last executing test programs: 2m3.716884243s ago: executing program 2 (id=2896): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='md0', 0x3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/md0/md/level\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='2', 0x1) write(0xffffffffffffffff, &(0x7f00000002c0)='1:0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1:1', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='read', 0x4) 2m2.187848675s ago: executing program 2 (id=2902): syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @remote, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1f}}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}, {@local}, {@private=0xa0100fe}, {@local, 0x1}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {}, {0x0, 0xfff3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x200}, @TCA_QFQ_LMAX={0x8, 0x2, 0x401}]}}]}, 0x40}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) linkat(r2, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r4, &(0x7f0000001440)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000100000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) 2m1.730916884s ago: executing program 2 (id=2904): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x40459, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1m51.317568824s ago: executing program 2 (id=2927): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracefs\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='raw', 0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000180)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000080)='./dev\x00', r3}, 0x18) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r4, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r5 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000140)=0x0) fcntl$setown(r5, 0x8, r6) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$lan78xx(0x7, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffe46}}]}}, 0x0) ioctl$EVIOCRMFF(r5, 0x80085502, 0x0) write$tcp_mem(0xffffffffffffffff, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) 1m47.770755133s ago: executing program 2 (id=2935): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000040)="99c9137c0740efb04eab19", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x19, 0x0, 0x1, 0xd4, 0x6, @random="0000ee773968"}, 0x14) fallocate(r0, 0x2, 0x1, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) sendmsg$nl_route(r3, 0x0, 0x40080) personality(0x87bf5ac905ea0f7f) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x3c, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000018) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setns(0xc9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m44.183040812s ago: executing program 2 (id=2944): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000000840)=""/9, 0x9}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/30, 0x1e}], 0x8, &(0x7f0000000b40)=""/240, 0xf0}, 0x1}], 0x1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$eJzs289qE10Yx/Ff+/a1tbWd+K/agvigG90MbbyCIC2IAaU2ooLC1E40ZExKZqhExHbnVvAuikt3ingD3bjyAtx1I7jpQhzJZNombUS6sIP2+9mcp5z+wjk5T8JZZDbuvHpSLYdu2YvU32fql1a1KeVaVaovHfuT+og6rery62+fz926e+96oVicmTObLcxfyZvZ2PkPT5+/ufAxGrn9duzdoNZzDza+5r+sj69PbPyYf1wJrRJarR6ZZwv1euQtBL4tVsKqa3Yz8L3Qt0ot9Btd8+WgvrTUNK+2ODq81PDD0Lxa06p+06K6RY2meY+8Ss1c17XRYeF3Smtzc14h61Xgz2o0Ct6MpMk9M6W1TBYEAAAyxf3/MOP+fxi07v/3089vN+7/AAAAAAAAAAAAAAAAAAAAAAD8DTbj2Inj2Nka/5eSJ3zi9O+jkoYljUg6JmlU0pgkR1JO0nFJJySdlHRK0mlJ45LOSDoraaLjtbLeK/bi/A+3jgf3hqTg5XJpudQe2/OFsioK5GtKjr4nZ5lq17PXijNTlsjpfbCS5leWS/9156fltBqmV366nbfu/GDSd9v5vJxWg/XK53vmh3TpYkfelaNPD1VXoMWkJ3fyL6bNrt4o7spPJv/3r3NtW8/zc91fzbfz++iPXe/vgCYHst07pLD5rOoFgd+goKCg2C6y/mbCQdg59KxXAgAAAAAAAAAAAAAAAADYj4P4OWHWewQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2/AwAAP//cgEz4A==") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02f44cc97389614eed6040ce1521e3bd39de8c57a558e91f"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x4040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x8080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x1, 0x7, &(0x7f0000000300)=""/183, &(0x7f00000003c0)=0xb7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x8003, 0x12) syz_open_procfs$pagemap(0x0, 0x0) 1m44.165550056s ago: executing program 32 (id=2944): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000740)=""/26, 0x1a}, {&(0x7f0000000780)=""/26, 0x1a}, {&(0x7f00000007c0)=""/79, 0x4f}, {&(0x7f0000000840)=""/9, 0x9}, {&(0x7f0000000880)=""/17, 0x11}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f00000009c0)=""/30, 0x1e}], 0x8, &(0x7f0000000b40)=""/240, 0xf0}, 0x1}], 0x1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x5}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)=ANY=[@ANYBLOB="2800000007060300000000ff01000000000000050900020073797a3100000000050001000700000020892652189b7232e0e46b491e29db7695826f1900e34a111023c3fa56dafb8f3efac5e0fd5326f28b82ed988263280adfd3a03ec5b5025d5924669f62de278a4c7ea25fefd963439741a229f79bbe3719f9fbe1eba9aaf08544c96236415f38b4a104b6322407000000b15d9252a1231a02f44cc97389614eed6040ce1521e3bd39de8c57a558e91f"], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x4040) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x8080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r4, 0x1, 0x7, &(0x7f0000000300)=""/183, &(0x7f00000003c0)=0xb7) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x4, 0x2) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x8003, 0x12) syz_open_procfs$pagemap(0x0, 0x0) 18.297114369s ago: executing program 1 (id=3426): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x80000001, @empty, 0x2}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x5, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000500)="88", 0x1}], 0x1}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x1}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) 14.37718728s ago: executing program 1 (id=3433): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) 14.371611961s ago: executing program 1 (id=3439): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0xd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x24, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x80}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4c050}, 0x40) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@mcast1}, 0x14) r5 = fsmount(r0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x390, 0x190, 0x2c0, 0x228, 0x98, 0x2c0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@multicast1, @broadcast, 0x0, 0x0, 'geneve1\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @loopback, 0xffffff00, 0xff, 'veth0_macvtap\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x2, 0x26}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x8, 0xf}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x0, 'sit0\x00', 'wg2\x00', {}, {}, 0x0, 0x1}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) sendto$packet(r9, &(0x7f0000000100)='O', 0x5c8, 0x0, &(0x7f0000000080)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) fchdir(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8}, 0x94) sendto$inet6(r1, &(0x7f0000000080)="0d7800327f14a3f45caf70e40fda8925859ab781fc1807ad10a3b2342d465a09332de5b6d0c6bbdb846ca3cd1980a44c390c15a1c7da229a5ad0989bf45a16fe9b9051db7163c0527b789ff46e16edfa49d3b65241d12aafa81ba356151713b86b0bb6b791120b8364f853b84eb43001f2bacfa6dcb0d2c76f4a413f45eb8225", 0x80, 0x80, &(0x7f0000000140)={0xa, 0x4e24, 0x317, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x1c) 14.369252392s ago: executing program 1 (id=3441): r0 = perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2d1814af, 0x2}, 0x9640, 0xa4, 0x800, 0x1, 0xa1, 0x9b98, 0x8, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000200)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xa5, 0xa, 0x0, 0x0, 0x5, 0x61, 0x11, 0x24}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000340)={0x17bf0d7acc1b9916}) sendmsg$inet(r4, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, r1}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x89002) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341218007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) r7 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$SG_IO(r7, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="ae2155fcc0ed", 0x0, 0x100086, 0x10030, 0x3, 0x0}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 13.211742483s ago: executing program 1 (id=3450): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=0x79, 0xfffffffffffffeee) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0xc, 0x0, 0x97, "ff00e100e302000000000000000000000400"}) r3 = syz_open_pts(r2, 0x141601) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c0001000a000000060000000c000100ff000000070000000c00010080000000000100000c0001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f4", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES64=r0, @ANYBLOB], 0x108}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], &(0x7f0000000f40)=""/4072, 0x36, 0xfe8, 0x1, 0xfffffffe}, 0x28) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1000000000021, 0x0, 0x0) sendmsg$inet6(r7, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r7], 0x18}, 0x2000c8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001680)=[{&(0x7f0000000180)=""/229, 0xe5}], 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32, @ANYBLOB="20000280", @ANYRES32=r6, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) 12.912616898s ago: executing program 1 (id=3454): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x10c810, &(0x7f0000000040)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESDEC, @ANYRES32=0x0], 0xff, 0x121d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)=0x2) r0 = getpid() setpriority(0x0, r0, 0xc) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xc) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a00000000000000"], 0x8) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffe00000001, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) 12.839707964s ago: executing program 33 (id=3454): openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x10c810, &(0x7f0000000040)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRESDEC, @ANYRES32=0x0], 0xff, 0x121d, &(0x7f0000001b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000380)=0x2) r0 = getpid() setpriority(0x0, r0, 0xc) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xc) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1a00000000000000"], 0x8) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xfffffffe00000001, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000011000000000000000000000018100000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) 11.155266549s ago: executing program 3 (id=3467): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x6}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x326d}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r1 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r1, &(0x7f0000000140)="bad386dd", 0x4, 0x0, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @multicast}, 0x14) 10.323595529s ago: executing program 3 (id=3469): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000), 0x0, 0x9) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) 8.657189031s ago: executing program 3 (id=3475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0x10ecc8, 0x1224, 0x88, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r1) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) setitimer(0x0, &(0x7f00000002c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000004000000080000000020000018000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="01000000030000090000000000000000000000000006000000000004b501d7f508bc4df1668e2b20da24fff329fc0a00a59ca0fbd31909110e879220bc9528ed40e1970b84bc4a5e517092ebb1babb66897e361c1f8393a4788d40b447780c28518ab7199088"], 0x50) 8.024246388s ago: executing program 3 (id=3479): r0 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000200)="bb28", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x9, 0x104a0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x7}, 0x10040d, 0xf, 0x243, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000001c0)={[{}, {@init_itable}, {@nolazytime}, {@noblock_validity}]}, 0x3, 0x453, &(0x7f0000000780)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x2000300, 0x0, 0x0, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x5, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="5fd63edbfd8ad8de16e68701009a", 0x0, 0x707, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r3, 0xc138fd03, &(0x7f0000001000)="04000000320000000000000038010000") ioctl(r3, 0xc138fd01, &(0x7f0000002000)="0400000032000000000000006c01") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0xb, 0x460, &(0x7f0000001380)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x777) openat(0xffffffffffffff9c, 0x0, 0x41002, 0x12) chdir(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000280000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142da7646c4fe02996b60cf81ebcd50fa9ea4308123f602000000000000de89e661168c1886d0d4d94f204e345c652fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762011052eac2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dc8aff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a6f387a1340a1c8889464f90cc4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd014a337ac5d58bcb5e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e4b9ec7a410ec42315255be1ed66d9051f22614d1f62734d679039a97d2b74f9e8e997ccd314000f747f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798ab20000000bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d2000000000000000819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480e5aee9c9e5f2e5a56a6d920335c8e8726fd8329d9a728995b1531bd20360d33d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c55969a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba84279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047050d7296cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5603a9d801300000000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e43eae50a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed03a6fe7860b3e13c3173a60a1823cb7dde8212a8531bd9060000006a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b05ebf1445ea110f499f840a5c965443d535556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a0000000000000001ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba0790ee0d112f99e59ba82e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee52303da186b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c44500f8ffff970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8f09c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c1b04e2fa55a756487517a7445cbd9e3f5175e41c00000000000000000000000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3138e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305977eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f87204311327c18380fedf3d3dad8549f99bf6c5cb060fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39289f675f39d01719cdbab3f1ce1060f3e6806e774a5f079c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae794286b6c3e1f5a76b85ed6e1f0000c608b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea87550fb1ba334c83e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba4664f35547cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1951393352bc756f3fcaad2c1c399a3e43eaaeca70db90f2fa395964434476719334482eb5424c81814079a24fe3681ad9ac361f71ac279a688f10a12105edebc5e3b8dad4c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fbdd351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2dff78ce9308c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f200000000000000000089de7f8485d9507164a187220b36ddc7fa645d4bd0c1414c30a416f80ba17d21d53961471b2d2d459e4bb23230d676ca49633b25e26a322024beb7c3427da59f7daa70a5d44a0eb895f29245df6401295d3da939954e126a3be932f47fe61ef1bfe83086651af7e23c2a8fa702b9aaa65aa3edaaa6b3f5a0c7cdfd008c898d73bb97168ca390ef539800000000000077a5ad1e683aeff92bb0b66b33ed878df1e344b99450086c819bf174578705c049d2fb25a91ba04643cde1a3c391d8646e5249dbf28b13b1c4d5127f685ee0c0576bf74e17cd3b4df4eb7095e504e361689572b0f93ff1dc6f52e8728a03e5a4df80a32c6055df8f4f4152c0bf4d793b20ac2cfa907b5af80716118f82027d3e4cb096fe86de545008b85cb9b637bca30d765b0c3ad489db32955454dcfe000000002830e5e125322d2f5829040a91405bf2fe5bf14833fd7b1e72c775f267bc45"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xcc0, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0xb20c, 0x0, 0x0, 0xe8, 0x0, &(0x7f0000000280)="dd"}, 0x48) creat(0x0, 0xa0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.992831173s ago: executing program 5 (id=3486): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) preadv2(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1, 0x1ff, 0x29eb, 0x6) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x810) 3.989713684s ago: executing program 3 (id=3488): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) 3.989255754s ago: executing program 3 (id=3489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cbe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x7, 0x3, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8000, &(0x7f0000000180)=0x40, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 3.988932734s ago: executing program 34 (id=3489): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8cbe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x7, 0x3, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008081}, 0x0) socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x8000, &(0x7f0000000180)=0x40, 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0xc, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) 3.987727725s ago: executing program 7 (id=3491): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000102c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc0802, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x869, 0x40459, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000001c0), 0x8}, 0x2400, 0x0, 0x0, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='pids.current\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x28}, 0x1, 0x0, 0x0, 0x842}, 0x40) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 3.984704455s ago: executing program 0 (id=3492): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000), 0x0, 0x9) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) 3.984257945s ago: executing program 5 (id=3494): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000), 0x0, 0x9) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) 3.797032916s ago: executing program 4 (id=3496): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x1c0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x5, 0x8000001, 0x2000402) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) 3.756634545s ago: executing program 4 (id=3497): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) 1.901401797s ago: executing program 4 (id=3499): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) fchdir(0xffffffffffffffff) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) 1.441569577s ago: executing program 0 (id=3501): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x20000008, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x7c16, 0xfe9, 0x7, 0x5, 0x4, 0x10000, 0xfffd, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 1.432952109s ago: executing program 5 (id=3502): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) 1.350626457s ago: executing program 4 (id=3503): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = syz_open_dev$usbfs(0x0, 0xf, 0x240000) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="c31800000100000071001a000000000095"], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000004000000060000000000000700000000248900000000000000000000020000000200000000000000"], 0x0, 0x40, 0x0, 0xa}, 0x28) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x7}, 0xfcc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, 0x0) open$dir(0x0, 0xc402, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='prev_state.function ==', 0x16) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) 1.347848867s ago: executing program 0 (id=3504): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 1.338579839s ago: executing program 7 (id=3505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 1.279203842s ago: executing program 5 (id=3506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=0x79, 0xfffffffffffffeee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0xc, 0x0, 0x97, "ff00e100e302000000000000000000000400"}) syz_open_pts(r0, 0x141601) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c0001000a000000060000000c000100ff000000070000000c00010080000000000100000c0001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f44b0000000200000600010003000000340004800c00010003000000050000000c00010006000000090000000c000100ffff0000ff7fffffecfd", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYBLOB="742c5cafbeec15c44c6dfdf7bfa2e6fdf76611c827e032ae28aaf0ea2f7daacf79e45ef698acd9e31c2f23b2000000000000005eceadbfbe95a9ec786c6811a489ef198b1048e79e5f06d4e9cf073cfe16717813c447a959"], 0x108}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], &(0x7f0000000f40)=""/4072, 0x36, 0xfe8, 0x1, 0xfffffffe}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x2000c8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) readv(r4, &(0x7f0000001680)=[{&(0x7f0000000180)=""/229, 0xe5}], 0x1) 1.186917722s ago: executing program 0 (id=3507): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.169634516s ago: executing program 7 (id=3508): socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0xa001, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60cb653e00303a0000000000000000000000ffffac1414bbff020000000000000000000000000001d65af1a3cca96efc60256b5400000000ff010000000000000000000000000001fe8000"/102], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e000000000000000100000007"], 0x50) r0 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf10dd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xdea, 0x7}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000002b400000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$sndseq(r2, &(0x7f00000006c0)=[{0x5, 0x2, 0x43, 0x9, @tick=0x8, {0x45}, {0x5, 0x2}, @quote={{0x80, 0x14}, 0x6}}], 0x1c) close(r2) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000001ad00)={0x0, 0x0, &(0x7f000001acc0)={&(0x7f000000e0c0)=@newchain={0x40b4, 0x64, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffed}, {0x10, 0x4}, {0xffff, 0xc}}, [@f_rsvp6={{0xa}, {0x3d3c, 0x2, [@TCA_RSVP_ACT={0x3d38, 0x6, [@m_vlan={0x130, 0x1e, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x4, 0x1, 0x10000}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0xffffffff, 0x6, 0x8, 0xae}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x8, 0x3, 0x7, 0xa, 0x1}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0xfffffffe, 0x10000000, 0x40, 0x8001}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x3bf}]}, {0x79, 0x6, "f442025c27cdbd4c9f666e513289b1e0ebcf94d5d114a5e25229d4d9b78eb7d0370b9e764d05300e6de2b237e9b7f634e6e295bb8c7a41c4966d4304070d0a288845e8aa445b142c639a97fe9b0293a13cca8cf4e7ecb695c7eff378e29c0e70a5e833a1e88312a6f68dadea5fe31a8fb83608c0ee"}, {0xc}, {0xc}}}, @m_nat={0xa4, 0x4, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x81, 0x8, 0x4, 0x3, 0x40}, @multicast2, @private=0xa010100, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x1000000f, 0x2, 0x1}, @loopback, @multicast1, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x9e2a, 0x4, 0x2}, @local, @multicast1, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x3ac8, 0x1f, 0x0, 0x0, {{0xb}, {0x3a30, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffff9, 0x6, 0xc17, 0xffffffff, 0x0, 0x7fff, 0x9c, 0xc, 0x5, 0xfd5, 0x800, 0x8, 0xfffffffb, 0xbd, 0x9, 0x401, 0x5, 0x800, 0x81, 0x1d80000, 0x1, 0x88, 0x5, 0x5, 0x1, 0x7330, 0x7, 0x8, 0x1, 0x6, 0x0, 0xd, 0xb, 0x7, 0x200, 0x38, 0x2, 0x8, 0xa, 0x637, 0x1, 0x1, 0xc0000, 0x4a8b6d65, 0x2, 0x7ff, 0x6, 0x80000000, 0x1, 0x0, 0xffff08a2, 0x3d, 0xc00000, 0xfffffffb, 0x6, 0x7, 0xd5, 0xfffffff7, 0x800, 0x6, 0x100, 0xeb78, 0x28, 0x6, 0x2, 0x1000, 0xffff, 0x4, 0x1, 0x7fff, 0x1, 0x5, 0x4, 0x199c, 0x0, 0x6, 0x7, 0x3531, 0x10, 0x11fc, 0x8, 0x7fff, 0x5, 0x8001, 0x0, 0xe92d, 0x6, 0x1, 0x6, 0x8, 0x1, 0x9, 0x5, 0x4507, 0x9, 0x2df2, 0x9, 0x400, 0x100, 0x4884, 0x8000, 0x200, 0x6, 0x9, 0x81, 0x76, 0x8, 0x8, 0x0, 0x0, 0x4, 0x99e, 0x4, 0x4, 0x1ff, 0x6, 0x7, 0x7, 0x0, 0x9bc, 0x9, 0x5, 0xa48d, 0x6, 0x3f4c, 0x1, 0x7, 0x3d57, 0x8, 0x0, 0x5e8, 0x7, 0x219, 0x9, 0x80000001, 0xfe28, 0x1, 0x7f, 0x7, 0xffffffff, 0x0, 0x4, 0x400, 0x2, 0x5, 0x7, 0x10, 0x8, 0x2, 0xd59e, 0x9, 0x6, 0x0, 0x5, 0x3, 0x1, 0x3, 0x3ff, 0x3, 0x8, 0xf9, 0x101, 0x7ef, 0x4, 0x5, 0xfffffff7, 0x5, 0xb, 0x7, 0x1, 0x2, 0x0, 0x30, 0x3, 0x4, 0x1000, 0x8000, 0xa18, 0x80000000, 0xfffffff7, 0x9, 0x3, 0x9, 0x8, 0xffff4bbe, 0x981a, 0x9, 0x6, 0x4, 0x7998, 0x2, 0x64c5, 0x1ff, 0x3, 0x3e5, 0x4, 0x2, 0xe5, 0x7, 0xca, 0x1, 0x8, 0x7, 0x0, 0x9, 0x9, 0x8, 0x1800, 0x96, 0x6, 0x5433, 0x9, 0xc61e, 0x31dd3c68, 0x7, 0x8000, 0x5, 0xfffffdd3, 0xbe8, 0xb4c, 0x20991dc9, 0x0, 0x9, 0xc, 0x0, 0x4, 0x2, 0xd5, 0xb, 0xfffffffb, 0x6, 0x7, 0x5, 0x0, 0x80000000, 0x0, 0x0, 0x200, 0x1, 0x7fff, 0x4, 0x3, 0x5, 0x6, 0x1000, 0x12, 0x8, 0x4, 0x2, 0x3, 0x3ff, 0x9, 0x2, 0x5, 0xeb95, 0xa]}, @TCA_POLICE_RATE={0x404, 0x2, [0x17538ccb, 0x6, 0x9, 0xd, 0x0, 0x8, 0x4, 0x3, 0x4, 0x8, 0x7c44, 0x6, 0x3, 0x9, 0x9, 0x1, 0x7, 0x6, 0x0, 0xfffffffb, 0x2, 0x80000000, 0x7, 0x59, 0x7f, 0x3, 0x703, 0x2, 0x9eb, 0x5, 0xffff8001, 0x1, 0x2, 0x2, 0x3, 0xdc60, 0x7, 0x80000001, 0x2, 0x4b5, 0x3, 0x20, 0x28, 0xf131, 0x574, 0x100, 0x8, 0xba01, 0x2, 0x6, 0x8, 0x1, 0x6, 0x115, 0xffff, 0x0, 0x24, 0xffffff80, 0xfffffffd, 0x5, 0x5, 0x1, 0x5ce, 0x6, 0x1, 0x8001, 0x0, 0x8, 0xc88, 0x9, 0x6, 0x1, 0x8, 0x7, 0x7ff, 0x1, 0x486, 0x8, 0x8, 0x7fffffff, 0x2, 0x7, 0x7, 0x5, 0x101, 0x7, 0x7173, 0x10, 0x10001, 0x5, 0xc51d, 0x9, 0x1, 0x8, 0x1, 0x7b, 0xffffffff, 0xd50, 0x6, 0x1, 0x3, 0x1ff, 0xff, 0xe, 0x380, 0xfffffff9, 0x4, 0xa, 0x0, 0xffff, 0x2, 0x7ff, 0x7, 0x1, 0xf48, 0x9, 0x4, 0x380000, 0x6, 0x80000001, 0x100, 0x1, 0x10000, 0x7fff, 0x9, 0x800, 0x7f, 0x36, 0x2, 0x8, 0x5, 0xfc6, 0x8, 0x6, 0x100, 0xc27, 0x4, 0x8, 0x1, 0x1000, 0x3, 0x7, 0x5, 0x6, 0x4, 0x4, 0xfffffff3, 0x7, 0x3, 0xfc, 0x8, 0x7, 0xf, 0x81, 0x7, 0xe, 0x8, 0x18, 0x3ff, 0x3, 0x9501, 0x1, 0x4, 0x4, 0x47b, 0x5, 0x3, 0x2, 0x4, 0x9, 0x6, 0x1, 0x6, 0x3, 0xe6a0, 0x9, 0xe, 0x6, 0x680, 0xd1b4, 0x0, 0xfffffff4, 0x7, 0xfffffff9, 0x3, 0x9, 0x7, 0x8, 0x9, 0xd, 0x10000, 0x8, 0x4, 0x2, 0x3, 0x101, 0xffff, 0x7f, 0x2, 0xfffffff8, 0x2, 0x8, 0x3, 0x101, 0x9, 0x4, 0x4, 0x83, 0x20000000, 0x3, 0x9000000, 0x3, 0x5, 0xb7d, 0x8, 0xacf, 0x7, 0x2, 0x7, 0x7, 0x0, 0x3, 0x81, 0x2, 0x5, 0x7, 0x9000000, 0x7fff, 0x3, 0x80000000, 0x4, 0x6, 0x4, 0x7, 0xf895, 0x2, 0x42c56865, 0x8, 0x799, 0x0, 0x80000001, 0x10001, 0x8, 0x2, 0xe, 0x5ca5, 0xf3da, 0x0, 0x3ff, 0x3, 0x3, 0x0, 0x6, 0x4c, 0xfffeffff, 0x6cbb099]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffdffffffe, 0x6, 0x78ba, 0x5, {0x0, 0x0, 0xfff, 0x3, 0x16d, 0x8327}, {0x4, 0x2, 0x1, 0x3, 0x1, 0x7}, 0x5, 0x9, 0x6}}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x100, 0xffffffffffffffff, 0x7fff, 0x81, 0x0, {0x0, 0x2, 0x92, 0x200, 0x2, 0x1ff}, {0x2, 0x2, 0xf990, 0x5408, 0x0, 0x30d}, 0x6, 0x3, 0x2}}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x56}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RESULT={0x8, 0x5, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x2, 0x11, 0xffff8000, 0x2, 0x1, 0x145, 0x1213e842, 0x8001, 0x2b, 0x6, 0x2, 0x1, 0x7fffffff, 0xa0, 0x7, 0x5, 0x4, 0x7, 0x1, 0x3, 0x9c, 0x1, 0xa, 0xfffffff9, 0x6, 0x8, 0x9, 0x200, 0x2, 0x1, 0x7, 0x496, 0x7f, 0x9, 0x10000, 0x5, 0x1, 0xbe4, 0xa, 0x3800000, 0x5, 0x8, 0x1ff, 0x800, 0x8, 0xffff0e90, 0x8, 0x700, 0x52a, 0xfae1, 0x8, 0x4ccc, 0x8, 0x25, 0x7fffffff, 0xe, 0x7, 0x40b, 0x0, 0x11be, 0x9401, 0xf1, 0x7, 0x2, 0x9e, 0x6, 0xea4, 0x2, 0x4ae, 0x10, 0x6, 0x7, 0x25, 0xfffffffb, 0x7, 0x7, 0x5, 0x7, 0x80, 0x400, 0x50, 0xc50, 0x401, 0x8, 0x7, 0x1, 0x6, 0x7, 0x80000000, 0x23c, 0x448, 0xfffff001, 0xffffffcb, 0x6, 0x3, 0x5, 0x1, 0x1857, 0x0, 0xb80, 0x2, 0x9, 0x316, 0x10, 0x6, 0x6, 0x1, 0x401, 0x3, 0x4, 0x1, 0x9, 0x0, 0x3, 0xf3, 0x337, 0x3, 0x7, 0x2, 0x5, 0x40, 0x6, 0x9, 0x8000, 0x1e, 0x9, 0x6, 0x0, 0xf, 0x4, 0x0, 0x80000000, 0xbb, 0x7, 0xfffffffa, 0x4, 0x5, 0xbc1, 0x401, 0xff, 0x7, 0x9, 0x697e, 0x8, 0xa00000, 0x401, 0xfa32, 0x5, 0x6, 0xfffffffd, 0x8, 0x9, 0x800, 0x3, 0xb0f, 0x1, 0x80000001, 0x5e9, 0x9, 0x5d94, 0x523, 0x2, 0xa8000000, 0xf7a1, 0x1, 0x6, 0x3, 0x2, 0xfffffffd, 0x1, 0x10, 0x7, 0x0, 0x5283, 0x9, 0x2, 0xfff, 0x0, 0x4, 0x8, 0x9, 0x8, 0x0, 0xffffffff, 0x2, 0xc7c, 0x4, 0x2, 0x100, 0xffff, 0x81, 0x1, 0x36d4, 0x2, 0x7, 0x5, 0xf5, 0x4, 0xd, 0xb, 0x1000, 0x6, 0x10, 0x10963d1b, 0x0, 0x6, 0x7f, 0xfffffff9, 0x5, 0x3, 0xff, 0x4, 0x7, 0xf, 0x0, 0x0, 0x4, 0x401, 0x9, 0x1, 0x84, 0x8000, 0x9, 0x3, 0x3, 0x1, 0x1, 0xa1f1, 0x1, 0x7, 0x8, 0xf, 0x10001, 0x3ff, 0x55d, 0xffffef76, 0xc, 0xa7, 0xe, 0x736b0d05, 0x8, 0xa1, 0x13, 0xd80, 0xfffffff9, 0x6, 0x7fffffff, 0x800, 0x40, 0x400, 0x2e2, 0x100, 0x0, 0x2, 0xfffff800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x5, 0x100, 0x6, 0x0, 0x1, 0x8e, 0x3, 0x0, 0x1000, 0x0, 0xfffff001, 0x4b8, 0x3, 0x1, 0x1, 0x80000001, 0x2, 0x4c729536, 0xc0, 0x5, 0xcb, 0x6, 0xbf, 0xffffffff, 0x4, 0x1, 0x2, 0x0, 0x6, 0x8000, 0x5, 0xffffffc0, 0x81, 0x6, 0x7ff, 0x8, 0x80000000, 0x10001, 0x7, 0xe, 0xfa, 0x0, 0xef1b, 0xffff, 0xce, 0x7, 0x4, 0x6, 0x1, 0x5, 0x3, 0x5, 0x5, 0xffffffc0, 0x9, 0x1, 0xb24, 0xfffffff9, 0xffff, 0x2, 0x9, 0x1, 0x3, 0x0, 0x3, 0x443, 0x7, 0xba, 0x3, 0x1, 0x9, 0x5, 0x154, 0xf2, 0x3, 0x9, 0x1, 0x4, 0x6, 0x8, 0x3, 0x3, 0x2, 0x5, 0x9, 0xc3, 0x1, 0x4, 0x8, 0x2, 0x0, 0xfff, 0x6, 0x8000, 0x0, 0x6, 0x0, 0xffffffc0, 0x6, 0x8201, 0x7ff, 0x2, 0x0, 0x6, 0x1, 0xfffffff8, 0x9, 0x7, 0x3, 0x9, 0x1ce, 0xb448, 0x401, 0x6, 0x80, 0x8000, 0xf9e, 0x9, 0x3, 0x1, 0xf, 0x7, 0x7, 0x4, 0x7dc0d77d, 0xfff, 0x2000000, 0x8, 0x7, 0x2, 0xa4f, 0xff64, 0x80, 0x3, 0x200, 0x9, 0x80, 0x8ebd, 0x80000000, 0x5, 0x0, 0x7, 0x8, 0x4, 0x7fff, 0x4, 0x9, 0x9, 0x9, 0x873, 0x77f8, 0x9, 0x7, 0x10, 0xff, 0x1228, 0x401, 0x1, 0x3, 0x23, 0x80000001, 0xa, 0x9, 0x9be, 0x4, 0x7, 0x2, 0xfffffff7, 0x8, 0x5, 0xa756, 0x7, 0x800, 0x8, 0x1ff, 0x9, 0x4b0d, 0xc, 0xeb97, 0x400, 0x6, 0x1, 0x5, 0xe8ad, 0x0, 0x8, 0x80, 0x7, 0x2, 0x7ff, 0x5, 0x2, 0xe, 0x3, 0xee, 0x4, 0x1, 0x8, 0x404000, 0x1, 0xdc1f, 0x7, 0x6, 0x5, 0x8, 0x958, 0x6, 0xa2, 0x0, 0xfa, 0x8, 0x0, 0x5, 0x2, 0x7, 0x8, 0x5, 0x9b7, 0x6, 0x80, 0xc5ac, 0x2, 0x0, 0x1000, 0x4, 0x1, 0x99ce, 0xe, 0x9, 0x1, 0x4f, 0x1, 0x80000001, 0x6, 0x5, 0x0, 0x0, 0x6, 0xfffffffc, 0x5, 0x3, 0x10000, 0x8, 0x3, 0x6, 0x9, 0x9, 0x5c2, 0x4, 0x6, 0x1000, 0x800, 0x5, 0x1, 0xd8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0x10000, 0xffffffc0, 0xff, 0x100, 0x7, 0x5, 0x9, 0xd2, 0x5, 0x0, 0x2, 0x0, 0x4, 0x7, 0x7fffffff, 0x2, 0x5, 0xc7, 0x5, 0x7, 0x8, 0x0, 0xff, 0x800, 0x8, 0x4, 0x2b25f7db, 0x8, 0x6, 0x4, 0x0, 0x2, 0x4, 0x7, 0x4, 0x9, 0xfff, 0xf, 0x80000000, 0x95, 0x3cea37eb, 0x8001, 0xb, 0x8, 0x5, 0xe1f, 0x3, 0x8, 0x9, 0x5, 0x3, 0x9, 0x5e8, 0x5, 0x1986, 0x0, 0x8, 0xb, 0x5, 0x8, 0x3, 0x4, 0x4, 0x2, 0x637c7e23, 0x9, 0x1, 0x1, 0x0, 0x5, 0x10001, 0x0, 0x1, 0x6, 0x3, 0xc, 0x4, 0xb0, 0x7fffffff, 0xff, 0xfffffffd, 0x1ff, 0x93e9, 0x1, 0x10001, 0x0, 0x9, 0x3, 0xffffff01, 0x533, 0x4, 0x1, 0x6, 0x200, 0x5d, 0x0, 0x9, 0x8, 0xf, 0x4, 0xfffffffa, 0x8, 0x5, 0x800, 0xff7, 0x7, 0x200, 0xa, 0x5, 0x1, 0xff, 0x7, 0x0, 0x0, 0xd258, 0xe5b, 0x2000000, 0x5, 0x9f, 0x3b9, 0x10001, 0x3, 0x2, 0x200, 0xfffffffb, 0x0, 0x5, 0x9, 0x81, 0xe, 0xfff, 0x80000000, 0x30f, 0x0, 0x7, 0x7, 0x2, 0x7, 0x9, 0x5, 0x8, 0x8, 0x80, 0x3f, 0x6, 0x3, 0x10001, 0x2, 0x800, 0x10, 0x3, 0x3, 0x7ff, 0x3, 0xfffffff1, 0x9, 0x0, 0xa50, 0xffff, 0x4, 0x0, 0x4, 0xf, 0x7ab0, 0x5, 0x6, 0x5, 0x1, 0x7f, 0x3ff, 0x7f, 0xb, 0x40000000, 0x7704, 0x4, 0x9, 0xfffff597, 0x2, 0x8, 0x2, 0xbb, 0xfffffff9, 0x401, 0x340, 0xe9, 0x3, 0x1, 0x4, 0x101, 0xfffffffb, 0x101, 0x1, 0x603, 0x5, 0x10001, 0xfffffffa, 0xc, 0xfffffff7, 0x5, 0x7, 0xd7ab, 0x4, 0xb1eb, 0x0, 0xffffffff, 0xca, 0x3, 0xfff, 0x0, 0x6, 0xb, 0x80, 0x5, 0x9, 0x756, 0x10, 0x9, 0xb, 0x0, 0xe3, 0x4, 0xf8, 0xb, 0x4, 0x6, 0x1, 0x2, 0x5, 0x5, 0x5, 0xfff, 0x6, 0x0, 0x6, 0x3, 0x5, 0x6, 0xcb, 0x7, 0xe10, 0x9, 0x3, 0x576cc393, 0x12f, 0xffffffe2, 0xfffffffa, 0x9, 0x3a, 0x9, 0x6, 0x8, 0x40, 0x80000001, 0x4]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_RESULT={0x8, 0x5, 0x30b}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0x8, 0x2, 0x6, 0x2af3, 0x57, 0x4, 0x2, 0x6, 0x200, 0xa7c3, 0x3, 0x2, 0xfff, 0xabe, 0x3, 0xfffffffd, 0x4, 0x0, 0x6, 0x5, 0x5, 0x8, 0xf2f, 0x80000001, 0x0, 0x0, 0x5, 0x7, 0x4, 0x1e7, 0x9b6, 0x0, 0x4, 0x6, 0xfc24, 0x9, 0x3, 0xf, 0x0, 0x3, 0x7, 0x6, 0x6, 0x2, 0x5, 0x1, 0x5b8f, 0xf, 0xd, 0x1, 0x8, 0x0, 0x3, 0xb, 0x7, 0x5, 0x2, 0x3, 0x2, 0x7fffffff, 0x6, 0x5, 0x0, 0x9, 0x1000, 0x8, 0x9, 0x1a, 0xff, 0x3ff, 0x1, 0x2, 0x9, 0x7, 0x4, 0x9, 0x3, 0x9, 0x40, 0xfa4b, 0x1, 0xffff8000, 0xff, 0x8, 0xda6, 0x4, 0x8, 0x545e, 0x68c, 0xc, 0x1, 0x3, 0x1, 0xfffff348, 0x3, 0x3, 0xfff, 0xfff, 0x2, 0x2, 0x7ff, 0x8583, 0x8, 0x1fffc000, 0x8382, 0x1, 0x7, 0x884b32b, 0x92, 0x0, 0x88e, 0x5, 0xfffffff8, 0x0, 0x2, 0xa, 0x0, 0x3fd, 0x2, 0x9, 0x8, 0x2, 0x1, 0x219a3caa, 0x1f, 0x7f, 0x85cc380, 0x5, 0x40, 0xa, 0x2, 0x4, 0x6, 0x6, 0x2, 0x2, 0x2, 0x2000000, 0x7, 0x7, 0x2, 0x4, 0xb2c5, 0x3, 0x0, 0x0, 0x1000, 0x20e7, 0xa, 0xc, 0xf, 0x4, 0xa, 0x5, 0x8, 0x4, 0xff, 0x3, 0x1, 0xff, 0xfffffe01, 0x5, 0x5ae2, 0x3, 0x8, 0x841c, 0xf, 0xd52, 0x968ec51, 0x3, 0x2, 0x4, 0xfffffff8, 0x3, 0x8, 0x8, 0x7, 0x7, 0x8c447726, 0x5, 0xd, 0xe0f4, 0xfffffff7, 0x6, 0x3, 0xb766, 0x8, 0x1, 0x4, 0x4, 0x0, 0x2, 0x3, 0x5126, 0xee, 0x8, 0x5, 0x7fffffff, 0x2, 0x0, 0x419, 0x995, 0x400, 0x10001, 0x7fff, 0x1e, 0x1, 0x1, 0x7, 0x5, 0x10001, 0x2, 0xf, 0x6, 0x7, 0xf21c, 0x1, 0x3, 0xff, 0xdf, 0x2d4e, 0x8, 0x3, 0x1a8, 0x6, 0x8, 0x6, 0x4, 0x10000, 0x0, 0x8, 0xe28, 0x0, 0x4, 0x4, 0x1, 0x6, 0x3, 0x7, 0x0, 0x9, 0x0, 0x3, 0x7f, 0xff, 0x6, 0x7, 0x6, 0x5, 0x10001, 0xe, 0x8, 0x9, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd7f, 0x40, 0x81, 0x8001, 0xfff, 0xc, 0xbb, 0xffff0f56, 0x4, 0x9, 0x0, 0x2, 0x29b, 0x3, 0x4, 0xa, 0x3, 0xe, 0x5, 0x2, 0x7ff, 0x40, 0x5302, 0x6, 0xe, 0x6, 0xfff, 0x9, 0x9, 0x8, 0x6, 0x0, 0x7, 0x0, 0x7, 0x400, 0x5, 0x2, 0xff, 0x80000001, 0x5, 0x5, 0x7, 0x1f2f, 0x7, 0x80000001, 0x2, 0x8, 0x9, 0x3, 0x2, 0x10000, 0x9, 0x6, 0x6, 0x10000, 0x2, 0x0, 0xfffffffd, 0x5, 0x9, 0x7, 0x8001, 0x0, 0x5, 0x1, 0xd, 0x2, 0x401, 0x6, 0x1000, 0xfffffff1, 0x722, 0x957, 0x7, 0x0, 0x7, 0x1, 0x1ff, 0x8, 0x401, 0x4, 0x0, 0x1, 0x5, 0x2, 0x5, 0x7ff, 0x10001, 0xfd77e698, 0x7, 0x1, 0xdfb, 0x3, 0xe, 0x4, 0x1800, 0x6, 0x4, 0xd, 0x0, 0x9, 0x4, 0x8, 0x8, 0x6, 0x8001, 0x3, 0x2, 0x6, 0xfffffffd, 0xc, 0x5, 0x1, 0x9bf9, 0x4, 0x2, 0x5, 0x0, 0x7fffffff, 0x800, 0x0, 0x2, 0xe, 0x0, 0x8, 0x8, 0xe, 0x2, 0x195, 0x0, 0xb4a, 0x887f, 0x8, 0x7, 0x0, 0x9, 0x4f, 0x1, 0x0, 0x8001, 0x7, 0x6, 0x7, 0xe2, 0x4, 0x5, 0x8, 0x1, 0x7, 0x1, 0x0, 0x5, 0x7, 0x1, 0x7867, 0x2, 0x9, 0x9, 0x5, 0x1, 0x8, 0x9, 0x40, 0x5, 0x2, 0x0, 0x6, 0x344e, 0x45, 0x91, 0x7, 0x1800000, 0xdf6, 0x8, 0xc, 0x4, 0x4, 0x80000000, 0x7, 0x6, 0xffff, 0x7, 0x939, 0x9, 0x9, 0x2, 0xa1, 0x6, 0x9, 0xe, 0x0, 0x4, 0x0, 0x6, 0x3, 0x401, 0xffff, 0x7, 0x401, 0x401, 0x1, 0x8, 0xd6a, 0x7, 0xf, 0x9, 0x400, 0x3, 0x1000, 0xfffeffff, 0x100, 0x8, 0x6, 0x5, 0x6, 0x4, 0xfffffff5, 0x2, 0x5, 0x2, 0x80000000, 0xd1, 0x200, 0x9, 0xb, 0x9, 0xfb, 0x8001, 0x2, 0xc, 0x6, 0x6, 0x1, 0x8, 0x5, 0x3, 0x3, 0x6, 0xc20f, 0xff, 0x7fff, 0x0, 0x8ac, 0x2, 0x729, 0x9, 0x595, 0xe, 0x3d077a7f, 0x4, 0x31, 0xfff, 0x4, 0x80, 0x8]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x7, 0xa8ed, 0x7, 0x1, 0xd, 0x6, 0xffff6be6, 0x10001, 0x7f, 0x0, 0x7, 0x3, 0x9, 0x88, 0x0, 0x3, 0x0, 0x80, 0x7fff, 0xce, 0xce1, 0x9, 0xf, 0x8000, 0x4, 0x4, 0x7, 0xca9f, 0x5, 0x1, 0xffff9d59, 0x81, 0x6, 0x80, 0x8, 0x4, 0x9, 0x5, 0x6, 0x1, 0x3, 0x31, 0x6a08, 0x6, 0x100, 0xc, 0xd, 0x1, 0x5, 0xfffffffb, 0xd, 0x7f, 0x6, 0x3ff, 0x0, 0x3, 0x2, 0x400, 0x400, 0x5, 0x2, 0x7, 0x38, 0xfffffffa, 0x3ddd, 0x4, 0xb, 0x401, 0xa544, 0xfff, 0x3d9d, 0x99c3, 0x0, 0x60, 0x3, 0x6, 0x1, 0x8000, 0x2, 0x4, 0xd, 0xd724, 0x8, 0xa, 0x81, 0xffffffff, 0xa7, 0xfffffff8, 0x3ae, 0x100, 0x31d, 0x3, 0x24a, 0x7fc00000, 0x8001, 0x101, 0x4, 0x2, 0x4, 0x2, 0x8000, 0xe3b, 0x6, 0x2, 0x9, 0xffff, 0x7, 0x5, 0x1, 0xd, 0x7f, 0x6, 0xfffffffb, 0x5, 0x13, 0x40000, 0xc, 0x1, 0xa23, 0x582, 0x2, 0xef6, 0x7, 0x8, 0x6, 0x8001, 0x9, 0x5, 0x3, 0x7, 0x400, 0x40, 0x4, 0x4, 0x7, 0x7, 0x53, 0x4, 0x4, 0x8, 0x7fffffff, 0x40, 0x3, 0x7fffffff, 0x3, 0x3, 0xf29, 0x3, 0x7ff, 0x9c1, 0x8, 0x80, 0x7, 0x9, 0x6, 0x4, 0x4125, 0x8, 0x3, 0x1ff, 0x600, 0x800, 0x7, 0x4, 0x8, 0x7, 0x7, 0x1d, 0x5, 0x1, 0x6, 0x3, 0xffffffff, 0x8, 0x4, 0x84, 0x5, 0x81, 0x1, 0x5, 0x6, 0x7, 0x10001, 0x0, 0x999d, 0x4, 0xb37, 0x3, 0x1, 0x9, 0x8000, 0x51, 0x6, 0x4, 0x1000, 0x5, 0xac50, 0x4, 0x10000, 0x4, 0x81, 0x101, 0x10000000, 0xdbd, 0x9, 0x3, 0x7, 0x400, 0x1000, 0x0, 0x30000, 0x7ff, 0x10000, 0x8, 0x1, 0x2, 0x1, 0x4, 0x0, 0x6e9, 0xfffffeff, 0xc9c0, 0xfffffff8, 0x9, 0x1f21, 0x7, 0x7f, 0x7, 0x3, 0x40000000, 0x8, 0x5, 0xffffffff, 0x2, 0xcf1, 0x8001, 0x9, 0x10, 0x200, 0x0, 0x4, 0xb5, 0x40, 0x29, 0x6337, 0x2, 0x803, 0x2, 0x2, 0x9, 0x4, 0x3, 0x2, 0x6, 0xfe00]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x3472, 0xfff, 0x1, 0x3, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xf9, 0x6, 0x72ea, 0x3, 0x1, 0x2, 0x0, 0x7, 0x8, 0x21, 0x3, 0x8, 0x401, 0xffffffff, 0x5, 0x7707, 0x8, 0x3, 0x3, 0x50, 0x2, 0x9, 0x4, 0x7ff, 0x2, 0x6ab7, 0x3, 0xfffff800, 0x6, 0x8001, 0x6, 0x4, 0x3, 0x8000, 0x7, 0x8da, 0x6, 0x923d, 0x1, 0x4, 0x401, 0x5, 0x8, 0x80000001, 0xe91, 0x6, 0x400, 0x555, 0x1, 0x7fffffff, 0x80, 0xfffffffb, 0x5c39, 0x4, 0x4, 0x4, 0x0, 0x2, 0x3ff, 0x4, 0x5, 0xa09, 0x5, 0xd, 0x0, 0x1, 0x5, 0x3, 0x0, 0x9, 0x0, 0x5, 0x0, 0x9, 0x4, 0x8, 0x1ff, 0x0, 0x0, 0x8, 0xf2c, 0x80000000, 0x3, 0x1, 0x6, 0x10000, 0x7, 0x5, 0x8, 0x0, 0x2, 0x3, 0x1, 0x3, 0x2, 0x7ff, 0x1, 0x1, 0xffffffff, 0x7ff, 0x5, 0x9, 0x9, 0x1, 0x9, 0x1, 0x2000, 0x446, 0x200, 0xd, 0x2, 0x4, 0xffffffff, 0x3, 0x2, 0x81, 0x0, 0x8000, 0x8000, 0x4, 0x1, 0xf6d9, 0x9, 0x4, 0x81, 0x5, 0x9, 0x7, 0x80, 0x8, 0xc, 0xfffffff8, 0xc, 0x10001, 0x6, 0x6, 0x8, 0xe1, 0x0, 0x80000000, 0x5, 0x4, 0x2, 0xfffffff7, 0x9, 0xfffffff9, 0x4, 0x8, 0x6, 0x8, 0x7f, 0x7022496e, 0x5, 0x3ff, 0x3, 0x2, 0x6, 0x1, 0x1, 0x4, 0xfffff001, 0x4, 0x0, 0x2, 0x10000, 0xa179, 0xffffffff, 0xffffffff, 0x7, 0x80000000, 0x1, 0x178c2691, 0x4, 0x0, 0x9, 0x5, 0x7, 0x3a, 0x6, 0x3, 0x6, 0x5, 0x3ff, 0x6, 0xda17, 0x9, 0x1, 0xd89, 0x3, 0x3, 0x0, 0x3, 0xd, 0x81, 0xe336fa8, 0x3, 0x87d2, 0x37, 0x7, 0x7, 0xac, 0x5, 0x800, 0x8, 0xf, 0x7, 0x8000, 0x8, 0x9, 0x8, 0x1, 0x7ff, 0xfffffff8, 0xc, 0x2, 0x4, 0x0, 0xe9c, 0x9, 0x6, 0x401, 0x2de, 0x3, 0x4, 0x5, 0x94, 0xffff, 0xf85, 0x1000, 0x0, 0x0, 0x3, 0x10001, 0x9, 0x8, 0x7f, 0x0, 0x2, 0x6, 0x8, 0x3, 0x5, 0x2, 0x8, 0x3, 0xf]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xe0, 0x7, 0x6fb, 0x8000, 0x5d, {0xc, 0x1, 0x9, 0x0, 0x2, 0xfff}, {0x8, 0x0, 0xffff, 0x2, 0x8, 0x40d5}, 0x7, 0x1b3, 0x81}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x101}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0x20000000, 0x27f8, 0xc489, 0x5, {0x8c, 0x1, 0x6ed0, 0x2, 0xff1d, 0x6}, {0xe5, 0x0, 0x8a, 0xfe00, 0x5, 0x10001}, 0x7fffffff, 0x9}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x7, 0x188, 0x1ff, 0x1ff, 0x3, 0x2, 0x6, 0x8001, 0x3, 0x100, 0x9, 0xe0000000, 0x2, 0x0, 0x10000, 0x6, 0x2, 0x1, 0xff, 0x7, 0xe59, 0x4, 0x401, 0x9, 0x1, 0x1, 0x9, 0x0, 0x1c8, 0xebd5, 0x5, 0x89, 0x8000, 0x4, 0x9, 0x7f, 0x85, 0x6, 0x74c0, 0x1, 0x3, 0x0, 0x7, 0x7, 0x6, 0x2, 0x8, 0x0, 0x0, 0x4, 0xfffffe00, 0x6, 0xd178, 0x7f, 0x0, 0x7, 0x3, 0x1, 0x1a0, 0x9, 0xb, 0x8, 0x1000, 0x7ff, 0xeb68, 0xa, 0xff, 0xc, 0x3, 0x80000000, 0x9, 0x1, 0x9, 0x6, 0xf, 0x9, 0x3, 0xfffffff8, 0x8000, 0x1, 0x4, 0x800, 0x7345, 0x4, 0xc0, 0x2, 0x8, 0x9, 0x9, 0xa1ac, 0xca, 0x1ff, 0x10000, 0xbe, 0x5, 0x1, 0xffffffff, 0x3, 0xfffffffd, 0x8, 0x1, 0xe985, 0x4, 0x4, 0x360, 0x9, 0x0, 0x0, 0x3, 0x5, 0x1000, 0x9, 0x9e6, 0x5, 0x8, 0x60000000, 0x6, 0x8, 0x3, 0x4a13, 0x8, 0x3, 0xe, 0x9, 0x4, 0x200, 0x6e1, 0x5676, 0x0, 0x4, 0x2, 0x7, 0x800, 0x0, 0x8, 0x7fffffff, 0x23, 0xf32, 0x800, 0xef, 0x7, 0xd74, 0x6, 0x3, 0x6, 0x9, 0xfffffffe, 0x3, 0xf, 0x0, 0x3, 0x154, 0x1, 0x24c9, 0x7ff, 0x5, 0x4, 0x1ff, 0x8, 0xfffffffb, 0x4, 0x562, 0xffff, 0x8001, 0x100, 0x8, 0x9, 0xcf7c, 0x6, 0x7ff, 0x9, 0xfffffffa, 0x7fff, 0x8d3, 0x8, 0x8, 0x7, 0x9, 0xff, 0x6, 0x7ff, 0x400, 0x4, 0x4, 0xfff, 0xc, 0xbd, 0x2, 0x41, 0x42b, 0x4, 0x1, 0x3, 0x5, 0x8, 0x0, 0x1, 0x4, 0x4, 0x7, 0x0, 0x8, 0x8000, 0x8, 0x8, 0x7, 0x4, 0x3, 0x8, 0x0, 0x5, 0x4c43b33f, 0xc, 0xeab0, 0x3, 0xf72, 0x2a9, 0x7, 0x7591, 0x7, 0x99f1, 0x6, 0x177, 0xe, 0x1, 0x694, 0x8, 0xaf, 0x2, 0x6, 0x4a, 0xfffffdfa, 0x7ce44540, 0x6, 0x0, 0x100, 0x7fff, 0x9, 0x8001, 0x9, 0x1, 0x8, 0x10001, 0x10000, 0x8, 0x401, 0x800, 0x4, 0xa70, 0x8b, 0x7, 0x4, 0x6, 0x5, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x2, 0x1, 0xfff80000, 0xfffffff0, 0x8, 0xb67e, 0x66eb, 0xb4e, 0x9, 0x5, 0xb, 0x6, 0xec2, 0x9c, 0x8c7, 0xcfe, 0x4, 0x2, 0x0, 0x4, 0x8, 0x9, 0x6, 0x3, 0x9, 0x4, 0x7ff, 0x81, 0x10, 0xc, 0x9, 0x6, 0x3, 0x2, 0xe, 0x5, 0x2, 0x6, 0x9, 0xf, 0xde8, 0x735, 0xffff, 0x8, 0x8, 0x3, 0x4, 0x7, 0x9ca7, 0x27, 0x43, 0x2d, 0x0, 0x1, 0x0, 0x9, 0xfffffff0, 0x3, 0x1ff, 0x4, 0x2, 0x2, 0x6d, 0x7, 0x9, 0x7, 0x3, 0xaea, 0x5, 0x3, 0x0, 0x1, 0x2, 0x8, 0x2f304f54, 0x81, 0x8, 0x1, 0xe, 0x3, 0xeac, 0x3, 0xe, 0x5, 0x1, 0x4, 0x8, 0x1, 0x7, 0x9, 0x8000, 0xfffffffc, 0x7, 0x1, 0x6, 0x6, 0x200, 0x1ff, 0x80000001, 0xffffffff, 0x9, 0x32, 0x0, 0x1ffdbebd, 0x10000, 0x8, 0xffffffff, 0xfff, 0x1, 0x3, 0x1, 0xa, 0x6, 0xa6, 0x0, 0x8, 0x3, 0x3, 0xfffffffe, 0x9, 0xf5a, 0x9, 0xa, 0x0, 0x0, 0x1, 0x4, 0x81, 0x0, 0x3, 0x4, 0x400000, 0x0, 0x5b9, 0x70, 0x30fe, 0x100, 0x1800000, 0x9, 0xd4, 0x4, 0x57, 0x1, 0x2, 0x2, 0x0, 0x50f, 0xfffffff7, 0x9, 0x8, 0x5, 0x3, 0xfffff386, 0x1, 0xe701, 0x10001, 0x2, 0x5, 0x80000000, 0x7d, 0xfffffffc, 0x2, 0x4, 0xc9, 0x1, 0xffff, 0x717, 0x4, 0xf916, 0x2, 0xd772, 0x85, 0xfffffffe, 0x8, 0x702, 0xd4, 0x0, 0x733e, 0x1, 0x6, 0x1, 0x8, 0x2a762385, 0xe15, 0xd1, 0x3, 0x9, 0x8, 0x9, 0x8, 0xc, 0x1, 0x1, 0x401, 0x6, 0xde, 0x9, 0x0, 0x1000, 0x0, 0x1, 0x1, 0x9, 0x2, 0xffffffff, 0x8001, 0x3, 0x9, 0x5, 0x9d12, 0x5, 0x8da, 0x800, 0x6, 0x2, 0x8001, 0x6, 0xab, 0x2, 0x7, 0xfffffffb, 0x0, 0x4, 0xf, 0x1c00, 0xb4c, 0xffffffff, 0x2, 0x31ae531, 0x5, 0x6c18, 0x3c, 0x0, 0x4, 0xffffff0a, 0x1, 0x3, 0xa41, 0x81, 0x0, 0x5, 0x19, 0x6, 0x9, 0x1, 0x4, 0x5, 0x2, 0x39b0, 0x2, 0x8, 0xa, 0xf79a, 0xffffffff, 0xff, 0x88cf]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfffffffffffffff8}], [@TCA_POLICE_RATE={0x404, 0x2, [0xfffffff9, 0x7, 0x4, 0xa9e, 0x4a2, 0x800, 0x6, 0x1, 0x0, 0x9, 0x10000, 0xc, 0x8, 0xd00, 0x4, 0xa7a4, 0x3, 0xfff, 0x8, 0x8c, 0x875, 0x6, 0x800, 0x0, 0x34a, 0x3ff, 0x5, 0x8, 0x7, 0x69, 0x9, 0x6, 0x6, 0x80000000, 0x7, 0xc3c6, 0x4, 0x4, 0xc9, 0x6, 0x5, 0x9, 0x3, 0x9, 0x7, 0x3, 0x2000000, 0x1, 0xd, 0x9d, 0x10000, 0xca6, 0x70e, 0x7f, 0x5, 0x9, 0x6, 0x8, 0x5, 0x1, 0x9, 0xd, 0x8b, 0x8, 0x0, 0x2, 0x94, 0xfffffffd, 0x1ff, 0x9, 0x64d5, 0x3ff, 0x9, 0x1, 0x3, 0x6, 0xcdea, 0x61b1, 0x9, 0x3, 0x0, 0x4, 0x6, 0x4925, 0x5, 0x3f000000, 0x63f, 0xfffffff9, 0x1, 0x4, 0x7, 0xcd49, 0x101, 0x16d, 0x1, 0x400, 0xa6, 0x81, 0xcfd7, 0x41, 0x4, 0xae, 0x7, 0xfffffffb, 0x0, 0x200, 0x4, 0xa8, 0x2, 0x2, 0x8, 0x0, 0x1278, 0xc, 0x4, 0x8e7, 0x7, 0x1, 0x7, 0x8, 0xcf, 0x33e5, 0x8, 0x10, 0x9, 0x80, 0x3a, 0x7f, 0x769, 0x100, 0x3, 0x6013, 0x7fffffff, 0x1, 0x8, 0x40, 0x3, 0x3, 0xe8, 0x3, 0x1c, 0x9, 0x5, 0x4, 0x9, 0x2, 0x81, 0x5, 0x401, 0x7, 0x0, 0x1, 0x1, 0x1, 0x400, 0x188, 0x2, 0x1, 0x10000, 0x7f, 0x5, 0x7, 0x2, 0x4, 0x1, 0x68, 0x52, 0x5, 0x7, 0x3ff, 0x0, 0x3, 0x5, 0x7f, 0x6, 0x2, 0x2, 0x140, 0x7, 0x2, 0x63a, 0x4, 0x4, 0xc6, 0x8, 0xfd9c, 0x6, 0x4e8, 0x7, 0x1, 0x4c91, 0x0, 0xd, 0x8, 0x3, 0x2, 0x8001, 0x9, 0xe5, 0x6, 0x9, 0x1, 0x8, 0xd, 0xfff, 0x7f, 0xb13f, 0x3, 0x4, 0x6, 0x9, 0x4, 0x7, 0x3, 0x800, 0x7, 0x4, 0x25, 0x2, 0x6e, 0xfffffd8b, 0x8, 0x1, 0x1ff, 0x3, 0x1, 0x518, 0x8, 0x63, 0x7, 0x904, 0xe4a, 0x2, 0xffffff3d, 0x0, 0x1ff, 0x20d5, 0x1, 0x5, 0x8, 0x6c6, 0x0, 0x7, 0x1, 0x6, 0xc0, 0x37311f03, 0x9, 0xc00000, 0x1000, 0x9, 0xffffff80, 0x458, 0x1, 0x2, 0x59e]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x8, 0x5, 0xfff, 0x4, 0x48, 0x8, 0x624f, 0x5, 0x6, 0x9, 0x9, 0x8000, 0x5, 0x8, 0xa, 0x3, 0x2, 0x5, 0x5, 0x5, 0xfffffff9, 0xf, 0x9, 0x3, 0x8, 0xff, 0x5, 0x8000, 0x9, 0x6, 0x1, 0xfe, 0x7, 0x80, 0x1, 0x5, 0x1000, 0x98e5, 0x3, 0x5, 0x4, 0x46, 0x4, 0x7631, 0x0, 0xcdf5, 0xdc6a, 0x2, 0x0, 0xfffffffc, 0x728b, 0x2, 0x6, 0x2e58b29b, 0x78e6, 0x7, 0x1, 0xd, 0x4, 0x80000000, 0x77196e9e, 0x60, 0xc, 0xffffffad, 0x4, 0x2, 0x3, 0x4, 0x7, 0x7, 0xc3f7, 0x0, 0x8001, 0x2, 0x80000001, 0x0, 0x100, 0x4, 0x62a, 0x5, 0xb17, 0x1c859b87, 0x2, 0x6, 0xd2d, 0x6, 0x7fff, 0xa, 0x8001, 0x7fff, 0x1, 0x7, 0x4, 0x7814eb88, 0xc5, 0x9, 0x9, 0x9, 0xb, 0x1, 0xfffffff7, 0xf, 0x8, 0xf27, 0x2, 0x1485809a, 0x0, 0x7fff, 0x1, 0x2, 0x400, 0x8, 0x8, 0x7, 0xc, 0xffffffff, 0xf72, 0x1f, 0x1, 0x634, 0x7, 0x2, 0x0, 0x5, 0x80, 0x6, 0x0, 0x5, 0x9, 0x7ff, 0xf, 0x5, 0xfc, 0xfffffffd, 0xffff, 0x6, 0xcc, 0x3, 0xfffff800, 0x3d, 0x1, 0x0, 0x3, 0x9, 0x8, 0x5, 0x47, 0x2, 0x5, 0x2, 0x2000, 0x0, 0x7fff, 0x1857, 0x2, 0x1, 0x6, 0xffffffff, 0x5, 0xffffffb6, 0x3a, 0x1, 0x8000, 0x7, 0x4, 0x10001, 0x5, 0x1, 0x0, 0x6f, 0x7, 0xf, 0x0, 0x59cb4011, 0x100, 0x4, 0x36, 0x6, 0x4a0, 0x6, 0x200, 0x4, 0x75, 0x3, 0x10001, 0x4, 0x17, 0x1, 0x7ff, 0xfffffff8, 0xe8, 0x31b0ea09, 0x8000, 0x8, 0x4, 0x8, 0x9e, 0x7, 0x9, 0x0, 0x8, 0x1c, 0x800, 0x0, 0x1, 0x6d, 0x7, 0x1, 0x6, 0x4, 0x8, 0x80000001, 0x9, 0x7, 0xff, 0x10, 0x6, 0x6, 0xb4b, 0x6, 0x0, 0x2, 0x10001, 0x0, 0x4, 0xe, 0x8, 0x3, 0x800, 0x6, 0x7, 0x58, 0x10000, 0xb, 0x9, 0x5, 0x10000, 0x89d1, 0xf, 0x1, 0x4, 0x2, 0x6, 0x200, 0x7e, 0x9, 0x5, 0x88, 0x0, 0x1, 0xfffffffc, 0x100, 0x9, 0xb2ff, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x2, 0x5, 0x4, 0x9, {0x78, 0x2, 0x6, 0x5, 0x9, 0x9}, {0x1, 0x2, 0x80, 0x90d8, 0x6, 0x10000}, 0xbac1, 0x2, 0x4a5}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xb}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x0, 0x3, 0x7fff, 0x3, {0xa9, 0x0, 0x396e, 0x36f, 0xd, 0x4}, {0x28, 0x0, 0x283f, 0x5, 0x8, 0xc}, 0x5, 0x6, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10000, 0x7, 0x6, 0x8, 0x9, 0x9, 0x57c2e7fb, 0x1, 0x9, 0xe, 0x1ff, 0x4ef2, 0x3, 0x10000, 0x6, 0x8001, 0x3, 0xf84, 0x4, 0xfff, 0x3, 0x1, 0x0, 0x2044, 0xc0, 0x401, 0x7, 0x380, 0xbd5, 0xfffffffe, 0x1, 0x810, 0x5c4e, 0x94, 0x7, 0x4, 0x2, 0x2, 0x0, 0x3, 0x5, 0x6, 0x8, 0x5, 0x5c, 0x2, 0x3, 0x0, 0xe383, 0x5, 0x9, 0x400, 0x5, 0x9, 0x0, 0x1000, 0xffff, 0x3, 0x1, 0x7, 0xf2, 0x9, 0x1, 0xffff, 0x2, 0x800, 0xf82, 0x2, 0x7, 0x8000, 0x4, 0x3d1c, 0x5, 0xfffffff8, 0xe, 0x4, 0x6, 0x7, 0x0, 0x200, 0xfffffff7, 0xe0, 0xb8d, 0x800, 0x8, 0x1, 0xffffffff, 0x1, 0x92, 0x0, 0x400, 0x8727, 0x1000, 0x0, 0x1, 0x0, 0x3, 0xf54, 0xfffffff1, 0xac, 0x8, 0x200, 0xffffffff, 0x41, 0x4, 0x1, 0xc, 0x60d9, 0x4, 0x80000000, 0xc5, 0x400, 0x9, 0xb84, 0x9, 0x1, 0x4, 0x80, 0xf, 0x4, 0x1000, 0x8, 0x401, 0x3, 0x0, 0x9, 0x80, 0xff, 0x0, 0x7fff, 0x3cb, 0x793, 0xffff0000, 0xfca8, 0x5, 0x1, 0xe4ff, 0x4, 0x9, 0xfffffff8, 0x0, 0x80000000, 0x9, 0x8, 0x2, 0x8, 0xb4, 0x4a3, 0x995, 0x7, 0x5000000, 0xf7, 0x42, 0x266a, 0x6, 0x6, 0x5, 0x3, 0x6, 0x8, 0x3ff, 0x1ff, 0x200, 0x0, 0x0, 0x4, 0x3ff, 0x3, 0x787, 0x27980000, 0x1, 0x3, 0x7fff, 0x404, 0xf74, 0xffffff19, 0x37aedd7e, 0x8, 0x8, 0x6, 0x2, 0x2, 0x2, 0x3, 0x6, 0x8, 0x81, 0x8, 0xf, 0x5, 0x7, 0x8, 0x8, 0x1, 0x1, 0xf, 0xd, 0x4, 0xffff, 0x9, 0x9, 0x2, 0x5, 0x3, 0x13b, 0x4, 0x5, 0x8000, 0x4, 0x6, 0x7, 0x6, 0x11, 0x1, 0x44de, 0x2, 0xce600000, 0x9, 0x8001, 0xffff, 0x5, 0x1, 0x0, 0x7, 0x2, 0x6, 0x9, 0x7fffffff, 0x6ff, 0x9, 0x2, 0x8, 0x401, 0x8, 0x7fff, 0x3, 0x7, 0x41815aad, 0x5, 0xe445, 0x8000, 0x5, 0x9, 0xa7e, 0x10000, 0x8b99, 0xffffff01, 0x100, 0x0, 0x0, 0x2, 0x1, 0x1000, 0x8a85, 0x4]}]]}, {0x6d, 0x6, "c3f63334088a69813fb2b64196a2537cda22e305c759901c04a5df6d67ed0a7d9e97f0135711231e9fcc1e05d6dee0720d36473c4da8c25f3049c24f1bf4515394ab5db5c2d5ea3b1de14d40b6e93cfdfd2d0d2e22cca058e8a49c900329fc21fcb476b000d6d074a8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x98, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x100, 0x7, 0x8, 0x4, 0x1}, 0x9}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x3}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xffffffc0, 0x4, 0x3, 0x6, 0xf115}, 0xc}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @f_tcindex={{0xc}, {0x33c, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_ACT={0x330, 0x7, [@m_bpf={0x7c, 0xe, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x2, 0x3, 0x7}, {0x7, 0x1, 0x9, 0x6880}, {0x4fa7, 0x3d, 0xfa, 0xa3}, {0x6, 0xb, 0x40, 0x9}]}]}, {0x25, 0x6, "ba0d365e146c7a68c93b25cf3e4fb7565cc9af3381e7c189e01d89f0475b6b89d6"}, {0xc}, {0xc, 0x8, {0x3, 0x2}}}}, @m_bpf={0x13c, 0x1e, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x5, 0x7f, 0x8, 0x0, 0x3}}, @TCA_ACT_BPF_FD={0x8}]}, {0xe9, 0x6, "2043a7acee154df468b59325813fad6ca4ae5b7b683c3c1397874fa7c2676d0c76af4aeba97a1b785696e0b274abb631738921c9a878c79756491a606973634457313aaf5b68d0c094cf666d7148e622a06ba9e9bab0aea5dda3f629125c7512544ad1e179b5171015805e5e6dc837353276b996cb8d8427ab80c85f2861635d61338542a7d5f1fb6fcaccedd4c9858c0f8eb758bd42a43a10087a7298ab13c8dadd54c043f77330315c59757a45e211daab636bf365d67dd4aaad56b05fc23607c37902038c18bbd0fdaa8828a0e61cd309a404a12554da10c4e5bd3d0c3415ae89c3d51c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x4, 0x3}}}}, @m_csum={0xec, 0x6, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x1000, 0x7, 0x8, 0xe}, 0x76}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x2, 0xffffffffffffffff, 0x9, 0x2}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x30000, 0xd, 0x2, 0x7fffffff, 0xa}, 0x3}}]}, {0x69, 0x6, "d07337a9424fc59edb350d1eff1130a3f4bc7b1106f017e2e5332ff01185030bb08b9e708ebb0b06da7ad36ae0ac5ac87d9a8f0804f185f024d89ddab9f39e3ae10cd77a7d5aa751f3c04ed30a2e5dfa6496562558fcae2dadeb9b7a7c8c047848eee01dba"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x88, 0x2, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x40, 0x3e, 0x4, 0x5, 0x36}, 0x7fff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x9, 0x6, 0x8, 0x6}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x5d57, 0xffffffffffffffff, 0x7fffffff, 0x5}, 0xffff}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x40b4}, 0x1, 0x0, 0x0, 0x8000}, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.043479483s ago: executing program 5 (id=3509): syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @remote, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1f}}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}, {@local}, {@private=0xa0100fe}, {@local, 0x1}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtclass={0x40, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {}, {0x0, 0xfff3}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x14, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x200}, @TCA_QFQ_LMAX={0x8, 0x2, 0x401}]}}]}, 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r3, &(0x7f0000001440)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000100000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) 976.299918ms ago: executing program 0 (id=3510): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000), 0x0, 0x9) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r3, 0x1912, 0x71, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) 919.45404ms ago: executing program 5 (id=3511): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, 0x0, 0x0) read(r2, 0x0, 0x0) fchdir(0xffffffffffffffff) poll(&(0x7f0000000000), 0x0, 0x9) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0x1, 0x29, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r3, 0x1912, 0x71, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000000)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@data_err_ignore}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x45a, &(0x7f0000000d80)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) 847.939686ms ago: executing program 4 (id=3513): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000d00)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000280)=0x79, 0xfffffffffffffeee) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0xc, 0x0, 0x97, "ff00e100e302000000000000000000000400"}) syz_open_pts(r0, 0x141601) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300000000000000d800128009000100766c616e00000000c800028006000100020000000600050088a800000c0002000b0000000700000006000500810000000c000200020000000c000000580003800c0001000a000000060000000c000100ff000000070000000c00010080000000000100000c0001000200000010ce00000c000100ff010000090000000c00010083020000130000000c000100f44b0000000200000600010003000000340004800c00010003000000050000000c00010006000000090000000c000100ffff0000ff7fffffecfd", @ANYRES32=r2, @ANYBLOB='\b\x00', @ANYBLOB="742c5cafbeec15c44c6dfdf7bfa2e6fdf76611c827e032ae28aaf0ea2f7daacf79e45ef698acd9e31c2f23b2000000000000005eceadbfbe95a9ec786c6811a489ef198b1048e79e5f06d4e9cf073cfe16717813c447a959"], 0x108}}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], &(0x7f0000000f40)=""/4072, 0x36, 0xfe8, 0x1, 0xfffffffe}, 0x28) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r3, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, 0x0, 0x0, 0x0, 0x18}, 0x2000c8d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/kmsg\x00', 0x800, 0x0) readv(r4, &(0x7f0000001680)=[{&(0x7f0000000180)=""/229, 0xe5}], 0x1) 568.401587ms ago: executing program 4 (id=3514): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x40000001, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) fchdir(0xffffffffffffffff) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xe3e4, 0x10000, 0x8, 0x223}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008000) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0xc, @local, 0x13}, r1}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x1f, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}, 0xfffffffd}, {0x2, 0xfff9, 0xc62, @empty, 0x100}, r1, 0x9dff7ffc}}, 0x48) 539.138653ms ago: executing program 6 (id=3515): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x20000008, 0x2080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000002c0)}, 0x7c16, 0xfe9, 0x7, 0x5, 0x4, 0x10000, 0xfffd, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket(0x1e, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmmsg$sock(r2, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 384.995706ms ago: executing program 6 (id=3516): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, 0x0) 299.343605ms ago: executing program 6 (id=3517): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) 299.135245ms ago: executing program 6 (id=3518): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) 274.34274ms ago: executing program 6 (id=3519): syz_emit_ethernet(0x46, &(0x7f00000006c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @remote, {[@cipso={0x86, 0x6, 0x3}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) linkat(r2, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, 0x0, 0x1000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000002c0)='cgroup.stat\x00', 0x275a, 0xfffe) preadv(r4, &(0x7f0000001440)=[{&(0x7f0000001480)=""/15, 0xf}], 0x1, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="d8000000100081044e81f782db44b96d001d006a0f000000100000002900150006000e2603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de643ec0dd6e4edef76874fbe0f32b1608621e9e0", 0xd8}], 0x1}, 0x20000080) 151.969217ms ago: executing program 6 (id=3520): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x43, 0xff, 0x2, 0x10, 0x10}, 0xe) shutdown(r0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x1e, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x1c) setresgid(0x0, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@newqdisc={0xb0, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcd}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfff}]}]}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0xb0}}, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f00000000c0)=0x215010, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) 0s ago: executing program 0 (id=3521): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x4}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xa) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x4, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0xfffffffd, 0x3, 0xffff0099, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000c2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000040)="99c9137c0740efb04eab19", 0xb, 0x40, &(0x7f00000001c0)={0x11, 0x19, 0x0, 0x1, 0xd4, 0x6, @random="0000ee773968"}, 0x14) fallocate(r0, 0x2, 0x1, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}}], {0x14}}, 0x5c}, 0x1, 0x0, 0x0, 0x480c0}, 0x800) sendmsg$nl_route(r3, 0x0, 0x40080) personality(0x87bf5ac905ea0f7f) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x34, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x400003}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000018) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setns(0xc9, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x7fffffff, 0x0, 0x2}, {0xfffffffffffffffe, 0xffffffffffffffff}, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x4000}]}]}, 0xfc}}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x810) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ot:sysadm_r:sysadm_t pid=13824 comm="syz.5.3041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 718.429983][ T29] audit: type=1326 audit(1790284395.717:5835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.5.3041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 718.430020][ T29] audit: type=1326 audit(1790284395.717:5836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.5.3041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 718.430206][ T29] audit: type=1326 audit(1790284395.717:5837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13824 comm="syz.5.3041" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 718.823133][T13832] tipc: Enabling of bearer rejected, already enabled [ 720.074683][T13845] netlink: 'syz.0.3048': attribute type 12 has an invalid length. [ 720.884887][T13882] FAULT_INJECTION: forcing a failure. [ 720.884887][T13882] name failslab, interval 1, probability 0, space 0, times 0 [ 720.884915][T13882] CPU: 1 UID: 0 PID: 13882 Comm: syz.3.3051 Not tainted syzkaller #0 PREEMPT(lazy) [ 720.884943][T13882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 720.884959][T13882] Call Trace: [ 720.884967][T13882] [ 720.885055][T13882] __dump_stack+0x1d/0x30 [ 720.885078][T13882] dump_stack_lvl+0x95/0xd0 [ 720.885179][T13882] dump_stack+0x15/0x1b [ 720.885200][T13882] should_fail_ex+0x262/0x280 [ 720.885247][T13882] ? alloc_empty_file+0x70/0x1e0 [ 720.885270][T13882] should_failslab+0x8c/0xb0 [ 720.885313][T13882] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 720.885420][T13882] ? alloc_empty_file+0x70/0x1e0 [ 720.885445][T13882] alloc_empty_file+0x70/0x1e0 [ 720.885468][T13882] alloc_file_pseudo+0x92/0x120 [ 720.885564][T13882] sock_alloc_file+0x9c/0x1e0 [ 720.885594][T13882] __sys_socket+0x118/0x180 [ 720.885626][T13882] __x64_sys_socket+0x3f/0x50 [ 720.885709][T13882] x64_sys_call+0x246e/0x2550 [ 720.885737][T13882] do_syscall_64+0x112/0x360 [ 720.885760][T13882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.885784][T13882] RIP: 0033:0x7f8b4abde159 [ 720.885800][T13882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.885855][T13882] RSP: 002b:00007f8b495f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 720.885876][T13882] RAX: ffffffffffffffda RBX: 00007f8b4ae66180 RCX: 00007f8b4abde159 [ 720.885892][T13882] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 720.885906][T13882] RBP: 00007f8b495f5090 R08: 0000000000000000 R09: 0000000000000000 [ 720.885920][T13882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.886014][T13882] R13: 00007f8b4ae66218 R14: 00007f8b4ae66180 R15: 00007ffca39554f8 [ 720.886035][T13882] [ 721.297513][T13893] syzkaller0: entered promiscuous mode [ 721.297531][T13893] syzkaller0: entered allmulticast mode [ 721.325301][T13895] syzkaller0: entered promiscuous mode [ 721.325318][T13895] syzkaller0: entered allmulticast mode [ 721.328841][T13893] tipc: Enabled bearer , priority 0 [ 721.337958][T13893] tipc: Resetting bearer [ 721.362667][T13890] tipc: Resetting bearer [ 721.373876][T13890] tipc: Disabling bearer [ 721.764909][T13935] lo speed is unknown, defaulting to 1000 [ 722.216815][T13942] loop3: detected capacity change from 0 to 512 [ 722.247770][T13942] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 722.248045][T13942] EXT4-fs (loop3): orphan cleanup on readonly fs [ 722.249325][T13942] __quota_error: 80 callbacks suppressed [ 722.249339][T13942] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 722.249373][T13942] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 722.251396][T13942] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 722.312772][T13942] EXT4-fs (loop3): 1 truncate cleaned up [ 722.339399][ T29] audit: type=1400 audit(1790284399.627:5918): avc: denied { write } for pid=13931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.351620][ T29] audit: type=1400 audit(1790284399.637:5919): avc: denied { create } for pid=13948 comm="syz.1.3069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 722.391434][T13915] loop5: detected capacity change from 0 to 256 [ 722.396514][T13942] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 722.456866][T13916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 722.470933][ T29] audit: type=1400 audit(1790284399.757:5920): avc: denied { write } for pid=13954 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 722.522196][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 722.756599][T13971] syzkaller0: entered promiscuous mode [ 722.756621][T13971] syzkaller0: entered allmulticast mode [ 722.762997][T13971] tipc: Enabled bearer , priority 0 [ 722.789820][T13971] tipc: Resetting bearer [ 723.638045][T13970] tipc: Resetting bearer [ 723.644679][ T29] audit: type=1400 audit(1790284400.927:5921): avc: denied { setopt } for pid=13957 comm="syz.4.3072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 723.677805][T13970] tipc: Disabling bearer [ 723.732673][T13967] -: renamed from syzkaller0 [ 723.751804][ T29] audit: type=1400 audit(1790284401.037:5922): avc: denied { write } for pid=13963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.841838][ T29] audit: type=1400 audit(1790284401.127:5923): avc: denied { write } for pid=13983 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 723.958873][T13987] lo speed is unknown, defaulting to 1000 [ 723.988724][T13989] syzkaller0: entered promiscuous mode [ 723.988742][T13989] syzkaller0: entered allmulticast mode [ 724.057009][T13994] syzkaller0: entered promiscuous mode [ 724.057032][T13994] syzkaller0: entered allmulticast mode [ 724.615022][T14010] loop3: detected capacity change from 0 to 512 [ 724.636772][T14010] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 724.636869][T14010] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 724.895680][ T29] audit: type=1400 audit(1790284402.177:5924): avc: denied { write } for pid=14009 comm="syz.3.3085" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.070627][ T29] audit: type=1400 audit(1790284402.337:5925): avc: denied { write } for pid=14009 comm="syz.3.3085" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 725.595111][ T29] audit: type=1400 audit(1790284402.857:5926): avc: denied { write } for pid=14023 comm="syz.4.3087" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 726.541340][T14046] syzkaller0: entered promiscuous mode [ 726.541362][T14046] syzkaller0: entered allmulticast mode [ 726.795690][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 726.882727][T14062] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 726.923164][T14059] lo speed is unknown, defaulting to 1000 [ 726.958341][T14062] loop4: detected capacity change from 0 to 8192 [ 726.971819][T14062] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 727.662867][T14085] syzkaller0: entered promiscuous mode [ 727.662890][T14085] syzkaller0: entered allmulticast mode [ 728.625831][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 728.625847][ T29] audit: type=1400 audit(1790284405.917:6055): avc: denied { ioctl } for pid=14083 comm="syz.0.3102" path="socket:[38529]" dev="sockfs" ino=38529 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 728.672211][ T29] audit: type=1400 audit(1790284405.957:6056): avc: denied { write } for pid=14083 comm="syz.0.3102" path="socket:[38529]" dev="sockfs" ino=38529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 728.672961][T14086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 728.673097][T14086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 728.728004][ T29] audit: type=1400 audit(1790284406.017:6057): avc: denied { read } for pid=14083 comm="syz.0.3102" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 728.728050][ T29] audit: type=1400 audit(1790284406.017:6058): avc: denied { open } for pid=14083 comm="syz.0.3102" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 728.788092][ T29] audit: type=1400 audit(1790284406.077:6059): avc: denied { setattr } for pid=14083 comm="syz.0.3102" name="KCM" dev="sockfs" ino=38529 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 728.788618][ T29] audit: type=1400 audit(1790284406.077:6060): avc: denied { read append } for pid=14083 comm="syz.0.3102" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 729.771122][T14101] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3108'. [ 729.853363][ T29] audit: type=1400 audit(1790284407.117:6061): avc: denied { mount } for pid=14100 comm="syz.5.3108" name="/" dev="ramfs" ino=38536 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 730.054933][T14106] loop4: detected capacity change from 0 to 128 [ 731.892364][ T29] audit: type=1400 audit(1790284409.167:6062): avc: denied { create } for pid=14109 comm="syz.0.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 731.892398][ T29] audit: type=1400 audit(1790284409.177:6063): avc: denied { write } for pid=14109 comm="syz.0.3110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 732.547102][ T38] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.571531][T14120] syzkaller0: entered promiscuous mode [ 732.571622][T14120] syzkaller0: entered allmulticast mode [ 732.587628][T14120] tipc: Started in network mode [ 732.587678][T14120] tipc: Node identity a63def5dfda5, cluster identity 4711 [ 732.587720][T14120] tipc: Enabled bearer , priority 0 [ 732.590891][T14120] tipc: Resetting bearer [ 732.614521][T14119] tipc: Resetting bearer [ 732.632213][T14119] tipc: Disabling bearer [ 732.654054][ T38] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.738178][ T38] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.811222][ T38] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.831116][T14116] lo speed is unknown, defaulting to 1000 [ 733.175542][ T38] bridge_slave_1: left allmulticast mode [ 733.175609][ T38] bridge_slave_1: left promiscuous mode [ 733.176254][ T38] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.184872][ T38] bridge_slave_0: left allmulticast mode [ 733.184972][ T38] bridge_slave_0: left promiscuous mode [ 733.185298][ T38] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.836768][ T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.840879][ T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.871347][ T38] bond0 (unregistering): Released all slaves [ 734.003434][ T38] tipc: Disabling bearer [ 734.003473][ T38] tipc: Left network mode [ 734.067106][T14116] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.067141][T14116] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.067275][T14116] bridge_slave_0: entered allmulticast mode [ 734.067636][T14116] bridge_slave_0: entered promiscuous mode [ 734.096623][T14116] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.096651][T14116] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.097323][T14116] bridge_slave_1: entered allmulticast mode [ 734.097975][T14116] bridge_slave_1: entered promiscuous mode [ 734.160839][T14116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.174077][T14116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 734.212364][T14116] team0: Port device team_slave_0 added [ 734.221631][T14116] team0: Port device team_slave_1 added [ 734.273491][T14116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.273505][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.273538][T14116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.277096][T14116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.277111][T14116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.277213][T14116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.425556][T14116] hsr_slave_0: entered promiscuous mode [ 734.430143][T14116] hsr_slave_1: entered promiscuous mode [ 734.430318][T14116] debugfs: 'hsr0' already exists in 'hsr' [ 734.430331][T14116] Cannot create hsr debugfs directory [ 735.152074][ T38] hsr_slave_0: left promiscuous mode [ 735.160576][ T38] hsr_slave_1: left promiscuous mode [ 735.161220][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.161249][ T38] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.176837][ T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.176874][ T38] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.206220][ T38] veth1_macvtap: left promiscuous mode [ 735.206338][ T38] veth0_macvtap: left promiscuous mode [ 735.206455][ T38] veth1_vlan: left promiscuous mode [ 735.206487][ T38] veth0_vlan: left promiscuous mode [ 735.721397][ T29] audit: type=1400 audit(1790284413.007:6064): avc: denied { write } for pid=14148 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 735.941558][ T38] team0 (unregistering): Port device team_slave_1 removed [ 735.959116][ T38] team0 (unregistering): Port device team_slave_0 removed [ 735.985578][ T29] audit: type=1400 audit(1790284413.277:6065): avc: denied { write } for pid=14168 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 736.118299][T14173] loop3: detected capacity change from 0 to 512 [ 736.119568][T14173] EXT4-fs: test_dummy_encryption option not supported [ 736.141116][T14173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 736.210509][T14171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3119'. [ 736.292735][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 738.073359][ T29] audit: type=1400 audit(1790284415.267:6066): avc: denied { write } for pid=14187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.073465][ T29] audit: type=1400 audit(1790284415.347:6067): avc: denied { write } for pid=14198 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.147707][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 738.467314][ T29] audit: type=1400 audit(1790284415.757:6068): avc: denied { write } for pid=14202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.591955][ T29] audit: type=1400 audit(1790284415.877:6069): avc: denied { write } for pid=14215 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.741578][T14116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 738.767275][T14116] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 738.767951][T14116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 738.789045][T14116] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 738.802724][T14116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 738.816293][T14116] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 738.823530][T14116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 738.845470][T14116] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 738.935217][ T29] audit: type=1400 audit(1790284416.227:6070): avc: denied { create } for pid=14220 comm="syz.0.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 738.977844][ T29] audit: type=1400 audit(1790284416.267:6071): avc: denied { ioctl } for pid=14220 comm="syz.0.3126" path="socket:[41148]" dev="sockfs" ino=41148 ioctlcmd=0x8918 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 739.069705][T14116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.089986][T14116] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.105504][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.105543][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.111597][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.111639][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.182911][ T29] audit: type=1400 audit(1790284416.467:6072): avc: denied { write } for pid=14219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.202006][T14234] netlink: 'syz.1.3127': attribute type 4 has an invalid length. [ 739.202046][T14234] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3127'. [ 739.298313][ T29] audit: type=1400 audit(1790284416.587:6073): avc: denied { write } for pid=14242 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.792681][T14246] netlink: 'syz.3.3128': attribute type 4 has an invalid length. [ 739.792697][T14246] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3128'. [ 740.921753][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 740.921768][ T29] audit: type=1400 audit(1790284418.207:6076): avc: denied { append } for pid=14295 comm="syz.3.3133" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 740.953114][ T29] audit: type=1400 audit(1790284418.237:6077): avc: denied { write } for pid=14279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 740.993339][ T29] audit: type=1400 audit(1790284418.277:6078): avc: denied { read append } for pid=14295 comm="syz.3.3133" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 740.993375][ T29] audit: type=1400 audit(1790284418.277:6079): avc: denied { open } for pid=14295 comm="syz.3.3133" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 741.031599][T14266] loop5: detected capacity change from 0 to 128 [ 741.119919][ T29] audit: type=1400 audit(1790284418.407:6080): avc: denied { write } for pid=14302 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.143543][T14116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.262442][ T29] audit: type=1400 audit(1790284418.547:6081): avc: denied { watch } for pid=14295 comm="syz.3.3133" path="/606" dev="tmpfs" ino=3271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 741.426346][T14263] tipc: Enabling of bearer rejected, already enabled [ 741.672343][ T29] audit: type=1400 audit(1790284418.957:6082): avc: denied { write } for pid=14308 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.759367][ T29] audit: type=1400 audit(1790284419.047:6083): avc: denied { write } for pid=14341 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 741.979325][T14116] veth0_vlan: entered promiscuous mode [ 741.981694][T14116] veth1_vlan: entered promiscuous mode [ 742.032721][T14327] 9p: Bad value for 'rfdno' [ 742.047238][T14116] veth0_macvtap: entered promiscuous mode [ 742.062527][T14116] veth1_macvtap: entered promiscuous mode [ 742.097672][T14116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.110162][T14116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.134574][ T325] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.134643][ T325] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.134798][ T325] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.134867][ T325] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.212439][ T29] audit: type=1400 audit(1790284419.497:6084): avc: denied { mount } for pid=14116 comm="syz-executor" name="/" dev="gadgetfs" ino=4195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 742.415571][T14361] loop3: detected capacity change from 0 to 2048 [ 742.482564][T14361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.498790][ T29] audit: type=1400 audit(1790284419.787:6085): avc: denied { write } for pid=14352 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.522477][T14361] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 742.522735][T14361] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 742.522841][T14361] EXT4-fs (loop3): This should not happen!! Data will be lost [ 742.522841][T14361] [ 742.522879][T14361] EXT4-fs (loop3): Total free blocks count 0 [ 742.522921][T14361] EXT4-fs (loop3): Free/Dirty block details [ 742.522962][T14361] EXT4-fs (loop3): free_blocks=4096 [ 742.523004][T14361] EXT4-fs (loop3): dirty_blocks=48 [ 742.523034][T14361] EXT4-fs (loop3): Block reservation details [ 742.523067][T14361] EXT4-fs (loop3): i_reserved_data_blocks=3 [ 742.689913][T14372] netlink: 'syz.4.3139': attribute type 4 has an invalid length. [ 742.690045][T14372] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3139'. [ 742.744668][ T38] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 743.062458][T14388] netlink: 'syz.0.3143': attribute type 4 has an invalid length. [ 743.062519][T14388] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3143'. [ 743.126185][ T3022] veth0_vlan: left promiscuous mode [ 743.160678][ T3406] veth0_vlan: entered promiscuous mode [ 743.260977][T14392] FAULT_INJECTION: forcing a failure. [ 743.260977][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 743.261009][T14392] CPU: 1 UID: 0 PID: 14392 Comm: syz.4.3144 Not tainted syzkaller #0 PREEMPT(lazy) [ 743.261076][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 743.261092][T14392] Call Trace: [ 743.261100][T14392] [ 743.261109][T14392] __dump_stack+0x1d/0x30 [ 743.261138][T14392] dump_stack_lvl+0x95/0xd0 [ 743.261158][T14392] dump_stack+0x15/0x1b [ 743.261220][T14392] should_fail_ex+0x262/0x280 [ 743.261241][T14392] should_fail+0xb/0x20 [ 743.261260][T14392] should_fail_usercopy+0x1a/0x20 [ 743.261313][T14392] _copy_from_iter+0xcc/0xe70 [ 743.261401][T14392] ? __alloc_skb+0x516/0x6f0 [ 743.261440][T14392] ? __alloc_skb+0x209/0x6f0 [ 743.261479][T14392] netlink_sendmsg+0x4a4/0x6f0 [ 743.261522][T14392] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.261549][T14392] ____sys_sendmsg+0x532/0x580 [ 743.261570][T14392] ___sys_sendmsg+0x195/0x1e0 [ 743.261615][T14392] __x64_sys_sendmsg+0xd4/0x160 [ 743.261643][T14392] x64_sys_call+0x22ab/0x2550 [ 743.261669][T14392] do_syscall_64+0x112/0x360 [ 743.261775][T14392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.261803][T14392] RIP: 0033:0x7f454249e159 [ 743.261821][T14392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.261840][T14392] RSP: 002b:00007f4540ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 743.261857][T14392] RAX: ffffffffffffffda RBX: 00007f4542725fa0 RCX: 00007f454249e159 [ 743.261869][T14392] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 743.261939][T14392] RBP: 00007f4540ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 743.261996][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.262074][T14392] R13: 00007f4542726038 R14: 00007f4542725fa0 R15: 00007ffdd6c24418 [ 743.262097][T14392] [ 743.496940][ T4888] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.533266][T14396] loop4: detected capacity change from 0 to 512 [ 743.551848][ T4888] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.569752][T14396] EXT4-fs (loop4): orphan cleanup on readonly fs [ 743.571607][T14396] EXT4-fs error (device loop4): ext4_validate_block_bitmap:436: comm syz.4.3145: bg 0: block 7: invalid block bitmap [ 743.571644][T14396] loop4: lost filesystem error report for type 5 error -117 [ 743.572000][T14396] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 743.572047][T14396] loop4: lost filesystem error report for type 5 error -117 [ 743.572543][T14396] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2933: inode #11: comm syz.4.3145: corrupted xattr block 95: invalid header [ 743.572716][T14396] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 743.572969][T14396] EXT4-fs warning (device loop4): ext4_evict_inode:288: xattr delete (err -117) [ 743.573067][T14396] EXT4-fs (loop4): 1 orphan inode deleted [ 743.588868][T14396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 743.677449][ T4888] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.714965][T14116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.758397][ T4888] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.875166][T14404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3146'. [ 743.891463][T14384] lo speed is unknown, defaulting to 1000 [ 743.899347][ T4888] bridge_slave_1: left allmulticast mode [ 743.899363][ T4888] bridge_slave_1: left promiscuous mode [ 743.899551][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.900609][ T4888] bridge_slave_0: left allmulticast mode [ 743.900627][ T4888] bridge_slave_0: left promiscuous mode [ 743.900821][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.030799][T14411] md: could not open device unknown-block(1,0). [ 744.155232][T14418] md: could not open device unknown-block(1,1). [ 744.343039][ T4888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.353561][ T4888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.355892][ T4888] bond0 (unregistering): Released all slaves [ 744.357941][ T4888] bond1 (unregistering): Released all slaves [ 744.370423][ T4888] bond2 (unregistering): Released all slaves [ 744.409756][ T4888] tipc: Left network mode [ 744.534941][ T4888] hsr_slave_0: left promiscuous mode [ 744.535228][ T4888] hsr_slave_1: left promiscuous mode [ 744.535860][ T4888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 744.535879][ T4888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 744.537666][ T4888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 744.537678][ T4888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.560077][ T4888] veth1_macvtap: left promiscuous mode [ 744.560142][ T4888] veth0_macvtap: left promiscuous mode [ 744.560302][ T4888] veth1_vlan: left promiscuous mode [ 744.560456][ T4888] veth0_vlan: left promiscuous mode [ 744.857343][ T4888] team0 (unregistering): Port device team_slave_1 removed [ 744.861261][ T4888] team0 (unregistering): Port device team_slave_0 removed [ 745.242893][T14384] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.243440][T14384] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.243498][T14384] bridge_slave_0: entered allmulticast mode [ 745.244132][T14384] bridge_slave_0: entered promiscuous mode [ 745.251489][T14384] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.251525][T14384] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.251649][T14384] bridge_slave_1: entered allmulticast mode [ 745.256658][T14384] bridge_slave_1: entered promiscuous mode [ 745.357294][T14384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.365069][T14384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.400877][T14384] team0: Port device team_slave_0 added [ 745.407642][T14384] team0: Port device team_slave_1 added [ 745.465770][T14384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 745.465788][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.465826][T14384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 745.467913][T14384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 745.467927][T14384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 745.467960][T14384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.633341][T14384] hsr_slave_0: entered promiscuous mode [ 745.633732][T14384] hsr_slave_1: entered promiscuous mode [ 745.634077][T14384] debugfs: 'hsr0' already exists in 'hsr' [ 745.634092][T14384] Cannot create hsr debugfs directory [ 745.731239][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 745.912183][T14490] tipc: Enabling of bearer rejected, already enabled [ 745.946284][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 745.946304][ T29] audit: type=1400 audit(1790284423.237:6102): avc: denied { write } for pid=14493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.155025][ T29] audit: type=1400 audit(1790284423.317:6103): avc: denied { write } for pid=14510 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.206537][T14514] netlink: 'syz.1.3161': attribute type 4 has an invalid length. [ 746.206606][T14514] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3161'. [ 746.432104][T14384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.443843][T14384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 746.446330][T14384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.451936][T14384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 746.478106][T14384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.481843][T14384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 746.482331][T14384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 746.508223][T14384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 746.591480][T14384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.600256][T14526] syzkaller0: entered promiscuous mode [ 746.600271][T14526] syzkaller0: entered allmulticast mode [ 746.615332][T14526] tipc: Started in network mode [ 746.615357][T14526] tipc: Node identity 8ae97d16e7c9, cluster identity 4711 [ 746.615484][T14526] tipc: Enabled bearer , priority 0 [ 746.621607][T14384] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.656223][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.656314][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.687328][ T325] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.687365][ T325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.692996][T14526] tipc: Resetting bearer [ 746.715383][T14525] tipc: Resetting bearer [ 746.717147][T14525] tipc: Disabling bearer [ 746.867593][ T29] audit: type=1400 audit(1790284424.157:6104): avc: denied { write } for pid=14528 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 746.949756][ T29] audit: type=1400 audit(1790284424.237:6105): avc: denied { write } for pid=14545 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.079725][T14550] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.3166'. [ 747.214675][T14384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.309048][ T29] audit: type=1400 audit(1790284424.597:6106): avc: denied { write } for pid=14556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.369819][ T29] audit: type=1400 audit(1790284424.657:6107): avc: denied { write } for pid=14575 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 747.417340][T14578] FAULT_INJECTION: forcing a failure. [ 747.417340][T14578] name failslab, interval 1, probability 0, space 0, times 0 [ 747.417381][T14578] CPU: 0 UID: 0 PID: 14578 Comm: syz.5.3168 Not tainted syzkaller #0 PREEMPT(lazy) [ 747.417421][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 747.417440][T14578] Call Trace: [ 747.417521][T14578] [ 747.417529][T14578] __dump_stack+0x1d/0x30 [ 747.417560][T14578] dump_stack_lvl+0x95/0xd0 [ 747.417590][T14578] dump_stack+0x15/0x1b [ 747.417649][T14578] should_fail_ex+0x262/0x280 [ 747.417681][T14578] should_failslab+0x8c/0xb0 [ 747.417721][T14578] __kvmalloc_node_noprof+0x168/0x5c0 [ 747.417776][T14578] ? io_alloc_cache_init+0x36/0xb0 [ 747.417808][T14578] ? percpu_ref_init+0x9c/0x250 [ 747.417835][T14578] ? io_alloc_cache_init+0x36/0xb0 [ 747.417944][T14578] io_alloc_cache_init+0x36/0xb0 [ 747.417975][T14578] io_ring_ctx_alloc+0x2a6/0x650 [ 747.418085][T14578] io_uring_create+0x4d/0x4f0 [ 747.418122][T14578] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 747.418228][T14578] __x64_sys_io_uring_setup+0x31/0x40 [ 747.418266][T14578] x64_sys_call+0x1fbf/0x2550 [ 747.418351][T14578] do_syscall_64+0x112/0x360 [ 747.418378][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.418541][T14578] RIP: 0033:0x7f9e9381e159 [ 747.418562][T14578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.418584][T14578] RSP: 002b:00007f9e92276fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 747.418662][T14578] RAX: ffffffffffffffda RBX: 0000200000000340 RCX: 00007f9e9381e159 [ 747.418677][T14578] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000021 [ 747.418689][T14578] RBP: 00007f9e938b506b R08: 0000000000000000 R09: 0000000000000000 [ 747.418701][T14578] R10: 0000200000000140 R11: 0000000000000206 R12: 0000200000000040 [ 747.418715][T14578] R13: 0000200000000140 R14: 0000200000000000 R15: 00007ffd5cbed738 [ 747.418820][T14578] [ 747.664218][T14384] veth0_vlan: entered promiscuous mode [ 747.666809][T14384] veth1_vlan: entered promiscuous mode [ 747.686089][T14384] veth0_macvtap: entered promiscuous mode [ 747.687712][T14384] veth1_macvtap: entered promiscuous mode [ 747.720503][T14384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.737003][T14591] loop5: detected capacity change from 0 to 512 [ 747.737759][T14591] EXT4-fs: test_dummy_encryption option not supported [ 747.741433][T14384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.772726][T14591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3171'. [ 747.824277][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.824320][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.824358][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.824405][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.900290][T14586] tipc: Enabling of bearer rejected, already enabled [ 748.694322][ T29] audit: type=1400 audit(1790284425.397:6108): avc: denied { write } for pid=14588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 749.911482][ T29] audit: type=1400 audit(1790284427.197:6109): avc: denied { write } for pid=14614 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 750.283765][T14625] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3176'. [ 750.302312][ T29] audit: type=1400 audit(1790284427.587:6110): avc: denied { write } for pid=14622 comm="syz.5.3176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 750.334680][T14625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3176'. [ 750.343202][T14625] netlink: 'syz.5.3176': attribute type 5 has an invalid length. [ 750.489075][ T29] audit: type=1326 audit(1790284427.777:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14626 comm="syz.0.3177" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9bc3d3e159 code=0x0 [ 750.529282][T14632] ip6gretap0: entered promiscuous mode [ 750.529402][T14632] cgro: entered promiscuous mode [ 750.548905][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3180'. [ 750.647565][T14636] loop5: detected capacity change from 0 to 512 [ 750.670031][T14636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 750.698041][T14636] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.3180: invalid indirect mapped block 83886080 (level 1) [ 750.698082][T14636] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 750.701138][T14636] EXT4-fs (loop5): Remounting filesystem read-only [ 750.701283][T14636] EXT4-fs (loop5): 1 orphan inode deleted [ 750.701302][T14636] EXT4-fs (loop5): 1 truncate cleaned up [ 750.748563][T14636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 750.930804][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.268730][T14651] loop5: detected capacity change from 0 to 512 [ 751.327878][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 751.327908][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 751.328038][T14655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3186'. [ 751.397098][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 751.397177][ T29] audit: type=1400 audit(1790284428.687:6113): avc: denied { connect } for pid=14654 comm="syz.1.3186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 751.406492][T14651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 751.406695][T14651] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 751.487229][T14651] tipc: Enabling of bearer rejected, already enabled [ 751.507166][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.533922][T14665] tmpfs: Bad value for 'mpol' [ 751.533961][ T29] audit: type=1400 audit(1790284428.827:6114): avc: denied { mounton } for pid=14664 comm="syz.5.3188" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 751.672400][T14674] FAULT_INJECTION: forcing a failure. [ 751.672400][T14674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.672518][T14674] CPU: 1 UID: 0 PID: 14674 Comm: syz.3.3192 Not tainted syzkaller #0 PREEMPT(lazy) [ 751.672547][T14674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 751.672562][T14674] Call Trace: [ 751.672568][T14674] [ 751.672575][T14674] __dump_stack+0x1d/0x30 [ 751.672599][T14674] dump_stack_lvl+0x95/0xd0 [ 751.672643][T14674] dump_stack+0x15/0x1b [ 751.672669][T14674] should_fail_ex+0x262/0x280 [ 751.672701][T14674] should_fail+0xb/0x20 [ 751.672727][T14674] should_fail_usercopy+0x1a/0x20 [ 751.672832][T14674] _copy_from_user+0x1c/0xb0 [ 751.672875][T14674] vmemdup_user+0x5e/0xd0 [ 751.672898][T14674] path_setxattrat+0x1b3/0x320 [ 751.672933][T14674] __x64_sys_setxattr+0x6e/0x90 [ 751.672960][T14674] x64_sys_call+0xf6c/0x2550 [ 751.673041][T14674] do_syscall_64+0x112/0x360 [ 751.673068][T14674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.673095][T14674] RIP: 0033:0x7f9e26cfe159 [ 751.673114][T14674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.673175][T14674] RSP: 002b:00007f9e25757028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 751.673199][T14674] RAX: ffffffffffffffda RBX: 00007f9e26f85fa0 RCX: 00007f9e26cfe159 [ 751.673212][T14674] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 0000000000000000 [ 751.673229][T14674] RBP: 00007f9e26d9506b R08: 0000000000000002 R09: 0000000000000000 [ 751.673240][T14674] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000000 [ 751.673271][T14674] R13: 00007f9e26f86038 R14: 00007f9e26f85fa0 R15: 00007ffcd7cb06f8 [ 751.673374][T14674] [ 751.714131][ T29] audit: type=1400 audit(1790284429.007:6115): avc: denied { shutdown } for pid=14673 comm="syz.3.3192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 752.101308][ T29] audit: type=1400 audit(1790284429.387:6116): avc: denied { connect } for pid=14682 comm="syz.4.3196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 752.554110][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 752.554134][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 752.554248][T14704] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3201'. [ 752.562672][T14693] loop5: detected capacity change from 0 to 512 [ 752.654161][ T29] audit: type=1400 audit(1790284429.947:6117): avc: denied { read write } for pid=14707 comm="syz.3.3203" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 752.654196][ T29] audit: type=1400 audit(1790284429.947:6118): avc: denied { open } for pid=14707 comm="syz.3.3203" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 752.657064][ T8379] wacom 0003:056A:003F.0002: hidraw0: USB HID v0.00 Gamepad [syz0] on syz0 [ 752.668351][T14693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 752.668588][T14693] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 752.776853][T14693] tipc: Enabling of bearer rejected, already enabled [ 752.777914][T14710] fido_id[14710]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 752.849942][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 752.921062][ T29] audit: type=1400 audit(1790284430.207:6119): avc: denied { mount } for pid=14718 comm="syz.5.3204" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 752.922469][T14719] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 753.033927][T14723] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 753.484912][ T29] audit: type=1400 audit(1790284430.777:6120): avc: denied { unmount } for pid=13363 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 753.516488][T14729] syzkaller0: entered promiscuous mode [ 753.516506][T14729] syzkaller0: entered allmulticast mode [ 753.518267][T14730] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3208'. [ 753.751571][T14749] FAULT_INJECTION: forcing a failure. [ 753.751571][T14749] name failslab, interval 1, probability 0, space 0, times 0 [ 753.751598][T14749] CPU: 1 UID: 0 PID: 14749 Comm: syz.3.3213 Not tainted syzkaller #0 PREEMPT(lazy) [ 753.751654][T14749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 753.751668][T14749] Call Trace: [ 753.751723][T14749] [ 753.751732][T14749] __dump_stack+0x1d/0x30 [ 753.751758][T14749] dump_stack_lvl+0x95/0xd0 [ 753.751777][T14749] dump_stack+0x15/0x1b [ 753.751794][T14749] should_fail_ex+0x262/0x280 [ 753.751850][T14749] ? proc_thread_self_get_link+0xaf/0x130 [ 753.751869][T14749] should_failslab+0x8c/0xb0 [ 753.751899][T14749] __kmalloc_cache_noprof+0x7a/0x400 [ 753.751939][T14749] ? proc_thread_self_get_link+0xaf/0x130 [ 753.751962][T14749] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 753.751981][T14749] proc_thread_self_get_link+0xaf/0x130 [ 753.751998][T14749] pick_link+0x4b1/0x8e0 [ 753.752070][T14749] step_into_slowpath+0x36a/0x4c0 [ 753.752098][T14749] ? inode_permission+0x1da/0x3b0 [ 753.752125][T14749] link_path_walk+0x947/0xdd0 [ 753.752202][T14749] path_openat+0xe7/0x10d0 [ 753.752288][T14749] do_file_open+0x16c/0x290 [ 753.752347][T14749] do_sys_openat2+0xa0/0x130 [ 753.752377][T14749] __x64_sys_openat+0xf2/0x120 [ 753.752447][T14749] x64_sys_call+0x1f72/0x2550 [ 753.752473][T14749] do_syscall_64+0x112/0x360 [ 753.752498][T14749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.752636][T14749] RIP: 0033:0x7f9e26cbe98e [ 753.752651][T14749] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.752667][T14749] RSP: 002b:00007f9e25756f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.752689][T14749] RAX: ffffffffffffffda RBX: 00007f9e257576c0 RCX: 00007f9e26cbe98e [ 753.752706][T14749] RDX: 0000000000000002 RSI: 00007f9e26d94972 RDI: ffffffffffffff9c [ 753.752732][T14749] RBP: 00007f9e26d9506b R08: 0000000000000000 R09: 0000000000000000 [ 753.752795][T14749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 753.752834][T14749] R13: 00007f9e26f86038 R14: 00007f9e26f85fa0 R15: 00007ffcd7cb06f8 [ 753.752856][T14749] [ 754.091796][T14751] loop3: detected capacity change from 0 to 512 [ 754.139359][T14751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.139719][T14751] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 754.194188][T14751] tipc: Enabling of bearer rejected, already enabled [ 754.217732][T14384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.410131][T14767] loop5: detected capacity change from 0 to 512 [ 754.419315][T14767] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 754.429772][T14767] EXT4-fs error (device loop5): ext4_quota_enable:7256: comm syz.5.3220: Bad quota inum: 67108864, type: 0 [ 754.429933][T14767] loop5: lost filesystem error report for type 5 error -117 [ 754.435891][T14767] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=67108864). Please run e2fsck to fix. [ 754.436166][T14767] EXT4-fs (loop5): mount failed [ 754.617826][T14777] loop5: detected capacity change from 0 to 128 [ 754.637629][T14777] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 754.637664][T14777] FAT-fs (loop5): Filesystem has been set read-only [ 754.942195][T14783] loop5: detected capacity change from 0 to 128 [ 755.006101][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3228'. [ 755.069256][ T29] audit: type=1400 audit(1790284432.357:6121): avc: denied { mounton } for pid=14785 comm="syz.3.3229" path="/21/dev" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 756.099714][T14801] tipc: Enabling of bearer rejected, already enabled [ 756.321246][ T29] audit: type=1326 audit(1790284433.607:6122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 756.404385][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 756.404401][ T29] audit: type=1326 audit(1790284433.697:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.407308][ T29] audit: type=1326 audit(1790284433.697:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.407405][ T29] audit: type=1326 audit(1790284433.697:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.408850][ T29] audit: type=1326 audit(1790284433.697:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.410412][ T29] audit: type=1326 audit(1790284433.697:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.413392][ T29] audit: type=1326 audit(1790284433.707:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.419610][ T29] audit: type=1326 audit(1790284433.707:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.445260][ T29] audit: type=1326 audit(1790284433.737:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.448430][ T29] audit: type=1326 audit(1790284433.737:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 756.472675][ T29] audit: type=1326 audit(1790284433.767:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14813 comm="syz.0.3234" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f9bc3cfe98e code=0x7ffc0000 [ 757.148403][T14824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3235'. [ 757.440992][T14846] loop4: detected capacity change from 0 to 128 [ 759.029283][T14858] loop5: detected capacity change from 0 to 512 [ 759.212351][T14858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.219080][T14858] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 759.353363][T14858] tipc: Enabling of bearer rejected, already enabled [ 759.477500][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.804563][T14871] loop4: detected capacity change from 0 to 512 [ 759.839376][T14889] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12050 sclass=netlink_route_socket pid=14889 comm=syz.0.3253 [ 759.849936][T14871] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: comm syz.4.3248: inode #1792: comm syz.4.3248: iget: illegal inode # [ 759.850055][T14871] loop4: lost filesystem error report for type 5 error -117 [ 759.851261][T14871] EXT4-fs (loop4): Remounting filesystem read-only [ 759.851781][T14871] EXT4-fs (loop4): no journal found [ 759.851822][T14871] EXT4-fs (loop4): can't get journal size [ 759.863309][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 759.863324][ C1] EXT4-fs (loop4): initial error at time 1790284437: ext4_get_journal_inode:5927 [ 759.863403][ C1] EXT4-fs (loop4): last error at time 1790284437: ext4_get_journal_inode:5927 [ 759.879747][T14871] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 759.884237][T14871] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 759.893110][T14871] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 760.041857][T14898] syzkaller0: entered promiscuous mode [ 760.041873][T14898] syzkaller0: entered allmulticast mode [ 760.066563][T14898] tipc: Started in network mode [ 760.066639][T14898] tipc: Node identity b6ff64c7ff3f, cluster identity 4711 [ 760.066671][T14898] tipc: Enabled bearer , priority 0 [ 760.100840][T14897] tipc: Resetting bearer [ 760.126185][T14897] tipc: Disabling bearer [ 760.286712][T14912] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=5131 sclass=netlink_xfrm_socket pid=14912 comm=syz.1.3257 [ 760.524395][T14116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.747637][T14924] ip6gretap0: entered promiscuous mode [ 760.750504][T14924] cgro: entered promiscuous mode [ 760.977206][T14945] netlink: 'syz.4.3266': attribute type 4 has an invalid length. [ 760.977257][T14945] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3266'. [ 761.101050][T14956] syzkaller0: entered promiscuous mode [ 761.101070][T14956] syzkaller0: entered allmulticast mode [ 761.108788][T14956] tipc: Enabled bearer , priority 0 [ 761.127800][T14954] tipc: Resetting bearer [ 761.132289][T14954] tipc: Disabling bearer [ 762.591370][T15000] netlink: 'syz.0.3277': attribute type 4 has an invalid length. [ 762.591410][T15000] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3277'. [ 762.740026][T15007] lo speed is unknown, defaulting to 1000 [ 762.751504][T15011] FAULT_INJECTION: forcing a failure. [ 762.751504][T15011] name failslab, interval 1, probability 0, space 0, times 0 [ 762.751543][T15011] CPU: 1 UID: 0 PID: 15011 Comm: syz.0.3279 Not tainted syzkaller #0 PREEMPT(lazy) [ 762.751564][T15011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 762.751579][T15011] Call Trace: [ 762.751587][T15011] [ 762.751595][T15011] __dump_stack+0x1d/0x30 [ 762.751616][T15011] dump_stack_lvl+0x95/0xd0 [ 762.751713][T15011] dump_stack+0x15/0x1b [ 762.751736][T15011] should_fail_ex+0x262/0x280 [ 762.751765][T15011] ? fib_nl2rule+0x215/0xc20 [ 762.751858][T15011] should_failslab+0x8c/0xb0 [ 762.751885][T15011] __kmalloc_noprof+0xd0/0x4d0 [ 762.751919][T15011] ? fib_nl2rule+0x215/0xc20 [ 762.751959][T15011] fib_nl2rule+0x215/0xc20 [ 762.751992][T15011] fib_newrule+0x2a0/0xa00 [ 762.752092][T15011] ? __memcg_slab_free_hook+0x154/0x340 [ 762.752117][T15011] ? __rcu_read_unlock+0x4e/0x70 [ 762.752155][T15011] ? avc_has_perm_noaudit+0xac/0x160 [ 762.752223][T15011] fib_nl_newrule+0x46/0x60 [ 762.752274][T15011] ? __pfx_fib_nl_newrule+0x10/0x10 [ 762.752338][T15011] rtnetlink_rcv_msg+0x64b/0x720 [ 762.752455][T15011] netlink_rcv_skb+0x11e/0x220 [ 762.752544][T15011] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 762.752582][T15011] rtnetlink_rcv+0x1c/0x30 [ 762.752603][T15011] netlink_unicast+0x5a9/0x680 [ 762.752637][T15011] netlink_sendmsg+0x5be/0x6f0 [ 762.752700][T15011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 762.752762][T15011] ____sys_sendmsg+0x532/0x580 [ 762.752847][T15011] ___sys_sendmsg+0x195/0x1e0 [ 762.752875][T15011] __x64_sys_sendmsg+0xd4/0x160 [ 762.752900][T15011] x64_sys_call+0x22ab/0x2550 [ 762.753002][T15011] do_syscall_64+0x112/0x360 [ 762.753039][T15011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.753075][T15011] RIP: 0033:0x7f9bc3d3e159 [ 762.753088][T15011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.753103][T15011] RSP: 002b:00007f9bc2755028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 762.753212][T15011] RAX: ffffffffffffffda RBX: 00007f9bc3fc6180 RCX: 00007f9bc3d3e159 [ 762.753228][T15011] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000008 [ 762.753243][T15011] RBP: 00007f9bc2755090 R08: 0000000000000000 R09: 0000000000000000 [ 762.753254][T15011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.753325][T15011] R13: 00007f9bc3fc6218 R14: 00007f9bc3fc6180 R15: 00007fff8ae6a3c8 [ 762.753345][T15011] [ 763.024858][T15014] tipc: Enabling of bearer rejected, failed to enable media [ 763.587063][T15031] loop4: detected capacity change from 0 to 128 [ 764.149111][T15041] netlink: 'syz.3.3289': attribute type 4 has an invalid length. [ 764.151291][T15041] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3289'. [ 764.216377][T15037] loop5: detected capacity change from 0 to 512 [ 764.248987][T15037] EXT4-fs: test_dummy_encryption option not supported [ 764.383789][T15037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3288'. [ 764.911587][T15053] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3294'. [ 765.031054][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3296'. [ 765.281145][T15065] ip6gretap0: entered promiscuous mode [ 765.281195][T15065] cgro: entered promiscuous mode [ 766.795562][T15074] loop5: detected capacity change from 0 to 128 [ 767.322650][T15078] loop3: detected capacity change from 0 to 512 [ 767.368677][T15078] EXT4-fs error (device loop3): ext4_get_journal_inode:5927: comm syz.3.3303: inode #1792: comm syz.3.3303: iget: illegal inode # [ 767.368958][T15078] loop3: lost filesystem error report for type 5 error -117 [ 767.369433][T15078] EXT4-fs (loop3): Remounting filesystem read-only [ 767.369623][T15078] EXT4-fs (loop3): no journal found [ 767.369735][T15078] EXT4-fs (loop3): can't get journal size [ 767.386741][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 767.386763][ C1] EXT4-fs (loop3): initial error at time 1790284444: ext4_get_journal_inode:5927 [ 767.386788][ C1] EXT4-fs (loop3): last error at time 1790284444: ext4_get_journal_inode:5927 [ 767.448891][T15078] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 767.451251][T15078] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 767.477737][T15078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 767.678958][T15082] lo speed is unknown, defaulting to 1000 [ 767.739048][T15081] FAULT_INJECTION: forcing a failure. [ 767.739048][T15081] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.739077][T15081] CPU: 1 UID: 0 PID: 15081 Comm: syz.4.3302 Not tainted syzkaller #0 PREEMPT(lazy) [ 767.739112][T15081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 767.739185][T15081] Call Trace: [ 767.739193][T15081] [ 767.739202][T15081] __dump_stack+0x1d/0x30 [ 767.739231][T15081] dump_stack_lvl+0x95/0xd0 [ 767.739326][T15081] dump_stack+0x15/0x1b [ 767.739344][T15081] should_fail_ex+0x262/0x280 [ 767.739416][T15081] should_fail+0xb/0x20 [ 767.739434][T15081] should_fail_usercopy+0x1a/0x20 [ 767.739487][T15081] _copy_to_user+0x20/0xa0 [ 767.739541][T15081] copy_siginfo_to_user+0x22/0xb0 [ 767.739569][T15081] x64_setup_rt_frame+0x2b4/0x4e0 [ 767.739607][T15081] arch_do_signal_or_restart+0x27c/0x480 [ 767.739666][T15081] exit_to_user_mode_loop+0x15d/0x8c0 [ 767.739803][T15081] do_syscall_64+0x212/0x360 [ 767.739875][T15081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.739899][T15081] RIP: 0033:0x7f454249e157 [ 767.739915][T15081] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 767.739938][T15081] RSP: 002b:00007f4540ef7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 767.739961][T15081] RAX: 000000000000002f RBX: 00007f4542725fa0 RCX: 00007f454249e159 [ 767.740054][T15081] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 767.740071][T15081] RBP: 00007f4540ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 767.740086][T15081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.740107][T15081] R13: 00007f4542726038 R14: 00007f4542725fa0 R15: 00007ffdd6c24418 [ 767.740126][T15081] [ 768.398628][T15085] netlink: 'syz.4.3304': attribute type 4 has an invalid length. [ 768.398746][T15085] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3304'. [ 768.440550][T14384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.683477][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 768.683505][ T29] audit: type=1400 audit(1790284445.907:6400): avc: denied { mount } for pid=15097 comm="syz.3.3305" name="/" dev="hugetlbfs" ino=43464 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 768.692496][ T29] audit: type=1326 audit(1790284445.977:6401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.757626][ T29] audit: type=1326 audit(1790284446.047:6403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.758718][ T29] audit: type=1326 audit(1790284445.977:6402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.760067][ T29] audit: type=1326 audit(1790284446.047:6405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.760517][ T29] audit: type=1326 audit(1790284446.047:6404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.762449][ T29] audit: type=1326 audit(1790284446.047:6406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.824852][ T29] audit: type=1326 audit(1790284446.077:6408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.855253][ T29] audit: type=1326 audit(1790284446.047:6407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 768.855303][ T29] audit: type=1326 audit(1790284446.147:6409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15090 comm="syz.1.3310" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f5ceedde159 code=0x7ffc0000 [ 769.162404][T15105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 769.291429][T15107] tipc: Enabling of bearer rejected, already enabled [ 769.321153][T15105] md: could not open device unknown-block(1,0). [ 769.357670][T15109] md: could not open device unknown-block(1,1). [ 769.522231][T15118] netlink: 'syz.3.3316': attribute type 4 has an invalid length. [ 769.522501][T15118] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3316'. [ 769.528839][T15122] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3318'. [ 769.633483][T15120] netlink: 'syz.5.3317': attribute type 4 has an invalid length. [ 769.633602][T15120] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3317'. [ 769.681442][T15126] loop3: detected capacity change from 0 to 512 [ 769.682105][T15126] EXT4-fs: test_dummy_encryption option not supported [ 769.696854][T15126] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3320'. [ 770.016601][T15140] FAULT_INJECTION: forcing a failure. [ 770.016601][T15140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 770.017275][T15140] CPU: 1 UID: 0 PID: 15140 Comm: syz.0.3326 Not tainted syzkaller #0 PREEMPT(lazy) [ 770.017304][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.017319][T15140] Call Trace: [ 770.017328][T15140] [ 770.017337][T15140] __dump_stack+0x1d/0x30 [ 770.017368][T15140] dump_stack_lvl+0x95/0xd0 [ 770.017463][T15140] dump_stack+0x15/0x1b [ 770.017491][T15140] should_fail_ex+0x262/0x280 [ 770.017518][T15140] should_fail_alloc_page+0xf2/0x100 [ 770.017547][T15140] __alloc_frozen_pages_noprof+0x157/0x400 [ 770.017598][T15140] alloc_pages_mpol+0xaf/0x1d0 [ 770.017626][T15140] folio_alloc_noprof+0xa2/0x160 [ 770.017790][T15140] filemap_alloc_folio_noprof+0x92/0x220 [ 770.017811][T15140] filemap_get_pages+0x50e/0x1360 [ 770.017841][T15140] ? folios_put_refs+0x2c0/0x300 [ 770.017880][T15140] filemap_splice_read+0x3cb/0x790 [ 770.017974][T15140] ? __pfx_filemap_splice_read+0x10/0x10 [ 770.018007][T15140] splice_direct_to_actor+0x261/0x680 [ 770.018034][T15140] ? kstrtouint_from_user+0xa8/0xf0 [ 770.018084][T15140] ? __pfx_direct_splice_actor+0x10/0x10 [ 770.018164][T15140] do_splice_direct+0x119/0x1a0 [ 770.018190][T15140] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 770.018337][T15140] do_sendfile+0x37d/0x640 [ 770.018363][T15140] __x64_sys_sendfile64+0x105/0x150 [ 770.018426][T15140] x64_sys_call+0x1015/0x2550 [ 770.018465][T15140] do_syscall_64+0x112/0x360 [ 770.018494][T15140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.018525][T15140] RIP: 0033:0x7f9bc3d3e159 [ 770.018608][T15140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.018630][T15140] RSP: 002b:00007f9bc2797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 770.018659][T15140] RAX: ffffffffffffffda RBX: 00007f9bc3fc5fa0 RCX: 00007f9bc3d3e159 [ 770.018679][T15140] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 770.018708][T15140] RBP: 00007f9bc2797090 R08: 0000000000000000 R09: 0000000000000000 [ 770.018726][T15140] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000001 [ 770.018745][T15140] R13: 00007f9bc3fc6038 R14: 00007f9bc3fc5fa0 R15: 00007fff8ae6a3c8 [ 770.018773][T15140] [ 770.045737][T15136] tipc: Enabling of bearer rejected, already enabled [ 770.513758][T15145] loop5: detected capacity change from 0 to 8192 [ 770.692301][T15145] FAULT_INJECTION: forcing a failure. [ 770.692301][T15145] name failslab, interval 1, probability 0, space 0, times 0 [ 770.692336][T15145] CPU: 0 UID: 0 PID: 15145 Comm: syz.5.3327 Not tainted syzkaller #0 PREEMPT(lazy) [ 770.692401][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 770.692419][T15145] Call Trace: [ 770.692428][T15145] [ 770.692438][T15145] __dump_stack+0x1d/0x30 [ 770.692516][T15145] dump_stack_lvl+0x95/0xd0 [ 770.692539][T15145] dump_stack+0x15/0x1b [ 770.692638][T15145] should_fail_ex+0x262/0x280 [ 770.692662][T15145] ? __alloc_skb+0x2e0/0x6f0 [ 770.692694][T15145] should_failslab+0x8c/0xb0 [ 770.692731][T15145] kmem_cache_alloc_node_noprof+0x82/0x400 [ 770.692875][T15145] ? __alloc_skb+0x2e0/0x6f0 [ 770.692955][T15145] ? _copy_to_iter+0x1c0/0xea0 [ 770.692989][T15145] __alloc_skb+0x2e0/0x6f0 [ 770.693025][T15145] ? __alloc_skb+0x209/0x6f0 [ 770.693129][T15145] netlink_dump+0x10d/0x870 [ 770.693231][T15145] netlink_recvmsg+0x420/0x550 [ 770.693273][T15145] ? __pfx_netlink_recvmsg+0x10/0x10 [ 770.693305][T15145] sock_recvmsg_nosec+0xc2/0xf0 [ 770.693397][T15145] ____sys_recvmsg+0x26f/0x280 [ 770.693443][T15145] ___sys_recvmsg+0x11f/0x3a0 [ 770.693498][T15145] do_recvmmsg+0x1e5/0x560 [ 770.693532][T15145] ? fput+0x91/0xc0 [ 770.693568][T15145] __x64_sys_recvmmsg+0xe5/0x170 [ 770.693604][T15145] x64_sys_call+0x77f/0x2550 [ 770.693675][T15145] do_syscall_64+0x112/0x360 [ 770.693757][T15145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.693778][T15145] RIP: 0033:0x7f9e9381e159 [ 770.693865][T15145] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.693938][T15145] RSP: 002b:00007f9e92277028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 770.694022][T15145] RAX: ffffffffffffffda RBX: 00007f9e93aa5fa0 RCX: 00007f9e9381e159 [ 770.694039][T15145] RDX: 0000000000000003 RSI: 0000200000002780 RDI: 0000000000000004 [ 770.694055][T15145] RBP: 00007f9e92277090 R08: 0000000000000000 R09: 0000000000000000 [ 770.694072][T15145] R10: 0000000000000120 R11: 0000000000000246 R12: 0000000000000001 [ 770.694084][T15145] R13: 00007f9e93aa6038 R14: 00007f9e93aa5fa0 R15: 00007ffd5cbed738 [ 770.694102][T15145] [ 770.961356][T15156] loop4: detected capacity change from 0 to 512 [ 770.970386][T15156] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 770.979621][T15156] EXT4-fs error (device loop4): ext4_quota_enable:7256: comm syz.4.3330: Bad quota inum: 67108864, type: 0 [ 770.979693][T15156] loop4: lost filesystem error report for type 5 error -117 [ 770.982737][T15156] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=67108864). Please run e2fsck to fix. [ 770.983000][T15156] EXT4-fs (loop4): mount failed [ 771.365254][T15169] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3336'. [ 771.388041][T15171] netlink: 'syz.1.3337': attribute type 4 has an invalid length. [ 771.390636][T15171] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3337'. [ 771.544234][T15174] tipc: Enabling of bearer rejected, already enabled [ 772.083200][T15190] loop3: detected capacity change from 0 to 512 [ 772.102719][T15183] netlink: 'syz.1.3341': attribute type 4 has an invalid length. [ 772.102960][T15183] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3341'. [ 772.121498][T15190] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 772.133797][T15193] loop4: detected capacity change from 0 to 512 [ 772.134160][T15193] EXT4-fs: Ignoring removed nobh option [ 772.159050][T15190] EXT4-fs error (device loop3): ext4_quota_enable:7256: comm syz.3.3345: Bad quota inum: 67108864, type: 0 [ 772.159082][T15190] loop3: lost filesystem error report for type 5 error -117 [ 772.160465][T15193] EXT4-fs (loop4): 1 truncate cleaned up [ 772.160914][T15193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 772.161455][T15190] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-117, ino=67108864). Please run e2fsck to fix. [ 772.161650][T15190] EXT4-fs (loop3): mount failed [ 772.229241][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3346'. [ 772.337411][T14116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 772.360820][T15205] netlink: 'syz.1.3348': attribute type 4 has an invalid length. [ 772.360968][T15205] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3348'. [ 772.437347][T15208] loop4: detected capacity change from 0 to 512 [ 772.440071][T15211] Cannot find set identified by id 0 to match [ 772.562637][T15208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 772.577436][T15208] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 772.691445][T15208] tipc: Enabling of bearer rejected, already enabled [ 772.970539][T14116] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 773.025583][T15225] FAULT_INJECTION: forcing a failure. [ 773.025583][T15225] name failslab, interval 1, probability 0, space 0, times 0 [ 773.025676][T15225] CPU: 1 UID: 0 PID: 15225 Comm: syz.1.3354 Not tainted syzkaller #0 PREEMPT(lazy) [ 773.025845][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 773.025863][T15225] Call Trace: [ 773.025872][T15225] [ 773.025883][T15225] __dump_stack+0x1d/0x30 [ 773.025919][T15225] dump_stack_lvl+0x95/0xd0 [ 773.026013][T15225] dump_stack+0x15/0x1b [ 773.026036][T15225] should_fail_ex+0x262/0x280 [ 773.026063][T15225] ? __alloc_skb+0x2e0/0x6f0 [ 773.026108][T15225] should_failslab+0x8c/0xb0 [ 773.026206][T15225] kmem_cache_alloc_node_noprof+0x82/0x400 [ 773.026250][T15225] ? preempt_schedule_irq+0x2c/0x50 [ 773.026278][T15225] ? raw_irqentry_exit_cond_resched+0x49/0x60 [ 773.026313][T15225] ? __alloc_skb+0x2e0/0x6f0 [ 773.026416][T15225] ? irqentry_exit+0x7d/0x610 [ 773.026467][T15225] __alloc_skb+0x2e0/0x6f0 [ 773.026501][T15225] ? __alloc_skb+0x209/0x6f0 [ 773.026568][T15225] alloc_skb_with_frags+0x7e/0x3d0 [ 773.026630][T15225] ? __rcu_read_unlock+0x4e/0x70 [ 773.026674][T15225] ? avc_has_perm_noaudit+0xac/0x160 [ 773.026700][T15225] ? should_fail_ex+0xdb/0x280 [ 773.026748][T15225] sock_alloc_send_pskb+0x44d/0x500 [ 773.026780][T15225] tun_get_user+0x96c/0x2870 [ 773.026880][T15225] ? ref_tracker_alloc+0x1eb/0x2f0 [ 773.026914][T15225] tun_chr_write_iter+0x15a/0x210 [ 773.026951][T15225] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 773.027042][T15225] vfs_write+0x57f/0x9a0 [ 773.027101][T15225] ksys_write+0xdc/0x1a0 [ 773.027138][T15225] __x64_sys_write+0x40/0x50 [ 773.027176][T15225] x64_sys_call+0x154e/0x2550 [ 773.027369][T15225] do_syscall_64+0x112/0x360 [ 773.027395][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.027424][T15225] RIP: 0033:0x7f5ceedde159 [ 773.027458][T15225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.027475][T15225] RSP: 002b:00007f5ced837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.027516][T15225] RAX: ffffffffffffffda RBX: 00007f5cef065fa0 RCX: 00007f5ceedde159 [ 773.027554][T15225] RDX: 000000000000fdef RSI: 0000200000000240 RDI: 0000000000000003 [ 773.027573][T15225] RBP: 00007f5ced837090 R08: 0000000000000000 R09: 0000000000000000 [ 773.027592][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.027610][T15225] R13: 00007f5cef066038 R14: 00007f5cef065fa0 R15: 00007ffe7f8fc008 [ 773.027700][T15225] [ 773.358739][T15226] lo speed is unknown, defaulting to 1000 [ 773.567436][T15241] netlink: 'syz.5.3361': attribute type 4 has an invalid length. [ 773.567581][T15241] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3361'. [ 774.171971][T15246] loop3: detected capacity change from 0 to 512 [ 774.196082][T15247] loop4: detected capacity change from 0 to 512 [ 774.232644][T15246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.232759][T15246] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 774.273387][T15247] EXT4-fs error (device loop4): ext4_get_journal_inode:5927: comm syz.4.3363: inode #1792: comm syz.4.3363: iget: illegal inode # [ 774.273421][T15247] loop4: lost filesystem error report for type 5 error -117 [ 774.278847][T15247] EXT4-fs (loop4): Remounting filesystem read-only [ 774.283299][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 774.283315][ C0] EXT4-fs (loop4): initial error at time 1790284451: ext4_get_journal_inode:5927 [ 774.283337][ C0] EXT4-fs (loop4): last error at time 1790284451: ext4_get_journal_inode:5927 [ 774.289196][T15247] EXT4-fs (loop4): no journal found [ 774.289274][T15247] EXT4-fs (loop4): can't get journal size [ 774.305539][T15247] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 774.312491][T15247] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 774.320512][T15247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.464683][T15258] tipc: Enabling of bearer rejected, already enabled [ 774.535784][T15263] loop5: detected capacity change from 0 to 128 [ 774.623241][ T71] IPVS: starting estimator thread 0... [ 774.723828][T15267] IPVS: using max 2736 ests per chain, 136800 per kthread [ 774.885666][T15247] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.957522][T14384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.074878][T15273] loop5: detected capacity change from 0 to 512 [ 775.077055][T15273] EXT4-fs: test_dummy_encryption option not supported [ 775.101560][T15275] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 775.112462][T15273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3372'. [ 775.173037][T15275] md: could not open device unknown-block(1,0). [ 775.262283][T15278] md: could not open device unknown-block(1,1). [ 775.465971][T15288] FAULT_INJECTION: forcing a failure. [ 775.465971][T15288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 775.466007][T15288] CPU: 1 UID: 0 PID: 15288 Comm: syz.0.3376 Not tainted syzkaller #0 PREEMPT(lazy) [ 775.466040][T15288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 775.466058][T15288] Call Trace: [ 775.466067][T15288] [ 775.466076][T15288] __dump_stack+0x1d/0x30 [ 775.466144][T15288] dump_stack_lvl+0x95/0xd0 [ 775.466171][T15288] dump_stack+0x15/0x1b [ 775.466201][T15288] should_fail_ex+0x262/0x280 [ 775.466271][T15288] should_fail+0xb/0x20 [ 775.466298][T15288] should_fail_usercopy+0x1a/0x20 [ 775.466324][T15288] _copy_from_user+0x1c/0xb0 [ 775.466429][T15288] copy_from_bpfptr+0x5c/0x90 [ 775.466460][T15288] bpf_prog_load+0x84c/0x1060 [ 775.466510][T15288] ? avc_has_perm_noaudit+0xac/0x160 [ 775.466547][T15288] ? vfs_write+0x820/0x9a0 [ 775.466588][T15288] __sys_bpf+0xbae/0xc30 [ 775.466649][T15288] ? vfs_write+0x820/0x9a0 [ 775.466682][T15288] ? vfs_write+0x820/0x9a0 [ 775.466791][T15288] __x64_sys_bpf+0x69/0x80 [ 775.466814][T15288] x64_sys_call+0xf26/0x2550 [ 775.466844][T15288] do_syscall_64+0x112/0x360 [ 775.466863][T15288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.466889][T15288] RIP: 0033:0x7f9bc3d3e159 [ 775.466920][T15288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.466992][T15288] RSP: 002b:00007f9bc2797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 775.467015][T15288] RAX: ffffffffffffffda RBX: 00007f9bc3fc5fa0 RCX: 00007f9bc3d3e159 [ 775.467031][T15288] RDX: 0000000000000094 RSI: 0000200000000140 RDI: 0000000000000005 [ 775.467046][T15288] RBP: 00007f9bc2797090 R08: 0000000000000000 R09: 0000000000000000 [ 775.467133][T15288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.467148][T15288] R13: 00007f9bc3fc6038 R14: 00007f9bc3fc5fa0 R15: 00007fff8ae6a3c8 [ 775.467171][T15288] [ 777.210158][T15298] tipc: Started in network mode [ 777.210236][T15298] tipc: Node identity 7f000001, cluster identity 4711 [ 777.210301][T15298] tipc: New replicast peer: 127.0.0.2 [ 777.210451][T15298] tipc: Enabled bearer , priority 10 [ 777.691089][T15300] loop5: detected capacity change from 0 to 128 [ 777.984951][T15303] syzkaller0: entered promiscuous mode [ 777.984970][T15303] syzkaller0: entered allmulticast mode [ 778.018465][T15303] tipc: Enabled bearer , priority 0 [ 778.044904][T15303] tipc: Resetting bearer [ 778.252382][ T3406] tipc: Node number set to 2130706433 [ 778.602939][T15301] tipc: Resetting bearer [ 778.617096][T15301] tipc: Disabling bearer [ 778.710713][T15317] 9p: Bad value for 'rfdno' [ 778.895490][T15327] FAULT_INJECTION: forcing a failure. [ 778.895490][T15327] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 778.895541][T15327] CPU: 0 UID: 0 PID: 15327 Comm: syz.4.3388 Not tainted syzkaller #0 PREEMPT(lazy) [ 778.895569][T15327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 778.895585][T15327] Call Trace: [ 778.895595][T15327] [ 778.895606][T15327] __dump_stack+0x1d/0x30 [ 778.895659][T15327] dump_stack_lvl+0x95/0xd0 [ 778.895682][T15327] dump_stack+0x15/0x1b [ 778.895706][T15327] should_fail_ex+0x262/0x280 [ 778.895741][T15327] should_fail+0xb/0x20 [ 778.895819][T15327] should_fail_usercopy+0x1a/0x20 [ 778.895856][T15327] _copy_from_user+0x1c/0xb0 [ 778.895891][T15327] copy_from_bpfptr+0x5c/0x90 [ 778.895919][T15327] bpf_prog_load+0x84c/0x1060 [ 778.896026][T15327] ? avc_has_perm_noaudit+0xac/0x160 [ 778.896060][T15327] __sys_bpf+0xbae/0xc30 [ 778.896102][T15327] __x64_sys_bpf+0x69/0x80 [ 778.896132][T15327] x64_sys_call+0xf26/0x2550 [ 778.896218][T15327] do_syscall_64+0x112/0x360 [ 778.896331][T15327] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 778.896388][T15327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.896439][T15327] RIP: 0033:0x7f454249e159 [ 778.896456][T15327] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.896473][T15327] RSP: 002b:00007f4540ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 778.896490][T15327] RAX: ffffffffffffffda RBX: 00007f4542725fa0 RCX: 00007f454249e159 [ 778.896502][T15327] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 778.896514][T15327] RBP: 00007f4540ef7090 R08: 0000000000000000 R09: 0000000000000000 [ 778.896526][T15327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 778.896542][T15327] R13: 00007f4542726038 R14: 00007f4542725fa0 R15: 00007ffdd6c24418 [ 778.896565][T15327] [ 779.306150][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 779.306166][ T29] audit: type=1400 audit(1790284456.597:6501): avc: denied { read write } for pid=15335 comm="syz.0.3390" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 779.306200][ T29] audit: type=1400 audit(1790284456.597:6502): avc: denied { open } for pid=15335 comm="syz.0.3390" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 779.387615][T15340] loop3: detected capacity change from 0 to 512 [ 779.390566][T15340] EXT4-fs (loop3): inodes count not valid: 4 vs 32 [ 779.693558][T15349] loop3: detected capacity change from 0 to 128 [ 780.004088][T15353] random: crng reseeded on system resumption [ 780.577981][T15353] FAULT_INJECTION: forcing a failure. [ 780.577981][T15353] name failslab, interval 1, probability 0, space 0, times 0 [ 780.578006][T15353] CPU: 1 UID: 0 PID: 15353 Comm: syz.5.3395 Not tainted syzkaller #0 PREEMPT(lazy) [ 780.578034][T15353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 780.578103][T15353] Call Trace: [ 780.578155][T15353] [ 780.578164][T15353] __dump_stack+0x1d/0x30 [ 780.578190][T15353] dump_stack_lvl+0x95/0xd0 [ 780.578213][T15353] dump_stack+0x15/0x1b [ 780.578254][T15353] should_fail_ex+0x262/0x280 [ 780.578277][T15353] ? memory_bm_create+0x1b5/0x1440 [ 780.578295][T15353] should_failslab+0x8c/0xb0 [ 780.578385][T15353] __kmalloc_cache_noprof+0x7a/0x400 [ 780.578419][T15353] ? memory_bm_create+0x1b5/0x1440 [ 780.578442][T15353] ? __pfx_fw_name_devm_release+0x10/0x10 [ 780.578572][T15353] memory_bm_create+0x1b5/0x1440 [ 780.578594][T15353] ? create_basic_memory_bitmaps+0x8f/0x8e0 [ 780.578613][T15353] ? __kmalloc_cache_noprof+0x331/0x400 [ 780.578686][T15353] ? create_basic_memory_bitmaps+0x8f/0x8e0 [ 780.578707][T15353] create_basic_memory_bitmaps+0xa6/0x8e0 [ 780.578736][T15353] snapshot_open+0x1b4/0x280 [ 780.578764][T15353] ? __pfx_snapshot_open+0x10/0x10 [ 780.578845][T15353] misc_open+0x1df/0x220 [ 780.578871][T15353] chrdev_open+0x2eb/0x3a0 [ 780.578963][T15353] do_dentry_open+0x49f/0xa60 [ 780.578995][T15353] ? __pfx_chrdev_open+0x10/0x10 [ 780.579158][T15353] vfs_open+0x37/0x1e0 [ 780.579182][T15353] path_openat+0xc01/0x10d0 [ 780.579208][T15353] do_file_open+0x16c/0x290 [ 780.579293][T15353] do_sys_openat2+0xa0/0x130 [ 780.579393][T15353] __x64_sys_openat+0xf2/0x120 [ 780.579414][T15353] x64_sys_call+0x1f72/0x2550 [ 780.579505][T15353] do_syscall_64+0x112/0x360 [ 780.579570][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.579597][T15353] RIP: 0033:0x7f9e9381e159 [ 780.579615][T15353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.579713][T15353] RSP: 002b:00007f9e92235028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 780.579773][T15353] RAX: ffffffffffffffda RBX: 00007f9e93aa6180 RCX: 00007f9e9381e159 [ 780.579790][T15353] RDX: 0000000000042101 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 780.579806][T15353] RBP: 00007f9e92235090 R08: 0000000000000000 R09: 0000000000000000 [ 780.579819][T15353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.579830][T15353] R13: 00007f9e93aa6218 R14: 00007f9e93aa6180 R15: 00007ffd5cbed738 [ 780.579938][T15353] [ 781.683965][T15348] tipc: New replicast peer: 127.0.0.2 [ 781.687009][T15348] tipc: Enabled bearer , priority 10 [ 781.889534][T15366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3399'. [ 782.053137][T15369] 9p: Bad value for 'rfdno' [ 782.813430][ T3406] tipc: Node number set to 1237345479 [ 783.273160][T15387] loop4: detected capacity change from 0 to 128 [ 783.601316][ T29] audit: type=1400 audit(1790284460.887:6503): avc: denied { append } for pid=15396 comm="syz.4.3409" name="uprobe_events" dev="tracefs" ino=1074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 783.757268][T15397] netlink: 'syz.4.3409': attribute type 30 has an invalid length. [ 783.852095][T15402] ip6gretap0: entered promiscuous mode [ 783.852161][T15402] cgro: entered promiscuous mode [ 784.002052][ T29] audit: type=1326 audit(1790284461.287:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.002217][ T29] audit: type=1326 audit(1790284461.287:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.002294][ T29] audit: type=1326 audit(1790284461.287:6506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.002609][ T29] audit: type=1326 audit(1790284461.287:6507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.002674][ T29] audit: type=1326 audit(1790284461.287:6508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.002735][ T29] audit: type=1326 audit(1790284461.287:6509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.021077][ T29] audit: type=1326 audit(1790284461.287:6510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15405 comm="syz.0.3412" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc3d3e159 code=0x7ffc0000 [ 784.314760][T15414] 9p: Unknown uid 00000000004294967295 [ 784.399286][T15417] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 784.464333][T15417] md: could not open device unknown-block(1,0). [ 784.522473][T15426] 9p: Bad value for 'rfdno' [ 784.574330][T15423] md: could not open device unknown-block(1,1). [ 784.726652][T15430] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 784.885602][T15430] md: could not open device unknown-block(1,0). [ 784.948660][T15434] md: could not open device unknown-block(1,1). [ 784.948846][T15441] usb usb7: usbfs: process 15441 (syz.4.3421) did not claim interface 63 before use [ 785.042240][T15445] ip6gretap0: entered promiscuous mode [ 785.042295][T15445] cgro: entered promiscuous mode [ 788.599848][T15471] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 788.694037][T15471] md: could not open device unknown-block(1,0). [ 788.746331][T15473] md: could not open device unknown-block(1,1). [ 788.939024][T15487] 9p: Bad value for 'rfdno' [ 789.304416][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 789.304491][ T29] audit: type=1400 audit(1790284466.597:6627): avc: denied { read } for pid=15491 comm="syz.1.3439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 789.320081][T15492] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3439'. [ 791.738947][T15501] loop5: detected capacity change from 0 to 512 [ 791.739348][T15501] EXT4-fs: Ignoring removed mblk_io_submit option [ 791.758095][T15499] block device autoloading is deprecated and will be removed. [ 791.781981][T15499] block device autoloading is deprecated and will be removed. [ 791.782277][T15501] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.3442: corrupted in-inode xattr: e_value size too large [ 791.782321][T15501] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 791.782554][T15501] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.3442: couldn't read orphan inode 15 (err -117) [ 791.782582][T15501] loop5: lost filesystem error report for type 5 error -117 [ 791.782995][T15501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 791.831646][T15497] loop3: detected capacity change from 0 to 1024 [ 791.837110][T15497] EXT4-fs: Ignoring removed i_version option [ 791.839793][T15509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3440'. [ 791.862007][T15497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 791.875322][ T29] audit: type=1400 audit(1790284469.167:6628): avc: denied { map } for pid=15500 comm="syz.4.3444" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 791.886226][T15497] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 791.903627][T15497] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 791.903841][T15497] EXT4-fs (loop3): orphan cleanup on readonly fs [ 791.906412][T15497] EXT4-fs error (device loop3): ext4_free_blocks:6719: comm syz.3.3443: Freeing blocks not in datazone - block = 0, count = 4096 [ 791.906520][T15497] loop3: lost filesystem error report for type 5 error -117 [ 791.913529][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 791.913577][ C0] EXT4-fs (loop3): initial error at time 1790284469: ext4_free_blocks:6719 [ 791.913639][ C0] EXT4-fs (loop3): last error at time 1790284469: ext4_free_blocks:6719 [ 791.915096][T15497] EXT4-fs (loop3): Remounting filesystem read-only [ 791.915177][T15497] EXT4-fs (loop3): 1 orphan inode deleted [ 791.929668][T15497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 792.030606][T15498] lo speed is unknown, defaulting to 1000 [ 792.072739][T14384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.099523][ T29] audit: type=1400 audit(1790284469.387:6629): avc: denied { create } for pid=15516 comm="syz.0.3446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 792.100699][ T29] audit: type=1400 audit(1790284469.387:6630): avc: denied { bind } for pid=15516 comm="syz.0.3446" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 792.100727][ T29] audit: type=1400 audit(1790284469.387:6631): avc: denied { name_bind } for pid=15516 comm="syz.0.3446" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 792.100838][ T29] audit: type=1400 audit(1790284469.387:6632): avc: denied { node_bind } for pid=15516 comm="syz.0.3446" saddr=2001::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 792.260133][T15521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 792.758681][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 792.842752][ T29] audit: type=1400 audit(1790284470.127:6633): avc: denied { unmount } for pid=12644 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 792.877615][T15524] md: could not open device unknown-block(1,0). [ 792.946179][T15525] md: could not open device unknown-block(1,1). [ 793.047990][T15539] 9p: Bad value for 'rfdno' [ 793.291416][ T71] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.377178][ T71] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.546367][ T71] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.699994][ T71] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.787289][ T29] audit: type=1326 audit(1790284471.077:6634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454249e159 code=0x7ffc0000 [ 793.790887][ T29] audit: type=1326 audit(1790284471.077:6635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454249e159 code=0x7ffc0000 [ 793.800460][ T29] audit: type=1326 audit(1790284471.087:6636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15558 comm="syz.4.3459" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454249e159 code=0x7ffc0000 [ 793.963010][T15555] loop5: detected capacity change from 0 to 512 [ 794.067875][ T71] bond0 (unregistering): Released all slaves [ 794.098910][T15547] lo speed is unknown, defaulting to 1000 [ 794.117151][ T71] tipc: Disabling bearer [ 794.117170][ T71] tipc: Left network mode [ 794.162717][T15555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.176627][T15555] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.283094][T15580] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 794.294582][T15555] tipc: Enabling of bearer rejected, already enabled [ 794.301846][ T71] hsr_slave_0: left promiscuous mode [ 794.302221][ T71] hsr_slave_1: left promiscuous mode [ 794.330462][ T71] veth1_macvtap: left promiscuous mode [ 794.330490][ T71] veth0_macvtap: left promiscuous mode [ 794.330645][ T71] veth1_vlan: left promiscuous mode [ 794.330743][ T71] veth0_vlan: left promiscuous mode [ 794.357700][T13363] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.441863][T15580] md: could not open device unknown-block(1,1). [ 794.532749][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 794.532839][ T29] audit: type=1400 audit(1790284471.817:6645): avc: denied { write } for pid=15577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.663027][ T29] audit: type=1400 audit(1790284471.947:6646): avc: denied { write } for pid=15609 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.468662][T15653] smc: removing ib device syz0 [ 795.490999][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 796.784605][T15697] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 797.135514][T15547] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.135547][T15547] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.135717][T15547] bridge_slave_0: entered allmulticast mode [ 797.137837][T15547] bridge_slave_0: entered promiscuous mode [ 797.188912][T15547] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.188942][T15547] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.189380][T15547] bridge_slave_1: entered allmulticast mode [ 797.192619][T15547] bridge_slave_1: entered promiscuous mode [ 797.220186][T15707] Cannot find set identified by id 0 to match [ 797.333377][ T29] audit: type=1400 audit(1790284474.587:6647): avc: denied { write } for pid=15685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.533142][T15547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.571514][T15547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.695169][ T29] audit: type=1400 audit(1790284474.987:6648): avc: denied { write } for pid=15717 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 797.787558][T15547] team0: Port device team_slave_0 added [ 797.788363][T15547] team0: Port device team_slave_1 added [ 797.797708][T15547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.797720][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.797749][T15547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.798357][T15547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.798370][T15547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.798404][T15547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.950531][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 797.967073][T15725] netlink: 'syz.4.3478': attribute type 4 has an invalid length. [ 797.967133][T15725] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3478'. [ 797.996912][ T29] audit: type=1326 audit(1790284475.287:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 797.996949][ T29] audit: type=1326 audit(1790284475.287:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 797.997025][ T29] audit: type=1326 audit(1790284475.287:6651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 797.997132][ T29] audit: type=1326 audit(1790284475.287:6652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 797.997314][ T29] audit: type=1326 audit(1790284475.287:6653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 797.997677][ T29] audit: type=1326 audit(1790284475.287:6654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15721 comm="syz.5.3477" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e9381e159 code=0x7ffc0000 [ 798.064838][T15547] hsr_slave_0: entered promiscuous mode [ 798.065946][T15547] hsr_slave_1: entered promiscuous mode [ 798.101527][T15547] debugfs: 'hsr0' already exists in 'hsr' [ 798.101577][T15547] Cannot create hsr debugfs directory [ 798.214935][T15730] loop3: detected capacity change from 0 to 512 [ 798.223089][T15730] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 798.248732][T15730] EXT4-fs (loop3): 1 truncate cleaned up [ 798.249156][T15730] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 798.309299][T15730] device-mapper: ioctl: name not supplied when creating device [ 798.361013][T15740] loop5: detected capacity change from 0 to 128 [ 798.397677][T15547] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 798.400078][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.400693][T15547] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 798.420310][T15740] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 798.420362][T15740] vhci_hcd vhci_hcd.2: default hub control req: 0006 v000d i0000 l0 [ 798.440114][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.440866][T15547] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 798.458653][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.460838][T15547] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 798.738050][T15547] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.762459][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 798.800402][T15547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.859746][T15547] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.893160][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.893199][T15635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.908679][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.908756][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.218930][T15772] Cannot find set identified by id 0 to match [ 799.320355][T15780] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 799.411942][T14384] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 799.633543][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 799.633558][ T29] audit: type=1400 audit(1790284476.907:6743): avc: denied { write } for pid=15793 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 799.691480][T15780] md: could not open device unknown-block(1,1). [ 799.721799][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 799.734784][T14384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.736381][T15651] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.834265][T15651] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.863148][T15547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.884205][T15651] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.945734][T15651] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.042240][T15651] bridge_slave_1: left allmulticast mode [ 800.042262][T15651] bridge_slave_1: left promiscuous mode [ 800.042425][T15651] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.064516][T15651] bridge_slave_0: left allmulticast mode [ 800.064537][T15651] bridge_slave_0: left promiscuous mode [ 800.064621][T15651] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.166144][T15651] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.172991][T15651] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 800.174803][T15651] bond0 (unregistering): Released all slaves [ 800.235688][T15651] hsr_slave_0: left promiscuous mode [ 800.237126][T15651] hsr_slave_1: left promiscuous mode [ 800.238309][T15651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 800.238339][T15651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 800.239204][T15651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 800.239220][T15651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 800.252470][T15651] veth1_macvtap: left promiscuous mode [ 800.252523][T15651] veth0_macvtap: left promiscuous mode [ 800.252636][T15651] veth1_vlan: left promiscuous mode [ 800.252750][T15651] veth0_vlan: left promiscuous mode [ 800.373446][T15651] team0 (unregistering): Port device team_slave_1 removed [ 800.376288][T15651] team0 (unregistering): Port device team_slave_0 removed [ 800.533488][T15547] veth0_vlan: entered promiscuous mode [ 800.550783][T15547] veth1_vlan: entered promiscuous mode [ 800.587141][T15547] veth0_macvtap: entered promiscuous mode [ 800.590863][T15547] veth1_macvtap: entered promiscuous mode [ 800.623635][T15547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.641541][T15547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 800.642394][ T29] audit: type=1400 audit(1790284477.927:6744): avc: denied { write } for pid=15831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.697594][ T29] audit: type=1400 audit(1790284477.987:6745): avc: denied { write } for pid=15847 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.738612][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 800.767942][T15813] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.767967][T15813] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.768044][T15813] bridge_slave_0: entered allmulticast mode [ 800.768668][T15813] bridge_slave_0: entered promiscuous mode [ 800.773629][T15635] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.773959][T15635] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.774055][T15635] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.774157][T15635] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.831055][T15813] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.831088][T15813] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.831191][T15813] bridge_slave_1: entered allmulticast mode [ 800.831716][T15813] bridge_slave_1: entered promiscuous mode [ 800.868697][T15813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.869803][T15813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.905007][T15813] team0: Port device team_slave_0 added [ 800.907419][T15813] team0: Port device team_slave_1 added [ 800.955366][T15813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.955385][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.955426][T15813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.957247][T15813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.957258][T15813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.957281][T15813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.056669][T15813] hsr_slave_0: entered promiscuous mode [ 801.057068][T15813] hsr_slave_1: entered promiscuous mode [ 801.057382][T15813] debugfs: 'hsr0' already exists in 'hsr' [ 801.057396][T15813] Cannot create hsr debugfs directory [ 801.149605][ T29] audit: type=1400 audit(1790284478.437:6746): avc: denied { write } for pid=15856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.151262][T15813] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 801.176985][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.191288][T15813] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 801.193230][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.212766][T15813] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 801.221690][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.226684][T15813] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 801.238223][T15813] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.251931][ T29] audit: type=1400 audit(1790284478.537:6747): avc: denied { write } for pid=15869 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.288337][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 801.359971][T15813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.379399][T15813] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.392031][T15635] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.392060][T15635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.392501][ T29] audit: type=1400 audit(1790284478.677:6748): avc: denied { write } for pid=15878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.402853][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.402995][T15653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.460413][ T29] audit: type=1400 audit(1790284478.747:6749): avc: denied { write } for pid=15889 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.497786][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 801.658723][ T29] audit: type=1400 audit(1790284478.947:6750): avc: denied { write } for pid=15897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.690591][T15813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.733300][ T29] audit: type=1400 audit(1790284479.017:6751): avc: denied { write } for pid=15916 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.786186][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 801.930692][T15813] veth0_vlan: entered promiscuous mode [ 801.933151][T15813] veth1_vlan: entered promiscuous mode [ 801.954335][T15813] veth0_macvtap: entered promiscuous mode [ 801.956150][T15813] veth1_macvtap: entered promiscuous mode [ 801.961322][T15813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.983759][T15813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 802.014134][T15649] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.014604][T15649] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.014660][T15649] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.014777][T15649] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.208458][T15945] loop6: detected capacity change from 0 to 512 [ 802.210319][T15945] EXT4-fs: test_dummy_encryption option not supported [ 802.236509][ T29] audit: type=1400 audit(1790284479.527:6752): avc: denied { watch_reads } for pid=15939 comm="syz.4.3495" path="/71" dev="tmpfs" ino=406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 802.366867][T15954] loop7: detected capacity change from 0 to 128 [ 802.479203][T15955] loop5: detected capacity change from 0 to 512 [ 802.509402][T15956] loop0: detected capacity change from 0 to 512 [ 802.805495][T15956] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.3492: inode #1792: comm syz.0.3492: iget: illegal inode # [ 802.805606][T15956] loop0: lost filesystem error report for type 5 error -117 [ 802.809197][T15956] EXT4-fs (loop0): Remounting filesystem read-only [ 802.809227][T15956] EXT4-fs (loop0): no journal found [ 802.809250][T15956] EXT4-fs (loop0): can't get journal size [ 802.813291][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 802.813312][ C1] EXT4-fs (loop0): initial error at time 1790284480: ext4_get_journal_inode:5927 [ 802.813339][ C1] EXT4-fs (loop0): last error at time 1790284480: ext4_get_journal_inode:5927 [ 802.852681][T15955] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: comm syz.5.3494: inode #1792: comm syz.5.3494: iget: illegal inode # [ 802.852726][T15955] loop5: lost filesystem error report for type 5 error -117 [ 802.859004][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 802.859026][ C1] EXT4-fs (loop5): initial error at time 1790284480: ext4_get_journal_inode:5927 [ 802.859048][ C1] EXT4-fs (loop5): last error at time 1790284480: ext4_get_journal_inode:5927 [ 802.860816][T15956] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 802.879180][T15955] EXT4-fs (loop5): Remounting filesystem read-only [ 802.879210][T15955] EXT4-fs (loop5): no journal found [ 802.879236][T15955] EXT4-fs (loop5): can't get journal size [ 802.880334][T15955] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 802.880809][T15955] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 802.894696][T15956] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 802.933353][T15955] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 802.979665][T15956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.045881][T15956] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.137224][T15955] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.687921][T15976] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 804.818866][T15987] Cannot find set identified by id 0 to match [ 805.064275][T15984] md: could not open device unknown-block(1,1). [ 805.107229][T15997] netlink: 'syz.5.3509': attribute type 4 has an invalid length. [ 805.107243][T15997] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3509'. [ 805.318336][T16004] loop6: detected capacity change from 0 to 128 [ 805.398546][T15999] loop0: detected capacity change from 0 to 512 [ 805.420643][T16001] loop5: detected capacity change from 0 to 512 [ 805.421445][T15993] loop7: detected capacity change from 0 to 512 [ 805.430923][T16001] EXT4-fs error (device loop5): ext4_get_journal_inode:5927: comm syz.5.3511: inode #1792: comm syz.5.3511: iget: illegal inode # [ 805.431055][T16001] loop5: lost filesystem error report for type 5 error -117 [ 805.433201][T15999] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.3510: inode #1792: comm syz.0.3510: iget: illegal inode # [ 805.433268][T15999] loop0: lost filesystem error report for type 5 error -117 [ 805.440666][T16001] EXT4-fs (loop5): Remounting filesystem read-only [ 805.440710][T16001] EXT4-fs (loop5): no journal found [ 805.440738][T16001] EXT4-fs (loop5): can't get journal size [ 805.441113][T15999] EXT4-fs (loop0): Remounting filesystem read-only [ 805.441150][T15999] EXT4-fs (loop0): no journal found [ 805.441182][T15999] EXT4-fs (loop0): can't get journal size [ 805.443303][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 805.443347][ C1] EXT4-fs (loop0): initial error at time 1790284482: ext4_get_journal_inode:5927 [ 805.443419][ C1] EXT4-fs (loop0): last error at time 1790284482: ext4_get_journal_inode:5927 [ 805.443482][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 805.443525][ C1] EXT4-fs (loop5): initial error at time 1790284482: ext4_get_journal_inode:5927 [ 805.443582][ C1] EXT4-fs (loop5): last error at time 1790284482: ext4_get_journal_inode:5927 [ 805.447824][T16001] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 805.452387][T16001] EXT4-fs (loop5): Errors on filesystem, clearing orphan list. [ 805.452601][T15999] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 805.456544][T15999] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 805.460875][T15999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.464293][T16001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.546916][T15993] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.547421][T15993] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 805.775351][T16022] Cannot find set identified by id 0 to match [ 805.849551][T16024] netlink: 'syz.6.3519': attribute type 4 has an invalid length. [ 805.849700][T16024] netlink: 152 bytes leftover after parsing attributes in process `syz.6.3519'. [ 806.074236][T15999] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.492027][T16034] 9p: Bad value for 'rfdno' [ 807.075452][T16001] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.082736][T15813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.192886][T16041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 807.599382][T16041] md: could not open device unknown-block(1,1). [ 807.659231][T16051] loop0: detected capacity change from 0 to 128 [ 808.051536][T16053] loop7: detected capacity change from 0 to 1024 [ 808.081249][T16053] EXT4-fs: Ignoring removed i_version option [ 808.099368][T16053] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 808.099951][T16053] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 808.126547][T16053] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 808.126766][T16053] EXT4-fs (loop7): orphan cleanup on readonly fs [ 808.126848][T16053] EXT4-fs error (device loop7): ext4_free_blocks:6719: comm syz.7.3526: Freeing blocks not in datazone - block = 0, count = 4096 [ 808.126878][T16053] loop7: lost filesystem error report for type 5 error -117 [ 808.127065][T16053] EXT4-fs (loop7): Remounting filesystem read-only [ 808.127092][T16053] EXT4-fs (loop7): 1 orphan inode deleted [ 808.130473][T16053] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.146743][T15813] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.426690][T16067] loop0: detected capacity change from 0 to 1024 [ 808.428740][ T2983] ================================================================== [ 808.428774][ T2983] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 808.428823][ T2983] [ 808.428830][ T2983] write to 0xffff88811ba1a850 of 8 bytes by task 13044 on cpu 0: [ 808.428846][ T2983] dentry_kill+0x139/0x500 [ 808.428870][ T2983] finish_dput+0x16/0x1d0 [ 808.428886][ T2983] dput+0x48/0x50 [ 808.428907][ T2983] lookup_one_qstr_excl+0x156/0x240 [ 808.428936][ T2983] filename_unlinkat+0x149/0x410 [ 808.428968][ T2983] __se_sys_unlink+0x2b/0xe0 [ 808.429003][ T2983] __x64_sys_unlink+0x1f/0x30 [ 808.429040][ T2983] x64_sys_call+0x18ee/0x2550 [ 808.429071][ T2983] do_syscall_64+0x112/0x360 [ 808.429089][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.429107][ T2983] [ 808.429112][ T2983] read to 0xffff88811ba1a850 of 8 bytes by task 2983 on cpu 1: [ 808.429125][ T2983] fast_dput+0x64/0x300 [ 808.429145][ T2983] dput+0x1f/0x50 [ 808.429161][ T2983] filename_unlinkat+0x217/0x410 [ 808.429192][ T2983] __se_sys_unlink+0x2b/0xe0 [ 808.429229][ T2983] __x64_sys_unlink+0x1f/0x30 [ 808.429265][ T2983] x64_sys_call+0x18ee/0x2550 [ 808.429291][ T2983] do_syscall_64+0x112/0x360 [ 808.429310][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.429333][ T2983] [ 808.429338][ T2983] value changed: 0xffff888237b60658 -> 0x0000000000000000 [ 808.429351][ T2983] [ 808.429356][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 808.429368][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 808.429391][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 808.429402][ T2983] ================================================================== [ 808.497857][T16067] EXT4-fs: Ignoring removed i_version option [ 808.502400][T16067] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 808.508263][T16067] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 808.516736][T16067] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 808.516937][T16067] EXT4-fs (loop0): orphan cleanup on readonly fs [ 808.519372][T16067] EXT4-fs error (device loop0): ext4_free_blocks:6719: comm syz.0.3531: Freeing blocks not in datazone - block = 0, count = 4096 [ 808.519445][T16067] loop0: lost filesystem error report for type 5 error -117 [ 808.521773][T16067] EXT4-fs (loop0): Remounting filesystem read-only [ 808.521919][T16067] EXT4-fs (loop0): 1 orphan inode deleted [ 808.528295][T16067] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 808.706823][T13155] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.229846][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 810.229863][ T29] audit: type=1400 audit(1790284487.517:6754): avc: denied { write } for pid=16071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 810.278768][ T29] audit: type=1400 audit(1790284487.567:6755): avc: denied { write } for pid=16082 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.576464][ T29] audit: type=1400 audit(1790284488.867:6756): avc: denied { write } for pid=16086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.619412][ T29] audit: type=1400 audit(1790284488.907:6757): avc: denied { write } for pid=16097 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.728705][ T29] audit: type=1400 audit(1790284489.017:6758): avc: denied { write } for pid=16100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.788142][ T29] audit: type=1400 audit(1790284489.077:6759): avc: denied { write } for pid=16111 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.897379][ T29] audit: type=1400 audit(1790284489.187:6760): avc: denied { write } for pid=16114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 811.940755][ T29] audit: type=1400 audit(1790284489.227:6761): avc: denied { write } for pid=16125 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.500389][ T29] audit: type=1400 audit(1790284489.787:6762): avc: denied { write } for pid=16128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 812.542602][ T29] audit: type=1400 audit(1790284489.827:6763): avc: denied { write } for pid=16139 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1