last executing test programs: 5m42.438780862s ago: executing program 1 (id=997): socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8, 0x7fe7, 0x80000000, 0xb9}, 0x8001, 0x1, 0x100, 0x6, 0x74, 0x37, 0x5, 0xe, 0x6, 0x8000, {0xfffffffd, 0x40, 0x9, 0xfffffffc, 0x1, 0x7}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x8, 0x0, 0x7, 0x3, 0x4, 0x8, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}]}}]}, 0x58}}, 0x24040084) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff0900000000", 0xc}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000e00000000665e8ba663010000000000e80000004bb58e81ee359fa2d438bcb8b1f75bdea1f5ff3534d4bee60f690ab90e58abb459080000000000000043d9f439efe4246622c55546643d6d4ec98d169f62b1b3249eb3ec44670ce9f57b041b47147096e471ba569578bc4131d1568ffc1fe92ff6ffad3a6d6421d62b222b0ea7e6896c752c425282860f5683"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r4, 0x0, 0x40d4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000980)={'filter\x00', 0x7, 0x4, 0x3a0, 0x0, 0x0, 0x0, 0x2b8, 0x2b8, 0x2b8, 0x4, &(0x7f0000000200), {[{{@arp={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0xffffff00, 0x2, 0x2, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0x0, 0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x7c07, 0x323, 0x1, 0x81, 0xe7e6, 0x5, 'bridge0\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x45f, 0x3}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}, {{@arp={@private=0xa010101, @remote, 0xffffffff, 0x0, 0x4, 0x5, {@empty, {[0x0, 0xff, 0xff, 0xff]}}, {@mac=@local, {[0xff, 0xff, 0xff, 0xff]}}, 0x8, 0x1, 0x9, 0x7, 0x5, 0x0, '\x00', 'macsec0\x00', {0x7552e00b51172070}, {}, 0x0, 0x400}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x9}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r6, r5, 0x4, r5}, 0x10) r7 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r8 = socket$tipc(0x1e, 0x5, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0) 5m42.005942635s ago: executing program 1 (id=1000): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e5a, &(0x7f0000000280)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x60b, &(0x7f0000000500)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000080008440000300012800b00010067656e65766500002000028014000700000000000000200000000000000000010500040001000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r1, 0x0, 0x3) 5m40.351876487s ago: executing program 1 (id=1033): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000009000000850800007a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x8, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x400, 0x10001, 0xda, 0x4, 0xa, 0x20006, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x3) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0x186a7, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRESDEC=r2, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e4ffffffffffffff000000060000000000000000000000648405574ba6d08abab82785099ef699ead67863af1790306f9c4bb3bfba89f5688486df045d8927fda3d50a635d5800e0febc0a89e03dc4f12cb59456c0fe8a43ed7b9313ffb1fdf1d833206830f36e6e6b8efac0534e0f099683462e77fe142eb0903fd82f49bdc05a4e63dfdfe0c6e3247188ea1acb591e49ff03be2ddcaf0fb59e1f86d59aa1b72b4aa76b1d137c51a0b8e9db7dc34515bc9df000675c9b64efb7310b318c3c457f7bb1"], 0x50) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000600a0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r11, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r11, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r11, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x200001e4, &(0x7f00000000c0)=[{0x800, 0x7, 0x0, 0x7ffc1ffb}]}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r9, r8, 0x4, r6}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r5, @ANYRESHEX=r0, @ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x25, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) geteuid() sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=r6, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="609c3b3000"/19], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r3}, 0x38) 5m39.465313055s ago: executing program 1 (id=1042): r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x2000844, &(0x7f0000000600)={[{@dots}, {@fat=@dos1xfloppy}, {@nodots}, {@fat=@nocase}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@nodots}, {@fat=@errors_remount}, {@fat=@sys_immutable}, {@fat=@flush}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@dots}, {@fat=@sys_immutable}, {@fat=@nfs}, {@fat=@check_strict}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xa042, 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r2], 0x448}}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r2, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000280)) rmdir(&(0x7f00000001c0)='./bus\x00') setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000140)="a3", 0x1) 5m38.262888613s ago: executing program 1 (id=1046): io_uring_setup(0x24e3, &(0x7f0000000080)={0x0, 0xa980, 0x40, 0x2, 0x17e}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_bp={&(0x7f0000000080), 0x1}, 0x11c0ad, 0x0, 0x0, 0x4, 0x6, 0x8001, 0x7ffe}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x3c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x3ff}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff7}, @TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x2}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xfffffffb}, @TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0x2}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x9}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0x4}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x58, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3, 0x2}, {}, {0x4, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x2c, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x3, 0x8, 0x0, 0x7, 0x3, 0x4, 0x8, 0x2}}, @TCA_U32_INDEV={0x14, 0x8, 'sit0\x00'}]}}]}, 0x58}}, 0x24040084) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff0900000000", 0xc}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x2d32, &(0x7f0000000840)={0x0, 0x55b8, 0x2000, 0x2, 0xf2}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000e00000000665e8ba663010000000000e80000004bb58e81ee359fa2d438bcb8b1f75bdea1f5ff3534d4bee60f690ab90e58abb459080000000000000043d9f439efe4246622c55546643d6d4ec98d169f62b1b3249eb3ec44670ce9f57b041b47147096e471ba569578bc4131d1568ffc1fe92ff6ffad3a6d6421d62b222b0ea7e6896c752c425282860f5683"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$can_raw(r0, &(0x7f0000000800)={&(0x7f00000004c0)=@sco, 0x80, &(0x7f0000000780)=[{&(0x7f0000000540)=""/9, 0x9}, {&(0x7f0000000600)=""/213, 0xd5}], 0x2}, 0x40000141) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'team0\x00'}) sendmsg$nl_route(r4, 0x0, 0x40d4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r6 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000017c0)={r6, r5, 0x4, r5}, 0x10) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) socket$nl_route(0x10, 0x3, 0x0) 5m37.974297692s ago: executing program 1 (id=1047): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') lseek(r0, 0x10001, 0x8000000) 5m37.933367213s ago: executing program 32 (id=1047): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs_stats_percpu\x00') lseek(r0, 0x10001, 0x8000000) 5m6.791736895s ago: executing program 0 (id=1285): timer_create(0x3, 0x0, &(0x7f0000001e00)=0x0) r1 = getpid() syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") mount$nfs4(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x2b086, 0x0) ptrace$ARCH_GET_CPUID(0x1e, r1, 0x0, 0x1011) timer_create(0x3, &(0x7f0000000180)={0x0, 0x1d, 0x1, @thr={&(0x7f0000000bc0), &(0x7f0000000c00)="b64a8d3cff2a604a90e16c564b868b9687af5f4351050a3e683c3ca925822857452cd32f179e87038b04e7be7fc410c96bfa36f0b3dce50cec14a64faa7c4be84d9363c37c89347e6c242b83b24e9ee70d6673bdd9efeb7c7d336e2618073f1e36b2427f7086e08e"}}, &(0x7f0000000200)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r6 = socket$unix(0x1, 0x5, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r6, {0x8, 0x7}}, './file1\x00'}) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$kcm(r8, &(0x7f0000002f40)={&(0x7f0000000a40)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e20, @multicast2}, 0x4, 0x4, 0x2, 0x3}}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="f89114adee72cf2c8eecaf069fed2a768d518a0530322faa0c6846ac3836cbe682b0f2832efb9d01e4a9c16952a6c8b48a677c2993b20765c3745520d033d0ab91369e0201ececbf71b27e7e23088239dfcb1878085d150187045f6d4dd2ff031c5c112907099849a945f2e67e9bc77ee8eed9d3fa45475541a8b02467d8c91077e634bcbcefc35872240abb7bde2a8a1596", 0x92}], 0x1, &(0x7f0000001e40)=[{0x1010, 0x119, 0xf, "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"}, {0xc8, 0x119, 0x1, "c5747450fc58a9af6661aca07fc2c85671c70c2fb1294df35962b5387226766712ffb6957040bf52116b1abb7abbaf468dd1e1107c4dd11da62fc8aa1fb61336ae5c65b39ec35a48cb6311381b849ef47d03cec098bd052802559e34a9e5445134f00e10bb149ccdd185a761702c1a99dbfebea6816bf8c2a5e1bcb9018004868a1d11db77e81ec8683e99dba616b22c08c13022cc36367d1bb7554f284ba39b43065b8037acd1c27856e9ef7c80621fa3619a5a0a"}], 0x10d8}, 0x1) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000000c0)=0x20000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff1, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x6}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) ftruncate(r2, 0x1) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd0102040000390012000a002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) semctl$SETVAL(0x0, 0x465f284bf849d9ed, 0x10, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000008c0)) shutdown(r6, 0x1) 5m5.820141586s ago: executing program 0 (id=1296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x12000000}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 5m5.761340967s ago: executing program 0 (id=1299): r0 = syz_io_uring_setup(0xf00, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) r1 = eventfd2(0x10001, 0x80000) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000040)=r1, 0x1) 5m5.702432679s ago: executing program 0 (id=1300): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e5a, &(0x7f0000000280)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x60b, &(0x7f0000000500)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000080008440000300012800b00010067656e65766500002000028014000700000000000000200000000000000000010500040001000000080002"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x88) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lseek(r1, 0x0, 0x3) 5m4.144296268s ago: executing program 0 (id=1309): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0xf) (async) r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x60}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 5m2.594903487s ago: executing program 0 (id=1314): pipe2$9p(&(0x7f0000000100), 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}}, 0x80) (fail_nth: 3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x3a) set_mempolicy(0x8006, 0x0, 0x5) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140), 0x0, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 5m2.538599129s ago: executing program 33 (id=1314): pipe2$9p(&(0x7f0000000100), 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_usb_connect(0x0, 0x4bc, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}]}, 0x2c}}, 0x80) (fail_nth: 3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$tipc(0x1e, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x3a) set_mempolicy(0x8006, 0x0, 0x5) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140), 0x0, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) 1m41.392205533s ago: executing program 4 (id=2735): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xffffffffffffffff}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x48301, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) socket(0x840000000002, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.727285886s ago: executing program 4 (id=2749): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x6, 0x8}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_MCE_KILL(0x41555856, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800000}, {0x3, 0x3, 0x3, 0xa, 0x5, 0xfff8, 0xfffffff8}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x14}}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m38.620693s ago: executing program 4 (id=2751): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000200002000020000200000000900000000060015000a0000000c00168008000100bc"], 0x30}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 1m38.196946603s ago: executing program 4 (id=2758): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e5a, &(0x7f0000000280)={[{@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@errors_remount}]}, 0x6, 0x60b, &(0x7f0000000500)="$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") r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYRESDEC=0x0], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x88) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004510003e0066000007020cc6f45a90780a010102ac1414aa11ff9078"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff, 0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) r3 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setuid(r4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = gettid() kcmp(r6, r5, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xffffffb0) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='ns\x00') fchdir(r9) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xa8) ioctl$BLKTRACESETUP(r9, 0xc0481273, &(0x7f0000001700)={'\x00', 0x8000, 0xfffffff7, 0x9, 0x6, 0x7f, 0xffffffffffffffff}) perf_event_open(0x0, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x7, 0x0, 0x401f, 0x685c0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x1, @perf_bp={0x0}, 0x8000, 0x3, 0x0, 0x3, 0x4, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r11 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r11, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @empty, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000005c0)="2cd9", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f00000001c0)="1476", 0x2}], 0x1}}], 0x3, 0x1c040) 1m37.038092769s ago: executing program 4 (id=2763): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001dc0), r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002240)={0x14, r1, 0x3, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40040c0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x1d000000, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) 1m35.790160919s ago: executing program 4 (id=2775): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xccd, 0x3}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="6ae67ce1d34e", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m35.73145752s ago: executing program 34 (id=2775): r0 = socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xccd, 0x3}, 0x10c0e8, 0x6, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) shmget(0x3, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@link_local, @random="6ae67ce1d34e", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @remote, @multicast, @loopback}}}}, 0x0) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x81, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}, 0x1000000}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4c}}], 0x6}}], 0x4000114, 0x40500f0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1m16.049933687s ago: executing program 7 (id=2948): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x210200, 0x0) write$tun(r0, &(0x7f0000000040)={@void, @void, @ipv6=@dccp_packet={0xa, 0x6, "936114", 0x141, 0x21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, {[@routing={0x2e, 0x4, 0x1, 0x4, 0x0, [@loopback, @mcast1]}, @hopopts={0x3a, 0x2, '\x00', [@ra, @pad1, @jumbo={0xc2, 0x4, 0x6}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, @srh={0x33, 0x6, 0x4, 0x3, 0x6d, 0x50, 0x9, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2]}, @hopopts={0x6, 0x1, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}], {{0x4e21, 0x4e22, 0x4, 0x1, 0xd, 0x0, 0x0, 0x3, 0x2, "cdb8d1", 0x5, "112c60"}, "7c93719375ff2a32ec0bb80f3ad339672478fb9d231e39159a848b733d545ad097ed84ad38c1d3cd37b0a99b2998d8dd676ec45bb97dfa83a0c546c71e82f692b1c45f2d2414b50939e127dfe013489459cd1f193fa475af3f0354c126420933fe2d71ce96cdc3c4cd4663ea712aac3190e3225425d8f524f73b3c69e4264376bc0c45a3da724d1dd4fccf2c9fca4a2b9678370c3450f19e9a"}}}}, 0x169) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x64010101}}, 0x81, 0x2, 0x0, 0x7, 0x40, 0x3, 0xf}, &(0x7f00000002c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000300)={r2, 0x2, 0x1000, "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"}, 0x1008) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000001340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$xdp(0x2c, 0x3, 0x0) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000001580)={0x7, 'ip_vti0\x00', {0x5}, 0x3}) (async) setxattr(&(0x7f00000015c0)='./file0/../file0\x00', &(0x7f0000001600)=@random={'user.', '\x00'}, &(0x7f0000001640)='ip_vti0\x00', 0x8, 0x2) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001680), 0x8400, 0x0) (async) socketpair(0x18, 0x5, 0x3, &(0x7f00000016c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000001700)={'veth1_virt_wifi\x00', {0x2, 0x4e23, @multicast1}}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000017c0)={0x9, &(0x7f0000001740)=[{0x9, 0xa, 0x1, 0x233}, {0xc, 0x80, 0x8, 0x2050}, {0x5eb, 0x5, 0x80, 0x6}, {0xada, 0x7, 0x7f, 0x9}, {0x4, 0x9, 0x2, 0x2f1}, {0x8, 0x10, 0x1, 0x2}, {0x8, 0x3, 0x3, 0x1}, {0x4, 0x40, 0xab, 0x990}, {0x3ff, 0xe, 0xf, 0x7}]}) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000001800)={r2, @in6={{0xa, 0x4e22, 0x526228d4, @mcast2, 0xb1f}}, 0xd, 0x7}, &(0x7f00000018c0)=0x90) setsockopt$RDS_GET_MR_FOR_DEST(r5, 0x114, 0x7, &(0x7f00000019c0)={@pptp={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {&(0x7f0000001900)=""/81, 0x51}, &(0x7f0000001980), 0x21}, 0xa0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001a80)={r8, @in6={{0xa, 0x4e22, 0x1, @local, 0x4}}, 0x8, 0xfffe, 0x8, 0x81, 0x28, 0x5, 0x4}, 0x9c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001b40)={r8}, &(0x7f0000001b80)=0x8) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001bc0), 0x4002, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000001ec0)={'ip6tnl0\x00', &(0x7f0000001e40)={'ip6tnl0\x00', 0x0, 0x2f, 0x0, 0x8, 0x7ff, 0x0, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x8000, 0x4, 0x3}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002140)={r1, 0x20, &(0x7f0000002100)={&(0x7f0000001f80)=""/182, 0xb6, 0x0, &(0x7f0000002040)=""/160, 0xa0}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000002180)={{0x1, 0x1, 0x18, r4, {0x0, 0xffffffffffffffff}}, './file0/../file0\x00'}) (async) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002200)=@o_path={&(0x7f00000021c0)='.\x00', 0x0, 0x10, r6}, 0x18) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x6, 0x24, &(0x7f0000001c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x80000000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xecf, 0x0, 0x0, 0x0, 0xa150}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @generic={0x0, 0x9, 0x9, 0xfffb, 0xf90}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001d40)='syzkaller\x00', 0x1, 0x93, &(0x7f0000001d80)=""/147, 0x41000, 0x0, '\x00', r10, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001f00)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001f40)={0x2, 0x2, 0xfffffffb, 0x7}, 0x10, r11, r12, 0x0, &(0x7f0000002240)=[r13, 0xffffffffffffffff, r7, r1, r1, r1], 0x0, 0x10, 0xb}, 0x94) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x18, &(0x7f0000002340)=0x8001, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000002380)={r14, r13}, 0xc) (async) ioctl$EXT4_IOC_GET_ES_CACHE(r9, 0xc020662a, &(0x7f00000023c0)={0xeb, 0x7, 0x4, 0x7d59, 0x4, 0x0, [{0x6000, 0x5, 0x2, '\x00', 0x801}, {0x7, 0x2, 0x0, '\x00', 0x8}, {0xedd2, 0xada4, 0x2, '\x00', 0x805}, {0x5, 0xb226, 0x8}]}) (async) openat$vsock(0xffffffffffffff9c, &(0x7f00000024c0), 0x317080, 0x0) (async) ioctl$FITRIM(r14, 0xc0185879, &(0x7f0000002500)={0x2, 0x4, 0x80000}) bind$inet(0xffffffffffffffff, &(0x7f0000003a00)={0x2, 0x4e22, @empty}, 0x10) 1m15.909646741s ago: executing program 7 (id=2951): clock_nanosleep(0xa, 0x1, 0x0, 0x0) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$binfmt_misc(r2, &(0x7f0000001c40)="87ce", 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xf06}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x55, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x55, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08000580002c0000000000069078ac1e010100000000820200004e20000034603001a1c1a89a6815ca0063bfb7f23202e55988826fc248a30ec0fe9bfaf243937fcfbb17fa93862eef49aaabbddbaea3dc9cd381c2700b33000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000100090780000"], 0x0) (async) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08000580002c0000000000069078ac1e010100000000820200004e20000034603001a1c1a89a6815ca0063bfb7f23202e55988826fc248a30ec0fe9bfaf243937fcfbb17fa93862eef49aaabbddbaea3dc9cd381c2700b33000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000100090780000"], 0x0) sync() (async) sync() fcntl$setflags(r0, 0x2, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000780)=ANY=[], 0x841, 0x0) (async) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000780)=ANY=[], 0x841, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'ip6gre0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(r8, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB="00eb0000f7d4efb21bb2a84f67a4cfd08e376c0db5dcbc23cfc1b6c2825262310ed66037eaf8a93fdad06c7e3760370ea9603d68755e7d2652e78baa9620da2db976fcd84c0bde55b73d760260c713a7e9e6175e18d96ada0f4047caff9f422fb8188950ccf54d090e62829e30341385dce434e4e95ea482f659fbfe57a0103d19753c9c2a", @ANYRES16=r9, @ANYBLOB="04002bbd7000fcdbdf250d0000000500180002000000050018000300000005001d001900000005001800af00000005001d0006000000050007000800000005001d000a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x84}, 0x10) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @local}, 0x14) write(r1, 0x0, 0x0) 1m15.538027383s ago: executing program 7 (id=2958): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2a8}, {&(0x7f0000000bc0)="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", 0x192}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x20130000, &(0x7f0000003700)={0x77359400}) 1m15.393518767s ago: executing program 7 (id=2959): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x550, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x80, 0x10001, 0xda, 0x4, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(0x0, 0x0) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2000000, &(0x7f0000000640), 0x1, 0x5b9, &(0x7f0000000680)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a6a038, &(0x7f0000002cc0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fee000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz0\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@mcast1, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) r3 = pidfd_getfd(r1, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005d42d5cf0c4a0f9a4cc000400010000000500010006000000050004000300000005000400020000000902020073797a32000000000d0003006c6973743a73657400000000"], 0x50}}, 0x0) setns(r3, 0x66020000) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) 1m14.449593837s ago: executing program 7 (id=2965): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) accept4$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80400) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000180), 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) creat(&(0x7f00000002c0)='./file0\x00', 0x104) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x84, 0x2c, 0xd27, 0x470bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x800000, 0x1, 0x5, 0xfffffffb}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1m14.03513839s ago: executing program 7 (id=2968): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x68f5, &(0x7f0000000280)={0x0, 0xd86d, 0x80, 0x1, 0x1cd}, 0x0, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000010000500", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 1m13.958885563s ago: executing program 35 (id=2968): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) getpid() r0 = getpid() syz_pidfd_open(r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_ublk_setup_io_uring(0x68f5, &(0x7f0000000280)={0x0, 0xd86d, 0x80, 0x1, 0x1cd}, 0x0, 0x0, &(0x7f0000000500)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000ffff2abd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1503e3ffb309180008000a00", @ANYRES32, @ANYBLOB="240012800c0001006d6163766c616e00140002800800010008000000060002000100000010000500", @ANYRES16=r1], 0x54}, 0x1, 0x0, 0x0, 0x24004845}, 0x8000002) 4.44933708s ago: executing program 2 (id=3238): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, &(0x7f00000001c0)}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x6, 0x12) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x1c, 0x1, 0x1, [r0, r1, 0xffffffffffffffff]}}], 0x20, 0x4060400}}], 0x2, 0x0) fdatasync(0xffffffffffffffff) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000180)=[{0xc127, 0x2, 0x8, 0x2}, {0x7, 0x9, 0x5, 0x5}, {0x5, 0x7, 0xe1, 0xffffffff}]}, 0x10) splice(r2, 0x0, r4, 0x0, 0x7, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYRES16=r3], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45}, 0x94) syslog(0x9, 0x0, 0x0) 3.594071757s ago: executing program 2 (id=3243): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200048c3}, 0x20000094) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040000}, 0x4048801) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="3e000000a0d7ddc861a5612d40407e0810d93ca4937bc61fdecb4433"], 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r8, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r7, 0x0}]) dup3(0xffffffffffffffff, r5, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.667292826s ago: executing program 6 (id=3248): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000ff000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09000000000000b609010000000000650000000000000018010000646c6c2500000000002020207b9af8ff00000000cd9100000000000037010000f8ffffffb702000008000000b7030000b8a8000004000000060000003f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x2, 0x3, 0x101, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x8000, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x5}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1, 0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xffffff61}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x10}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0x5c}}, 0x40) 2.611985438s ago: executing program 6 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 2.446183493s ago: executing program 8 (id=3252): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x5}, @const={0x0, {0x0, 0x3400, 0x0, 0x5715}}}) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req={0x7f, 0x6, 0x863, 0x8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.428097973s ago: executing program 8 (id=3253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20) 2.385675685s ago: executing program 8 (id=3254): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x58, 0x6, 0x3, "60ef53a68f9c31a4f613db761382496804bd7ab14962d798b322f4cf234b57d29021bbeae6440f4162fd2037c45fc8c0842c7df4b4ee4ecc24bde613e83f272cf644edfafc1e355546e3683ceb9db426b109e2f6de4cbd81"}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$session_to_parent(0x12) listen(r0, 0x6) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socketpair(0x3, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000200)={0x32, 0x8, 0x7, 0x6, 0x5, 0x81}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$usbfs(0x0, 0x7, 0x8000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000480)={{{0x1, 0x1}}, 0x14, 0x3, &(0x7f0000000380)="3627da4c60166efc07013efc41d8b2bb2414949d"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000010000000000000000000000c00000000000000000000000d0035"], 0x30}], 0x1}, 0x0) syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==") mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r8 = fcntl$dupfd(r1, 0x406, r1) write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2) 2.225773639s ago: executing program 2 (id=3258): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x22) socket$netlink(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}]}, 0x50}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) pipe(0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) setreuid(0xffffffffffffffff, 0xee01) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgid(0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000140)={0x2, r4}) sendmmsg$unix(r2, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x4040011) r5 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000502, 0x0, &(0x7f0000000200)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_EVENT={0x8, 0x2c, 0x7}]}, 0x30}}, 0x0) 2.130294263s ago: executing program 5 (id=3261): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0xa202, 0x32, 0x47, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x20042, 0x1fa) write$tcp_mem(r0, &(0x7f0000000000)={0x8000000000000001, 0x20, 0x6463, 0x20, 0x1}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) eventfd2(0x7, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2.122820013s ago: executing program 2 (id=3262): r0 = socket$inet6(0xa, 0x3, 0x8) setresuid(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="3000000000000000a600000081000000000000000c000000000049e30d22000000000000001f1287fc000000e18bdbbf76fb626f6227fbfb0f2673b9342f38973fb7cb13ff507fed6399ad96ce4b9e421fdde4171559f1446a35a8a382f347cfd8324540f08c4a00c79eaa21f6bc8d62bfab6a95f691788054b71645504809149792194cebefcbc41b7cac86afc51952be02ee972fbd", @ANYRES32=0x0], 0x30}], 0x1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="100000000000001101eaff0001000000241b50f225976d1bac7362353e4f25314be334bc930aa5715750b6eb735dfcf498126b8794d057d8636ca2b859c1fbc3e2a3f6a1a0c30dd392a6283eebd46919ae0cca499c74a09db3e6f2417ab14d9bfc241985fd8b"], 0x10, 0x10}, 0x4c000) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x1, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) r3 = socket$inet(0x2, 0x2, 0x1) socket$l2tp6(0xa, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2002c010}, 0x39658520c1095003) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) 1.89218605s ago: executing program 8 (id=3265): syz_emit_ethernet(0x8a, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa8086dd600a3ff200540600fe8000000000000000000000000003bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) 1.849270321s ago: executing program 3 (id=3266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000000000002d, 0x2e}, 0x7f2a}}, {0x21, 0x2, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.848527911s ago: executing program 5 (id=3267): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fchmod(r1, 0x100) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) unshare(0x22020600) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2e, 0x80040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x830d}, 0x212, 0x9, 0x0, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) shutdown(r5, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @private0, 0x4, 0xffffffff}, 0x2a, 0x0}, 0x0) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x10000, 0xf40d9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0xfffffffffffffffc, 0x43a1bd78, 0x6, 0x9, 0xa, 0x2, 0x0, 0x0, 0x0, 0x2010}, 0x0, 0x4004000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r6, 0x4008240b, &(0x7f00000002c0)={0x1, 0x80, 0x7, 0xb, 0x3, 0x7, 0x0, 0x0, 0x29822f9e2242020a, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, @perf_bp={0x0, 0x1}, 0x200, 0x4, 0x0, 0x9, 0xae, 0x6, 0x4e, 0x0, 0x2, 0x0, 0x877}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r7 = socket$inet(0x2, 0x3, 0x5) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000080)=0xfffffff8, 0x4) connect$inet(r7, &(0x7f0000000140)={0x2, 0x2, @multicast1}, 0x10) write$binfmt_elf64(r7, 0x0, 0x440) 1.801975743s ago: executing program 8 (id=3268): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x28, r1, 0x615, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x801}, 0xc040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x64, 0x30, 0x1, 0x1, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x12}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, 0x0, 0xb, 0x5, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_COMPAT_NAME={0x6, 0x1, '}\x00'}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x811}, 0x240000c0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYRES8=r3, @ANYRESDEC=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) r9 = openat$sysfs(0xffffff9c, &(0x7f0000000100)='/sys/power/pm_trace_dev_match', 0x0, 0x104) readv(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r10, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x110, r3, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}]}, @NL802154_ATTR_SEC_DEVKEY={0x6c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_ID={0x24, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x110}, 0x1, 0x0, 0x0, 0x4880}, 0x4000005) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) 1.777751833s ago: executing program 3 (id=3269): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000100004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) 1.717007396s ago: executing program 3 (id=3270): sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x4c, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x833, {0xf, 0x6, "010380", 0x3ff, 0x0, 0x1, @loopback, @loopback, [@routing={0x2f, 0x0, 0x0, 0xa3}, @hopopts={0x3a}], "ab092417"}}}}}}, 0x82) 1.657303037s ago: executing program 8 (id=3271): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="6d706f6c3d696e7465726c656176653d7265eb27e2ae45ceb9866c61746976653a"]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b160000000000000000020000084400048010000180090001006c6173740000000030000180080001006e6174002400028008000140000000000800054000000017080002400000000208000640000000120900010073797a30000000000900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) ioctl$USBDEVFS_CONNECTINFO(r1, 0x40085511, &(0x7f0000000000)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x10, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x200, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x7, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x8001, 0x9, 0x10000, 0x1, 0x9, 0x9, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0x10000, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x28, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xffff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x0, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x5, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x86d, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x961a, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8009, 0x905, 0x3, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x10001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x2000006, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0x1, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0x8, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r3, &(0x7f00000001c0)=ANY=[], 0xff2e) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000200)='dvmrp0\x00', 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getxattr(0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x35, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r5, 0x2b4b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendto(r7, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r6, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 1.656788468s ago: executing program 5 (id=3272): r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x9048, 0x8, 0xe, 0xae, 0xff, 0x9, 0x5}, 0xc) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:mnt_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'batadv_slave_1\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240000c4}, 0x24008080) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x88400, 0x0) writev(r2, &(0x7f0000000600)=[{&(0x7f0000000200)="a6f5b9769cdbcb644399f19a9d4e550c58844e34dfe07596e9e26edd953e915dbe1cf29c1288a6e411560d511d5e375fc31e796b572f97c31729df947d8a2693ff9d06e75a589c90e6f635f6adbbec3f1945aaff6df85aaf712eb72c6c18cb10daf09fb654cf46bdb4e687a2b602a76fd4627de2d17c136d43a21b39fdbff4023b7246fb9b0eac28c8995ba613d843ed1ebf559e9e48a35b6fe13c9694cdf57255385e77bcfd9aa40a7cd5a123ba893829f3b8a2672d9ab203b24008e4dce3ceb478b16945b73e1a64d4fed6e1b58f3cef38fa5b5662fde3fcf7d52b282a58d41af0f364cffb5622ff798ad5ef2b", 0xee}, {&(0x7f0000000300)="a439ea1b28bde55097b4231e94dea3e4fcd6bdf672b5fb0bec7aaa36e5b9589f3599ab4d868573a7dfc532ebe743", 0x2e}, {&(0x7f0000000340)="e4c221b31e02e6445f57ae30db56639cdfe5e179fc51a0b937b7054cce06041328ba32299a9ef2bb3b085a461dfa8d7ebf63605908d4383ff8b37105988ad0de84e0a2367c1157a3cb00129829b789d4b0c9d58f2c2a58c0a3b4960f016d088eedc33aba04914de4c73729ec0eccccb4f345c11fb6b08ef9f7f645472b4f5678a7e36ee162c2013bcdb7235900c2915682aaa6cfe9d4045158970d70355674c05d042369b96865598e93003d011ef6de28c46019d0fbf7f9ac0fe5e3b9bc82dfac3f5b1deeb7d1a52f76755e41b0e0ad44d407860d672564dde82cf7b4886488a599929724f9", 0xe6}, {&(0x7f0000000440)="528f1bbd1ef955a8396a68e2445970c15dcabd59b99d44eb87f3d735a1350c938d48f0202c477e6d3a04e8392be8162a8df75ce5f3db99f8e9fc0836a908beb628d715c366f3bb134ad06b0cb080a3a680c34f34c3ef47f45b3e2bbd4b6d2ada9502c711f10f1f1363c117cd66f3c581603ea3f5e8d47b71c3527c743e816612c013ce6ec48c81f944f2d27e1cbb2d7845c24f7f0d69d39c4d9e5eaf9da7c3efa4b2", 0xa2}, {&(0x7f0000000500)="95007815dcc991d3f1b8673ad0ef69dbb3310dd67aed8d9eba8bf30f9ab5df0ab8f2a22f8037d7fd0b80928c52f43f3c913ddac3d30d42989552a0bfe828d1d87cd77d4a", 0x44}, {&(0x7f0000000580)="5e990d3bc4436ad197e83e2401d1a22b17e4fa0501a2b530de7c1c2a0dc62d4a28ab0b37862f72ea7196aabfedf1a88247195846a2125afa49f298a042eaf1ba32990a37bcb8a0c53a1d3be23d355b0b39a572eb19b8128a149715841411baed8741bde2d4bdb5b8a762c9780abc8667179dfb4edc657da7d4", 0x79}], 0x6) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000680)=0x80, &(0x7f00000006c0)=0x1) syz_clone(0x411a4000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) 1.650748118s ago: executing program 6 (id=3273): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0xa202, 0x32, 0x47, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$sysfs(0xffffff9c, &(0x7f00000001c0)='/sys/power/pm_print_times', 0x20042, 0x1fa) write$tcp_mem(r0, &(0x7f0000000000)={0x8000000000000001, 0x20, 0x6463, 0x20, 0x1}, 0x48) pipe(&(0x7f0000000100)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) eventfd2(0x7, 0x1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x3, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688890687", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.504938712s ago: executing program 3 (id=3274): syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x6, &(0x7f0000000000)) clock_settime(0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02002000000000000000000d0000000000205f"], 0x0, 0x34}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000003200)=""/4096, 0x1000}], 0x1, 0x2c2, 0xca) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0xc, &(0x7f0000000040)=0x5, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) get_robust_list(r0, &(0x7f00000004c0)=&(0x7f0000000480)={&(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f0000000580)=0x18) fchdir(0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) 726.005217ms ago: executing program 6 (id=3275): r0 = socket$igmp(0x2, 0x3, 0x2) syz_emit_ethernet(0x86, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0xa8242) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000180)={0x58, 0x6, 0x3, "60ef53a68f9c31a4f613db761382496804bd7ab14962d798b322f4cf234b57d29021bbeae6440f4162fd2037c45fc8c0842c7df4b4ee4ecc24bde613e83f272cf644edfafc1e355546e3683ceb9db426b109e2f6de4cbd81"}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, r2, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) keyctl$session_to_parent(0x12) listen(r0, 0x6) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) socketpair(0x3, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000200)={0x32, 0x8, 0x7, 0x6, 0x5, 0x81}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = syz_open_dev$usbfs(0x0, 0x7, 0x8000) ioctl$USBDEVFS_BULK(r5, 0xc0185502, &(0x7f0000000480)={{{0x1, 0x1}}, 0x14, 0x3, &(0x7f0000000380)="3627da4c60166efc07013efc41d8b2bb2414949d"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r6) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000080)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="30000000120001000010000000000000000000000c00000000000000000000000d0035"], 0x30}], 0x1}, 0x0) syz_read_part_table(0x105d, &(0x7f0000002700)="$eJzsz7FtwkAYBeDnS2L5lCJVRogyETUlEiUs4IaKgjlgEyZhDCOwzQhA8X3Nnd6TnvSHl2rarJcf/0lqkv4RT+/n0CQlh813ku0qSTsWNanlL0n5uXzdgm4/FufjvNHOI+maod4/fbrsfjNMeVmcnnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALy9awAAAP//h8AL7A==") mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f00006d4000/0x2000)=nil, 0x2000, 0xc002, 0x0, 0x3, 0x3) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r8 = fcntl$dupfd(r1, 0x406, r1) write$tun(r8, &(0x7f0000000400)=ANY=[], 0xa2) 639.309819ms ago: executing program 3 (id=3276): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x6, 0x822b01) write$char_usb(r3, &(0x7f0000000040)="e2", 0xff0f) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000700)=@req={0x7f, 0x6, 0x863, 0x8}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x458, 0x528, 0xfeffffff, 0x458, 0x528, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, 0x0, 0x0, 'wlan1\x00', 'nr0\x00', {}, {}, 0x6}, 0x0, 0x308, 0x330, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth0_vlan\x00', {0xff}, 'team0\x00', {}, 0xe, 0x1}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00', {0x6}}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000002]}}}, @common=@set={{0x40}, {{0x0, [0x4, 0x0, 0x0, 0x1, 0x6, 0x1], 0x0, 0x2}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@multicast2, @rand_addr, 0x0, 0x0, 'veth0\x00', 'ip6tnl0\x00', {}, {}, 0x73}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xe, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x6d8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0x0, 0x0}, 0x10) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x13}, @TCA_PIE_ALPHA={0x8, 0x4, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 630.03069ms ago: executing program 5 (id=3277): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000280)=""/113}, 0x20) 629.68319ms ago: executing program 2 (id=3278): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x21c5d4, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120c, &(0x7f0000003680)="$eJzs3M+LG2UYB/Bntz+2bt0faq22IL7oRS9Ddw9e9LLIFqQBpe0KrSBM3VkNGZOQCQsRsXry6t8hghdvgnjTy178DwRve/FYQRzZpLaNpthVcUr7+VzywPt+w/MmJPAO887+K5+939mpsp18GPNzczHfj0g3UqSYjz98HC++/N33z1y6cvXCRqu1eTGl8xuX115KKS0/+81bH37x3LfDk29+tfz1Quytvr3/8/pPe6f3zuz/dvm9dpXaVer2hilP13q9YX6tLNJ2u+pkKb1RFnlVpHa3KgZT4ztlr98fpby7vbTYHxRVlfLuKHWKURr20nAwSvm7ebubsixLS4vB4R29VW19fqOu64i6PhbHo67r+pFYjJPxaCzFcqzEajwWj8cTcSqePHYz8uOXo4MEAAAAAAAAAAAAAAAAAAAA8N+55/P/cTqeiqfjzHhW010DAAAAAAAAAAAAAAAAAADAg+XSlasXNlqtzYspnYgoP93d2t2avE7GN3aiHWUUcS5W4tcYn/6fmNTnX2ttnktjq/FJef1m/vru1pHp/Nr4cQIz82uTfJrOL8Tinfn1WIlTs/PrM/Mn4oXn78hnsRI/vBO9KGM7DrK38x+tpfTq660/5c+O5wEAAMCDIEu3zNy/Z9ndxif5Q1wfmNpfH2TPHm106URENfqgk5dlMXh4i/mIuA/a+PvieLNt/FLXdfMfQkPF3X8pCxHxj995LiLujwX+pWj6n4n/w+0vvelOAAAAAAAAAAAAOIx/davgkXuLN71GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5nB44FAAAAAIT5W6fRsQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8FQAA//9qIs+X") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xd}, 0x94) r1 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) sendfile(r2, r2, 0x0, 0x7a680000) 531.904023ms ago: executing program 5 (id=3279): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xb4}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) unshare(0x22020600) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r2 = dup2(r1, r0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x8, 0xfffffffe, {{0xb, 0x4, 0x1, 0x2f, 0x2c, 0x64, 0x0, 0xf0, 0x29, 0x0, @remote, @empty, {[@timestamp_addr={0x44, 0xc, 0x65, 0x1, 0x0, [{@private=0xa010100}]}, @lsrr={0x83, 0xb, 0x60, [@private=0xa010100, @broadcast]}]}}}}}) 531.247393ms ago: executing program 3 (id=3280): syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newqdisc={0x1b0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x180, 0x2, {{0x8002, 0x5a, 0x0, 0x0, 0x5, 0x6}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x94, 0x70d}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffe01, 0x3}}, @TCA_NETEM_LOSS={0xb0, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x6, 0x6, 0x9, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x9c000000, 0x0, 0x8000, 0xfffffffc}}, @NETEM_LOSS_GI={0x4c, 0x1, {0x5, 0x1, 0x1, 0x28f, 0x7}}, @NETEM_LOSS_GI={0x18, 0x1, {0x7, 0x4, 0x3, 0x7, 0x80000000}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x10, 0x60a8}}, @NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x7, 0x2b, 0x1}}, @NETEM_LOSS_GI={0x18, 0x1, {0xff, 0x5, 0x2cdd, 0x3, 0xb0}}, @NETEM_LOSS_GE={0x14, 0x2, {0x7, 0x4, 0x3, 0x8f}}]}, @TCA_NETEM_RATE={0x14, 0x6, {0xf73, 0x1, 0x739, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0xf}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "3885fb25dd1a30a8708a94158e92613c0c51182307a36316db0d84a8d2504c82458629f7d9c4ca60ead53f5ce7470548a1f704"}, @TCA_NETEM_DELAY_DIST={0x44, 0x2, "ed66124254691618d9d44012fadcaa34d5b3a194ce7016b424bbb92a294c60bc5c692886375adda17dc647571b18e55bac8b756e17d2141a30e3d01b2f1e17e5"}]}}}]}, 0x1b0}}, 0x0) syz_open_procfs(0x0, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000027c0)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xff, "261f88", "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"}}, 0x110) mremap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0x3000, 0x0, &(0x7f00004fe000/0x3000)=nil) fsmount(0xffffffffffffffff, 0x1, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4000041) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x80}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bind$inet(r3, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) 461.973735ms ago: executing program 6 (id=3281): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) r0 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x1e56, 0x800, 0x0, 0x2fc}, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x7ffffffe) set_mempolicy_home_node(&(0x7f000010a000/0x3000)=nil, 0x3000, 0x3, 0x0) 152.700325ms ago: executing program 2 (id=3282): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r2 = dup3(r0, r1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x6a980, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x2}, 0x10c0e8, 0xae85, 0x0, 0x3, 0x9e2, 0x15, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = gettid() tkill(r4, 0x14) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000), 0xffffff98) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r3, 0xf507, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x118) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r4, &(0x7f00000000c0), 0x4001) write$cgroup_devices(r5, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:'], 0x9) rt_sigprocmask(0x2, &(0x7f00000001c0)={[0x7]}, 0x0, 0x8) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 2.205889ms ago: executing program 5 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) unlinkat(0xffffffffffffffff, 0x0, 0x200) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) 0s ago: executing program 6 (id=3284): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000003240)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003200)={&(0x7f0000003280)=ANY=[@ANYBLOB="64120000e6955eb4352ab71b8f7e9ec7953e49d7dc2e785a8447dd3bc37c179542e8118de9568c46d1673073dcc69718544074e96a6a57c51821c4b3bec9bedf1758b27e", @ANYRES16=r2, @ANYBLOB="20072bbd7000ffdbdf250e0000004800018008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1264}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a00)=@newtaction={0x14, 0x1e, 0x4, 0x100, 0x25dfdbff}, 0xfffffeb4}, 0x1, 0x2b1e}, 0x408d4) r3 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x8, 0x0, 0x8, 0x710, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000b40), 0x2}, 0x106600, 0x10004, 0x30dd, 0x5, 0xa, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f00050fd25a80648c63940d0324fc60041200002037153e360c04018006041000"/46, 0x2e}, {&(0x7f0000000b80)="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", 0x4a7}], 0x2}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000140)={0x0, 0xfffffec0, &(0x7f00000003c0)={&(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3], 0x34c}, 0x1, 0x0, 0x0, 0xf9612d57ed9de509}, 0x48041) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x8d0, &(0x7f0000000080)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c00a99176bffea999ec4947785a4b3392b470a878b010acc5fde3f7c39533b111d92aa1e3cd9504b4aec083a038cd1b944d504716e6b8463de9dc9743fbe9e0ef9396a932024b904283205650ea735ae7adac50b5efe5244d737dc9515a51775b2fafbc85c9c1c8f62872a466192aae714a90990e0b07aa2b92e463ad98"], 0x1, 0x25f, &(0x7f0000000840)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='net/nfsfs\x00') bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={0xffffffffffffffff, r6}, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mprotect(&(0x7f000011c000/0x3000)=nil, 0x3000, 0x3000008) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, 0x0, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) kernel console output (not intermixed with test programs): 3707][T12472] loop3: detected capacity change from 0 to 512 [ 379.011828][T12472] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 379.066016][T12458] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 379.363078][T12492] __nla_validate_parse: 3 callbacks suppressed [ 379.363098][T12492] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2652'. [ 379.380206][T12458] EXT4-fs (loop4): 1 truncate cleaned up [ 379.432607][T12458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.485041][T12494] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2653'. [ 379.742711][ T28] audit: type=1400 audit(1778960434.596:7536): avc: denied { remount } for pid=12457 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 379.800044][ T28] audit: type=1400 audit(1778960434.596:7537): avc: denied { mounton } for pid=12457 comm="syz.4.2643" path="/file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 379.847500][T12494] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2653'. [ 380.037389][T12502] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 380.097833][T12521] openvswitch: netlink: Missing key (keys=40, expected=80) [ 380.204067][T12524] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20002 [ 380.868553][T12542] loop3: detected capacity change from 0 to 512 [ 380.889007][T12542] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2666: corrupted in-inode xattr: invalid ea_ino [ 380.918577][T12542] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.924797][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 380.940498][ C0] EXT4-fs (loop3): initial error at time 1778960435: ext4_iget_extra_inode:5128: inode 15 [ 380.950471][ C0] EXT4-fs (loop3): last error at time 1778960435: ext4_iget_extra_inode:5128: inode 15 [ 380.987836][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.046295][T12542] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2666: couldn't read orphan inode 15 (err -117) [ 381.076951][T12542] loop3: lost filesystem error report for type 5 error -117 [ 381.097903][T12542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.105873][T12548] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2665'. [ 381.112237][T12548] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.134950][T12548] IPv6: NLM_F_CREATE should be set when creating new route [ 381.142170][T12548] IPv6: NLM_F_CREATE should be set when creating new route [ 381.158972][T12550] netlink: 3100 bytes leftover after parsing attributes in process `syz.2.2668'. [ 381.178154][T12542] bridge0: port 3(vlan2) entered blocking state [ 381.208821][T12542] bridge0: port 3(vlan2) entered disabled state [ 381.223656][T12542] vlan2: entered allmulticast mode [ 381.231412][T12542] geneve0: entered allmulticast mode [ 381.259857][T12542] vlan2: entered promiscuous mode [ 381.277752][T12542] geneve0: entered promiscuous mode [ 381.302276][T12555] syzkaller0: entered promiscuous mode [ 381.323242][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.326226][T12555] syzkaller0: entered allmulticast mode [ 381.404676][T12557] lo speed is unknown, defaulting to 1000 [ 381.597817][ T28] audit: type=1326 audit(1778960436.445:7538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.688556][ T28] audit: type=1326 audit(1778960436.445:7539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.729178][T12583] loop4: detected capacity change from 0 to 512 [ 381.742149][ T28] audit: type=1326 audit(1778960436.475:7540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.801685][T12583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.816527][ T28] audit: type=1326 audit(1778960436.475:7541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.847760][ T28] audit: type=1326 audit(1778960436.485:7542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.874837][ T28] audit: type=1326 audit(1778960436.485:7543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.902218][ T28] audit: type=1326 audit(1778960436.485:7544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 381.991940][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.556911][ T28] kauditd_printk_skb: 85 callbacks suppressed [ 382.556930][ T28] audit: type=1326 audit(1778960437.405:7630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 382.560686][T12594] loop4: detected capacity change from 0 to 1024 [ 382.570956][ T28] audit: type=1326 audit(1778960437.405:7632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9c610fcc57 code=0x7ffc0000 [ 382.693157][ T28] audit: type=1326 audit(1778960437.405:7631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 382.724443][ T28] audit: type=1326 audit(1778960437.405:7633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9c610b9b51 code=0x7ffc0000 [ 382.752402][ T28] audit: type=1326 audit(1778960437.405:7634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f9c610fdc49 code=0x7ffc0000 [ 382.817586][ T28] audit: type=1326 audit(1778960437.455:7635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9c610b9bbb code=0x7ffc0000 [ 382.905152][ T28] audit: type=1326 audit(1778960437.455:7636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 382.932822][ T28] audit: type=1326 audit(1778960437.455:7637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c610fce59 code=0x7ffc0000 [ 382.961307][ T28] audit: type=1326 audit(1778960437.485:7638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f9c610b92ac code=0x7ffc0000 [ 382.969757][T12610] FAULT_INJECTION: forcing a failure. [ 382.969757][T12610] name failslab, interval 1, probability 0, space 0, times 0 [ 382.995105][ T28] audit: type=1326 audit(1778960437.485:7639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12580 comm="syz.2.2680" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9c610b930e code=0x7ffc0000 [ 383.025945][T12610] CPU: 0 UID: 0 PID: 12610 Comm: syz.5.2688 Tainted: G W syzkaller #0 PREEMPT(full) [ 383.026061][T12610] Tainted: [W]=WARN [ 383.026082][T12610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 383.026123][T12610] Call Trace: [ 383.026147][T12610] [ 383.026176][T12610] __dump_stack+0x1d/0x30 [ 383.026259][T12610] dump_stack_lvl+0x95/0xd0 [ 383.026311][T12610] dump_stack+0x15/0x1b [ 383.026334][T12610] should_fail_ex+0x263/0x280 [ 383.026376][T12610] should_failslab+0x8c/0xb0 [ 383.026413][T12610] kmem_cache_alloc_noprof+0x66/0x3f0 [ 383.026448][T12610] ? mas_alloc_nodes+0x1a2/0x210 [ 383.026482][T12610] mas_alloc_nodes+0x1a2/0x210 [ 383.026517][T12610] mas_preallocate+0x2ca/0x510 [ 383.026555][T12610] mmap_region+0x1467/0x20d0 [ 383.026621][T12610] do_mmap+0x9b2/0xbd0 [ 383.026648][T12610] ? selinux_mmap_file+0x5d/0x70 [ 383.026673][T12610] vm_mmap_pgoff+0x183/0x2d0 [ 383.026716][T12610] ksys_mmap_pgoff+0xc1/0x310 [ 383.026741][T12610] ? __x64_sys_mmap+0x49/0x70 [ 383.026778][T12610] x64_sys_call+0x14df/0x3020 [ 383.026807][T12610] do_syscall_64+0x12c/0x3b0 [ 383.026843][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.026871][T12610] RIP: 0033:0x7fa96abfcbc2 [ 383.026892][T12610] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 383.026912][T12610] RSP: 002b:00007fa969656df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 383.026934][T12610] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa96abfcbc2 [ 383.026951][T12610] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 383.026964][T12610] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 383.026980][T12610] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 383.026995][T12610] R13: 00007fa969656ee0 R14: 00007fa969656ea0 R15: 0000200000000400 [ 383.027014][T12610] [ 383.044963][T12594] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 383.451900][T12624] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2692'. [ 383.889109][ C0] bridge0: port 3(vlan2) entered forwarding state [ 383.889132][ C0] bridge0: topology change detected, propagating [ 384.270224][T12594] System zones: 0-1, 3-36 [ 384.432564][T12635] bridge_slave_0: left allmulticast mode [ 384.478685][T12635] bridge_slave_0: left promiscuous mode [ 384.484535][T12635] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.518050][T12594] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.2684: bad orphan inode 134217728 [ 384.552495][T12594] loop4: lost filesystem error report for type 5 error -117 [ 384.566601][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 384.580435][ C0] EXT4-fs (loop4): initial error at time 1778960439: ext4_orphan_get:1423 [ 384.588992][ C0] EXT4-fs (loop4): last error at time 1778960439: ext4_orphan_get:1423 [ 384.644080][T12594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.709259][T12635] bridge_slave_1: left allmulticast mode [ 384.715202][T12635] bridge_slave_1: left promiscuous mode [ 384.722905][T12652] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2703'. [ 384.733768][T12635] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.845206][T12635] bond0: (slave bond_slave_0): Releasing backup interface [ 384.845754][T12594] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.980997][T12635] bond0: (slave bond_slave_1): Releasing backup interface [ 384.998548][T12635] team0: Port device team_slave_0 removed [ 385.012976][T12635] team0: Port device team_slave_1 removed [ 385.040813][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.050092][T12635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.062325][T12635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.071676][T12635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.112371][T12635] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 385.133717][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2704'. [ 385.144103][T12655] tipc: Invalid UDP bearer configuration [ 385.144119][T12655] tipc: Enabling of bearer rejected, failed to enable media [ 385.389767][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2706'. [ 385.404038][T12665] loop4: detected capacity change from 0 to 512 [ 385.449204][T12665] EXT4-fs: Ignoring removed bh option [ 385.463520][T12665] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 385.493628][T12665] EXT4-fs (loop4): 1 truncate cleaned up [ 385.514755][T12665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 385.670105][T12691] tipc: Enabling of bearer rejected, failed to enable media [ 385.739207][T12699] loop3: detected capacity change from 0 to 512 [ 385.745973][T12699] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 386.464781][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.656450][T12714] bond6: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 387.168779][T12714] bond6 (unregistering): Released all slaves [ 387.268319][T12731] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2723'. [ 387.302941][T12737] netlink: 276 bytes leftover after parsing attributes in process `syz.5.2726'. [ 387.318510][ T3770] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.347158][T12709] lo speed is unknown, defaulting to 1000 [ 387.383630][T12740] x_tables: unsorted underflow at hook 4 [ 387.429133][ T3770] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.652285][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2729'. [ 387.659013][ T3770] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.697341][T12733] loop3: detected capacity change from 0 to 1024 [ 387.896591][ T3770] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.899660][T12733] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 387.935223][T12733] System zones: 0-1, 3-36 [ 388.265021][ T3770] vlan2: left allmulticast mode [ 388.270328][ T3770] geneve0: left allmulticast mode [ 388.372092][ T3770] vlan2: left promiscuous mode [ 388.390857][ T3770] geneve0: left promiscuous mode [ 388.410523][ T3770] bridge0: port 3(vlan2) entered disabled state [ 388.436503][T12733] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2724: bad orphan inode 134217728 [ 388.497239][T12733] loop3: lost filesystem error report for type 5 error -117 [ 388.498977][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 388.514354][ C0] EXT4-fs (loop3): initial error at time 1778960443: ext4_orphan_get:1423 [ 388.523461][ C0] EXT4-fs (loop3): last error at time 1778960443: ext4_orphan_get:1423 [ 388.577478][ T3770] bridge_slave_1: left allmulticast mode [ 388.584742][ T3770] bridge_slave_1: left promiscuous mode [ 388.587215][T12733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.590623][ T3770] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.650999][T12733] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.688141][ T3770] bridge_slave_0: left allmulticast mode [ 388.694185][ T3770] bridge_slave_0: left promiscuous mode [ 388.721481][ T3770] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.934226][T12733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2724'. [ 388.950216][ T3770] bond4 (unregistering): (slave vti0): Releasing backup interface [ 388.950282][ T3770] vti0 (unregistering): left promiscuous mode [ 388.998160][ T3770] bond7 (unregistering): (slave geneve3): Releasing active interface [ 389.456600][ T3770] bond1 (unregistering): Released all slaves [ 389.495364][ T3770] bond2 (unregistering): Released all slaves [ 389.539409][ T3770] bond3 (unregistering): Released all slaves [ 389.577336][ T3770] bond4 (unregistering): Released all slaves [ 389.610680][ T3770] bond5 (unregistering): Released all slaves [ 389.686340][ T3770] bond6 (unregistering): Released all slaves [ 389.708583][ T3770] bond7 (unregistering): Released all slaves [ 389.719515][ T3770] bond0 (unregistering): Released all slaves [ 389.759928][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.779453][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.797267][T12709] bridge_slave_0: entered allmulticast mode [ 389.811735][T12709] bridge_slave_0: entered promiscuous mode [ 389.828336][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.846544][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.858746][T12709] bridge_slave_1: entered allmulticast mode [ 389.869421][T12709] bridge_slave_1: entered promiscuous mode [ 389.914387][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.942007][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.954592][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 389.954606][ T28] audit: type=1400 audit(1778960444.693:7714): avc: denied { write } for pid=12786 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.017603][T12709] team0: Port device team_slave_0 added [ 390.046464][T12709] team0: Port device team_slave_1 added [ 390.058144][ T28] audit: type=1400 audit(1778960444.790:7715): avc: denied { write } for pid=12797 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.114908][ T3770] tipc: Left network mode [ 390.119703][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 390.129546][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.138641][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.168977][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.188190][T12800] loop3: detected capacity change from 0 to 2048 [ 390.209400][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.218386][T12800] msdos: Unknown parameter 'erroÎí±ontinue' [ 390.262619][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 390.377629][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.494574][T12709] hsr_slave_0: entered promiscuous mode [ 390.512290][T12709] hsr_slave_1: entered promiscuous mode [ 390.526647][T12709] debugfs: 'hsr0' already exists in 'hsr' [ 390.564000][T12709] Cannot create hsr debugfs directory [ 390.859365][ T28] audit: type=1400 audit(1778960445.580:7716): avc: denied { write } for pid=12809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.912357][ T28] audit: type=1400 audit(1778960445.628:7717): avc: denied { write } for pid=12823 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.164502][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 391.183111][T12830] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 391.310097][T12830] bond2: entered promiscuous mode [ 391.317086][T12830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.345825][T12830] bond2: (slave bridge3): making interface the new active one [ 391.356831][T12830] bridge3: entered promiscuous mode [ 391.376376][T12830] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 391.402911][T12846] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2744'. [ 391.479197][ T3770] macvlan0: left promiscuous mode [ 391.493665][ T3770] dummy0: left promiscuous mode [ 391.506426][ T3770] hsr_slave_0: left promiscuous mode [ 391.513202][ T28] audit: type=1400 audit(1778960446.204:7718): avc: denied { write } for pid=12836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.561002][ T3770] hsr_slave_1: left promiscuous mode [ 391.574193][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.584909][ T28] audit: type=1400 audit(1778960446.272:7719): avc: denied { write } for pid=12858 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.613635][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 391.745107][ T3770] team0 (unregistering): Port device team_slave_1 removed [ 391.773881][ T3770] team0 (unregistering): Port device team_slave_0 removed [ 391.795971][T12870] loop3: detected capacity change from 0 to 512 [ 391.816762][T12870] ext4: Unknown parameter 'noacl' [ 391.891309][T12845] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2748'. [ 391.938891][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 391.983423][T12875] loop3: detected capacity change from 0 to 256 [ 392.005359][T12875] vfat: Unknown parameter '' [ 392.021465][T12878] loop4: detected capacity change from 0 to 1024 [ 392.028691][T12878] EXT4-fs: inline encryption not supported [ 392.051365][T12878] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 392.098481][T12878] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.2758: lblock 2 mapped to illegal pblock 2 (length 1) [ 392.146740][T12878] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 392.147519][T12878] EXT4-fs (loop4): Remounting filesystem read-only [ 392.156649][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 392.156670][ C1] EXT4-fs (loop4): initial error at time 1778960446: ext4_map_blocks:791: inode 3: block 2 [ 392.156714][ C1] EXT4-fs (loop4): last error at time 1778960446: ext4_map_blocks:791: inode 3: block 2 [ 392.197696][T12709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 392.197873][T12878] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 392.197896][T12878] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 392.197928][T12878] EXT4-fs (loop4): 1 orphan inode deleted [ 392.198418][T12878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.202343][T12890] loop3: detected capacity change from 0 to 512 [ 392.204629][T12890] EXT4-fs: test_dummy_encryption option not supported [ 392.264903][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.274160][T12709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 392.291645][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.307426][T12709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 392.314291][T12878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2758'. [ 392.373161][ T28] audit: type=1400 audit(1778960447.025:7720): avc: denied { write } for pid=12876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.403257][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.407089][ T28] audit: type=1400 audit(1778960447.044:7721): avc: denied { write } for pid=12898 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.441929][ T3770] IPVS: stop unused estimator thread 0... [ 392.450448][T12709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 392.682207][T12709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.876350][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.896504][T12709] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.901023][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.901062][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.917234][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.917278][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.233208][T12709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.249775][T12953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2764'. [ 393.438735][T12709] veth0_vlan: entered promiscuous mode [ 393.459776][T12709] veth1_vlan: entered promiscuous mode [ 393.503914][T12709] veth0_macvtap: entered promiscuous mode [ 393.539433][T12709] veth1_macvtap: entered promiscuous mode [ 393.569833][T12981] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2767'. [ 393.599949][T12709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.631130][T12709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.662393][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.694765][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.719233][ T30] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.738509][ T30] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.801393][T12990] loop2: detected capacity change from 0 to 512 [ 393.827083][T12990] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.2719: invalid indirect mapped block 256 (level 2) [ 393.841881][T12990] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 393.845406][T12990] EXT4-fs (loop2): 2 truncates cleaned up [ 393.854664][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 393.854689][ C0] EXT4-fs (loop2): initial error at time 1778960448: ext4_free_branches:1023: inode 11 [ 393.854738][ C0] EXT4-fs (loop2): last error at time 1778960448: ext4_free_branches:1023: inode 11 [ 393.890971][T12990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.908342][T12990] EXT4-fs error (device loop2): empty_inline_dir:1778: inode #12: block 7: comm syz.2.2719: bad entry in directory: directory entry overrun - offset=4, inode=4278190093, rec_len=196860, size=60 fake=0 [ 393.965380][T12990] EXT4-fs warning (device loop2): empty_inline_dir:1785: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 394.065408][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.091470][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2768'. [ 394.137383][ T6513] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.304743][T13004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2773'. [ 394.329840][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 394.443681][ T3774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.468566][ T3774] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.617303][T13024] loop3: detected capacity change from 0 to 764 [ 394.772053][ T3774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.798478][ T3774] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.892462][ T3774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 394.905051][T13039] openvswitch: netlink: Missing key (keys=40, expected=80) [ 394.916570][ T3774] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 394.955223][T13021] lo speed is unknown, defaulting to 1000 [ 394.982927][ T3774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 395.012350][ T3774] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 395.156300][T13048] netlink: 3100 bytes leftover after parsing attributes in process `syz.2.2785'. [ 395.175665][ T3774] vlan2: left allmulticast mode [ 395.182050][ T3774] geneve0: left allmulticast mode [ 395.191509][ T3774] vlan2: left promiscuous mode [ 395.206131][ T3774] geneve0: left promiscuous mode [ 395.216890][ T3774] bridge0: port 3(vlan2) entered disabled state [ 395.228405][T13052] loop2: detected capacity change from 0 to 512 [ 395.239148][ T3774] bridge_slave_1: left allmulticast mode [ 395.248236][ T3774] bridge_slave_1: left promiscuous mode [ 395.254893][ T3774] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.265730][ T3774] bridge_slave_0: left allmulticast mode [ 395.272799][ T3774] bridge_slave_0: left promiscuous mode [ 395.280380][ T3774] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.289094][T13052] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2787: corrupted in-inode xattr: invalid ea_ino [ 395.304145][T13052] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 395.304418][T13052] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2787: couldn't read orphan inode 15 (err -117) [ 395.313630][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 395.313673][ C1] EXT4-fs (loop2): initial error at time 1778960449: ext4_iget_extra_inode:5128: inode 15 [ 395.313708][ C1] EXT4-fs (loop2): last error at time 1778960449: ext4_iget_extra_inode:5128: inode 15 [ 395.357388][T13052] loop2: lost filesystem error report for type 5 error -117 [ 395.359756][T13052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.486034][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 395.486052][ T28] audit: type=1400 audit(1778960450.111:7734): avc: denied { create } for pid=13051 comm="syz.2.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.519689][ T28] audit: type=1400 audit(1778960450.111:7735): avc: denied { connect } for pid=13051 comm="syz.2.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 395.548464][T13060] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2789'. [ 395.565934][ T3774] bond1 (unregistering): (slave geneve3): Releasing active interface [ 395.625889][ T3774] bond1 (unregistering): Released all slaves [ 395.636408][ T3774] bond2 (unregistering): Released all slaves [ 395.645798][ T3774] bond3 (unregistering): Released all slaves [ 395.656808][ T3774] bond0 (unregistering): Released all slaves [ 395.666074][ T3774] bond4 (unregistering): Released all slaves [ 395.675870][ T3774] bond5 (unregistering): Released all slaves [ 395.696160][T13057] bridge0: port 3(vlan2) entered blocking state [ 395.702607][T13057] bridge0: port 3(vlan2) entered disabled state [ 395.712938][T13057] vlan2: entered allmulticast mode [ 395.718740][T13057] geneve0: entered allmulticast mode [ 395.725078][T13057] vlan2: entered promiscuous mode [ 395.730244][T13057] geneve0: entered promiscuous mode [ 395.762547][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.763220][ T3774] tipc: Left network mode [ 395.780989][T13066] loop3: detected capacity change from 0 to 512 [ 395.799541][T13066] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 395.823379][T13066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.848161][ T3774] IPVS: stopping master sync thread 10474 ... [ 395.891880][T13077] netlink: 'syz.5.2794': attribute type 1 has an invalid length. [ 395.923743][T13080] EXT4-fs error (device loop3): ext4_map_blocks:791: inode #2: block 18: comm syz.3.2791: lblock 23 mapped to illegal pblock 18 (length 1) [ 395.946761][T13077] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.963943][ T3774] hsr_slave_0: left promiscuous mode [ 395.977930][ T3774] hsr_slave_1: left promiscuous mode [ 395.988396][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.004524][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 396.023735][T13077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13077 comm=syz.5.2794 [ 396.053098][ T28] audit: type=1400 audit(1778960450.670:7736): avc: denied { write } for pid=13079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.076751][ T3774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.087813][ T3774] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.100512][ T3774] veth1_to_batadv: left promiscuous mode [ 396.106556][ T3774] veth1_macvtap: left promiscuous mode [ 396.112329][ T3774] veth0_macvtap: left promiscuous mode [ 396.118074][ T3774] veth1_vlan: left promiscuous mode [ 396.126457][ T28] audit: type=1400 audit(1778960450.739:7737): avc: denied { write } for pid=13100 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.230857][ T3774] team0 (unregistering): Port device team_slave_1 removed [ 396.241400][ T3774] team0 (unregistering): Port device team_slave_0 removed [ 396.284045][T13084] bond3: (slave gretap1): making interface the new active one [ 396.293654][T13084] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 396.318249][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 396.364407][T13021] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.374376][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.383350][T13021] bridge_slave_0: entered allmulticast mode [ 396.391380][T13021] bridge_slave_0: entered promiscuous mode [ 396.403113][T13021] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.411650][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.421132][T13021] bridge_slave_1: entered allmulticast mode [ 396.429423][T13021] bridge_slave_1: entered promiscuous mode [ 396.450543][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.462465][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.487919][T13021] team0: Port device team_slave_0 added [ 396.494938][T13021] team0: Port device team_slave_1 added [ 396.514368][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.522915][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.550434][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.573349][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.591060][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.654613][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.672140][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.691235][ T3774] IPVS: stop unused estimator thread 0... [ 396.738663][ T28] audit: type=1400 audit(1778960451.339:7738): avc: denied { write } for pid=13113 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.802774][T13021] hsr_slave_0: entered promiscuous mode [ 396.809578][ T28] audit: type=1400 audit(1778960451.407:7739): avc: denied { write } for pid=13137 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 396.872374][T13021] hsr_slave_1: entered promiscuous mode [ 396.887686][T13021] debugfs: 'hsr0' already exists in 'hsr' [ 396.898188][T13021] Cannot create hsr debugfs directory [ 396.908850][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 396.976008][T13143] netlink: 'syz.3.2804': attribute type 4 has an invalid length. [ 397.001273][T13143] __nla_validate_parse: 1 callbacks suppressed [ 397.001288][T13143] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2804'. [ 397.180968][T13021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 397.204681][ T28] audit: type=1400 audit(1778960451.801:7740): avc: denied { write } for pid=13146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.245543][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.266164][T13164] loop2: detected capacity change from 0 to 512 [ 397.274914][T13021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 397.285650][ T28] audit: type=1400 audit(1778960451.879:7741): avc: denied { write } for pid=13165 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.290003][T13164] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 397.319116][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.357220][T13164] EXT4-fs error (device loop2): ext4_init_orphan_info:618: comm syz.2.2807: orphan file block 0: bad magic [ 397.375863][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 397.405008][T13164] loop2: lost filesystem error report for type 5 error -117 [ 397.410335][T13164] EXT4-fs (loop2): Remounting filesystem read-only [ 397.417786][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 397.417809][ C0] EXT4-fs (loop2): initial error at time 1778960451: ext4_init_orphan_info:618 [ 397.417838][ C0] EXT4-fs (loop2): last error at time 1778960451: ext4_init_orphan_info:618 [ 397.469979][T13021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 397.500785][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.515280][T13164] EXT4-fs (loop2): mount failed [ 397.522539][T13021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 397.565698][T13021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.603920][T13156] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2807'. [ 397.640105][T13179] netlink: 'syz.6.2810': attribute type 27 has an invalid length. [ 397.661753][T13021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.703299][T13021] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.706939][ T28] audit: type=1400 audit(1778960452.283:7742): avc: denied { write } for pid=13173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.733456][ T3746] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.740615][ T3746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.795403][ T28] audit: type=1400 audit(1778960452.381:7743): avc: denied { write } for pid=13196 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.866691][ T3746] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.873888][ T3746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.898510][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 398.108856][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2813'. [ 398.152354][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.280352][T13224] loop3: detected capacity change from 0 to 4096 [ 398.353398][T13224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.397822][T13224] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.466597][T13021] veth0_vlan: entered promiscuous mode [ 398.476244][T13021] veth1_vlan: entered promiscuous mode [ 398.524697][T13021] veth0_macvtap: entered promiscuous mode [ 398.544872][T13235] loop2: detected capacity change from 0 to 512 [ 398.546416][T13021] veth1_macvtap: entered promiscuous mode [ 398.571193][T13235] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 398.595514][T13235] EXT4-fs (loop2): orphan cleanup on readonly fs [ 398.602399][T13235] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.2816: Block bitmap for bg 0 marked uninitialized [ 398.614070][T13021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.615955][T13235] loop2: lost filesystem error report for type 5 error -117 [ 398.625676][T13235] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 398.633607][T13021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.633675][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 398.633798][ C1] EXT4-fs (loop2): initial error at time 1778960453: ext4_read_block_bitmap_nowait:517 [ 398.634083][ C1] EXT4-fs (loop2): last error at time 1778960453: ext4_read_block_bitmap_nowait:517 [ 398.641490][ T3770] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.644883][T13235] loop2: lost filesystem error report for type 5 error -117 [ 398.659111][ T3770] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.659270][ T3770] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.659312][ T3770] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.692828][T13235] EXT4-fs (loop2): 1 orphan inode deleted [ 398.742683][T13235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 398.770531][T13235] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 398.847536][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2822'. [ 398.853674][T13265] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2778'. [ 398.873031][T13263] macsec1: entered promiscuous mode [ 398.878690][T13263] bond0: entered promiscuous mode [ 398.884000][T13263] macsec1: entered allmulticast mode [ 398.889678][T13263] bond0: entered allmulticast mode [ 398.895094][T13263] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 398.904425][T13263] bond0: left allmulticast mode [ 398.923438][T13263] bond0: left promiscuous mode [ 398.971255][T13272] loop7: detected capacity change from 0 to 128 [ 398.980084][T13272] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.994232][T13272] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.134472][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2824'. [ 399.144603][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.229759][T13273] loop3: detected capacity change from 0 to 512 [ 399.247257][T13273] EXT4-fs: Ignoring removed nomblk_io_submit option [ 399.316230][T13273] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 399.375560][T13273] EXT4-fs error (device loop3): ext4_iget_extra_inode:5128: inode #15: comm syz.3.2820: corrupted in-inode xattr: e_value size too large [ 399.435776][T13273] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 399.438825][T13273] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.2820: couldn't read orphan inode 15 (err -117) [ 399.448078][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 399.448102][ C1] EXT4-fs (loop3): initial error at time 1778960453: ext4_iget_extra_inode:5128: inode 15 [ 399.448157][ C1] EXT4-fs (loop3): last error at time 1778960453: ext4_iget_extra_inode:5128: inode 15 [ 399.487667][T13273] loop3: lost filesystem error report for type 5 error -117 [ 399.490294][T13273] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.567558][ T3770] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 399.575070][T13273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 399.665621][ T35] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 399.674900][ T35] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 399.729401][T13301] loop7: detected capacity change from 0 to 512 [ 399.737838][T13289] hid-generic 0000:0000:0000.000C: pid 13289 passed too short report [ 399.766059][T13301] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 400.010584][T13311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2835'. [ 400.021302][T13311] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 400.031653][T13311] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2835'. [ 400.044716][T13311] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2835'. [ 400.377109][T13317] loop2: detected capacity change from 0 to 256 [ 400.591725][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.725308][T13341] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=13341 comm=syz.6.2843 [ 400.788439][T13342] lo speed is unknown, defaulting to 1000 [ 400.912706][T13350] loop3: detected capacity change from 0 to 512 [ 400.942977][T13350] EXT4-fs: Ignoring removed bh option [ 400.969782][T13350] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 400.994901][T13350] EXT4-fs (loop3): 1 truncate cleaned up [ 401.013197][T13350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.033456][T13353] Cannot find set identified by id 0 to match [ 401.070906][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 401.070925][ T28] audit: type=1400 audit(1778960455.576:7752): avc: denied { write } for pid=13349 comm="syz.3.2847" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 401.519259][T13375] bond0 (unregistering): Released all slaves [ 401.689669][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.716554][ T28] audit: type=1400 audit(1778960456.207:7753): avc: denied { append } for pid=13377 comm="syz.7.2855" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 401.905636][T13380] loop3: detected capacity change from 0 to 8192 [ 401.990609][ T28] audit: type=1400 audit(1778960456.469:7754): avc: denied { ioctl } for pid=13377 comm="syz.7.2855" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 402.088387][T13380] loop3: p1 < > [ 402.502863][ T8651] udevd[8651]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 402.531849][T13392] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 402.543085][T13392] bond0 (unregistering): Released all slaves [ 402.932679][T13411] __nla_validate_parse: 4 callbacks suppressed [ 402.932697][T13411] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2866'. [ 402.943682][T13397] loop3: detected capacity change from 0 to 512 [ 403.532624][T13397] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.749648][T13429] program syz.2.2870 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.914459][ T28] audit: type=1400 audit(1778960458.338:7755): avc: denied { write } for pid=13396 comm="syz.3.2861" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.966120][T13437] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2872'. [ 404.024027][ T28] audit: type=1400 audit(1778960458.446:7756): avc: denied { write } for pid=13396 comm="syz.3.2861" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.127890][ T28] audit: type=1400 audit(1778960458.446:7757): avc: denied { write } for pid=13396 comm="syz.3.2861" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.187540][ T28] audit: type=1400 audit(1778960458.533:7758): avc: denied { read } for pid=13396 comm="syz.3.2861" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 404.231767][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.237923][ T28] audit: type=1400 audit(1778960458.533:7759): avc: denied { open } for pid=13396 comm="syz.3.2861" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 404.892117][T13465] loop3: detected capacity change from 0 to 512 [ 404.954235][T13465] ext3: Unknown parameter 'noquota"test_dummy_encryption' [ 405.371597][T13477] loop2: detected capacity change from 0 to 1024 [ 405.377617][T13469] FAULT_INJECTION: forcing a failure. [ 405.377617][T13469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.394174][T13477] EXT4-fs: inline encryption not supported [ 405.401200][T13477] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 405.421273][T13477] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 2: comm syz.2.2883: lblock 2 mapped to illegal pblock 2 (length 1) [ 405.436631][T13469] CPU: 1 UID: 0 PID: 13469 Comm: syz.5.2881 Tainted: G W syzkaller #0 PREEMPT(full) [ 405.436722][T13469] Tainted: [W]=WARN [ 405.436731][T13469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.436820][T13469] Call Trace: [ 405.436830][T13469] [ 405.436840][T13469] __dump_stack+0x1d/0x30 [ 405.436870][T13469] dump_stack_lvl+0x95/0xd0 [ 405.436894][T13469] dump_stack+0x15/0x1b [ 405.436913][T13469] should_fail_ex+0x263/0x280 [ 405.436974][T13469] should_fail+0xb/0x20 [ 405.437006][T13469] should_fail_usercopy+0x1a/0x20 [ 405.437043][T13469] _copy_from_user+0x1c/0xb0 [ 405.437081][T13469] __sys_bpf+0x183/0x7e0 [ 405.437144][T13469] __x64_sys_bpf+0x41/0x50 [ 405.437164][T13469] x64_sys_call+0x10cb/0x3020 [ 405.437191][T13469] do_syscall_64+0x12c/0x3b0 [ 405.437227][T13469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.437324][T13469] RIP: 0033:0x7fa96abfce59 [ 405.437340][T13469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.437361][T13469] RSP: 002b:00007fa969657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.437385][T13469] RAX: ffffffffffffffda RBX: 00007fa96ae75fa0 RCX: 00007fa96abfce59 [ 405.437514][T13469] RDX: 0000000000000094 RSI: 0000200000000240 RDI: 0000000000000005 [ 405.437527][T13469] RBP: 00007fa969657090 R08: 0000000000000000 R09: 0000000000000000 [ 405.437585][T13469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 405.437678][T13469] R13: 00007fa96ae76038 R14: 00007fa96ae75fa0 R15: 00007ffd737516b8 [ 405.437703][T13469] [ 405.452257][T13477] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 405.664464][T13477] EXT4-fs (loop2): Remounting filesystem read-only [ 405.680096][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 405.680120][ C0] EXT4-fs (loop2): initial error at time 1778960460: ext4_map_blocks:791: inode 3: block 2 [ 405.680157][ C0] EXT4-fs (loop2): last error at time 1778960460: ext4_map_blocks:791: inode 3: block 2 [ 405.715395][T13477] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 405.729084][T13477] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 405.747005][T13477] EXT4-fs (loop2): 1 orphan inode deleted [ 405.756318][T13477] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.991830][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2894'. [ 408.053103][T13525] loop7: detected capacity change from 0 to 1024 [ 408.324061][T13525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.458775][ T28] audit: type=1400 audit(1778960462.780:7760): avc: denied { write } for pid=13524 comm="syz.7.2897" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.608841][ T28] audit: type=1400 audit(1778960462.838:7761): avc: denied { write } for pid=13524 comm="syz.7.2897" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.652612][ T28] audit: type=1400 audit(1778960462.838:7762): avc: denied { write } for pid=13524 comm="syz.7.2897" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 408.693477][ T28] audit: type=1400 audit(1778960462.838:7763): avc: denied { write } for pid=13524 comm="syz.7.2897" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.717552][ T28] audit: type=1400 audit(1778960462.838:7764): avc: denied { rename } for pid=13524 comm="syz.7.2897" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.738931][T13525] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 408.748859][ T28] audit: type=1400 audit(1778960462.838:7765): avc: denied { reparent } for pid=13524 comm="syz.7.2897" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.772514][ T28] audit: type=1400 audit(1778960462.838:7766): avc: denied { add_name } for pid=13524 comm="syz.7.2897" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 408.826137][T13537] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2901'. [ 408.871438][T13021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.934826][T13548] lo speed is unknown, defaulting to 1000 [ 408.989796][ T28] audit: type=1400 audit(1778960463.310:7767): avc: denied { read } for pid=13555 comm="syz.7.2907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 409.181842][ T28] audit: type=1400 audit(1778960463.496:7768): avc: denied { write } for pid=13557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.252832][ T28] audit: type=1400 audit(1778960463.565:7769): avc: denied { write } for pid=13573 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.376742][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.502867][T13581] loop3: detected capacity change from 0 to 4096 [ 409.515667][T13581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.542191][T13584] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2913'. [ 409.566024][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2913'. [ 409.575259][T13581] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz.3.2912: invalid fast symlink length 131109 [ 409.633210][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.647434][T13588] tipc: Started in network mode [ 409.652431][T13588] tipc: Node identity _, cluster identity 4711 [ 409.660101][T13588] tipc: Enabling of bearer rejected, failed to enable media [ 409.716907][T13592] loop2: detected capacity change from 0 to 512 [ 409.737853][T13592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.807293][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.527552][T13628] FAULT_INJECTION: forcing a failure. [ 410.527552][T13628] name failslab, interval 1, probability 0, space 0, times 0 [ 410.544186][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.2.2927 Tainted: G W syzkaller #0 PREEMPT(full) [ 410.544228][T13628] Tainted: [W]=WARN [ 410.544237][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 410.544253][T13628] Call Trace: [ 410.544322][T13628] [ 410.544332][T13628] __dump_stack+0x1d/0x30 [ 410.544358][T13628] dump_stack_lvl+0x95/0xd0 [ 410.544385][T13628] dump_stack+0x15/0x1b [ 410.544410][T13628] should_fail_ex+0x263/0x280 [ 410.544488][T13628] should_failslab+0x8c/0xb0 [ 410.544529][T13628] kmem_cache_alloc_noprof+0x66/0x3f0 [ 410.544573][T13628] ? __anon_vma_prepare+0x70/0x2f0 [ 410.544601][T13628] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 410.544671][T13628] __anon_vma_prepare+0x70/0x2f0 [ 410.544696][T13628] do_wp_page+0x1910/0x2040 [ 410.544722][T13628] ? _raw_spin_lock+0x52/0xa0 [ 410.544841][T13628] ? __rcu_read_lock+0x36/0x50 [ 410.544872][T13628] handle_mm_fault+0x8bb/0x2e70 [ 410.544927][T13628] ? vma_start_read+0x1c7/0x2c0 [ 410.544975][T13628] do_user_addr_fault+0x62f/0x1050 [ 410.545014][T13628] ? ksys_mmap_pgoff+0xc1/0x310 [ 410.545091][T13628] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 410.545126][T13628] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 410.545158][T13628] ? trace_page_fault_user+0x1f/0xa0 [ 410.545198][T13628] exc_page_fault+0x62/0xa0 [ 410.545259][T13628] asm_exc_page_fault+0x26/0x30 [ 410.545331][T13628] RIP: 0033:0x7fe0b7174123 [ 410.545353][T13628] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 410.545402][T13628] RSP: 002b:00007fe0b5d0e470 EFLAGS: 00010202 [ 410.545424][T13628] RAX: 0000000000000400 RBX: 00007fe0b5d0e530 RCX: 00007fe0ad8ef000 [ 410.545442][T13628] RDX: 00007fe0b5d0e6d0 RSI: 0000000000000001 RDI: 00007fe0b5d0e5d0 [ 410.545460][T13628] RBP: 00000000000000f9 R08: 0000000000000008 R09: 000000000000009f [ 410.545476][T13628] R10: 00000000000000b8 R11: 00007fe0b5d0e530 R12: 0000000000000001 [ 410.545648][T13628] R13: 00007fe0b7372900 R14: 0000000000000020 R15: 00007fe0b5d0e5d0 [ 410.545668][T13628] [ 410.570102][T13628] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 410.777678][T13628] loop2: detected capacity change from 0 to 512 [ 410.845328][T13628] EXT4-fs: old and new quota format mixing [ 410.986159][T13650] loop3: detected capacity change from 0 to 512 [ 411.406857][T13650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.468345][T13650] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.528711][T13650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2931'. [ 411.955311][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.995966][T13663] netlink: 'syz.5.2933': attribute type 3 has an invalid length. [ 412.006315][T13663] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2933'. [ 412.908885][T13675] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=389 sclass=netlink_route_socket pid=13675 comm=syz.3.2934 [ 412.927226][T13675] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2934'. [ 412.939765][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2934'. [ 412.993299][T13677] 9p: Bad value for 'rfdno' [ 413.033077][T13673] lo speed is unknown, defaulting to 1000 [ 413.071491][T13681] netlink: 'syz.2.2938': attribute type 21 has an invalid length. [ 413.300460][T13688] netlink: 596 bytes leftover after parsing attributes in process `syz.6.2939'. [ 413.363833][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2939'. [ 413.599529][T13700] netlink: 'syz.3.2942': attribute type 1 has an invalid length. [ 413.768859][T13700] bond4: entered promiscuous mode [ 413.796708][T13700] 8021q: adding VLAN 0 to HW filter on device bond4 [ 414.023420][T13708] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2944'. [ 414.047759][T13713] loop2: detected capacity change from 0 to 512 [ 414.079904][T13713] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.2945: corrupted in-inode xattr: invalid ea_ino [ 414.116476][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 414.116502][ T28] audit: type=1326 audit(1778960468.336:7779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13717 comm="syz.3.2947" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x9000000 [ 414.155004][T13713] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 414.157659][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 414.173317][ C0] EXT4-fs (loop2): initial error at time 1778960468: ext4_iget_extra_inode:5128: inode 15 [ 414.179245][T13713] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2945: couldn't read orphan inode 15 (err -117) [ 414.183344][ C0] EXT4-fs (loop2): last error at time 1778960468: ext4_iget_extra_inode:5128: inode 15 [ 414.261078][ T28] audit: type=1400 audit(1778960468.471:7780): avc: granted { setsecparam } for pid=13730 comm="syz.7.2951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 414.263444][T13713] loop2: lost filesystem error report for type 5 error -117 [ 414.287204][T13733] loop7: detected capacity change from 0 to 1024 [ 414.328129][T13733] EXT4-fs: Ignoring removed bh option [ 414.335793][T13713] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.379721][T13733] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.420312][T13748] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2953'. [ 414.446181][ T28] audit: type=1400 audit(1778960468.656:7781): avc: denied { write } for pid=13715 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.528307][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.552460][ T28] audit: type=1400 audit(1778960468.724:7782): avc: denied { write } for pid=13755 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 414.589543][T13751] lo speed is unknown, defaulting to 1000 [ 414.597658][T13021] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.659148][T13763] loop2: detected capacity change from 0 to 512 [ 414.675988][T13763] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.686790][T13763] EXT4-fs: Ignoring removed mblk_io_submit option [ 414.701053][T13763] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 414.735639][T13763] EXT4-fs (loop2): 1 truncate cleaned up [ 414.770443][T13763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.809108][T13769] loop7: detected capacity change from 0 to 512 [ 414.864351][T13769] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.917035][T13769] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 414.934201][T13769] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2959'. [ 414.986148][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.072199][T13769] lo speed is unknown, defaulting to 1000 [ 415.206287][T13781] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 415.218902][T13781] bond1 (unregistering): Released all slaves [ 415.535796][ T28] audit: type=1400 audit(1778960469.705:7783): avc: denied { bind } for pid=13783 comm="syz.5.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 415.716321][ T28] audit: type=1400 audit(1778960469.890:7784): avc: denied { write } for pid=13021 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.797528][ T28] audit: type=1400 audit(1778960469.938:7785): avc: denied { write } for pid=13021 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 415.880383][ T28] audit: type=1400 audit(1778960469.938:7786): avc: denied { unlink } for pid=13021 comm="syz-executor" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 415.948962][ T28] audit: type=1400 audit(1778960469.938:7787): avc: denied { write } for pid=13021 comm="syz-executor" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.009056][ T28] audit: type=1400 audit(1778960469.938:7788): avc: denied { write } for pid=13021 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 416.084786][T13785] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.147572][ T3770] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.229042][ T3770] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.301716][ T3770] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.345368][ T3770] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.480144][ T3770] bridge_slave_1: left allmulticast mode [ 416.493122][ T3770] bridge_slave_1: left promiscuous mode [ 416.507693][ T3770] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.523569][ T3770] bridge_slave_0: left allmulticast mode [ 416.529947][ T3770] bridge_slave_0: left promiscuous mode [ 416.536820][ T3770] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.649903][ T3770] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.661816][ T3770] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.675021][ T3770] bond0 (unregistering): Released all slaves [ 416.695632][T13805] tipc: Enabling of bearer rejected, failed to enable media [ 416.808393][T13795] lo speed is unknown, defaulting to 1000 [ 416.870178][ T3770] hsr_slave_0: left promiscuous mode [ 416.899176][ T3770] hsr_slave_1: left promiscuous mode [ 416.928063][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.961311][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.987621][ T3770] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.004645][ T3770] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.095568][ T3770] veth1_macvtap: left promiscuous mode [ 417.102657][ T3770] veth0_macvtap: left promiscuous mode [ 417.114319][ T3770] veth1_vlan: left promiscuous mode [ 417.130859][ T3770] veth0_vlan: left promiscuous mode [ 417.280729][ T3770] team0 (unregistering): Port device team_slave_1 removed [ 417.295339][ T3770] team0 (unregistering): Port device team_slave_0 removed [ 417.339838][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 417.526530][T13865] program syz.3.2982 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.710224][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.735630][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.760062][T13795] bridge_slave_0: entered allmulticast mode [ 417.770916][T13795] bridge_slave_0: entered promiscuous mode [ 417.778305][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.785493][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.792685][T13795] bridge_slave_1: entered allmulticast mode [ 417.799637][T13795] bridge_slave_1: entered promiscuous mode [ 417.812569][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 417.820379][T13885] loop2: detected capacity change from 0 to 1024 [ 417.831913][T13795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.836915][T13795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.854202][T13795] team0: Port device team_slave_0 added [ 417.857583][T13795] team0: Port device team_slave_1 added [ 417.886003][T13795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.886021][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.886057][T13795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.888407][T13795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.888425][T13795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.888490][T13795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.946602][T13795] hsr_slave_0: entered promiscuous mode [ 417.949832][T13795] hsr_slave_1: entered promiscuous mode [ 417.951611][T13795] debugfs: 'hsr0' already exists in 'hsr' [ 417.951629][T13795] Cannot create hsr debugfs directory [ 418.282543][T13795] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 418.355264][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.391390][T13795] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 418.402028][T13885] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 418.414166][T13885] System zones: 0-1, 3-36 [ 418.420669][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.434408][T13795] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 418.449462][T13885] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2985: bad orphan inode 134217728 [ 418.465008][T13885] loop2: lost filesystem error report for type 5 error -117 [ 418.467032][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.477952][T13885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.507931][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 418.515375][T13795] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 418.526031][T13795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.531127][T13885] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.633011][T13795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 418.641029][T13885] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2985'. [ 418.661426][T13795] 8021q: adding VLAN 0 to HW filter on device team0 [ 418.674505][T13916] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 418.693085][ T3774] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.700381][ T3774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 418.728386][T13795] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 418.751032][T13795] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 418.766123][ T3774] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.773248][ T3774] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.878030][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 418.971565][T13795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.120456][T13795] veth0_vlan: entered promiscuous mode [ 419.129337][T13795] veth1_vlan: entered promiscuous mode [ 419.145750][T13795] veth0_macvtap: entered promiscuous mode [ 419.153541][T13795] veth1_macvtap: entered promiscuous mode [ 419.167563][T13795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.179797][T13795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.191713][ T3730] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.201640][ T3730] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.212686][ T3730] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.221673][ T3730] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.269333][T13958] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2969'. [ 419.281839][T13958] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2969'. [ 419.294406][T13958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.305959][T13958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.317165][T13958] bond0 (unregistering): Released all slaves [ 428.921683][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 428.921701][ T28] audit: type=1400 audit(1778960482.843:7803): avc: denied { write } for pid=13965 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.960727][ T28] audit: type=1400 audit(1778960482.882:7804): avc: denied { write } for pid=13976 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.205010][ T28] audit: type=1400 audit(1778960483.129:7805): avc: denied { write } for pid=13979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.238743][ T28] audit: type=1400 audit(1778960483.159:7806): avc: denied { write } for pid=13990 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.348898][ T28] audit: type=1400 audit(1778960483.268:7807): avc: denied { write } for pid=13993 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.384386][ T28] audit: type=1400 audit(1778960483.307:7808): avc: denied { write } for pid=14004 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.754044][ T28] audit: type=1400 audit(1778960483.663:7809): avc: denied { write } for pid=14007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 429.786767][ T28] audit: type=1400 audit(1778960483.693:7810): avc: denied { write } for pid=14018 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 453.545528][T14030] loop8: detected capacity change from 0 to 512 [ 453.563021][T14026] program syz.2.2988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 453.577377][T14029] loop3: detected capacity change from 0 to 128 [ 453.584194][T14026] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 453.633897][T14026] tipc: Enabling of bearer rejected, failed to enable media [ 453.732550][ T28] audit: type=1326 audit(1778960507.496:7811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 453.762561][T14030] loop8: detected capacity change from 0 to 128 [ 453.869524][ T28] audit: type=1326 audit(1778960507.496:7812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 453.897255][ T28] audit: type=1326 audit(1778960507.496:7813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 453.922924][ T28] audit: type=1326 audit(1778960507.496:7814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f0182b9bcc7 code=0x7ffc0000 [ 453.951670][ T28] audit: type=1326 audit(1778960507.566:7815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 453.980177][T14030] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 453.983284][ T28] audit: type=1326 audit(1778960507.566:7816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 454.010276][T14030] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 454.023635][ T28] audit: type=1326 audit(1778960507.596:7817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 454.047285][T14030] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #2: comm syz.8.2990: checksumming directory block 0 [ 454.063317][ T28] audit: type=1326 audit(1778960507.596:7818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 454.101207][ T28] audit: type=1326 audit(1778960507.606:7819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 454.146808][ T28] audit: type=1326 audit(1778960507.606:7820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14028 comm="syz.3.2989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0182b9ce59 code=0x7ffc0000 [ 457.802776][T14050] loop3: detected capacity change from 0 to 512 [ 457.822570][T14050] EXT4-fs: Ignoring removed orlov option [ 457.837289][T14050] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 457.904462][T14050] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.2992: invalid indirect mapped block 32768 (level 2) [ 457.966887][T14050] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 457.975994][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 457.993222][ C0] EXT4-fs (loop3): initial error at time 1778960511: ext4_free_branches:1023: inode 16 [ 458.004791][ C0] EXT4-fs (loop3): last error at time 1778960511: ext4_free_branches:1023: inode 16 [ 458.042611][T14050] EXT4-fs (loop3): 1 orphan inode deleted [ 458.073965][T14050] EXT4-fs (loop3): 1 truncate cleaned up [ 458.141382][T14050] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.506038][T14063] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 458.541256][T14067] loop2: detected capacity change from 0 to 1024 [ 458.551166][T14067] EXT4-fs: Ignoring removed nomblk_io_submit option [ 458.562658][T14065] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2996'. [ 458.600337][T14067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.641048][T13795] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.660447][T14067] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.728607][T14067] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2997: bg 0: block 112: padding at end of block bitmap is not set [ 458.775557][T14067] EXT4-fs (loop2): Remounting filesystem read-only [ 458.844202][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 459.029147][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.046424][T14081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3001'. [ 459.055602][T14081] netlink: 'syz.6.3001': attribute type 30 has an invalid length. [ 459.168438][T14083] xt_NFQUEUE: number of total queues is 0 [ 459.223550][T14082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3001'. [ 459.237654][T14078] loop2: detected capacity change from 0 to 1024 [ 459.249982][T14078] EXT4-fs: Ignoring removed nomblk_io_submit option [ 459.281642][T14082] netlink: 'syz.6.3001': attribute type 30 has an invalid length. [ 459.296643][T14078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.612095][T14090] loop8: detected capacity change from 0 to 1024 [ 459.695944][T14090] EXT4-fs (loop8): can't mount with journal_async_commit, fs mounted w/o journal [ 459.729206][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 459.729224][ T28] audit: type=1400 audit(1778960513.481:7854): avc: denied { write } for pid=14077 comm="syz.2.2999" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 462.316534][T14105] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3002'. [ 462.789473][ T3774] tipc: Subscription rejected, illegal request [ 462.922015][ T28] audit: type=1326 audit(1778960516.645:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 462.962748][T14111] tipc: Started in network mode [ 462.990732][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.010657][T14111] tipc: Node identity _, cluster identity 4711 [ 463.058784][T14111] tipc: Enabling of bearer rejected, failed to enable media [ 463.063141][ T28] audit: type=1326 audit(1778960516.645:7855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.101224][ T28] audit: type=1326 audit(1778960516.655:7857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.169567][ T28] audit: type=1326 audit(1778960516.655:7858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.210089][ T28] audit: type=1326 audit(1778960516.655:7859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.267152][ T28] audit: type=1326 audit(1778960516.655:7860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.293766][ T28] audit: type=1326 audit(1778960516.715:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.319852][ T28] audit: type=1326 audit(1778960516.715:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.345749][ T28] audit: type=1326 audit(1778960516.715:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14100 comm="syz.6.3002" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 463.584624][T14126] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3008'. [ 463.755972][T14128] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3010'. [ 464.341315][T14128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3010'. [ 465.571306][T14144] loop3: detected capacity change from 0 to 512 [ 465.581829][T14144] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.593959][T14144] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.622450][T14144] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 465.647538][T14150] loop2: detected capacity change from 0 to 256 [ 465.674891][T14144] EXT4-fs (loop3): 1 truncate cleaned up [ 465.729166][T14144] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.815634][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.500024][T14162] xt_NFQUEUE: number of total queues is 0 [ 466.575564][T14161] loop3: detected capacity change from 0 to 1024 [ 466.697751][T14161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.870688][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.976179][T14174] usb usb2: usbfs: process 14174 (syz.3.3020) did not claim interface 0 before use [ 467.025263][T14175] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3019'. [ 467.057560][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 467.057585][ T28] audit: type=1400 audit(1778960520.798:7867): avc: denied { append } for pid=14171 comm="syz.3.3020" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 467.092770][T14176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3020'. [ 467.118291][T14176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3020'. [ 467.211675][ T5788] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 467.228186][ T5788] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 467.327119][T14173] hid-generic 0000:0000:0000.000D: pid 14173 passed too short report [ 467.711332][T14194] tipc: Enabling of bearer rejected, failed to enable media [ 467.741882][T14198] netlink: 'syz.2.3029': attribute type 12 has an invalid length. [ 467.767946][ T28] audit: type=1400 audit(1778960521.507:7868): avc: denied { setopt } for pid=14197 comm="syz.2.3029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 467.811281][T14204] netlink: 168 bytes leftover after parsing attributes in process `syz.6.3032'. [ 467.867279][T14198] netlink: 'syz.2.3029': attribute type 10 has an invalid length. [ 467.905256][T14198] netlink: 16154 bytes leftover after parsing attributes in process `syz.2.3029'. [ 468.961032][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3039'. [ 468.987833][T14238] FAULT_INJECTION: forcing a failure. [ 468.987833][T14238] name failslab, interval 1, probability 0, space 0, times 0 [ 469.025744][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.2.3042 Tainted: G W syzkaller #0 PREEMPT(full) [ 469.025888][T14238] Tainted: [W]=WARN [ 469.025896][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.025910][T14238] Call Trace: [ 469.025918][T14238] [ 469.025927][T14238] __dump_stack+0x1d/0x30 [ 469.025959][T14238] dump_stack_lvl+0x95/0xd0 [ 469.025986][T14238] dump_stack+0x15/0x1b [ 469.026077][T14238] should_fail_ex+0x263/0x280 [ 469.026108][T14238] ? sctp_add_bind_addr+0x71/0x1e0 [ 469.026192][T14238] should_failslab+0x8c/0xb0 [ 469.026232][T14238] __kmalloc_cache_noprof+0x5f/0x400 [ 469.026351][T14238] sctp_add_bind_addr+0x71/0x1e0 [ 469.026404][T14238] sctp_copy_local_addr_list+0x1b3/0x250 [ 469.026447][T14238] sctp_copy_one_addr+0x7f/0x280 [ 469.026562][T14238] sctp_bind_addr_copy+0x79/0x290 [ 469.026601][T14238] sctp_assoc_set_bind_addr_from_ep+0xce/0xe0 [ 469.026636][T14238] sctp_connect_new_asoc+0x1c3/0x3a0 [ 469.026687][T14238] sctp_sendmsg+0x100f/0x1d60 [ 469.026713][T14238] ? __pfx_sctp_sendmsg+0x10/0x10 [ 469.026731][T14238] inet_sendmsg+0xc5/0xd0 [ 469.026766][T14238] ? __pfx_inet_sendmsg+0x10/0x10 [ 469.026799][T14238] ____sys_sendmsg+0x519/0x5b0 [ 469.026833][T14238] ___sys_sendmsg+0x195/0x1e0 [ 469.026861][T14238] ? path_openat+0x1b01/0x2050 [ 469.026976][T14238] __sys_sendmmsg+0x185/0x320 [ 469.027017][T14238] __x64_sys_sendmmsg+0x57/0x70 [ 469.027103][T14238] x64_sys_call+0x27aa/0x3020 [ 469.027135][T14238] do_syscall_64+0x12c/0x3b0 [ 469.027173][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.027274][T14238] RIP: 0033:0x7fe0b72bce59 [ 469.027358][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.027389][T14238] RSP: 002b:00007fe0b5d0f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 469.027412][T14238] RAX: ffffffffffffffda RBX: 00007fe0b7535fa0 RCX: 00007fe0b72bce59 [ 469.027432][T14238] RDX: 0000000000000003 RSI: 0000200000000d80 RDI: 0000000000000003 [ 469.027449][T14238] RBP: 00007fe0b5d0f090 R08: 0000000000000000 R09: 0000000000000000 [ 469.027466][T14238] R10: 0000000000008080 R11: 0000000000000246 R12: 0000000000000002 [ 469.027483][T14238] R13: 00007fe0b7536038 R14: 00007fe0b7535fa0 R15: 00007fffab9e0b78 [ 469.027580][T14238] [ 469.363937][T14241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.375431][T14241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.507903][T14252] loop3: detected capacity change from 0 to 1024 [ 469.514749][T14252] EXT4-fs: Ignoring removed bh option [ 469.558076][T14252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.589348][ T28] audit: type=1400 audit(1778960523.325:7869): avc: denied { write } for pid=14251 comm="syz.3.3048" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.622058][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3043'. [ 469.658173][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.688641][T14241] loop8: detected capacity change from 0 to 1024 [ 469.768163][T14241] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 469.781967][T14241] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 469.799814][T14241] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.3043: lblock 0 mapped to illegal pblock 0 (length 6) [ 469.818040][ T28] audit: type=1400 audit(1778960523.534:7870): avc: denied { write } for pid=14240 comm="syz.8.3043" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 469.887884][T14241] EXT4-fs (loop8): Remounting filesystem read-only [ 469.898697][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3043'. [ 469.976003][T14274] lo speed is unknown, defaulting to 1000 [ 469.980296][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3043'. [ 470.036689][T14242] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3043'. [ 470.931001][T14293] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3061'. [ 470.983879][T14293] veth3: entered allmulticast mode [ 471.145523][T14310] tipc: Enabling of bearer rejected, failed to enable media [ 471.281803][T13795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 471.534526][T14318] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3071'. [ 471.764236][T14314] loop2: detected capacity change from 0 to 1024 [ 471.825194][T14328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3076'. [ 471.925763][T14314] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 471.958185][T14314] System zones: 0-1, 3-36 [ 472.032027][T14314] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3070: bad orphan inode 134217728 [ 472.090003][T14314] loop2: lost filesystem error report for type 5 error -117 [ 472.101842][T14314] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 472.342378][T14314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.665827][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3070'. [ 472.915632][T14351] loop8: detected capacity change from 0 to 512 [ 472.960478][T14355] netlink: 'syz.2.3085': attribute type 12 has an invalid length. [ 472.995637][T14351] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.3083: corrupted inode contents [ 473.015740][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.016031][T14351] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.3083: mark_inode_dirty error [ 473.025338][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 473.025362][ C1] EXT4-fs (loop8): initial error at time 1778960526: ext4_do_update_inode:5690: inode 16 [ 473.025402][ C1] EXT4-fs (loop8): last error at time 1778960526: ext4_do_update_inode:5690: inode 16 [ 473.068242][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.081787][T14351] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.3083: corrupted inode contents [ 473.122249][T14353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.132669][T14353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.141563][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.144772][T14351] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.3083: mark_inode_dirty error [ 473.165472][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.167019][T14351] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.3083: corrupted inode contents [ 473.189742][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.191197][T14351] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 473.212244][T14351] loop8: lost filesystem error report for type 5 error -117 [ 473.221838][T14351] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.3083: corrupted inode contents [ 473.242926][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.245490][T14351] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.3083: mark_inode_dirty error [ 473.267661][T14351] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 473.268917][T14351] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 473.288721][T14351] loop8: lost filesystem error report for type 5 error -117 [ 473.294081][T14351] EXT4-fs (loop8): 1 truncate cleaned up [ 473.309418][T14351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.322941][T14351] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.333746][ T3732] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 473.345661][ T3732] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:12: Failed to release dquot type 1 [ 473.401951][ T28] audit: type=1400 audit(1778960527.130:7871): avc: denied { write } for pid=14373 comm="syz.6.3091" path="socket:[41003]" dev="sockfs" ino=41003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 473.434368][T13795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.471509][T14383] loop8: detected capacity change from 0 to 256 [ 473.563996][T14385] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 473.664145][T14385] bond0 (unregistering): Released all slaves [ 473.725471][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3095'. [ 473.810984][T14382] tipc: Enabling of bearer rejected, failed to enable media [ 474.301545][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3098'. [ 474.417558][T14398] loop2: detected capacity change from 0 to 1024 [ 474.437654][T14403] Cannot find set identified by id 0 to match [ 474.584119][T14418] netlink: 'syz.6.3104': attribute type 4 has an invalid length. [ 474.591328][T14398] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 474.603061][T14398] System zones: 0-1, 3-36 [ 474.610698][T14418] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3104'. [ 474.631591][T14398] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3099: bad orphan inode 134217728 [ 474.683508][T14398] loop2: lost filesystem error report for type 5 error -117 [ 474.750068][T14398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.935734][T14398] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.118028][T14440] loop3: detected capacity change from 0 to 512 [ 475.151956][T14440] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 475.170242][T14398] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3099'. [ 475.181703][T14440] EXT4-fs error (device loop3): mb_free_blocks:2049: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 475.212046][T14440] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.3114: corrupted inode contents [ 475.224028][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 475.224056][ C0] EXT4-fs (loop3): initial error at time 1778960528: mb_free_blocks:2049: inode 11: block 64 [ 475.224087][ C0] EXT4-fs (loop3): last error at time 1778960528: mb_free_blocks:2049: inode 11: block 64 [ 475.255110][T14440] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 475.256833][T14440] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #11: comm syz.3.3114: mark_inode_dirty error [ 475.281608][T14440] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 475.281972][T14440] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3114: invalid indirect mapped block 1 (level 1) [ 475.284906][T14445] xt_NFQUEUE: number of total queues is 0 [ 475.293520][T14440] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 475.314255][T14440] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.3114: corrupted inode contents [ 475.341991][T14440] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 475.351850][T14440] loop3: lost filesystem error report for type 5 error -117 [ 475.353286][T14440] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #11: comm syz.3.3114: corrupted inode contents [ 475.386952][T14440] EXT4-fs error (device loop3): ext4_truncate:4690: inode #11: comm syz.3.3114: mark_inode_dirty error [ 475.399553][T14440] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 475.416053][T14448] loop2: detected capacity change from 0 to 512 [ 475.426104][T14440] loop3: lost filesystem error report for type 5 error -117 [ 475.426324][T14440] EXT4-fs (loop3): 1 truncate cleaned up [ 475.441823][T14440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.460116][T14448] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #11: block 327694: comm syz.2.3116: lblock 0 mapped to illegal pblock 327694 (length 1) [ 475.482839][T14448] EXT4-fs (loop2): 1 orphan inode deleted [ 475.484213][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 475.496470][ C0] EXT4-fs (loop2): initial error at time 1778960529: ext4_map_blocks:791: inode 11: block 327694 [ 475.507054][ C0] EXT4-fs (loop2): last error at time 1778960529: ext4_map_blocks:791: inode 11: block 327694 [ 475.536217][T14448] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.552891][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.608495][T14448] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 475.626594][T14457] loop3: detected capacity change from 0 to 1024 [ 475.653133][T14457] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802e018, mo2=0002] [ 475.666914][T14457] System zones: 0-1, 3-8 [ 475.667568][T12709] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.672528][T14457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 475.714931][T14457] ext4 filesystem being mounted at /549/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.742212][ T28] audit: type=1400 audit(1778960529.467:7872): avc: denied { write } for pid=14456 comm="syz.3.3118" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.791678][T14468] loop8: detected capacity change from 0 to 512 [ 475.829586][T14468] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 475.843989][T14468] System zones: 0-2, 18-18, 34-34 [ 475.856971][T14468] EXT4-fs (loop8): 1 orphan inode deleted [ 475.872562][T14468] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.897862][ T3770] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 475.918090][T14468] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.927539][ T3770] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:30: Failed to release dquot type 1 [ 475.959788][T14477] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3126'. [ 475.971973][ T3770] EXT4-fs (loop8): Remounting filesystem read-only [ 475.994590][T13795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.005152][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 476.157081][T14499] random: crng reseeded on system resumption [ 476.159144][ T28] audit: type=1400 audit(1778960529.887:7873): avc: denied { write } for pid=14498 comm="syz.3.3133" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 476.176637][T14499] syzkaller0: entered promiscuous mode [ 476.217419][T14499] syzkaller0: entered allmulticast mode [ 476.220924][ T28] audit: type=1400 audit(1778960529.927:7874): avc: denied { connect } for pid=14501 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 476.251948][T14509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14509 comm=syz.2.3129 [ 476.295331][ T28] audit: type=1400 audit(1778960529.927:7875): avc: denied { read } for pid=14501 comm="syz.6.3135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 476.320989][T14516] loop8: detected capacity change from 0 to 256 [ 476.372184][T14520] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3141'. [ 476.468671][T14525] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3143'. [ 476.755740][T14534] macvlan2: entered promiscuous mode [ 476.788388][T14535] Cannot find set identified by id 0 to match [ 476.982326][ T28] audit: type=1400 audit(1778960530.706:7876): avc: denied { setattr } for pid=14548 comm="syz.6.3153" name="RAWv6" dev="sockfs" ino=41260 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 478.070718][T14561] loop2: detected capacity change from 0 to 8192 [ 478.147552][T14561] loop2: p1 < > p2 p4 < p5 > [ 478.157039][T14561] loop2: partition table partially beyond EOD, truncated [ 478.187499][T14561] loop2: p1 start 134217728 is beyond EOD, truncated [ 478.213729][T14561] loop2: p2 size 67072 extends beyond EOD, truncated [ 478.238747][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3161'. [ 478.286756][T14561] loop2: p5 size 67072 extends beyond EOD, truncated [ 478.417631][T14062] udevd[14062]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 478.450004][T14075] udevd[14075]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 478.463528][T14092] udevd[14092]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 478.896474][T14586] tipc: Enabling of bearer rejected, failed to enable media [ 478.963678][T14588] loop8: detected capacity change from 0 to 512 [ 478.985499][T14588] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.3167: corrupted in-inode xattr: invalid ea_ino [ 479.021049][T14588] fserror_report: 4 callbacks suppressed [ 479.021071][T14588] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.032124][T14588] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3167: couldn't read orphan inode 15 (err -117) [ 479.041359][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 479.041385][ C0] EXT4-fs (loop8): initial error at time 1778960532: ext4_iget_extra_inode:5128: inode 15 [ 479.041428][ C0] EXT4-fs (loop8): last error at time 1778960532: ext4_iget_extra_inode:5128: inode 15 [ 479.127517][T14593] netlink: 'syz.3.3168': attribute type 4 has an invalid length. [ 479.146873][T14588] loop8: lost filesystem error report for type 5 error -117 [ 479.148755][T14588] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.200421][T14588] bridge0: port 3(vlan2) entered blocking state [ 479.215638][T14588] bridge0: port 3(vlan2) entered disabled state [ 479.237942][T14588] vlan2: entered allmulticast mode [ 479.252981][T14588] geneve0: entered allmulticast mode [ 479.279188][T14588] vlan2: entered promiscuous mode [ 479.292806][T14588] geneve0: entered promiscuous mode [ 479.315331][T14600] FAULT_INJECTION: forcing a failure. [ 479.315331][T14600] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 479.351634][T14600] CPU: 0 UID: 0 PID: 14600 Comm: syz.5.3171 Tainted: G W syzkaller #0 PREEMPT(full) [ 479.351688][T14600] Tainted: [W]=WARN [ 479.351698][T14600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.351713][T14600] Call Trace: [ 479.351722][T14600] [ 479.351730][T14600] __dump_stack+0x1d/0x30 [ 479.351934][T14600] dump_stack_lvl+0x95/0xd0 [ 479.352012][T14600] dump_stack+0x15/0x1b [ 479.352035][T14600] should_fail_ex+0x263/0x280 [ 479.352132][T14600] should_fail_alloc_page+0xf2/0x100 [ 479.352205][T14600] __alloc_frozen_pages_noprof+0x108/0x350 [ 479.352268][T14600] alloc_pages_mpol+0xb3/0x260 [ 479.352299][T14600] ? css_rstat_updated+0xbb/0x280 [ 479.352419][T14600] vma_alloc_folio_noprof+0x1a9/0x2f0 [ 479.352451][T14600] handle_mm_fault+0x1040/0x2e70 [ 479.352524][T14600] ? vma_start_read+0x1c7/0x2c0 [ 479.352571][T14600] do_user_addr_fault+0x62f/0x1050 [ 479.352619][T14600] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 479.352712][T14600] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 479.352750][T14600] ? trace_page_fault_user+0x1f/0xa0 [ 479.352788][T14600] exc_page_fault+0x62/0xa0 [ 479.352922][T14600] asm_exc_page_fault+0x26/0x30 [ 479.353020][T14600] RIP: 0033:0x7fa96aab4123 [ 479.353042][T14600] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 479.353060][T14600] RSP: 002b:00007fa969656470 EFLAGS: 00010206 [ 479.353077][T14600] RAX: 0000000000002000 RBX: 00007fa969656530 RCX: 00007fa961237000 [ 479.353091][T14600] RDX: 00007fa9696566d0 RSI: 0000000000000000 RDI: 00007fa9696565d0 [ 479.353153][T14600] RBP: 000000000000000d R08: 0000000000000009 R09: 00000000000001aa [ 479.353170][T14600] R10: 00000000000001b0 R11: 00007fa969656530 R12: 0000000000000001 [ 479.353187][T14600] R13: 00007fa96acb2900 R14: 00000000000000ed R15: 00007fa9696565d0 [ 479.353212][T14600] [ 479.391534][T14600] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 479.565323][T13795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.712717][T14606] loop2: detected capacity change from 0 to 8192 [ 479.809544][T14606] loop2: p1 < > p2 p4 < p5 > [ 479.826603][T14606] loop2: partition table partially beyond EOD, truncated [ 479.916564][T14606] loop2: p1 start 134217728 is beyond EOD, truncated [ 480.008905][T14606] loop2: p2 size 67072 extends beyond EOD, truncated [ 480.147578][T14605] loop3: detected capacity change from 0 to 1024 [ 480.200861][T14606] loop2: p5 size 67072 extends beyond EOD, truncated [ 480.627647][ T28] audit: type=1400 audit(1778960534.322:7877): avc: denied { execute } for pid=14607 comm="syz.6.3175" path=2F6D656D66643AFD0F6D33232F202864656C6574656429 dev="hugetlbfs" ino=41399 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 480.757333][T14075] udevd[14075]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 480.791804][T14092] udevd[14092]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 480.887934][T14628] udevd[14628]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 481.048061][T14605] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 481.151599][T14605] System zones: 0-1, 3-36 [ 481.326456][T14637] bridge0: port 3(vlan2) entered blocking state [ 481.332880][T14637] bridge0: port 3(vlan2) entered forwarding state [ 481.495876][T14605] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.3173: bad orphan inode 134217728 [ 481.573554][T14648] xt_CT: No such helper "snmp_trap" [ 481.580436][T14605] loop3: lost filesystem error report for type 5 error -117 [ 481.686442][T14652] lo speed is unknown, defaulting to 1000 [ 481.689247][T14605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 481.760932][T14605] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.398794][T14679] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 482.410598][T14679] bond1 (unregistering): Released all slaves [ 482.655389][T14699] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 482.668227][T14699] bond0 (unregistering): Released all slaves [ 483.484145][T14722] FAULT_INJECTION: forcing a failure. [ 483.484145][T14722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.520024][T14724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3206'. [ 483.550085][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.3.3205 Tainted: G W syzkaller #0 PREEMPT(full) [ 483.550118][T14722] Tainted: [W]=WARN [ 483.550125][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 483.550139][T14722] Call Trace: [ 483.550149][T14722] [ 483.550159][T14722] __dump_stack+0x1d/0x30 [ 483.550196][T14722] dump_stack_lvl+0x95/0xd0 [ 483.550283][T14722] dump_stack+0x15/0x1b [ 483.550308][T14722] should_fail_ex+0x263/0x280 [ 483.550344][T14722] should_fail+0xb/0x20 [ 483.550397][T14722] should_fail_usercopy+0x1a/0x20 [ 483.550464][T14722] strncpy_from_user+0x27/0x250 [ 483.550492][T14722] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 483.550542][T14722] do_getname+0x59/0x1c0 [ 483.550565][T14722] __se_sys_renameat2+0x29/0x1c0 [ 483.550628][T14722] __x64_sys_renameat2+0x67/0x80 [ 483.550713][T14722] x64_sys_call+0x2a12/0x3020 [ 483.550788][T14722] do_syscall_64+0x12c/0x3b0 [ 483.550891][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.550914][T14722] RIP: 0033:0x7f0182b9ce59 [ 483.550934][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.551015][T14722] RSP: 002b:00007f01815f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 483.551040][T14722] RAX: ffffffffffffffda RBX: 00007f0182e15fa0 RCX: 00007f0182b9ce59 [ 483.551057][T14722] RDX: ffffffffffffff9c RSI: 0000200000000240 RDI: ffffffffffffff9c [ 483.551071][T14722] RBP: 00007f01815f7090 R08: 0000000000000004 R09: 0000000000000000 [ 483.551140][T14722] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 483.551152][T14722] R13: 00007f0182e16038 R14: 00007f0182e15fa0 R15: 00007ffe58cd0558 [ 483.551171][T14722] [ 483.779384][ T28] audit: type=1400 audit(1778960537.500:7878): avc: denied { getopt } for pid=14725 comm="syz.6.3207" lport=43917 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 483.889417][T14731] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3209'. [ 483.905778][ T28] audit: type=1400 audit(1778960537.600:7879): avc: denied { getopt } for pid=14730 comm="syz.6.3209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 484.250431][T14751] syzkaller0: entered promiscuous mode [ 484.281003][T14751] syzkaller0: entered allmulticast mode [ 484.300284][ T28] audit: type=1326 audit(1778960538.019:7880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 484.393518][T14758] syzkaller1: entered promiscuous mode [ 484.400986][ T28] audit: type=1326 audit(1778960538.059:7881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f4cd20b92ac code=0x7ffc0000 [ 484.458722][T14758] syzkaller1: entered allmulticast mode [ 484.535894][ T28] audit: type=1326 audit(1778960538.059:7882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4cd20b930e code=0x7ffc0000 [ 484.561535][ T28] audit: type=1326 audit(1778960538.059:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 484.588821][ T28] audit: type=1326 audit(1778960538.059:7884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 484.614686][ T28] audit: type=1326 audit(1778960538.059:7885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 484.640347][ T28] audit: type=1326 audit(1778960538.059:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14753 comm="syz.6.3218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4cd20fce59 code=0x7ffc0000 [ 484.720597][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.734684][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.862292][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 487.040773][T14846] bridge1: entered promiscuous mode [ 487.052340][T14846] bridge1: entered allmulticast mode [ 487.062249][T14847] FAULT_INJECTION: forcing a failure. [ 487.062249][T14847] name failslab, interval 1, probability 0, space 0, times 0 [ 487.091073][T14847] CPU: 1 UID: 0 PID: 14847 Comm: syz.8.3245 Tainted: G W syzkaller #0 PREEMPT(full) [ 487.091109][T14847] Tainted: [W]=WARN [ 487.091116][T14847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.091128][T14847] Call Trace: [ 487.091136][T14847] [ 487.091183][T14847] __dump_stack+0x1d/0x30 [ 487.091215][T14847] dump_stack_lvl+0x95/0xd0 [ 487.091240][T14847] dump_stack+0x15/0x1b [ 487.091259][T14847] should_fail_ex+0x263/0x280 [ 487.091301][T14847] should_failslab+0x8c/0xb0 [ 487.091375][T14847] kmem_cache_alloc_noprof+0x66/0x3f0 [ 487.091417][T14847] ? __anon_vma_prepare+0xcd/0x2f0 [ 487.091448][T14847] __anon_vma_prepare+0xcd/0x2f0 [ 487.091504][T14847] do_wp_page+0x1910/0x2040 [ 487.091534][T14847] ? _raw_spin_lock+0x52/0xa0 [ 487.091698][T14847] ? __rcu_read_lock+0x36/0x50 [ 487.091911][T14847] handle_mm_fault+0x8bb/0x2e70 [ 487.091946][T14847] ? vma_start_read+0x1c7/0x2c0 [ 487.092027][T14847] do_user_addr_fault+0x62f/0x1050 [ 487.092066][T14847] ? ksys_mmap_pgoff+0xc1/0x310 [ 487.092093][T14847] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 487.092142][T14847] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 487.092239][T14847] ? trace_page_fault_user+0x1f/0xa0 [ 487.092273][T14847] exc_page_fault+0x62/0xa0 [ 487.092303][T14847] asm_exc_page_fault+0x26/0x30 [ 487.092329][T14847] RIP: 0033:0x7f219c744123 [ 487.092382][T14847] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 487.092407][T14847] RSP: 002b:00007f219b2de3c0 EFLAGS: 00010202 [ 487.092430][T14847] RAX: 0000000000000181 RBX: 00007f219b2de480 RCX: 00007f2192ebf000 [ 487.092448][T14847] RDX: 00007f219b2de620 RSI: 0000000000000001 RDI: 00007f219b2de520 [ 487.092527][T14847] RBP: 000000000000007e R08: 0000000000000006 R09: 0000000000000024 [ 487.092544][T14847] R10: 000000000000002c R11: 00007f219b2de480 R12: 0000000000000001 [ 487.092568][T14847] R13: 00007f219c942900 R14: 0000000000000002 R15: 00007f219b2de520 [ 487.092595][T14847] [ 487.296255][T14847] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 487.338469][T14847] loop8: detected capacity change from 0 to 8192 [ 487.379266][T14847] loop8: p1 < > [ 487.393473][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 487.412602][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3246'. [ 487.444427][T14852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14852 comm=syz.8.3247 [ 487.468326][T14849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3246'. [ 487.507423][T14075] udevd[14075]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 487.790696][T14871] program syz.8.3254 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 487.853503][ T28] kauditd_printk_skb: 49 callbacks suppressed [ 487.854001][ T28] audit: type=1400 audit(1778960541.566:7936): avc: denied { create } for pid=14875 comm="syz.3.3256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 488.324280][T14904] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3266'. [ 488.338478][T14904] tipc: Invalid UDP bearer configuration [ 488.338492][T14904] tipc: Enabling of bearer rejected, failed to enable media [ 488.361935][T14908] nft_compat: unsupported protocol 0 [ 488.482747][T14917] tmpfs: Bad value for 'mpol' [ 488.522420][ T28] audit: type=1400 audit(1778960542.236:7937): avc: denied { append } for pid=14918 comm="syz.5.3272" name="pfkey" dev="proc" ino=4026533402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 488.641218][T14920] lo speed is unknown, defaulting to 1000 [ 488.757484][T14922] loop8: detected capacity change from 0 to 8192 [ 488.798582][T14922] loop8: p1 < > p2 p4 < p5 > [ 488.865131][T14922] loop8: partition table partially beyond EOD, truncated [ 488.892524][T14922] loop8: p1 start 134217728 is beyond EOD, truncated [ 488.900264][ T28] audit: type=1400 audit(1778960542.606:7938): avc: denied { accept } for pid=14916 comm="syz.8.3271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 489.069627][T14922] loop8: p2 size 591360 extends beyond EOD, truncated [ 489.135065][T14922] loop8: p5 size 591360 extends beyond EOD, truncated [ 489.656714][T14943] netem: unknown loss type 0 [ 489.668171][T14943] netem: change failed [ 489.687407][T14938] loop2: detected capacity change from 0 to 8192 [ 489.798496][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.809656][T14938] FAT-fs (loop2): Filesystem has been set read-only [ 489.820577][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.831970][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.843990][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.854796][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.868611][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.880629][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.893487][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 489.906284][T14938] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 490.165792][T14955] netlink: 'syz.6.3284': attribute type 29 has an invalid length. [ 490.232503][T14958] netlink: 'syz.6.3284': attribute type 29 has an invalid length. [ 490.418734][T14943] ================================================================== [ 490.426879][T14943] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 490.433845][T14943] [ 490.436181][T14943] read-write to 0xffff888100199ae4 of 4 bytes by task 14946 on cpu 1: [ 490.444337][T14943] fifo_open+0x86/0x5d0 [ 490.448512][T14943] do_dentry_open+0x4be/0xa90 [ 490.453213][T14943] vfs_open+0x37/0x1e0 [ 490.457289][T14943] path_openat+0x1b70/0x2050 [ 490.461899][T14943] do_file_open+0x16c/0x290 [ 490.466417][T14943] do_sys_openat2+0x94/0x130 [ 490.471013][T14943] __x64_sys_openat+0xf2/0x120 [ 490.475811][T14943] x64_sys_call+0x1e39/0x3020 [ 490.480507][T14943] do_syscall_64+0x12c/0x3b0 [ 490.485114][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.491018][T14943] [ 490.493348][T14943] read to 0xffff888100199ae4 of 4 bytes by task 14943 on cpu 0: [ 490.500982][T14943] wait_for_partner+0xd5/0x1e0 [ 490.505769][T14943] fifo_open+0x462/0x5d0 [ 490.510027][T14943] do_dentry_open+0x4be/0xa90 [ 490.514723][T14943] vfs_open+0x37/0x1e0 [ 490.518823][T14943] path_openat+0x1b70/0x2050 [ 490.523457][T14943] do_file_open+0x16c/0x290 [ 490.528001][T14943] do_sys_openat2+0x94/0x130 [ 490.532626][T14943] __se_sys_openat2+0x193/0x1f0 [ 490.537492][T14943] __x64_sys_openat2+0x55/0x70 [ 490.542292][T14943] x64_sys_call+0x2170/0x3020 [ 490.547011][T14943] do_syscall_64+0x12c/0x3b0 [ 490.551619][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.557522][T14943] [ 490.559847][T14943] value changed: 0x00000001 -> 0x00000002 [ 490.565568][T14943] [ 490.567919][T14943] Reported by Kernel Concurrency Sanitizer on: [ 490.574084][T14943] CPU: 0 UID: 0 PID: 14943 Comm: syz.3.3280 Tainted: G W syzkaller #0 PREEMPT(full) [ 490.585066][T14943] Tainted: [W]=WARN [ 490.588909][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.598977][T14943] ==================================================================