lost [ 386.894883][ T77] [ 386.894895][ T77] EXT4-fs (loop0): Total free blocks count 0 [ 386.894989][ T77] EXT4-fs (loop0): Free/Dirty block details [ 386.895032][ T77] EXT4-fs (loop0): free_blocks=0 [ 386.895048][ T77] EXT4-fs (loop0): dirty_blocks=1080 [ 386.895063][ T77] EXT4-fs (loop0): Block reservation details [ 386.895077][ T77] EXT4-fs (loop0): i_reserved_data_blocks=1080 [ 386.904292][T12021] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #18: comm syz.0.2011: data will be lost [ 386.908947][T12021] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.081317][T12091] loop5: detected capacity change from 0 to 128 [ 387.090816][ T28] audit: type=1400 audit(1783094052.278:2624): avc: denied { write } for pid=12074 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.094019][T12091] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 387.094260][T12091] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 387.156592][T12091] lo speed is unknown, defaulting to 1000 [ 387.250331][T12082] loop8: detected capacity change from 0 to 8192 [ 387.250361][T12102] netlink: 'syz.5.2021': attribute type 16 has an invalid length. [ 387.250379][T12102] netlink: 'syz.5.2021': attribute type 17 has an invalid length. [ 387.377702][T12091] xfrm0 speed is unknown, defaulting to 1000 [ 387.689756][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 387.703045][T12109] loop9: detected capacity change from 0 to 512 [ 387.713683][T12109] ext4: Unknown parameter 'noacl' [ 387.842448][T12111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.903024][T12111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.068078][T12117] xt_hashlimit: max too large, truncated to 1048576 [ 388.184082][T12127] loop8: detected capacity change from 0 to 512 [ 388.282705][T12127] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.301676][T12127] tipc: Enabling of bearer rejected, already enabled [ 388.802474][T12134] loop5: detected capacity change from 0 to 512 [ 388.856533][T12134] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.2031: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 388.881280][T12134] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 388.881477][T12134] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.2031: Bad quota inode: 4, type: 1 [ 388.901652][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 388.901676][ C1] EXT4-fs (loop5): initial error at time 1783094054: ext4_ext_check_inode:521: inode 4 [ 388.901704][ C1] EXT4-fs (loop5): last error at time 1783094054: ext4_ext_check_inode:521: inode 4 [ 388.969847][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.031000][T12134] loop5: lost filesystem error report for type 5 error -117 [ 389.033661][T12134] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 389.081366][T12134] EXT4-fs (loop5): mount failed [ 389.142475][T12160] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2038'. [ 389.161220][T12160] netlink: 9 bytes leftover after parsing attributes in process `syz.8.2038'. [ 389.219030][T12163] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2037'. [ 389.275153][T12174] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2037'. [ 389.277916][T12165] loop0: detected capacity change from 0 to 512 [ 389.310325][T12174] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2037'. [ 389.327562][T12176] loop5: detected capacity change from 0 to 512 [ 389.351722][T12176] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 389.361694][T12176] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 389.373195][T12176] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 389.397679][T12176] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 389.407347][T12176] System zones: 0-2, 18-18, 34-35 [ 389.413059][T12176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.433065][T12183] loop8: detected capacity change from 0 to 512 [ 389.458750][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2041'. [ 389.473079][T12183] EXT4-fs: Ignoring removed mblk_io_submit option [ 389.486933][T12183] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.499575][T12183] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.539032][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.712994][T12193] tmpfs: Bad value for 'mpol' [ 389.737757][T12194] loop5: detected capacity change from 0 to 1024 [ 389.753411][T12194] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 389.768468][T12194] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 389.789563][T12194] jbd2_journal_init_inode: Cannot locate journal superblock [ 389.805215][T12194] EXT4-fs (loop5): Could not load journal inode [ 389.869703][T12196] xt_ipcomp: unknown flags 1D [ 390.260927][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.451013][T12220] Cannot find del_set index 4 as target [ 390.511125][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 390.511144][ T28] audit: type=1400 audit(1783094055.728:2635): avc: denied { connect } for pid=12204 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 390.537719][ T28] audit: type=1400 audit(1783094055.728:2636): avc: denied { getopt } for pid=12204 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 390.557386][ T28] audit: type=1400 audit(1783094055.728:2637): avc: denied { write } for pid=12204 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 390.735471][T12230] tipc: Enabled bearer , priority 10 [ 390.781751][ T28] audit: type=1400 audit(1783094055.998:2638): avc: denied { connect } for pid=12231 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 390.932444][T12238] loop0: detected capacity change from 0 to 256 [ 390.950827][T12238] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 390.982445][T12238] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12238 comm=syz.0.2059 [ 391.114605][T12234] lo speed is unknown, defaulting to 1000 [ 391.676441][T12253] futex_wake_op: syz.8.2062 tries to shift op by 144; fix this program [ 391.742316][T12254] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2062'. [ 392.198879][T12251] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.2060: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 392.241103][T12234] xfrm0 speed is unknown, defaulting to 1000 [ 392.264811][T12251] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 392.265043][T12251] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.2060: Bad quota inode: 4, type: 1 [ 392.274140][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 392.274161][ C1] EXT4-fs (loop0): initial error at time 1783094057: ext4_ext_check_inode:521: inode 4 [ 392.274196][ C1] EXT4-fs (loop0): last error at time 1783094057: ext4_ext_check_inode:521: inode 4 [ 392.446084][T12251] loop0: lost filesystem error report for type 5 error -117 [ 392.474353][T12251] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 392.553960][T12251] EXT4-fs (loop0): mount failed [ 392.823366][ T28] audit: type=1400 audit(1783094057.988:2639): avc: denied { getopt } for pid=12270 comm="syz.4.2066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.871975][T12274] set_capacity_and_notify: 1 callbacks suppressed [ 392.871992][T12274] loop0: detected capacity change from 0 to 256 [ 392.934003][T12274] vfat: Unknown parameter './file2' [ 393.103022][ T28] audit: type=1400 audit(1783094058.318:2640): avc: denied { setopt } for pid=12286 comm="syz.9.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.130322][ T28] audit: type=1400 audit(1783094058.328:2641): avc: denied { getopt } for pid=12286 comm="syz.9.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 393.150607][ T28] audit: type=1400 audit(1783094058.328:2642): avc: denied { write } for pid=12286 comm="syz.9.2073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 393.188715][T12300] netlink: 182 bytes leftover after parsing attributes in process `syz.8.2076'. [ 393.199176][T12302] loop9: detected capacity change from 0 to 512 [ 393.205917][T12302] ext4: Unknown parameter 'noacl' [ 393.330970][ T28] audit: type=1400 audit(1783094058.398:2643): avc: denied { create } for pid=12281 comm="syz.4.2071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 393.379220][T12308] random: crng reseeded on system resumption [ 393.397132][ T28] audit: type=1400 audit(1783094058.598:2644): avc: denied { write } for pid=12273 comm="syz.0.2067" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 393.504306][T12313] loop8: detected capacity change from 0 to 512 [ 393.552593][T12313] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.2077: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 393.572728][T12313] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 393.580036][T12313] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.2077: Bad quota inode: 4, type: 1 [ 393.589342][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 393.589363][ C1] EXT4-fs (loop8): initial error at time 1783094058: ext4_ext_check_inode:521: inode 4 [ 393.589398][ C1] EXT4-fs (loop8): last error at time 1783094058: ext4_ext_check_inode:521: inode 4 [ 393.625921][T12313] loop8: lost filesystem error report for type 5 error -117 [ 393.627179][T12313] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 393.681304][T12313] EXT4-fs (loop8): mount failed [ 393.709185][T12316] xt_hashlimit: max too large, truncated to 1048576 [ 393.861256][T12323] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2081'. [ 394.607287][T12321] loop0: detected capacity change from 0 to 1024 [ 394.625611][T12321] EXT4-fs: dax option not supported [ 395.010467][T12346] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2088'. [ 395.149128][T12348] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 395.294688][T12348] bond1: (slave gretap1): making interface the new active one [ 395.335781][T12348] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 395.596302][T12357] loop0: detected capacity change from 0 to 512 [ 395.812010][T12357] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.2091: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 395.844639][T12364] netlink: 'syz.4.2093': attribute type 1 has an invalid length. [ 395.853883][T12357] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 395.858569][T12357] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.2091: Bad quota inode: 4, type: 1 [ 395.867818][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 395.867841][ C1] EXT4-fs (loop0): initial error at time 1783094061: ext4_ext_check_inode:521: inode 4 [ 395.867874][ C1] EXT4-fs (loop0): last error at time 1783094061: ext4_ext_check_inode:521: inode 4 [ 395.925496][T12364] 8021q: adding VLAN 0 to HW filter on device bond5 [ 395.995349][T12357] loop0: lost filesystem error report for type 5 error -117 [ 395.995825][T12364] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2093'. [ 396.018697][T12357] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 396.044866][T12374] loop5: detected capacity change from 0 to 128 [ 396.058357][T12374] vfat: Unknown parameter './file0' [ 396.079784][T12357] EXT4-fs (loop0): mount failed [ 396.223419][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2095'. [ 396.379994][T12374] loop5: detected capacity change from 0 to 764 [ 396.541276][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 396.541306][ T28] audit: type=1400 audit(1783094061.748:2651): avc: denied { bind } for pid=12378 comm="syz.4.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 396.875191][ T28] audit: type=1400 audit(1783094061.798:2652): avc: denied { create } for pid=12378 comm="syz.4.2098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 397.082635][T12387] loop0: detected capacity change from 0 to 164 [ 397.416893][T12386] rock: directory entry would overflow storage [ 397.423127][T12386] rock: sig=0x4f50, size=4, remaining=3 [ 397.428705][T12386] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 397.436834][T12386] rock: directory entry would overflow storage [ 397.443122][T12386] rock: sig=0x4f50, size=4, remaining=3 [ 397.448691][T12386] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 398.808172][T12415] loop5: detected capacity change from 0 to 512 [ 398.925591][T12415] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #4: comm syz.5.2109: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 398.976628][T12415] loop5: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 398.976817][T12415] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.2109: Bad quota inode: 4, type: 1 [ 398.986010][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 398.986027][ C1] EXT4-fs (loop5): initial error at time 1783094064: ext4_ext_check_inode:521: inode 4 [ 398.986057][ C1] EXT4-fs (loop5): last error at time 1783094064: ext4_ext_check_inode:521: inode 4 [ 399.120027][T12415] loop5: lost filesystem error report for type 5 error -117 [ 399.120212][T12415] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.200327][T12415] EXT4-fs (loop5): mount failed [ 399.382102][ T28] audit: type=1400 audit(1783094064.608:2653): avc: denied { read write } for pid=12421 comm="syz.5.2111" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 399.412121][ T28] audit: type=1400 audit(1783094064.608:2654): avc: denied { open } for pid=12421 comm="syz.5.2111" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 399.613490][T12399] loop0: detected capacity change from 0 to 512 [ 399.663541][T12399] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 399.686974][T12399] EXT4-fs: error: could not find journal device path [ 400.020522][T12436] xt_l2tp: v2 doesn't support IP mode [ 400.114236][T12442] netlink: 'syz.5.2116': attribute type 1 has an invalid length. [ 400.142396][T12442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.186860][ T28] audit: type=1400 audit(1783094065.408:2655): avc: denied { connect } for pid=12443 comm="syz.4.2117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 400.227539][T12442] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 400.270875][T12449] loop8: detected capacity change from 0 to 764 [ 400.429070][T12457] loop8: detected capacity change from 0 to 512 [ 400.733754][T12457] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.2121: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 400.888920][T12457] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 400.922164][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 400.940854][ C1] EXT4-fs (loop8): initial error at time 1783094066: ext4_ext_check_inode:521: inode 4 [ 400.954263][ C1] EXT4-fs (loop8): last error at time 1783094066: ext4_ext_check_inode:521: inode 4 [ 401.088074][T12457] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.2121: Bad quota inode: 4, type: 1 [ 401.123472][T12457] loop8: lost filesystem error report for type 5 error -117 [ 401.150724][T12457] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 401.400724][T12457] EXT4-fs (loop8): mount failed [ 401.511169][T12485] xt_hashlimit: max too large, truncated to 1048576 [ 402.092662][T12490] loop5: detected capacity change from 0 to 128 [ 402.142170][T12490] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 402.186004][T12490] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.298261][T12490] lo speed is unknown, defaulting to 1000 [ 402.394873][T12496] FAULT_INJECTION: forcing a failure. [ 402.394873][T12496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.408353][T12496] CPU: 1 UID: 0 PID: 12496 Comm: syz.9.2133 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 402.408391][T12496] Tainted: [W]=WARN [ 402.408398][T12496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 402.408446][T12496] Call Trace: [ 402.408454][T12496] [ 402.408463][T12496] __dump_stack+0x1d/0x30 [ 402.408493][T12496] dump_stack_lvl+0x95/0xd0 [ 402.408572][T12496] dump_stack+0x15/0x1b [ 402.408655][T12496] should_fail_ex+0x25e/0x270 [ 402.408684][T12496] should_fail+0xb/0x20 [ 402.408712][T12496] should_fail_usercopy+0x1a/0x20 [ 402.408758][T12496] _copy_from_user+0x1c/0xb0 [ 402.408776][T12496] ___sys_sendmsg+0xc1/0x1e0 [ 402.408820][T12496] __x64_sys_sendmsg+0xd4/0x160 [ 402.408974][T12496] x64_sys_call+0x194c/0x3020 [ 402.409003][T12496] do_syscall_64+0x136/0x3c0 [ 402.409040][T12496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.409061][T12496] RIP: 0033:0x7fd6d821de59 [ 402.409085][T12496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.409150][T12496] RSP: 002b:00007fd6d6c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.409171][T12496] RAX: ffffffffffffffda RBX: 00007fd6d84a5fa0 RCX: 00007fd6d821de59 [ 402.409186][T12496] RDX: 0000000000000894 RSI: 0000200000000000 RDI: 0000000000000004 [ 402.409203][T12496] RBP: 00007fd6d6c77090 R08: 0000000000000000 R09: 0000000000000000 [ 402.409218][T12496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.409233][T12496] R13: 00007fd6d84a6038 R14: 00007fd6d84a5fa0 R15: 00007fff96e01c38 [ 402.409310][T12496] [ 402.503835][T12490] xfrm0 speed is unknown, defaulting to 1000 [ 402.867781][T12513] loop9: detected capacity change from 0 to 512 [ 402.917882][T12513] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.2138: corrupted in-inode xattr: e_value size too large [ 402.932804][T12515] loop0: detected capacity change from 0 to 512 [ 402.946710][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 402.961397][T12513] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 402.964772][T12513] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2138: couldn't read orphan inode 15 (err -117) [ 402.974193][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 402.974216][ C0] EXT4-fs (loop9): initial error at time 1783094068: ext4_iget_extra_inode:5180: inode 15 [ 402.974268][ C0] EXT4-fs (loop9): last error at time 1783094068: ext4_iget_extra_inode:5180: inode 15 [ 403.009016][T12515] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 403.012808][T12513] loop9: lost filesystem error report for type 5 error -117 [ 403.023540][T12513] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.063272][T12519] netlink: 'syz.5.2140': attribute type 1 has an invalid length. [ 403.075227][T12513] EXT4-fs error (device loop9): ext4_inlinedir_to_tree:1332: inode #12: block 7: comm syz.9.2138: path /144/file0/file0: bad entry in directory: directory entry overrun - offset=196864, inode=4278190093, rec_len=196860, size=60 fake=0 [ 403.100831][T12515] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2139: bg 0: block 64: padding at end of block bitmap is not set [ 403.160513][ T8938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.170595][T12515] loop0: lost filesystem error report for type 5 error -117 [ 403.170793][T12515] Quota error (device loop0): write_blk: dquota write failed [ 403.178111][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 403.178128][ C1] EXT4-fs (loop0): initial error at time 1783094068: ext4_validate_block_bitmap:441 [ 403.178173][ C1] EXT4-fs (loop0): last error at time 1783094068: ext4_validate_block_bitmap:441 [ 403.246683][T12526] bond2: (slave geneve2): making interface the new active one [ 403.254730][T12526] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 403.269557][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.271296][T12515] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 403.285805][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.296474][T12515] Quota error (device loop0): write_blk: dquota write failed [ 403.305232][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 403.348480][T12515] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 403.374835][T12515] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.2139: Failed to acquire dquot type 1 [ 403.415666][T12515] loop0: lost filesystem error report for type 5 error -117 [ 403.424130][T12515] EXT4-fs (loop0): 1 truncate cleaned up [ 403.503968][T12515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.736478][T12539] loop8: detected capacity change from 0 to 512 [ 403.807260][T12539] EXT4-fs: inline encryption not supported [ 403.918219][T12540] dummy0: entered allmulticast mode [ 404.005597][T12539] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.142715][T12539] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.405550][T12540] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.2139: lblock 0 mapped to illegal pblock 3 (length 1) [ 404.444225][ T28] audit: type=1400 audit(1783094069.648:2656): avc: denied { write } for pid=12538 comm="syz.8.2145" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.475999][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.497030][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.526877][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.536680][T12548] EXT4-fs error (device loop0): ext4_map_blocks:791: inode #2: block 3: comm syz.0.2139: lblock 0 mapped to illegal pblock 3 (length 1) [ 404.557222][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.567307][ T28] audit: type=1400 audit(1783094069.708:2657): avc: denied { ioctl } for pid=12538 comm="syz.8.2145" path="socket:[37200]" dev="sockfs" ino=37200 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 404.603843][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.629996][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.652345][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.687082][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.717273][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.746605][T12514] dummy0: left allmulticast mode [ 404.751754][T10464] hid-generic 0103:0004:0000.001A: unknown main item tag 0x0 [ 404.778673][T10464] hid-generic 0103:0004:0000.001A: hidraw0: HID v0.05 Device [syz0] on syz1 [ 404.851202][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.867805][ T7680] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.883307][T12550] fido_id[12550]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 405.049414][T12552] loop5: detected capacity change from 0 to 512 [ 405.069276][T12552] EXT4-fs: Ignoring removed nobh option [ 405.094048][T12552] EXT4-fs (loop5): 1 orphan inode deleted [ 405.112639][T12552] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.344008][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.364501][T12555] loop9: detected capacity change from 0 to 512 [ 405.418952][T12561] loop5: detected capacity change from 0 to 128 [ 405.432499][T12561] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 405.474924][T12564] tmpfs: Bad value for 'mpol' [ 405.492551][T12555] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.2151: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 405.517498][T12561] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.528142][T12555] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 405.539142][T12564] loop0: detected capacity change from 0 to 1024 [ 405.565075][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 405.565731][T12567] program syz.8.2148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 405.571677][ C0] EXT4-fs (loop9): initial error at time 1783094070: ext4_ext_check_inode:521: inode 4 [ 405.571713][ C0] EXT4-fs (loop9): last error at time 1783094070: ext4_ext_check_inode:521: inode 4 [ 405.604503][T12561] lo speed is unknown, defaulting to 1000 [ 405.611081][T12564] EXT4-fs: dax option not supported [ 405.628457][T12555] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.2151: Bad quota inode: 4, type: 1 [ 405.648626][ T28] audit: type=1400 audit(1783094070.858:2658): avc: denied { write } for pid=12556 comm="syz.8.2148" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 405.695856][T12555] loop9: lost filesystem error report for type 5 error -117 [ 405.699499][T12564] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2152'. [ 405.720939][T12564] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2152'. [ 405.732092][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 405.752574][T12561] xfrm0 speed is unknown, defaulting to 1000 [ 405.770431][ T28] audit: type=1400 audit(1783094070.958:2659): avc: denied { read } for pid=12563 comm="syz.0.2152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 405.801617][T12555] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 405.857165][T12569] netlink: 'syz.5.2150': attribute type 16 has an invalid length. [ 405.930786][T12555] EXT4-fs (loop9): mount failed [ 405.951736][T12574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12574 comm=syz.0.2154 [ 406.213715][T12569] netlink: 'syz.5.2150': attribute type 17 has an invalid length. [ 406.372816][ T3985] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 406.381912][ T3985] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 406.391148][ T3985] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 406.588121][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 406.647434][T12585] netlink: 'syz.8.2158': attribute type 32 has an invalid length. [ 406.651997][T12587] netlink: 216 bytes leftover after parsing attributes in process `syz.4.2159'. [ 406.713672][T12601] loop9: detected capacity change from 0 to 512 [ 406.748593][T12601] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 406.801239][T12601] EXT4-fs (loop9): shut down requested (0) [ 406.808215][ T28] audit: type=1400 audit(1783094072.028:2660): avc: denied { read } for pid=2960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 406.809653][T12601] EXT4-fs warning (device loop9): dx_probe:791: inode #2: lblock 0: comm syz.9.2162: error -EUCLEAN reading directory block [ 406.862999][ T28] audit: type=1400 audit(1783094072.028:2661): avc: denied { search } for pid=2960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.593223][T12624] loop5: detected capacity change from 0 to 512 [ 407.633077][T12624] ext4: Unknown parameter 'noacl' [ 407.810329][ T8938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 407.858296][T12632] loop9: detected capacity change from 0 to 128 [ 407.870516][T12632] ext4: Bad value for 'max_batch_time' [ 407.879954][T10267] udevd[10267]: incorrect ext4 checksum on /dev/loop9 [ 407.970206][T12638] xt_hashlimit: max too large, truncated to 1048576 [ 408.270310][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 408.270342][ T28] audit: type=1400 audit(1783094073.388:2667): avc: denied { mount } for pid=12636 comm="syz.8.2174" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 408.680793][T12651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11831 sclass=netlink_route_socket pid=12651 comm=syz.0.2177 [ 408.963413][T12661] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2181'. [ 409.180561][T12667] loop9: detected capacity change from 0 to 512 [ 409.320326][T12667] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.2182: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 409.376986][T12667] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 409.377180][T12667] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.2182: Bad quota inode: 4, type: 1 [ 409.386312][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 409.386332][ C1] EXT4-fs (loop9): initial error at time 1783094074: ext4_ext_check_inode:521: inode 4 [ 409.386361][ C1] EXT4-fs (loop9): last error at time 1783094074: ext4_ext_check_inode:521: inode 4 [ 409.457715][T12667] loop9: lost filesystem error report for type 5 error -117 [ 409.457914][T12667] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 409.502893][T12667] EXT4-fs (loop9): mount failed [ 410.634572][T12689] loop8: detected capacity change from 0 to 512 [ 410.712880][T12689] ext2: Unknown parameter 'measure' [ 411.502992][T12695] 9p: Bad value for 'rfdno' [ 411.624639][ T28] audit: type=1400 audit(1783094076.738:2668): avc: denied { read } for pid=12669 comm="syz.0.2185" name="usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.696286][T10474] hid_parser_main: 14 callbacks suppressed [ 411.696307][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.722431][ T28] audit: type=1400 audit(1783094076.738:2669): avc: denied { open } for pid=12669 comm="syz.0.2185" path="/dev/usbmon6" dev="devtmpfs" ino=160 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 411.750339][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.763756][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.778739][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.795027][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.811152][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.829050][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.837938][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.853351][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.865339][T10474] hid-generic 0003:9739:0007.001B: unknown main item tag 0x0 [ 411.883464][T10474] hid-generic 0003:9739:0007.001B: hidraw0: USB HID v0.08 Device [syz1] on syz0 [ 411.927644][T12702] fido_id[12702]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 411.967224][T12706] syzkaller0: entered promiscuous mode [ 411.972855][T12706] syzkaller0: entered allmulticast mode [ 412.102566][ T28] audit: type=1400 audit(1783094077.248:2670): avc: denied { write } for pid=12707 comm="syz.0.2195" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 412.329493][T12716] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:20001 [ 412.340697][ T28] audit: type=1400 audit(1783094077.548:2671): avc: denied { lock } for pid=12712 comm="syz.4.2196" path="socket:[36620]" dev="sockfs" ino=36620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 412.419804][ T28] audit: type=1400 audit(1783094077.558:2672): avc: denied { mount } for pid=12712 comm="syz.4.2196" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 412.684968][T12723] loop8: detected capacity change from 0 to 512 [ 412.712961][T12723] ext4: Unknown parameter 'dont_hash' [ 413.630191][ T28] audit: type=1400 audit(1783094078.848:2673): avc: denied { setopt } for pid=12735 comm="syz.4.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 413.696992][T12727] loop9: detected capacity change from 0 to 512 [ 413.965879][T12752] loop8: detected capacity change from 0 to 128 [ 414.097895][T12752] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 414.110317][T12752] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.125297][T12727] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.2199: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 414.182660][ T28] audit: type=1400 audit(1783094079.408:2674): avc: denied { write } for pid=12751 comm="syz.8.2209" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 414.212194][T12752] EXT4-fs error (device loop8): ext4_validate_block_bitmap:423: comm syz.8.2209: bg 0: bad block bitmap checksum [ 414.242439][T12727] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 414.242703][T12727] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.2199: Bad quota inode: 4, type: 1 [ 414.242735][T12727] loop9: lost filesystem error report for type 5 error -117 [ 414.242855][T12727] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 414.243116][T12727] EXT4-fs (loop9): mount failed [ 414.356931][ T28] audit: type=1400 audit(1783094079.578:2675): avc: denied { create } for pid=12760 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 414.407692][ T28] audit: type=1400 audit(1783094079.598:2676): avc: denied { connect } for pid=12760 comm="syz.4.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 414.455782][T12769] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 414.478729][T12773] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2214'. [ 414.503144][ T28] audit: type=1400 audit(1783094079.718:2677): avc: denied { bind } for pid=12772 comm="syz.9.2214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 414.542615][ T28] audit: type=1400 audit(1783094079.718:2678): avc: denied { name_bind } for pid=12772 comm="syz.9.2214" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 414.563372][ T28] audit: type=1400 audit(1783094079.718:2679): avc: denied { node_bind } for pid=12772 comm="syz.9.2214" src=32 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 414.583984][ T28] audit: type=1400 audit(1783094079.738:2680): avc: denied { write } for pid=12751 comm="syz.8.2209" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.407806][T12786] loop5: detected capacity change from 0 to 4096 [ 415.439622][T12786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.475013][ T28] audit: type=1400 audit(1783094080.698:2681): avc: denied { write } for pid=12785 comm="syz.5.2217" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.524389][T12789] 9p: Bad value for 'wfdno' [ 415.541001][ T28] audit: type=1400 audit(1783094080.728:2682): avc: denied { map } for pid=12785 comm="syz.5.2217" path="/88/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 415.680845][T12794] lo speed is unknown, defaulting to 1000 [ 415.696112][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.757537][T12792] loop9: detected capacity change from 0 to 128 [ 415.879328][T12794] xfrm0 speed is unknown, defaulting to 1000 [ 415.891720][T12796] loop0: detected capacity change from 0 to 8192 [ 415.983159][T12796] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2220'. [ 416.170335][T12792] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 416.198474][T12792] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.427526][ T8938] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.438891][ T7680] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 416.497223][T12814] loop9: detected capacity change from 0 to 512 [ 416.524784][T12812] netlink: 'syz.8.2225': attribute type 1 has an invalid length. [ 416.556136][T12812] loop8: detected capacity change from 0 to 512 [ 416.612242][T12812] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #4: comm syz.8.2225: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 416.647360][T12812] loop8: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 416.647617][T12812] EXT4-fs error (device loop8): ext4_quota_enable:7235: comm syz.8.2225: Bad quota inode: 4, type: 1 [ 416.656763][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 416.656799][ C1] EXT4-fs (loop8): initial error at time 1783094081: ext4_ext_check_inode:521: inode 4 [ 416.656830][ C1] EXT4-fs (loop8): last error at time 1783094081: ext4_ext_check_inode:521: inode 4 [ 416.693821][T12812] loop8: lost filesystem error report for type 5 error -117 [ 416.697802][T12812] EXT4-fs warning (device loop8): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 416.723311][T12812] EXT4-fs (loop8): mount failed [ 416.770701][T12812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.824935][T12812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.017600][T12831] loop5: detected capacity change from 0 to 1756 [ 417.029737][T12831] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 417.047418][T12829] loop0: detected capacity change from 0 to 512 [ 417.058412][T12814] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.2224: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 417.076274][T12814] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 417.078570][T12814] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.2224: Bad quota inode: 4, type: 1 [ 417.098486][T12814] loop9: lost filesystem error report for type 5 error -117 [ 417.123572][T12814] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 417.147547][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 417.148060][ C0] EXT4-fs (loop9): initial error at time 1783094082: ext4_ext_check_inode:521: inode 4 [ 417.148946][ C0] EXT4-fs (loop9): last error at time 1783094082: ext4_quota_enable:7235 [ 417.181350][T12814] EXT4-fs (loop9): mount failed [ 417.192262][T12832] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 417.208035][T12832] bond6 (unregistering): Released all slaves [ 417.226639][T12837] lo speed is unknown, defaulting to 1000 [ 417.267512][T12826] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2229'. [ 417.321400][T12837] xfrm0 speed is unknown, defaulting to 1000 [ 417.332895][T12826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2229'. [ 417.356702][T12840] loop0: detected capacity change from 0 to 8192 [ 417.360143][T12840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2233'. [ 417.362246][T12847] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2236'. [ 417.421245][T12847] loop9: detected capacity change from 0 to 128 [ 417.509578][T12854] loop5: detected capacity change from 0 to 256 [ 417.716158][T12854] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 417.726285][T12854] FAT-fs (loop5): Filesystem has been set read-only [ 417.733037][T12854] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 417.743381][T12854] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 417.811408][T12874] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2244'. [ 418.905258][T12901] lo speed is unknown, defaulting to 1000 [ 419.042796][T12901] xfrm0 speed is unknown, defaulting to 1000 [ 419.055841][T12905] loop0: detected capacity change from 0 to 8192 [ 419.075256][T12919] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 419.121257][T12919] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.135699][T12905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2251'. [ 419.162149][T12919] lo speed is unknown, defaulting to 1000 [ 419.193186][T12919] xfrm0 speed is unknown, defaulting to 1000 [ 419.340450][T12929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.355713][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 419.355731][ T28] audit: type=1400 audit(1783094084.578:2699): avc: denied { write } for pid=12928 comm="syz.0.2260" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 419.393300][T12919] netlink: 'syz.5.2258': attribute type 16 has an invalid length. [ 419.401380][T12919] netlink: 'syz.5.2258': attribute type 17 has an invalid length. [ 419.461412][T10394] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 419.506457][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.745655][T12952] netlink: 'syz.4.2265': attribute type 29 has an invalid length. [ 419.753757][ T28] audit: type=1400 audit(1783094084.968:2700): avc: denied { create } for pid=12937 comm="syz.5.2263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 419.814807][T12952] netlink: 'syz.4.2265': attribute type 29 has an invalid length. [ 420.213795][T12966] bond0: entered promiscuous mode [ 420.213818][T12966] bond_slave_0: entered promiscuous mode [ 420.213946][T12966] bond_slave_1: entered promiscuous mode [ 420.219689][T12966] bond0: left promiscuous mode [ 420.241648][T12966] bond_slave_0: left promiscuous mode [ 420.247384][T12966] bond_slave_1: left promiscuous mode [ 420.774400][T12979] set_capacity_and_notify: 2 callbacks suppressed [ 420.774418][T12979] loop9: detected capacity change from 0 to 4096 [ 420.794583][T12979] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.798762][ T28] audit: type=1400 audit(1783094086.018:2701): avc: denied { write } for pid=12978 comm="syz.9.2274" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 420.859352][ T8938] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.238718][T12983] syzkaller0: entered promiscuous mode [ 421.258432][T12988] FAULT_INJECTION: forcing a failure. [ 421.258432][T12988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.271791][T12983] syzkaller0: entered allmulticast mode [ 421.296089][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.9.2275 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 421.296187][T12988] Tainted: [W]=WARN [ 421.296196][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.296210][T12988] Call Trace: [ 421.296217][T12988] [ 421.296224][T12988] __dump_stack+0x1d/0x30 [ 421.296254][T12988] dump_stack_lvl+0x95/0xd0 [ 421.296281][T12988] dump_stack+0x15/0x1b [ 421.296361][T12988] should_fail_ex+0x25e/0x270 [ 421.296392][T12988] should_fail+0xb/0x20 [ 421.296422][T12988] should_fail_usercopy+0x1a/0x20 [ 421.296457][T12988] _copy_from_user+0x1c/0xb0 [ 421.296558][T12988] ___sys_sendmsg+0xc1/0x1e0 [ 421.296604][T12988] __x64_sys_sendmsg+0xd4/0x160 [ 421.296636][T12988] x64_sys_call+0x194c/0x3020 [ 421.296719][T12988] do_syscall_64+0x136/0x3c0 [ 421.296754][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.296824][T12988] RIP: 0033:0x7fd6d821de59 [ 421.296844][T12988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.296864][T12988] RSP: 002b:00007fd6d6c77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 421.296890][T12988] RAX: ffffffffffffffda RBX: 00007fd6d84a5fa0 RCX: 00007fd6d821de59 [ 421.296908][T12988] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 421.296973][T12988] RBP: 00007fd6d6c77090 R08: 0000000000000000 R09: 0000000000000000 [ 421.296985][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.296998][T12988] R13: 00007fd6d84a6038 R14: 00007fd6d84a5fa0 R15: 00007fff96e01c38 [ 421.297050][T12988] [ 421.895848][T13003] xt_hashlimit: size too large, truncated to 1048576 [ 421.980289][ T28] audit: type=1400 audit(1783094087.198:2702): avc: denied { create } for pid=13005 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_kobject_uevent_socket permissive=1 [ 422.093575][ T28] audit: type=1400 audit(1783094087.228:2703): avc: denied { create } for pid=13005 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=sctp_socket permissive=1 [ 422.174801][ T28] audit: type=1400 audit(1783094087.388:2704): avc: denied { create } for pid=13005 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 422.312756][ T28] audit: type=1400 audit(1783094087.528:2705): avc: denied { ioctl } for pid=13005 comm="syz.0.2282" path="socket:[38152]" dev="sockfs" ino=38152 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 422.362376][ T28] audit: type=1400 audit(1783094087.548:2706): avc: denied { create } for pid=13005 comm="syz.0.2282" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=mctp_socket permissive=1 [ 422.468119][T13017] loop5: detected capacity change from 0 to 128 [ 422.659514][T13024] loop9: detected capacity change from 0 to 256 [ 422.679972][T13024] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 422.749521][T13022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 422.779809][T13025] can: request_module (can-proto-0) failed. [ 422.867109][T13022] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2288'. [ 423.488011][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2291'. [ 423.527358][T13035] loop8: detected capacity change from 0 to 512 [ 423.981763][T13035] EXT4-fs: Ignoring removed i_version option [ 423.993320][T13035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 424.391535][T13035] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 424.528540][ T28] audit: type=1400 audit(1783094089.698:2707): avc: denied { write } for pid=13034 comm="syz.8.2292" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 424.660672][T13048] netlink: 1047 bytes leftover after parsing attributes in process `syz.9.2295'. [ 424.685196][ T28] audit: type=1400 audit(1783094089.748:2708): avc: denied { read } for pid=13034 comm="syz.8.2292" path="socket:[38225]" dev="sockfs" ino=38225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 424.739477][T13048] veth0_to_bond: default FDB implementation only supports local addresses [ 424.779910][ T7680] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 424.812117][ T28] audit: type=1400 audit(1783094089.858:2709): avc: denied { ioctl } for pid=13034 comm="syz.8.2292" path="socket:[38235]" dev="sockfs" ino=38235 ioctlcmd=0x583a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 424.871500][ T7680] EXT4-fs error (device loop8): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 424.922652][T13049] lo speed is unknown, defaulting to 1000 [ 424.943466][ T28] audit: type=1400 audit(1783094089.998:2710): avc: denied { write } for pid=7680 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 425.461072][T13049] xfrm0 speed is unknown, defaulting to 1000 [ 425.656136][T10578] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.685284][T13055] can: request_module (can-proto-3) failed. [ 426.254280][T13075] lo speed is unknown, defaulting to 1000 [ 426.370753][T13075] xfrm0 speed is unknown, defaulting to 1000 [ 426.412265][T13094] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2303'. [ 426.682582][T13099] netlink: 'syz.5.2310': attribute type 2 has an invalid length. [ 427.140595][T13099] 0: entered promiscuous mode [ 427.306725][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.314643][T13113] loop0: detected capacity change from 0 to 2048 [ 427.321314][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.328747][T13113] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 427.335970][T13075] bridge_slave_0: entered allmulticast mode [ 427.344506][T13075] bridge_slave_0: entered promiscuous mode [ 427.359202][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.367153][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.374731][T13075] bridge_slave_1: entered allmulticast mode [ 427.381353][T13075] bridge_slave_1: entered promiscuous mode [ 427.430284][ T6876] bridge_slave_1: left allmulticast mode [ 427.459416][ T6876] bridge_slave_1: left promiscuous mode [ 427.538036][ T6876] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.633870][ T6876] bridge_slave_0: left allmulticast mode [ 427.693169][ T6876] bridge_slave_0: left promiscuous mode [ 427.767166][ T6876] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.825033][T13118] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 427.831686][T13118] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.841325][T10478] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 427.891370][ T2942] I/O error, dev loop9, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 427.905045][ T28] audit: type=1400 audit(1783094093.098:2711): avc: denied { map } for pid=13126 comm="syz.9.2314" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 427.962484][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2316'. [ 427.992291][T10478] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 428.018711][T13118] vhci_hcd vhci_hcd.0: Device attached [ 428.111310][ T6876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.150453][T13130] vhci_hcd: connection closed [ 428.150717][ T3431] vhci_hcd vhci_hcd.0: stop threads [ 428.174616][ T6876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.193468][ T3431] vhci_hcd vhci_hcd.0: release socket [ 428.215497][ T3431] vhci_hcd vhci_hcd.0: disconnect device [ 428.281460][T10469] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 428.288870][T10469] usb 1-1: enqueue for inactive port 0 [ 428.294382][T10469] usb 1-1: enqueue for inactive port 0 [ 428.299855][T10469] usb 1-1: enqueue for inactive port 0 [ 428.399546][ T28] audit: type=1400 audit(1783094093.618:2712): avc: denied { write } for pid=13106 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.493730][T10469] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 428.510324][ T28] audit: type=1400 audit(1783094093.658:2713): avc: denied { write } for pid=13152 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.248716][ T6876] bond0 (unregistering): Released all slaves [ 429.330192][T13163] loop5: detected capacity change from 0 to 512 [ 429.341422][T13163] EXT4-fs: Ignoring removed i_version option [ 429.348970][T13163] ext4: block size(8192) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 429.376473][T13163] EXT4-fs (loop5): bad block size 8192 [ 430.012904][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 430.058468][ T6876] tipc: Disabling bearer [ 430.105769][ T6876] tipc: Left network mode [ 430.113522][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.345899][ T6876] hsr_slave_0: left promiscuous mode [ 430.364248][ T6876] hsr_slave_1: left promiscuous mode [ 430.385853][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.426082][ T6876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.453226][T13182] loop9: detected capacity change from 0 to 512 [ 430.561530][ T28] audit: type=1326 audit(1783094095.788:2714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13179 comm="syz.5.2326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f24d294de59 code=0x0 [ 430.661144][ T28] audit: type=1400 audit(1783094095.868:2715): avc: denied { write } for pid=13166 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.664237][ T6876] team0 (unregistering): Port device team_slave_1 removed [ 430.692412][T13188] xt_hashlimit: max too large, truncated to 1048576 [ 430.699728][ T6876] team0 (unregistering): Port device team_slave_0 removed [ 430.746279][ T28] audit: type=1400 audit(1783094095.938:2716): avc: denied { write } for pid=13192 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 430.790907][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.815763][T13180] bridge_slave_1: left allmulticast mode [ 430.822139][T13180] bridge_slave_1: left promiscuous mode [ 430.836383][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.854080][T13180] bridge_slave_0: left allmulticast mode [ 430.860215][T13180] bridge_slave_0: left promiscuous mode [ 430.868056][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.924352][T13182] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #4: comm syz.9.2327: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 430.947903][T13182] loop9: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 430.951197][T13182] EXT4-fs error (device loop9): ext4_quota_enable:7235: comm syz.9.2327: Bad quota inode: 4, type: 1 [ 430.971146][T13182] loop9: lost filesystem error report for type 5 error -117 [ 430.971319][T13182] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 430.993579][T13182] EXT4-fs (loop9): mount failed [ 431.703450][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 431.736648][T13075] team0: Port device team_slave_0 added [ 431.754040][T13075] team0: Port device team_slave_1 added [ 431.792849][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.798585][T13220] loop0: detected capacity change from 0 to 512 [ 431.807907][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.818287][T13220] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 431.885083][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.898529][T13222] loop5: detected capacity change from 0 to 4096 [ 431.908170][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.942426][T13222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.952138][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 431.981589][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 432.041624][T13075] hsr_slave_0: entered promiscuous mode [ 432.047795][T13075] hsr_slave_1: entered promiscuous mode [ 432.054094][T13075] debugfs: 'hsr0' already exists in 'hsr' [ 432.060337][T13075] Cannot create hsr debugfs directory [ 432.072670][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.224359][ T28] audit: type=1400 audit(1783094097.448:2717): avc: denied { write } for pid=13226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.321027][ T28] audit: type=1400 audit(1783094097.538:2718): avc: denied { write } for pid=13246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.356025][T13245] loop5: detected capacity change from 0 to 4096 [ 432.366646][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 432.396768][T13245] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.473567][ T28] audit: type=1400 audit(1783094097.698:2719): avc: denied { name_bind } for pid=13244 comm="syz.5.2336" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 432.527576][T13251] bond0: entered promiscuous mode [ 432.538638][T13245] ext4: Unknown parameter '017777777777777777777770xffffffffffffffffÿÿ' [ 432.540004][ T28] audit: type=1400 audit(1783094097.758:2720): avc: denied { remount } for pid=13244 comm="syz.5.2336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 432.547587][T13251] bond_slave_0: entered promiscuous mode [ 432.613249][T13251] bond_slave_1: entered promiscuous mode [ 432.632466][T13251] bond0: left promiscuous mode [ 432.637590][T13251] bond_slave_0: left promiscuous mode [ 432.657843][T13251] bond_slave_1: left promiscuous mode [ 432.697767][ T28] audit: type=1400 audit(1783094097.918:2721): avc: denied { write } for pid=13255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.732449][T10394] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.761419][ T28] audit: type=1400 audit(1783094097.958:2722): avc: denied { write } for pid=13267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.830828][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 432.871948][T13075] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.903231][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.929482][T13075] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.965443][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 432.982077][T13283] loop0: detected capacity change from 0 to 512 [ 432.991535][T13075] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 433.102767][ T28] audit: type=1400 audit(1783094098.318:2723): avc: denied { write } for pid=13282 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 433.143718][T13283] EXT4-fs error (device loop0): ext4_ext_check_inode:521: inode #4: comm syz.0.2340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 433.171198][T13283] loop0: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 433.172860][T13283] EXT4-fs error (device loop0): ext4_quota_enable:7235: comm syz.0.2340: Bad quota inode: 4, type: 1 [ 433.182073][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 433.182093][ C0] EXT4-fs (loop0): initial error at time 1783094098: ext4_ext_check_inode:521: inode 4 [ 433.182120][ C0] EXT4-fs (loop0): last error at time 1783094098: ext4_ext_check_inode:521: inode 4 [ 433.331556][T13283] loop0: lost filesystem error report for type 5 error -117 [ 433.334948][T13283] EXT4-fs warning (device loop0): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 433.375042][T13283] EXT4-fs (loop0): mount failed [ 433.665844][T13327] loop0: detected capacity change from 0 to 4096 [ 433.727267][T13327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.843852][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 433.847015][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.867665][T13075] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 433.883140][T13075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 433.991897][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.024954][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.067369][ T6876] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.074498][ T6876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.156440][ T6874] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.163585][ T6874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.533785][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.652987][T13396] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2350'. [ 434.762079][T13075] veth0_vlan: entered promiscuous mode [ 434.805665][T13075] veth1_vlan: entered promiscuous mode [ 434.843797][T13075] veth0_macvtap: entered promiscuous mode [ 434.867938][T13075] veth1_macvtap: entered promiscuous mode [ 434.896480][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.936911][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.967126][ T6880] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.986850][ T6880] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.020566][ T6880] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.045026][ T6880] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.972783][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 435.972803][ T28] audit: type=1400 audit(1783094357.201:2738): avc: denied { create } for pid=13444 comm="syz.9.2358" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 436.056789][ T28] audit: type=1400 audit(1783094357.201:2739): avc: denied { sys_admin } for pid=13444 comm="syz.9.2358" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 436.261853][T13466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2305'. [ 437.011612][T13462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.020181][T13462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.289097][ T28] audit: type=1400 audit(1783094358.511:2740): avc: denied { write } for pid=13443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.303987][T13478] loop0: detected capacity change from 0 to 2048 [ 438.366843][ T28] audit: type=1400 audit(1783094359.591:2741): avc: denied { write } for pid=13483 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.535316][T13457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2359'. [ 438.706021][T13490] futex_wake_op: syz.3.2366 tries to shift op by 144; fix this program [ 438.886211][T13490] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2366'. [ 439.010426][ T28] audit: type=1400 audit(1783094360.231:2742): avc: denied { write } for pid=13487 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.034110][T13501] loop5: detected capacity change from 0 to 512 [ 439.103467][T10267] udevd[10267]: incorrect ext4 checksum on /dev/loop0 [ 439.114950][T13478] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 439.125222][T10267] udevd[10267]: incorrect ext4 checksum on /dev/loop0 [ 439.141010][T13501] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 439.169798][T13501] EXT4-fs (loop5): couldn't read superblock of external journal [ 439.179453][ T28] audit: type=1400 audit(1783094360.381:2743): avc: denied { write } for pid=13510 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.318040][ T28] audit: type=1400 audit(1783094360.541:2744): avc: denied { checkpoint_restore } for pid=13488 comm="syz.5.2367" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 439.394926][T13501] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2367'. [ 439.478796][ T28] audit: type=1400 audit(1783094360.701:2745): avc: denied { write } for pid=13517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.535855][ T28] audit: type=1400 audit(1783094360.761:2746): avc: denied { write } for pid=13537 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.711401][ T28] audit: type=1400 audit(1783094360.931:2747): avc: denied { write } for pid=13541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.996170][T13566] lo speed is unknown, defaulting to 1000 [ 440.172668][T13566] xfrm0 speed is unknown, defaulting to 1000 [ 440.959797][T13609] bridge0: entered promiscuous mode [ 441.097039][T13617] FAULT_INJECTION: forcing a failure. [ 441.097039][T13617] name failslab, interval 1, probability 0, space 0, times 0 [ 441.172941][T13617] CPU: 1 UID: 0 PID: 13617 Comm: syz.0.2383 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 441.172986][T13617] Tainted: [W]=WARN [ 441.172995][T13617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 441.173034][T13617] Call Trace: [ 441.173044][T13617] [ 441.173058][T13617] __dump_stack+0x1d/0x30 [ 441.173092][T13617] dump_stack_lvl+0x95/0xd0 [ 441.173117][T13617] dump_stack+0x15/0x1b [ 441.173135][T13617] should_fail_ex+0x25e/0x270 [ 441.173212][T13617] should_failslab+0x8c/0xb0 [ 441.173235][T13617] __kmalloc_noprof+0xd4/0x4a0 [ 441.173262][T13617] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 441.173302][T13617] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 441.173443][T13617] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 441.173474][T13617] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 441.173502][T13617] ? selinux_capable+0x31/0x40 [ 441.173529][T13617] ? security_capable+0x7b/0x90 [ 441.173581][T13617] ? ns_capable+0x80/0xb0 [ 441.173641][T13617] genl_rcv_msg+0x42f/0x470 [ 441.173674][T13617] ? __pfx_gtp_genl_new_pdp+0x10/0x10 [ 441.173778][T13617] netlink_rcv_skb+0x11e/0x220 [ 441.173803][T13617] ? __pfx_genl_rcv_msg+0x10/0x10 [ 441.173870][T13617] genl_rcv+0x28/0x40 [ 441.173898][T13617] netlink_unicast+0x5a7/0x680 [ 441.173941][T13617] netlink_sendmsg+0x5be/0x6f0 [ 441.173973][T13617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.174060][T13617] ____sys_sendmsg+0x532/0x580 [ 441.174092][T13617] ___sys_sendmsg+0x195/0x1e0 [ 441.174168][T13617] __x64_sys_sendmsg+0xd4/0x160 [ 441.174213][T13617] x64_sys_call+0x194c/0x3020 [ 441.174303][T13617] do_syscall_64+0x136/0x3c0 [ 441.174341][T13617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.174406][T13617] RIP: 0033:0x7f6e977ade59 [ 441.174426][T13617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.174445][T13617] RSP: 002b:00007f6e96207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.174512][T13617] RAX: ffffffffffffffda RBX: 00007f6e97a35fa0 RCX: 00007f6e977ade59 [ 441.174531][T13617] RDX: 0000000024040810 RSI: 0000200000000a40 RDI: 0000000000000003 [ 441.174613][T13617] RBP: 00007f6e96207090 R08: 0000000000000000 R09: 0000000000000000 [ 441.174698][T13617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.174711][T13617] R13: 00007f6e97a36038 R14: 00007f6e97a35fa0 R15: 00007ffd83bc8058 [ 441.174735][T13617] [ 441.569116][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 441.569144][ T28] audit: type=1400 audit(1783094362.691:2754): avc: denied { listen } for pid=13603 comm="syz.3.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 441.601503][T13625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2384'. [ 441.624962][ T28] audit: type=1400 audit(1783094362.231:2753): avc: denied { bind } for pid=13603 comm="syz.3.2379" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 442.087569][T13635] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.099481][ T28] audit: type=1400 audit(1783094363.311:2755): avc: denied { write } for pid=13634 comm="syz.4.2387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 442.244706][T13640] netlink: 91 bytes leftover after parsing attributes in process `syz.9.2389'. [ 442.266257][T13640] xt_hashlimit: size too large, truncated to 1048576 [ 442.661917][T13642] @ÿ: renamed from bond_slave_0 [ 443.679122][T13653] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2390'. [ 443.750451][T13655] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2393'. [ 443.776136][ T28] audit: type=1400 audit(1783094364.971:2756): avc: denied { append } for pid=13654 comm="syz.3.2393" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 443.812980][T13655] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2393'. [ 444.216461][ T28] audit: type=1400 audit(1783094365.441:2757): avc: denied { write } for pid=13678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.271315][ T28] audit: type=1400 audit(1783094365.491:2758): avc: denied { write } for pid=13693 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 446.114496][T13715] loop9: detected capacity change from 0 to 512 [ 446.142645][T13718] loop0: detected capacity change from 0 to 1024 [ 446.149906][T13715] ext4: Unknown parameter 'noacl' [ 446.298423][T13718] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 446.349214][ T28] audit: type=1400 audit(1783094367.571:2759): avc: denied { ioctl } for pid=13716 comm="syz.0.2405" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 446.465545][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2409'. [ 446.478776][T13724] xt_hashlimit: max too large, truncated to 1048576 [ 446.485947][ T28] audit: type=1400 audit(1783094367.601:2760): avc: denied { bind } for pid=13716 comm="syz.0.2405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 446.515141][T13721] loop3: detected capacity change from 0 to 512 [ 446.597795][T13721] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 446.621471][T13721] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2408: bad orphan inode 15 [ 446.631601][T13721] loop3: lost filesystem error report for type 5 error -117 [ 446.649914][T13721] ext4_test_bit(bit=14, block=18) = 1 [ 446.662640][T13721] is_bad_inode(inode)=0 [ 446.666808][T13721] NEXT_ORPHAN(inode)=1023 [ 446.671164][T13721] max_ino=32 [ 446.674367][T13721] i_nlink=0 [ 446.695093][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 446.701839][ C0] EXT4-fs (loop3): initial error at time 1783094367: ext4_orphan_get:1425 [ 446.710518][ C0] EXT4-fs (loop3): last error at time 1783094367: ext4_orphan_get:1425 [ 446.810900][T13721] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2408: bg 0: block 161: padding at end of block bitmap is not set [ 446.825565][T13721] loop3: lost filesystem error report for type 5 error -117 [ 446.850132][T13721] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 446.866517][T13721] loop3: lost filesystem error report for type 5 error -117 [ 447.141467][T13721] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.171828][T13721] ext2 filesystem being mounted at /11/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 447.196329][T13075] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.318512][T13741] netlink: 'syz.4.2414': attribute type 6 has an invalid length. [ 447.535533][T13746] loop0: detected capacity change from 0 to 512 [ 447.555588][T13746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.580475][T13746] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 448.886861][ T28] audit: type=1400 audit(1783094370.111:2761): avc: denied { listen } for pid=13753 comm="syz.3.2417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 449.976143][T10230] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 450.699549][ T28] audit: type=1400 audit(1783094371.921:2762): avc: denied { write } for pid=13776 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 450.797960][ T28] audit: type=1400 audit(1783094372.021:2763): avc: denied { write } for pid=13789 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 451.298877][ T28] audit: type=1400 audit(1783094372.511:2764): avc: denied { listen } for pid=13797 comm="syz.3.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 451.701642][T10474] usb usb8-port1: attempt power cycle [ 452.234499][ T28] audit: type=1400 audit(1783094373.461:2765): avc: denied { write } for pid=13814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.318104][T13827] loop0: detected capacity change from 0 to 256 [ 452.325107][ T28] audit: type=1400 audit(1783094373.541:2766): avc: denied { write } for pid=13825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.573606][T13827] FAT-fs (loop0): Directory bread(block 64) failed [ 452.581209][T13827] FAT-fs (loop0): Directory bread(block 65) failed [ 452.584951][T13833] loop9: detected capacity change from 0 to 256 [ 452.587784][T13827] FAT-fs (loop0): Directory bread(block 66) failed [ 452.611259][T13827] FAT-fs (loop0): Directory bread(block 67) failed [ 452.730458][T13827] FAT-fs (loop0): Directory bread(block 68) failed [ 452.766157][T13827] FAT-fs (loop0): Directory bread(block 69) failed [ 452.792426][T13827] FAT-fs (loop0): Directory bread(block 70) failed [ 452.816172][T13827] FAT-fs (loop0): Directory bread(block 71) failed [ 452.840363][T13827] FAT-fs (loop0): Directory bread(block 72) failed [ 452.864209][T13827] FAT-fs (loop0): Directory bread(block 73) failed [ 453.610438][T13833] FAT-fs (loop9): Directory bread(block 64) failed [ 453.617162][T13833] FAT-fs (loop9): Directory bread(block 65) failed [ 454.014712][T13833] FAT-fs (loop9): Directory bread(block 66) failed [ 454.040206][T13833] FAT-fs (loop9): Directory bread(block 67) failed [ 454.389694][T13833] FAT-fs (loop9): Directory bread(block 68) failed [ 454.442174][T13833] FAT-fs (loop9): Directory bread(block 69) failed [ 454.448826][T13833] FAT-fs (loop9): Directory bread(block 70) failed [ 454.455499][T13833] FAT-fs (loop9): Directory bread(block 71) failed [ 454.462031][T13833] FAT-fs (loop9): Directory bread(block 72) failed [ 454.468545][T13833] FAT-fs (loop9): Directory bread(block 73) failed [ 454.510285][T13846] netlink: 260 bytes leftover after parsing attributes in process `syz.4.2435'. [ 454.691358][ T28] audit: type=1400 audit(1783094375.891:2767): avc: denied { write } for pid=13849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.791143][T13871] loop0: detected capacity change from 0 to 512 [ 454.821913][ T28] audit: type=1400 audit(1783094376.041:2768): avc: denied { write } for pid=13869 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.850354][T13871] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 454.886164][T13871] EXT4-fs (loop0): 1 truncate cleaned up [ 454.905067][T13882] loop9: detected capacity change from 0 to 512 [ 454.912253][T13871] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.927524][T13882] ext4: Unknown parameter 'measure' [ 454.938252][T13882] futex_wake_op: syz.9.2442 tries to shift op by 144; fix this program [ 454.946930][T13882] futex_wake_op: syz.9.2442 tries to shift op by 144; fix this program [ 454.959448][ T28] audit: type=1400 audit(1783094376.181:2769): avc: denied { write } for pid=13870 comm="syz.0.2439" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.099153][T10230] EXT4-fs error (device loop0): mb_free_blocks:2049: group 0, inode 11: block 54:freeing already freed block (bit 53); block bitmap corrupt. [ 455.113815][ T28] audit: type=1400 audit(1783094376.321:2770): avc: denied { write } for pid=10230 comm="syz-executor" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.135988][T10230] EXT4-fs (loop0): Remounting filesystem read-only [ 455.145720][ T28] audit: type=1400 audit(1783094376.371:2771): avc: denied { write } for pid=10230 comm="syz-executor" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.168240][ T28] audit: type=1400 audit(1783094376.371:2772): avc: denied { unlink } for pid=10230 comm="syz-executor" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 455.315754][T10474] usb usb8-port1: unable to enumerate USB device [ 455.359105][T10267] ================================================================== [ 455.363981][T13899] loop5: detected capacity change from 0 to 1024 [ 455.367228][T10267] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 455.380072][T10267] [ 455.382397][T10267] write to 0xffff88812d846f10 of 8 bytes by task 2978 on cpu 0: [ 455.390027][T10267] dentry_kill+0x139/0x500 [ 455.394447][T10267] finish_dput+0x16/0x1d0 [ 455.398786][T10267] dput+0x48/0x50 [ 455.402431][T10267] step_into_slowpath+0x38c/0x4c0 [ 455.407556][T10267] path_lookupat+0x2eb/0x4c0 [ 455.412165][T10267] filename_lookup+0x329/0x390 [ 455.416941][T10267] do_readlinkat+0x74/0x2f0 [ 455.421456][T10267] __x64_sys_readlink+0x47/0x60 [ 455.426316][T10267] x64_sys_call+0x2b51/0x3020 [ 455.431000][T10267] do_syscall_64+0x136/0x3c0 [ 455.435602][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.441503][T10267] [ 455.443826][T10267] read to 0xffff88812d846f10 of 8 bytes by task 10267 on cpu 1: [ 455.451465][T10267] fast_dput+0x64/0x2e0 [ 455.455630][T10267] dput+0x1f/0x50 [ 455.459270][T10267] filename_unlinkat+0x217/0x410 [ 455.464217][T10267] __se_sys_unlink+0x2b/0xe0 [ 455.468925][T10267] __x64_sys_unlink+0x1f/0x30 [ 455.473619][T10267] x64_sys_call+0x2eb6/0x3020 [ 455.478316][T10267] do_syscall_64+0x136/0x3c0 [ 455.482930][T10267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.488927][T10267] [ 455.491251][T10267] value changed: 0xffff8882374f1878 -> 0x0000000000000000 [ 455.498457][T10267] [ 455.500780][T10267] Reported by Kernel Concurrency Sanitizer on: [ 455.507258][T10267] CPU: 1 UID: 0 PID: 10267 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 455.517770][T10267] Tainted: [W]=WARN [ 455.521580][T10267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.531697][T10267] ================================================================== [ 455.779579][T13899] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 455.960475][T13903] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2447'. [ 456.111343][ T28] audit: type=1400 audit(1783094377.321:2773): avc: denied { setopt } for pid=13901 comm="syz.9.2447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 456.203397][T13883] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.217139][ T77] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.274267][ T77] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.334196][ T77] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.394681][ T77] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.564523][ T28] audit: type=1400 audit(1783094377.791:2774): avc: denied { accept } for pid=13898 comm="syz.5.2448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 457.120552][ T77] bridge_slave_1: left allmulticast mode [ 457.127101][ T77] bridge_slave_1: left promiscuous mode [ 457.133974][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.144713][ T28] audit: type=1400 audit(1783094378.371:2775): avc: denied { write } for pid=13905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.173831][ T77] bridge_slave_0: left allmulticast mode [ 457.187166][ T77] bridge_slave_0: left promiscuous mode [ 457.201037][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.211174][ T28] audit: type=1400 audit(1783094378.411:2776): avc: denied { write } for pid=13916 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.277199][ T77] bond1 (unregistering): (slave gretap1): Releasing active interface [ 457.298556][ T77] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.308614][ T77] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.319236][ T77] bond0 (unregistering): Released all slaves [ 457.327937][ T77] bond1 (unregistering): Released all slaves [ 457.337303][ T77] bond2 (unregistering): Released all slaves [ 457.346693][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 457.438744][ T77] hsr_slave_0: left promiscuous mode [ 457.444787][ T77] hsr_slave_1: left promiscuous mode [ 457.450564][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.459740][ T77] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.468382][ T77] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.475981][ T77] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.486457][ T77] veth1_macvtap: left promiscuous mode [ 457.493146][ T77] veth0_macvtap: left promiscuous mode [ 457.498690][ T77] veth1_vlan: left promiscuous mode [ 457.506058][ T77] veth0_vlan: left promiscuous mode [ 457.607192][ T77] team0 (unregistering): Port device team_slave_1 removed [ 457.618233][ T77] team0 (unregistering): Port device team_slave_0 removed [ 457.653974][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 457.794021][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 457.923787][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8