last executing test programs: 19m13.99727854s ago: executing program 32 (id=38): unshare(0x2020480) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='oom_score\x00') setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) cachestat(r0, &(0x7f0000000000)={0x2000000009}, 0x0, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x0, 0x11, r1, 0xec773000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f00005d6000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000005d000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000e1000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00001a9000/0x4000)=nil, 0x0}, 0xfffffffffffffd1b) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r3 = io_uring_setup(0xb9e, &(0x7f0000000040)={0x0, 0xc8a4, 0x1000, 0x1, 0xc4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f00000001c0)={r5}, &(0x7f0000000280)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) signalfd4(r3, &(0x7f0000000100)={[0x5]}, 0x8, 0x80800) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8060) r6 = syz_open_dev$loop(&(0x7f0000001500), 0x7, 0x82000) ioctl$BLKGETSIZE64(r6, 0x80081272, 0x0) 18m59.410831259s ago: executing program 33 (id=176): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)) r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x2, &(0x7f0000000140)=""/29) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x3, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x40440e0) r7 = syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80000, 0x0, 0x0, 0x0, &(0x7f00000002c0)) fsetxattr$system_posix_acl(r4, &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYRESOCT=r5], 0xfe44, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018e40c0000000000180000001800000002c811430b00000000004000000000070000000003000000ffffffff000000000010"], &(0x7f0000000080)=""/159, 0x32, 0x9f, 0x1}, 0x28) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x41802, &(0x7f0000000e00)=ANY=[@ANYRES16=r1, @ANYRES32=r7, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESDEC=r1], 0xf6, 0xa18, &(0x7f00000003c0)="$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") syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x1000414, &(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYRESOCT, @ANYRES32=0x0], 0x6, 0x801, &(0x7f0000001540)="$eJzs3U1oHOcZAOB3FMmW5WBMWtxgbGfspOCAo6xWiVKRQ7JZjeRJpF2xuyo2paQmloOwnAS7obUviSkkbWkpPfXQQ5prbr21FFrooc2p0Bx66S2QU0mhf6QNBZXZH1mytZL8n9TPI6SZnXm/+d5vtJp3RtLOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSXWqVBpLYjavLZxI+6tONepzm6zvbe836ybrPLuu34ik+Izh4fjkH51lX7yyel/x5Ugc6Dw6EMPFZDgu7d639+kvDA702m+S0I06vM24JOLNIqmzp5aXF89fdzcxfN1Nbp/v/+q6m/x7pfg6k9XyZuRzlZkszZv1dHJiovT48elmOp3PZs2TzVY2l1YbWaVVb6RHq4+mY5OT42k2erK+UJuZqsxmvYVPPVYulSbS50fns0qjWa89/nw0q8fz2dm8NtOOKZe+FUXMU8UT8YW8lbayylyanllaXhzfKtUiaGyjFfd1nj8HHtn70esf/n1psXhC9ttI0n1ilsfGyuWxiScnn3yqVBosl8rrF5SuEqsRMRBRRNyWJy2fI7f2AA43YaBb/2M28qjFQpyIdIOPoajGVDSiHnPF4z8NXRPR1av/X378r3/YrN+19b9X5R+8snp/tOv/oc6jQ/3q/4a53smPC3ExLsXZOBXLsRyLcf6uZ7TFx8DNbiFZ++g/90dELfJoRj3ymItKzEQWaXdJGpMxERNRihfjeExHM9KYjjxmI4tmnIxmtCJrP6Oq0YgsKtGKejQijaNRjUcjjbGYjMkYjzSyGI2TUY+FqMVMTEWlvZUzsdTe7+NXZblvV/zy5T9+9E4xvxo0tsngk+Jkrgj62yZjH4jyddT/lZXifOHqCPX/HrBjs5W34SgON2alV/8BAACA/1tJ+7fvxfX/UBxsz03ns9nX7nZaAAAAwC3U/sv/gWIyVMwdjKS4/i9tEPnBHc8NAAAAuDWS9mvskogYiYc6c2diKd6MxdjolwARsfdOpwgAAADcpPbf/w8Vk5GIN9oLerdL6XP9DwAAAHzefLffPfY/7N1jtzm/M/n1UEQMJZfnTzySnKsUcZVz93XadSdfXd1ia3p/sqe7kfZkYvDS7iQiBqvZgaR398v/7uxMP25/3T+42rzfvf6TRqNIYFfR90YJxOYJtB/FD+JwJ+bw6fZkd7fJYNLpZWQ6n81Gq/XZp9u3RCw+W6+/svTtiKL379Xm9iRxZml5cfSlV5dPt3fG5aL55XPdGygmEYPbzWWluwfiYAzv6M6uHfFQ+4UY3X5HOv2W1n4DBjptBjYff7K2z7fiSCfmyEhnOtJb0+lzuOhzbPTpsahU9gy0shOt11fWjL7Iosh6deRDa0f+093bHPlb8XAn5uGjD3cmG2RRXpfFK1dlsbS8WF67/7e3L7adxTuH3zjxr9/Vk2x8qyzGryOLlfsirs4C4G45077rT6cKFZNd7br76UpHUf87dXdnr+7u6rXcxrH2n1d6WT3L6LVfU90Ho1fde9VtYPXAuL3qvhKdI/rRTszRzvnE4P5uXKfSdupKaYMj+mtLr/2+e0R/4r2f/Ozrh97/ebvftdVtG1l0jujvxaOdmO4kHvhtnxpbjPmHq5VkrD36d4sW7/bttzlbTtqnGN8891rsu3Dx0mNL5069vPjy4ivl8vhE6YlS6cly72RiqH3GsEmmANy7tn6Pnb4RvTqTPFFcVQ+v2ejp9ddzD6z+S8FovBSvxnKcjmPtVxtExEMb9zuy5t8Qjm1x1XoldiyObXFteSW2fG1sEn1ix9cM7ks/bk8+uQ3fDAC4Q45sUYeTOPJ+N7TfGUJyrN919zV1tKjlV10dR/9avpGv3M6dAQD3iKzxcTLSejtpNPL5F8cmJ8cqreP3p4169YW0kU/NZGlea2WN6vFKbSZL5xv1Vr3a+8XxVNZMmwvz8/VGK52uN9IYaOYn2u/8nnbf+r2ZzVVqrbzanJ/NKs0srdZrrUq1lU7lzWo6v/DcbN48njXajZvzWTWfzquVVl6vpc36QqOajaZpM8vWBOZTWa2VT+fFbC2db+RzlcbliJhdmMvSqaxZbeTzrXpng72+8tp0vTHX3uzotcP/y53e3wDwWXDh4qWzp5aXF8/f2MyftxN8t8cIAKynSgMAAAAAAAAAAAAAwGffhYuXzg7H8uL5vb0XAhRLb+IVgdc3szNuexf37EzxjfwMpHFjMwfvvzXb+cYzz5ztF/PcGw8e3952uj8pg7HlS13f3hOx4xc/6ix5tn/wd7o/f7dmj30QETfQfCXZYNWnK52ZdYeJHXf+yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1/pfAAAA//+iNle9") socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) 18m54.563702371s ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x7, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000340), 0x0}, 0x20) 18m54.481496134s ago: executing program 2 (id=225): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x0, 0xa0) writev(r1, &(0x7f00000004c0)=[{&(0x7f00000000c0)="95a4ac9cd7d48a7c8c831e5d4cb04eedc3e591e3459cb15005589725d8e74d846b76c43285dcd847862cc602542d612b13898a77f93480455fb69f13ad7a6b6de3a32dbf8ad0a9d67d2059e9c28ba6", 0x4f}, {&(0x7f00000001c0)="2908da972c867cdc73ada843c8f3972dff49586ed4a954028768bc46999c7c7d41d1d41a2680695ff3e2ec6dfdc759a52974059c4f9804060c9e372e5def603a630d49627d6a7157f8d31877880120b33ef169283615fb9b9b295824dc3af7bd2883deb49b8084cba40160ba999f9451c2de904568cbaeae", 0x78}, {&(0x7f0000000280)="01f39a848f302a1157148550c82f5c951d1fa59b84b7b2d5573757bb016136eab16d8cf38f57901af92fda1c243ecac8b0bf0970d1543c9bec310bf2187624f52a58a42015bfc7bbf730265d2b", 0x4d}, {&(0x7f0000001440)="816e3ce6b904f6185fdaf1a9aa467ae7584b220175f9312199e9fce74fb6e75042b4b349f14e7a40908ab7972a5bd5023f95d359d474c25f29edcad0c78490e32b528dcc80f8cfba1865d6282d2526d226d02a1043775ef81e29ee1489b704135dd32c2479490b1dbce51c238ac532b272fc2cf25e73f56db4ecb72425815392e9487469927bd4524ea40919c6300656a63181102a25cc62f36e3832650fe97c81cdadbb3c4c48168f060c1b9bb73e497e904aabc50b8ca539a589ab223310e6d7d3d720c992e4526faabbd7034926c3bf66ba05453e4947ad5196a8c1f6273af7415934bf64e433576078652dbc6b2b6fbea114af97d3b004593eba7b06a8ccaf630aefb4d4e7ab7bd8dd7f42c9b64ae5f5c92122e08e3746706c16380da3565e1078dcf8a1063c55bb1fe24f80217acb210a75e99ede8df6e7307eea77c0b8598e2b7805714c97e9a5794eef24d141321816725e643e6b6c696b2fbf53fe0e20ab3ca0d575fc3ad065b01bda8b0c317589e7b5aef142409d0144d3c39e73ad1ee0dfd0201efdc5168b69d77e0e43df39ceccec939a566c7fd520e58c74d94a1f9ac8ae10747d3b369cc23bb9cdcb2f151d4a2afc0e20633d0f6f6b0e7da4ac4646e9f0d4391128f5d2a98fb8c06a3f44c6331183d6dc47cfd91c13cfd6619d4cc1876d4337a7727dc34c3244ea4f4b173238175c424298cfd7e543092e1d25c50e53f3d78e281818cf08ecd22d54a9c049e89a20dfe53ec00129a5af9f5ed3698b914dd9d4b6e66e9e2b6e786ff755c3eb04073488bb006c30d844211a49d13ad491dbca2539cabe02d948f40e6cea11feaf4037cd2d43c71003a5ffc60652b06effcf77547c9e465d1215753a3a575943adb29906979623cc4cffd1c2dc4ee628d3d8042831d3ca55996e2e98a0b342f13ab445e37d27b3e05b315c0ff26e31c69b4de462546fd156fe4e0ab247ff1b49aa0c266f6c9c6425b14bf3bee129034141c473082bdd485933fa31413016a972384863caa6c515adf6cf110c535487b82fc58d58292aecd8f2e243d62c08cfcdd2b19310999be0b6f5b1412d66d019c4ed7563a559d19edbf280fb48789cb510b918ff633361bea17b2a1fe3132c7d9769b12c043154e97bd82ceed5621e3a2390d78b221b63370547ec64a0a9ef961d1fc36c18bc1260e49505008c46b88fdbe941729dd63d24fdbc544f9ddb1c4e1bee64141e79a91ca48f466eb510ec48799021b0068cc30eb2744b2218909967d21fa553a043ec5242af9c80f33da86ff09ebd76e3b627bbfbd383e5ef50fa426e694026917a67cc2c2f4a552d5025874738f9b123cdc0d83c85bea109c167ab58e9808223a93c0115418bd7ffef56b2eaf7f0b5b649c8df8d2cf698a5ee4ef688435966618fbd507f8475dd54eb8c2353a4c260e3c4a9000dbd7f561c214ba3977ce226104bd038a2f1af7f0c5d7ced63efea83840896e10e4701fe9ff4bee29f008d52108c2933683133eb8a2257f2b1a9ed88084c012e058ea8025073aedfc291d40e3394992683378cd7b3ebc021ce347c06afb08cea46279f341eb20cc6e2cec0cf9bb6ef0d2cea8e82a4479b6536b50f43f95d39aa45493ee5cd897a78dac769f666ecfb613a20edba1a6d54846cda542e0ea0af1d2a86d0b7cac4777c01cc68e2b0ad742a9544c89252d961f9f1aea10d53d54277d0d22e115c8001938717b04e2dc1141eea51faf8dc601baa580a838719bacd084e15134db44dd67f86c3fb19e78a131e78fb5b8e39583140303d883de488429dacb0e184cfc31d52bfa18924b45296fffe5bc8329e1c3c944da3a25292adb0f6e9eee46d603660bd2f2763f3af6251ef140879422eb69e311be86458f9d5a1d62a37423f3edfa91022763646b23338d921e8d27e2e59427cb17325e5a8cf754f1c3579b93e8404850f4397225f804f67dcc623e7acba681c80fbce2403fc759089560a7195d0c432cfe8e213754e46b48371381448ebc39e08b1538c11ca2301a927858d64090471a42f466ceb210194b330875cfd82545366433e06b9eed272e6ea93656d6e287de755c2bf86fcf1e6061640e42248c87b24a9c8b6daf0cfc7923674138975c8edcafe5d24ca060c10b7ea95068b5cbdc61d433adecf0f450ef1fbe14adf349a9fa9706319b84b556fcdf6050ed5f44b658bb952adf2752bd285bdfdd1f305c8947ecd25c6fbceaec63775c5e35db7e94ab520dc193c7841de1c0aa11e317dac2775744fc5e8b625215b9f14972bcb03fdb4e5d61a0a5b344597a03fef9f7afcdaf89499363178071740ccb48516ba726774f9c71c2bf5625eafdec4c2dc6b9c081d0e4ddeb02d30ddc2bd429593edc275dcbd70ea60767d4c432b748888f7cb8530ddbf8621aaf0a73835fe3978252bd2a52135f61d770b47bc5264a50f094937222712dabda8fcfe5c756c37ac08d45e33f699bc1dc0a7372f45fc0d6d9cc0a2428d9f2ea3d6520ae780f18e80defa34c71e2c6cc47a23379788a160cb02d9be928526ea8c4439da52b98d3424412d8b4e4a7eb7effac22541fb08618fd688d27d3c07806e079316247fb6da320eb0209f02553f80c9d7fddb4ac3793133366f0db139c4a44f96b9da7799db7762bddd64fdb1334d2a54d1d13c24e45b491dc39e3e0a8b6da05b33a160d3dd0bdc0f4a7e9be62ce3e16ff106243915bc7678a28fd7ec767e7ce576672821f3787a9cb7f0826647b352045b1505fc80743dfde5ec1303221e98509e3415aaa2e2cb737df955c2685696fa0ddcb1ef3cbd7dab3a163d4395776ddfe80edf39115f7726ca32f04b16d73239855566e60208703ba446150a0e0b64742ba8685a44f9303ac9549519b1f8c7d7fc316d0d5698854f9f640e8b188dc60fd7671ee59fe31f553f01d18bdfd85fb61fc4e61efba24cbe15e1100a05b4e0e0c93b82df2aaa5751ac7c45f3e1713ece264c98923f50fafc7b1ffd261f458dd98fe771514ed5eefa53b2479009d3e95e87b5bcc1780f1102674ec8176a7fa29a21c8d74bf9d9a7afa97cf1ebfd019873e0f09e32c7e3d4718d18a462e2fa92a7a666cb0897cda5c12dc26cf129efbf5b01810947527125a1112c3f484efdd9735ffb299c284c783ab2cac32d0e7e52dee73f73044a1ddea56b12938bf3e15dad3ad9913705f72fe52033de5a6e8ad9cb8ec6d2a1167cfc7f43d880cefc430710fb4297fb7aefcbe61862b7006a8588b0b8571cf0e23bc4b66ba6141c3a5ce96f0f3130a6867bc358f5c09904a98f980ecb2accc4f4a82d56776714ab4987d55d1394301eca0477aaf10c7acd28c55b17100f38904cc76bfa93391b7396b8c448b6a73e26131e4a2ec49a4c69ea9a69c4701789d11c50aeac8cd9d8321c4d0cc3b14043f0e5b93c9d50b1cd7f066442c8dc1dd038dacf617a2ce58371590494af9760a67964d694f4108f6de3e2acd28f83f1294539cb0414cedefc309678857935791ae4beb52f03050fde73957952ab449c1f0ef872693bd8f0d44f9aafda867f47125010262c292307f9bf6ed5504eb35f12a6f47c6fd274f82055d8ea704f33b7e8c61a9019b370c63ec7814e476225013f1870b7edb0d22b66da1e03d527e5cd01bfd3adae41b0c0687c72d056f64cc1216d640427fd6e33032e7b176e811caa63de246ccff78968b22a827bc15ab2797b32263b3f1bf1071788d88d3a86c078697c897d02344e2953cd6c5e8fc07a23b494be986ee992d22664f6b1a9402c8ffc28b43ca6eeae5e65b80a7b042c88985f3e933178527e61bcd233e7450b045efdfbe332210ef671d865e398d3bbfb30f3e6c95ed20f140db58d2870856176f442771b27c558c7166e05037fd70d2ff23a92f3d0b89651ce2648f3381373731be818e79f2113b7cadcd2503323bb761e7ada33e497ba41c769dbba007cf6b47f67aa74993e9d94e1ea4944984672d03cfe3a373f312be0b00e8cc55bc1a75d4f9d6864e8f19f7b9658745971e1bc6658d24cddb2521a53434b5c5dd07e90cfddf9276494e947314d8d71b955e2fc48ef4c7a5a20eb13cf0936ae6e8a8bbc9d4a75f522f121587da807820e613ef2dddd694bb84d346ddb63468e2955cd9ff2aaca3b1082f063aa2cd7cff38fbf746af954f1d1e1931e55c20aae40e0d917c0b9b629420adc6a5ef82ee4978fff551a3cef4ac34e2db44811e56f1da7e189623a570704138d96aa6076a0279134f67900c55fc8cad45231a0488b530f43894e73e2204c306d08471e4e2dac3501f0914454c2e849194df93a3c36d6e5e2bb1b1d97deb0c7d9a74aaeab4c888d8fffe7dec5a07578ae0d7c901180c2ca127bebeb20bdf06642373abe24a406170605447d5d96dace24ca9050e5f32433f8600479a9e27209db76224c03ba31ae1e32efe284eda3d4665e3f52a2665c2aa516b430b5660a74d45cd90dd1b8fdb6edb1bedd63e5ad0fa2f483e3832685e38823c0df9d3cf9678fe42d43dfb95e804c196113182f3f377f5f97ad5b53e66111db1fced7785da0d81c8608ed8c2a013b8c913cecdd658225cd7175810771d116c0cd84b878c7c5827cde9bde52cdac675bad17ce169f72fd2069d0c46d51d1d2608676297a9b6fb982b097585307573ccc21adb27652c482eb6a04f18214f141054f8e4037f509580fbed2a01fcea9a1deeb0f03603d82d7edb5003bd3bc0def06f42a55e0c73ad07523eb9515ff9ad7426e267d148da8fd9406600617dd1a8a7a212c964536fbe2db946c22362747ee6e7e7e53ddc70ac41c3e8b28bebaaea4d3b2568df887e272fb3f299ce7ffa39c7652b26beda53c9fb40ce79a9613be5e4b005b46c8ce9faf1d8bdc58dc9867a0ee7c922b7aee4b81e328799f3d89dd101cf65a3a7cc4297fb1ad241f15a8c95e59ca6b48319949b3a826bdb75c17b6bed8d706320ecf86daa37678f78f68afc4f39d37cf70c5fc335ddf252908a79a4c5a067853de9890d6a84d40a0b8fd11453d5ada67fa5b2e8d0e45ba459833e16ffd85d8d7f4802f2ee1e498e8881113475c413ed8048622bea021a441bdc7af33031842160874ca18814e2ba06365f1046807b9891dab9b8c01156c77e825432325b55046ca45fab144b3548db34dde0a1cbf76ef7e8f4f49db16d0a2f91b0a020a8b165d03a4a0b20ecbe9d8b04b4aad8cb177f7027035efee8b51aa5eb1111e876172705b53e874d973308ca1ad1ac4a2c85ef22096f26a406d70cf7c0f90c8a56825759e84c9c2a4302c33d1eba81000ff7b48de512a87be03508a7c3f4ddf128980d153a66da58cb6f775b41204677cb63aece01e717b5e86f99f7d73f0d384d33b74c8d754e061a1bede8888f4b4ad6d1ea7931618f06d56a994871a0eec650b3152c59a", 0xeed}], 0x4) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5401000010000100feffffff00010000fe88000000000000000000004ef4c046855d4bfa90611127257100008001200100000000000000000000000000020001", @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="fc020000000000000000000000000000000004d46c000000fe8000000000000000000000000000aa000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000500000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff800000002abd700005350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400"], 0x154}, 0x1, 0x0, 0x0, 0x8801}, 0x40000) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = accept$unix(r1, &(0x7f0000000340)=@abs, &(0x7f00000003c0)=0x6e) sendmsg$unix(r2, &(0x7f0000000640)={&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000480)="20d8de14a6704d72f4f7301c83d1e2866e5881419b3f57183ce7e8e70e4f7a", 0x1f}, {&(0x7f0000000500)="d15dde1266a789181150e2ba6fbc52dd8f4abdaa22983756f5f3e0beee1260f62dd7a8847e481e89cb6887d2ebd146bfb3c7a243d0264f0f24e5568dad607238fbe1332ee497f2038b26c019b8bdf6561ba52864bb9990da29de0a9d24d0e8241ddd23b2ed878cb63098b2081e3c37b3d0c43be7685014770c86c49389236846d8bb25df6327be7d15e54fe2ced3714131f1561beaf4c3f568a4f62f258c95434702c1e7499bec8a168e7ba4e5299e2ef13bd7a427d363d8394c251fc2a6a6e652b479", 0xc3}], 0x2, 0x0, 0x0, 0x40}, 0x20048000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8041) 18m54.176185084s ago: executing program 2 (id=227): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20002, 0xa, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000004000000180000001800000006000000000000000000000d00000000000000000000000b020000000000002e000024a83958306c9b7174dbfc0b0b0a5fbd807a36b5f22e7f320db1144e3f9fd1f1cb80798db425875aaa00a31e6298c060f3083d0b88a2cb2934fa642a7b998a77ff175f37e8edfed510f79873e9eb4678cdb9e5498e9b7903303c099f97c95002703b12bd2432499b99eb12fd3c7aa0cdce97f75764506128a9cc"], 0x0, 0x36, 0x0, 0x9}, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000019200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a010300000000000000000200000009000200737b7a30000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001040), 0x9a08, 0x10000) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000001080)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4021, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000700000000000000000000008000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x62, 0xe17, 0x9, 0xda}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 18m54.041294708s ago: executing program 3 (id=231): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) finit_module(0xffffffffffffffff, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) io_setup(0x4, &(0x7f0000000440)=0x0) io_pgetevents(0x0, 0x0, 0x1, &(0x7f0000000040)=[{}], 0x0, 0x0) io_submit(r0, 0x0, 0x0) 18m53.755137457s ago: executing program 2 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f00000006c0)={[{@nojournal_checksum}, {@lazytime}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0x1, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) (fail_nth: 5) 18m53.01760557s ago: executing program 2 (id=238): openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x4, 0xf0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x1, 0x4, 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1a) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80000000}, 0x1c) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r8, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x490702, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 18m52.284427613s ago: executing program 2 (id=243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000800)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000180)=0xfffffffffffffca5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x3, 0x4, 0x6, 0x97}, &(0x7f0000004480)=0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYRES8=r1, @ANYRES16=r6, @ANYBLOB="83040000000000000000010000001c0002800c00018008000100050000000c000180080001000400000048000280440001800800010005000000080001000800000008000100020000000800010007000000080001000400000008000100060000000800010001000000080001000300000004000300f800028014000180080001000500000008000100050000000c00018008000100050000002c000180080001000180000008000100070000000800010001000000080001000200000008000100040000001c000180080001000500000008000100030000000800010007000000340001800800010004000000080001000700000008000100040000000800010001000000080001000500000008000100010000001c0001800800010008000000080001000700000008000100040000003c000180080001000100000008000100070000000800010007000000080001000100000008000100000000000800010007000000080001000100000004000300"], 0x178}}, 0x24000000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nobarrier}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80001) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000040)=""/26) setsockopt$sock_int(r7, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r10) r11 = getpgrp(0xffffffffffffffff) sched_setaffinity(r11, 0x8, &(0x7f0000000780)) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x284801, 0x69ddd4eab60e5cc8) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000d00)={'sit0\x00', r12, 0x7, 0x10, 0xf, 0xffffffff, {{0x31, 0x4, 0x0, 0xf, 0xc4, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @empty, {[@generic={0x4, 0xa, "6a82e52b6a17aae2"}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@loopback, 0x7f}, {@broadcast, 0x1}, {@remote, 0x5140}, {@local, 0xf}, {@multicast2, 0xb}, {@rand_addr=0x64010102, 0x9f}, {@local, 0x4bf}]}, @generic={0x86, 0x5, "547696"}, @cipso={0x86, 0x2a, 0x3, [{0x7, 0x12, "3dff28e455030ecd7102c693b53cf7e8"}, {0x6, 0x12, "bbdfaa248f75ce7628009765296403eb"}]}, @rr={0x7, 0x1f, 0x72, [@rand_addr=0x64010101, @multicast2, @empty, @loopback, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}]}, @rr={0x7, 0x13, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @broadcast]}, @end]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0xbbdccba4532b703b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) 18m52.243135934s ago: executing program 34 (id=243): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000800)=[@in={0x2, 0x4e23, @private=0xa010102}]}, &(0x7f0000000180)=0xfffffffffffffca5) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000043c0)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x9, 0x3, 0x4, 0x6, 0x97}, &(0x7f0000004480)=0x98) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=r2], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000180), &(0x7f0000000280)=r2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r4, &(0x7f0000000400), 0x0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYRES8=r1, @ANYRES16=r6, @ANYBLOB="83040000000000000000010000001c0002800c00018008000100050000000c000180080001000400000048000280440001800800010005000000080001000800000008000100020000000800010007000000080001000400000008000100060000000800010001000000080001000300000004000300f800028014000180080001000500000008000100050000000c00018008000100050000002c000180080001000180000008000100070000000800010001000000080001000200000008000100040000001c000180080001000500000008000100030000000800010007000000340001800800010004000000080001000700000008000100040000000800010001000000080001000500000008000100010000001c0001800800010008000000080001000700000008000100040000003c000180080001000100000008000100070000000800010007000000080001000100000008000100000000000800010007000000080001000100000004000300"], 0x178}}, 0x24000000) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@nobarrier}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x80001) ioctl$EVIOCGKEYCODE(r8, 0x80084504, &(0x7f0000000040)=""/26) setsockopt$sock_int(r7, 0x1, 0x1b, &(0x7f0000000600)=0xdfa, 0x4) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYRESOCT=r8], 0x0) r10 = add_key$keyring(&(0x7f0000000040), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$clear(0x7, r10) r11 = getpgrp(0xffffffffffffffff) sched_setaffinity(r11, 0x8, &(0x7f0000000780)) openat$dir(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', 0x284801, 0x69ddd4eab60e5cc8) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r9) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000d00)={'sit0\x00', r12, 0x7, 0x10, 0xf, 0xffffffff, {{0x31, 0x4, 0x0, 0xf, 0xc4, 0x65, 0x0, 0x8, 0x29, 0x0, @loopback, @empty, {[@generic={0x4, 0xa, "6a82e52b6a17aae2"}, @timestamp_addr={0x44, 0x44, 0xf4, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@loopback, 0x7f}, {@broadcast, 0x1}, {@remote, 0x5140}, {@local, 0xf}, {@multicast2, 0xb}, {@rand_addr=0x64010102, 0x9f}, {@local, 0x4bf}]}, @generic={0x86, 0x5, "547696"}, @cipso={0x86, 0x2a, 0x3, [{0x7, 0x12, "3dff28e455030ecd7102c693b53cf7e8"}, {0x6, 0x12, "bbdfaa248f75ce7628009765296403eb"}]}, @rr={0x7, 0x1f, 0x72, [@rand_addr=0x64010101, @multicast2, @empty, @loopback, @broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}]}, @rr={0x7, 0x13, 0x60, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @private=0xa010102, @broadcast]}, @end]}}}}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) shmat(0xffffffffffffffff, &(0x7f0000ffb000/0x2000)=nil, 0xbbdccba4532b703b) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00'}) 18m51.609167134s ago: executing program 3 (id=247): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) r1 = timerfd_create(0x0, 0x0) fgetxattr(r1, &(0x7f0000009880)=@known='security.selinux\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@afid={'afid', 0x3d, 0x44}}]}}) write$P9_RVERSION(r4, &(0x7f0000000000)={0x15, 0x65, 0xffff, 0x7ffc, 0x8, '9P2000.u'}, 0xfe78) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x7}) r5 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000000c0)={0x2, 0x4}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES64=r5], 0x28}, 0x1, 0x0, 0x0, 0x108c0}, 0x4000080) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) setsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000080), 0x4) sendmsg$802154_dgram(r6, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={&(0x7f00000023c0)="3aa69ff85d0ce6af14f959d64b689751d9c5992be6bdd563da341e6da515f020f90e58e8baead0cbc0d24ca94c523520dcaf9bfd68fe984a5befa8c17a7e6ae0c50197178920533e1d6d3da8e4152376291efb90bd966e7d679a420e99bfdb3fc140", 0x62}}, 0x4040044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 18m51.167779838s ago: executing program 3 (id=251): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setreuid(0x0, 0xee01) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r3, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="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"], 0x230}, 0x1, 0x0, 0x0, 0x20040880}, 0x4004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0xb, 0x80002000, 0x0, {}, [{0x64, 0x1, [@m_ct={0xffffffffffffffcf, 0x1, 0x0, 0x0, {{0x7}, {0x38, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f00000011c0)=ANY=[@ANYBLOB="1800000008000000000000000800000091110d000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000002bc0)=0x5) unshare(0x60000600) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x0, &(0x7f0000002b40)={0x0, 0x0}) futex_waitv(&(0x7f0000002100)=[{0xffff, &(0x7f00000000c0)=0x8, 0x80}, {0x1, &(0x7f0000000100)=0xfff, 0x82}, {0x3, &(0x7f0000000140)=0xc, 0x2}, {0x260, &(0x7f0000000180)=0x83, 0x2}, {0x2, &(0x7f0000000340)=0x7, 0x82}, {0x1000, &(0x7f0000000380)=0x6, 0x82}, {0x80, &(0x7f00000003c0)=0xe5065e2, 0x2}, {0x19, &(0x7f0000000400)=0xd, 0x2}, {0x40, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f00000004c0)=0x7bf, 0x2}, {0x2db, &(0x7f00000005c0)=0x5, 0x82}, {0x1ff, &(0x7f0000000600)=0x4, 0x82}, {0x8, &(0x7f0000000640)=0x7, 0x82}, {0xdf1, &(0x7f0000000680)=0x5, 0x2}, {0x1b, &(0x7f00000006c0)=0xc13, 0x82}, {0x1, &(0x7f0000000700)=0xffff0000000000, 0x2}, {0x40, &(0x7f0000000740)=0x3, 0x82}, {0xfffffffffffffff9, &(0x7f0000000780)=0x4, 0x82}, {0xff, &(0x7f00000007c0)=0x8000000000, 0x2}, {0x4, &(0x7f0000000800)=0x1a8, 0x82}, {0x1, &(0x7f0000000840)=0x99, 0x2}, {0xdd5, &(0x7f0000000880)=0xfff, 0x2}, {0x40, &(0x7f00000008c0)=0x7fffffff, 0x82}, {0x6, &(0x7f0000000900)=0x80000, 0x2}, {0x6, &(0x7f0000000940)=0x5, 0x2}, {0xffffffffffff0d0a, &(0x7f0000000c80)=0x8, 0x82}, {0x1, &(0x7f0000000cc0)=0x5, 0x82}, {0x10000, &(0x7f0000000d00)=0x8, 0x82}, {0x401, &(0x7f0000000d40)=0x4, 0x2}, {0x5, &(0x7f0000000d80)=0x8, 0x82}, {0x0, &(0x7f0000000dc0)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000e00)=0x9, 0x82}, {0x4fd, &(0x7f0000000e40)=0x3, 0x82}, {0x8, &(0x7f0000000e80)=0x10, 0x82}, {0x6, &(0x7f0000000ec0)=0xc550, 0x82}, {0xc, &(0x7f0000000f00)=0xd8, 0x82}, {0x8, &(0x7f0000000f40)=0x3, 0x80}, {0x6, &(0x7f0000000f80)=0x3d, 0x82}, {0x9, &(0x7f0000000fc0)=0x80000001, 0x2}, {0x2, &(0x7f0000001000)=0xcf, 0x2}, {0x1, &(0x7f0000001040), 0x82}, {0x4, &(0x7f0000001080)}, {0x4, &(0x7f00000010c0)=0x3, 0x2}, {0x7, &(0x7f0000001100)=0x1, 0x2}, {0x8000000000000000, &(0x7f0000001140)=0x58000, 0x82}, {0x5fe4, &(0x7f0000001180)=0xfffffffffffff7a3, 0x2}, {0xeeef, &(0x7f0000001200), 0x82}, {0x3, &(0x7f0000001240)=0x838660d, 0x2}, {0x45b, &(0x7f0000001280)=0xd3, 0x82}, {0x7f, &(0x7f00000012c0), 0x82}, {0x2, &(0x7f0000001300)=0x9, 0x82}, {0x3, &(0x7f0000001340)=0x7ff, 0x82}, {0xb, &(0x7f0000001380)=0x400, 0x2}, {0x2, &(0x7f00000013c0)=0x4, 0x82}, {0x5cd, &(0x7f0000001400)=0x30, 0x2}, {0x1, &(0x7f0000001440)=0x80000001, 0x2}, {0x80, &(0x7f0000001480)=0xfff, 0x2}, {0x6, &(0x7f00000014c0)=0xdf, 0x82}, {0x401, &(0x7f0000001500)=0x9, 0x2}, {0x7fffffff, &(0x7f0000001540)=0xa1, 0x2}, {0x1, &(0x7f0000001580), 0x82}, {0x4, &(0x7f00000015c0)=0x5, 0x82}, {0xa, &(0x7f0000001600)=0x8, 0x82}, {0x0, &(0x7f0000001640)=0x10000, 0x82}, {0x3, &(0x7f0000001680)=0x54, 0x2}, {0x4, &(0x7f00000016c0)=0x3ff, 0x82}, {0x4, &(0x7f0000001700)=0x4, 0x2}, {0x8, &(0x7f0000001740)=0xfffffffffffffffc, 0x2}, {0x7, &(0x7f0000001780)=0xffff, 0x82}, {0x2, &(0x7f00000017c0)=0x7, 0x2}, {0x246f, &(0x7f0000001800)=0x2, 0x2}, {0x10, &(0x7f0000001840)=0x9, 0x80}, {0x48d1, &(0x7f0000001880)=0x400, 0x2}, {0x1, &(0x7f00000018c0)=0x8, 0x82}, {0x4, &(0x7f0000001900)=0x8, 0x2}, {0x6, &(0x7f0000001940)=0x9, 0x82}, {0x101, &(0x7f0000001980)=0x2, 0x82}, {0x5, &(0x7f00000019c0)=0x2, 0x2}, {0x7, &(0x7f0000001a00)=0xffff, 0x82}, {0x6, &(0x7f0000001a40)=0x8000000000000001, 0x2}, {0xfffffffffffffffa, &(0x7f0000001a80)=0x1, 0x2}, {0xdc4, &(0x7f0000001ac0)=0xf47e, 0x82}, {0x6, &(0x7f0000001b00)=0x1c3, 0x2}, {0x4, &(0x7f0000001b40)=0x2, 0x2}, {0x4, &(0x7f0000001b80)=0x7, 0x2}, {0x400, &(0x7f0000001bc0)=0x3, 0x80}, {0x3, &(0x7f0000001c00)=0x5b, 0x82}, {0x80000000, &(0x7f0000001c40)=0x7f, 0x2}, {0x9, &(0x7f0000001c80)=0x1, 0x82}, {0x200, &(0x7f0000001cc0)=0xfffffffffffffc00, 0x2}, {0x7c8a, &(0x7f0000001d00)=0x7, 0x82}, {0x7, &(0x7f0000001d40)=0x3, 0x2}, {0x9, &(0x7f0000001d80)=0x1, 0x1}, {0x7, &(0x7f0000001dc0)=0x81, 0x82}, {0x0, &(0x7f0000001e00)=0x7ff, 0x82}, {0x3, &(0x7f0000001e40)=0xfffffffffffffffb, 0x2}, {0x7, &(0x7f0000001e80), 0x2}, {0x80d8, &(0x7f0000001ec0)=0x1, 0x82}, {0x8, &(0x7f0000001f00)=0x72, 0x2}, {0x2, &(0x7f0000001f40)=0x8, 0x2}, {0x6, &(0x7f0000001f80)=0x5, 0x2}, {0x0, &(0x7f0000001fc0)=0x1, 0x82}, {0xc, &(0x7f0000002000)=0x7fffffffffffffff, 0x2}, {0x2012568c, &(0x7f0000002040)=0x6, 0x82}, {0x8000000000000001, &(0x7f0000002080)=0x6, 0x82}, {0xfffffffffffffff7, &(0x7f00000020c0)=0x57e1, 0x2}], 0x6b, 0x0, &(0x7f0000002b80)={r6, r7+60000000}, 0x0) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000280), r5) sendmsg$NLBL_MGMT_C_REMOVEDEF(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01002cbd4100fedbdf25050000006f3bd7b2ca3058eabe282b46c3221b8f15fcc068b74726d497ab457afeccd46105fcf2164cfc3c43cde27353d527ee76ea47ff9f4f5e0ed42211f48daa"], 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x44080) 18m51.060792762s ago: executing program 3 (id=252): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f00000006c0)={[{@nojournal_checksum}, {@lazytime}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0x1, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xd0002, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x4}, 0x10c0e8, 0x0, 0x0, 0x6, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x8, &(0x7f0000000040)={0x0, 0x620c, 0xc000, 0x800000a, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ae4000/0x3000)=nil) mount(&(0x7f0000000400)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 18m50.561456927s ago: executing program 3 (id=254): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x9}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_io_uring_setup(0x2f90, &(0x7f0000000080)={0x0, 0x91d9, 0x3010, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r2 = epoll_create(0xaf2) epoll_pwait2(r2, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000580)={0xe000200f}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW(r3, 0x5403, &(0x7f0000001080)={0x6, 0x4ff99ce9, 0x3, 0x9, 0x0, "3c412d2f9f4335aa62a9177afe68fa77d3da01"}) r4 = dup(r3) write$UHID_INPUT(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0xfffffe51) syz_io_uring_setup(0x31c5, &(0x7f0000000140)={0x0, 0xd73c, 0x2}, &(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') syz_clone(0x41000, &(0x7f00000002c0)="0523a3f798a02fdda7a82909d8d9d349b90ec1dec01eb18ea34af6e22272fba3714096ee6745b47ac85938e208d42aa62cdac41eb95b09f67f90d7db74268da4145cdd2fba3d3f1b04d1b48de4b8236a614c98d12d4176728ffa64d93466341a1a4b3da5f3c7848f1702b9870c8c9e925edab541367cc19d592e4328c1ac07ab40f2bfa9c09a7c1bc1e4b47f51a9c9c9d011b1479eba2e2466e4ab39fb7fdb", 0x9f, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000680)="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") lseek(r7, 0x1000000, 0x0) 18m49.85353007s ago: executing program 3 (id=259): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x18002, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000480)=""/149, 0x209000, 0x0, 0x5, 0x3}, 0x20) rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) socket(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r3}, &(0x7f0000000300)=0x8) read$eventfd(r1, &(0x7f0000000080), 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r5, 0x8}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x40, 0x1, 0x8ffff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r9, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000a041}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xf, 0xfff2}, {0xf, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @multicast2, r12}, 0xc) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x4, 0x51, 0x6, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) 18m49.701500314s ago: executing program 35 (id=259): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400000000008, 0x8000008}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000440), 0x18002, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000005c0)={&(0x7f0000000480)=""/149, 0x209000, 0x0, 0x5, 0x3}, 0x20) rt_tgsigqueueinfo(0x0, 0x0, 0x2, &(0x7f0000000540)={0x3b, 0xea, 0x80}) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @empty, {[@lsrr={0x83, 0x3}, @timestamp_prespec={0x44, 0x4}]}}}}}}}, 0x0) socket(0x1, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r3}, &(0x7f0000000300)=0x8) read$eventfd(r1, &(0x7f0000000080), 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x3}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000240)={r5, 0x8}, &(0x7f0000000280)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x40, 0x1, 0x8ffff) r7 = socket(0x400000000010, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x1c, r9, 0x301, 0x0, 0x0, {0x2b}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000a041}, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xf, 0xfff2}, {0xf, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @multicast2, r12}, 0xc) setsockopt$MRT_DEL_VIF(r7, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x4, 0x51, 0x6, @vifc_lcl_addr=@loopback, @multicast2}, 0x10) 17m6.28374679s ago: executing program 8 (id=844): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000000000000009000000850800007a0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x40000007, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x400, 0x10001, 0xda, 0x4, 0xa, 0x20006, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0x186a7, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYBLOB="0000000000000000000000000015000000000000", @ANYRES32=0x0, @ANYRES32, @ANYRES8=r1], 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x7) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000b80)=[@in={0x2, 0x4e24, @loopback}], 0x10) futex(&(0x7f0000000000)=0x2, 0x1, 0x0, 0x0, 0x0, 0x1) sendmsg$inet_sctp(r5, &(0x7f0000000040)={&(0x7f0000000240)=@in={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000500)="1b", 0x2a000}], 0x1, 0x0, 0x0, 0x4000083}, 0x80) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x200001e4, &(0x7f00000000c0)=[{0x800, 0x7, 0x0, 0x7ffc1ffb}]}) bind$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = gettid() clock_nanosleep(0x9, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) rt_sigqueueinfo(r6, 0x21, &(0x7f0000002d00)={0x0, 0x0, 0xffffffff}) geteuid() sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r2}, 0x38) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) 17m5.404744198s ago: executing program 8 (id=853): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x4, 0xf0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x1, 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1a) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80000000}, 0x1c) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r8, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x490702, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 17m5.193652465s ago: executing program 8 (id=855): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) pwrite64(r0, &(0x7f0000002d40)="61dc", 0x80002, 0x1ffffffff000) 17m2.814097419s ago: executing program 8 (id=868): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="d200000010003507d25a8040000000f90324fc60", 0x14}], 0x1}, 0x20040000) syz_mount_image$ext4(&(0x7f00000001c0)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000100), 0xfe, 0x2a4, &(0x7f0000000a80)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc5) r1 = socket$kcm(0x10, 0x400000007, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89b0, &(0x7f0000000040)={'team_slave_1\x00', @random='\x00\x00\x00\x00\x00 '}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e00000012002f8c35093f974b21b92e0a", 0x11}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1310000016"], 0xfe33) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000780)={0x0, {{0xa, 0x4e24, 0x6589e3, @mcast1, 0x8}}, {{0xa, 0x4e21, 0x4, @private1, 0xfffffff8}}}, 0x108) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x28, r5, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x14, r5, 0x901, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000400)=""/200, 0xc8}], 0x2, 0x5b, 0x100) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x7fff, 0x0, {0x1, 0x1}, {0x4a, 0x2}, @cond=[{0xffff, 0x706, 0xfffb, 0x1, 0x100, 0x4}, {0x9, 0x8, 0x4, 0x59, 0x5}]}) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x12d8) bind$tipc(r6, 0x0, 0x0) 17m2.582518526s ago: executing program 8 (id=871): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000002c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@auto_da_alloc}, {@init_itable}, {@nodioread_nolock}, {@journal_checksum}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$netlink(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_io_uring_setup(0x63eb, &(0x7f0000000680)={0x0, 0x1200, 0x8, 0x2, 0x16b}, &(0x7f0000000700), &(0x7f0000000740), &(0x7f0000000780)) r5 = io_uring_setup(0x18e5, 0x0) syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x1000, 0x0, 0xfffffffc, 0x0, r5}, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x10e, &(0x7f00000001c0)={[{@jqfmt_vfsv0}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@nolazytime}]}, 0x3, 0x45f, &(0x7f0000000ec0)="$eJzs3MtvG8UfAPDvrpO26eOX/Ep59AEECiLikTRpgR44AAKJA0hIXMoxJGlV6jaoCRKtKggIlSOqxB1xROIv4AQXBJyQuMIdVapQLxRORmvv1o/abpI6cag/H2mTmd1xZr6eHXt2p9sABtZ49iOJ2B0Rv0XEaC3bXGC89uvG9Utzf1+/NJdEpfLWn0m13F/XL80VRYvX7cozE2lE+mkSB9vUu3Th4pnZcnnhfJ6fWj773tTShYvPnD47e2rh1MK5mePHjx2dfv65mWd7Euf/s7Ye+HDx0P7X3r7yxtyJK+/89E1SxN8Sxx0bqf4c71bk8UqlZ9VtBXsa0slQHxvCmpQiIuuu4er4H41S1DtvNF79pK+NAzZUJdfh8EoFuIsl0e8WAP1RfNFn17/Ftnmzj/679lLtAiiL+0a+1Y4MRRq1C6PhluvbXhqPiBMr/3yZbdHr+xAAAG18l81/nm43/0vjvoZy/8vXhsbytZS9EXFPROyLiHsjqmXvj4gH1lh/6yLJrfOf9Oq6AlulbP73Qr621Tz/S4siY6U8t6eaGU5Oni4vHMnfk4kY3p7lp7vU8f0rv37e6Vjj/C/bsvqLuWDejqtD25tfMz+7PHsnMTe69nHEgaF28Sc3VwKSiNgfEQfWWcfpJ78+1OlYa/yVpNtferE524N1pspXEU/U+n8lWuIvJN3XJ6d2RHnhyFRxVtzq518uv9mp/tv3/8bK+n9n2/P/ZvxjSeN67dLa67j8+2cdr2km13X+13dsy39/MLu8fH46Ylvyeq3Rjftn6q8t8kX5LP6Jw+3H/96ovxMHIyI7iR+MiIci4uG87x6JiEcj4nCnAFcifnz5sXc7Hd4K/T/f0v9jzUVa+r+e2Bate9onSmd++Lb5L9aTq/v8O1ZNTeR7VvP5t5p2re9sBgAAgP+eNCJ2R5JO3kyn6eRk7d/w74udaXlxafmpk4vvn5uvPSMwFsNpcaerdj+4dj90Or+sL/IzLfmj+X3jL0oj1fzk3GJ5vt/Bw4Db1WH8Z/4o9bt1wIbzvBYMLuMfBpfxD4PL+IfB1Wb8j/SjHcDma/f9/1E9WRndzMYAm6pl/Fv2gwHi+h8Gl/EPg6tx/Hd9/h64myyNxO0fkpfYyokdRVdubu2RboHYe5VINngU7O53gI2J4v/+7F64zx9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPfJvAAAA//+Zfec0") mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x1011084, &(0x7f0000001400)={[{@nofavordynmods}, {@none}, {}, {@xattr}, {@xattr}, {@favordynmods}], [{@fsmagic={'fsmagic', 0x3d, 0x2}}, {@flag='posixacl'}, {@permit_directio}, {@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') 17m2.365616804s ago: executing program 8 (id=877): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x4, 0xf0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x1, 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1a) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80000000}, 0x1c) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r8, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x490702, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 17m2.364582454s ago: executing program 36 (id=877): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x800, 0x4, 0xf0}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000100)={0x1, 0x4, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1a) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x80000000}, 0x1c) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x872bc000) r8 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedreceive(r8, &(0x7f0000000100)=""/98, 0x62, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x490702, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) 13m25.647629956s ago: executing program 9 (id=2345): creat(&(0x7f00000001c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) syslog(0x9, 0x0, 0x0) 13m25.473492852s ago: executing program 9 (id=2347): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xda, 0x5, 0xa, 0x20002, 0xa, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb01001800000004000000180000001800000006000000000000000000000d00000000000000000000000b020000000000002e000024a83958306c9b7174dbfc0b0b0a5fbd807a36b5f22e7f320db1144e3f9fd1f1cb80798db425875aaa00a31e6298c060f3083d0b88a2cb2934fa642a7b998a77ff175f37e8edfed510f79873e9eb4678cdb9e5498e9b7903303c099f97c95002703b12bd2432499b99eb12fd3c7aa0cdce97f75764506128a9cc"], 0x0, 0x36, 0x0, 0x9}, 0x28) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000019200)) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c000000200a010300000000000000000200000009000200737b7a30000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001040), 0x9a08, 0x10000) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f0000001080)) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4021, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000004c0)={r5, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r5, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r7, 0x1, 0x6}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000003000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000700000000000000000000008000"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000000c0)=r8}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r9, &(0x7f0000000040)}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000200)={0x80, 0x2b, 0x62, 0xe17, 0x9, 0xda}) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 13m24.985695407s ago: executing program 9 (id=2356): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r1 = getpgid(0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x4ff5, r2}, 0x38) r3 = timerfd_create(0x0, 0x0) read(r3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x9bfa41847a7039c4}}, 0x20) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = fsopen(0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) listen(r5, 0xda90) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) unshare(0x20000400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x8, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x5, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x3789f7c9, 0x6, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x5, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0xfffffffe, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xffffffec, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e8, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x2, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0xfffffffb, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x5, 0xebf, 0x9, 0x2, 0x81, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0x7, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x1, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0x2, 0x5, 0x3, 0x4, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(&(0x7f0000000240), 0x20000000000000dc, 0x0, 0x0, 0x30) 13m23.805411944s ago: executing program 9 (id=2365): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1cb) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffd54, 0x0}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, 0x0, 0x610) recvmsg$can_bcm(r1, &(0x7f0000003780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000001480)=""/4080, 0xff0}, {&(0x7f0000000300)=""/56, 0x38}, {&(0x7f00000024c0)=""/144, 0x90}, {&(0x7f0000002580)=""/138, 0x8a}, {0x0}, {0x0}], 0x6, &(0x7f0000003740)=""/21, 0x15}, 0x41) r2 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0x88f}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000a0000050900090073797a32000000003800048034000180090001007866726d000000002400028008000141000000100800024000000002050003000000000008000440000000030900010073797a31"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40084) mount$9p_rdma(&(0x7f00000013c0), 0x0, &(0x7f0000001440), 0x200800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0000000000004e20,ra=0x0000000000000003,\x00']) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500000000000000000022e0ffff09000100", @ANYRESOCT], 0x20}}, 0x2000c094) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001080)) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00df00"/25], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r6, 0xc99e3000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) 13m20.978576683s ago: executing program 9 (id=2369): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000100)="dc", 0x1) getsockopt$inet_opts(r0, 0x0, 0x400000000000009, &(0x7f0000937fed)=""/16, &(0x7f0000000080)=0x2b) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000019480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) ptrace(0x4206, 0x0) ptrace$setsig(0x4203, 0x0, 0x8, &(0x7f0000000140)={0x2, 0x8, 0x7}) r1 = syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000100)='pagemap\x00') pread64(r2, 0x0, 0x0, 0x1000000000) 13m20.686316143s ago: executing program 9 (id=2377): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c00000004002800001ab9f0d0000000000000000000"], 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="931ff3e5a5ad"], 0x1c}}, 0x4000054) 13m20.614338615s ago: executing program 37 (id=2377): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone(0x0, 0x0, 0xfffffffffffffe70, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0000886c00000004002800001ab9f0d0000000000000000000"], 0x19) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000400000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) arch_prctl$ARCH_GET_XCOMP_PERM(0x1022, &(0x7f0000000200)) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)=ANY=[], 0x0, 0x52, 0x0, 0x1}, 0x28) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x841}, 0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="931ff3e5a5ad"], 0x1c}}, 0x4000054) 1m0.158066917s ago: executing program 6 (id=7815): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2110044, &(0x7f0000000000)={[], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x65, 0x33, 0x30, 0x61, 0x36, 0x38, 0x39], 0x2d, [0x31, 0x32, 0x38, 0x62], 0x2d, [0x33, 0x32, 0x36, 0x63], 0x2d, [0x32, 0x37, 0x32, 0x62], 0x2d, [0x31, 0x32, 0x32, 0x62, 0x36, 0x39, 0x30, 0x30]}}}, {@obj_type={'obj_type', 0x3d, 'ext4\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x40e}}]}, 0x0, 0x57b, &(0x7f00000005c0)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WSuXVv/TBA2L0WHA72foc3GaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aTndF2TLGkWl9R8PnDK8+Sc5Huec87z5Hv+lAQwtCbSP4WIlyPiqyTi8JZ5o5HNnNhYbu3xzbl0SmJ9/ZM/kkiy19KljuyPej11MP2TRLwUET9/EXGy0Bi3urK6UCyXS0tZfaq2eG2qurJ66spi8XLpcunqzOzsmbdmZ9595+2etfX1C399+/GDD858eXztmx8fHrmXxLk4lM3L2/Gcbm+tTMREtk3G4ty2BadjTw/CDY6k3QJNjgH6byTr52ORjgGHYyTr9cB/362IWAeGVKL/w5DK84D83L5H58G7xqP3N06AGts/unFtJPbVz40OrCVPnRml57vjPYifxvjp9/v30inaXIe41YN4ALnbdyLi9Oho4/iXZONf9053cNVvYuPS06Zh+/6BfnqQ5j9vNMt/Cpv5TzTJfw7m946e0/bPaOz/hYc9CNNSmv+91zT/3Ry6xkey2v/qOd9YculKuXQ6Iv4fESdibG9an+4y/tb8L53S+HkumK3Hw9G9T79nvlgrdhmuwaM7Ea88yX+TaBj/99Vz3e37P90eFzqMcax0/9VW89q3f6veZ8DrP0S81nT/P7mjlTz7/uRU/XiYyo+KRn/ePfZLq/g7a3/vpfv/wLPbP55svV9b3XmM7/f9XWo1r9vjf0/yab2c30W9UazVlqYj9iQfNb4+8+S9eT1fPm3/iePPHv+aHf/7I+KzDtt/92jrNGgQ9v/8jvb/zgu/fvj5d63id7b/36yXTmSvdDL+dbqCz7PtAAAAAAAAYNAUIuJQJIXJzXKhMDm58XzH0ThQKFeqtZOXKstX5zeeAxmPsUJ+p/vwluchprPnYfP6zLb6bEQciYivR/bX65NzlfJ8vxsPAAAAAAAAAAAAAAAAAAAAA+Jgi///T/020u+1A/51fvIbhlfb/t+LX3oCBpLvfxhe+j8ML/0fhpf+D8NL/4fhpf/D8Grf/5MXsh7Ai+f7HwAAAAAAAAAAAAAAAAAAAAAAAAAAAHrqwvnz6bS+9vjmXFqfv76yvFC5fmq+VF2YXFyem5yrLF1bz8xVFtt9XrlSuTY9E8s3pmqlam2qurJ6cbGyfLV28cpi8XLpYmnshbQKAAAAAAAAAAAAAAAAAAAAdpfqyupCsVwuLSm0LJyNgViNrgtJu718NjsYugox2rd2jWSr3XyZQwOw5XdzoY+DEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs808AAAD//xnDMTg=") timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_settime(r0, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d33, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000064008188040f80ec59acbc0413a1f848290000005e140602000000000e00f6f775e453b1800000121f00", 0x2e}], 0x1}, 0x40000) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a34000000060a090400000000000000000200ffff0900020073797a32000000000900010073797a30000000000700074050111e0014000000110001"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r7, r7, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x34000}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)="9b", 0x1}], 0x1}}], 0x2, 0x0) mlockall(0x7) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031600d3", 0x5, 0x4, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r9, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 1m0.042188371s ago: executing program 6 (id=7821): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0x9, 0x600, 0x20b, 0x2, 0x8, 0x2]}, &(0x7f0000000140)=0x78) 59.080155111s ago: executing program 6 (id=7843): r0 = syz_io_uring_setup(0x7d89, &(0x7f0000000240)={0x0, 0x8001, 0x200, 0x0, 0x2e6}, &(0x7f0000000380)=0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'veth1_to_batadv\x00', &(0x7f0000000080)=@ethtool_ts_info}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_io_uring_modify_offsets$generic(r1, 0x0, 0x2c, 0x10000) syz_io_uring_modify_offsets$flags(0x0, 0x0, 0x38, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000011c0)={0x6, "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"}) io_setup(0x6, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14, 0x800) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={r0, &(0x7f0000000300)='nobarrier', 0x2, &(0x7f0000000340)={@align=0x4db26034, {0x6, 0x2, 0x5, 0x8000000000000000}}, 0xa, &(0x7f00000003c0)={@_ha_fsid}, &(0x7f0000000400)=0x9}) r8 = eventfd(0x0) io_submit(0x0, 0x2, &(0x7f0000000600)=[&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2, 0xf62, r6, &(0x7f0000000200), 0x0, 0x3, 0x0, 0x3, r7}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x6, r5, &(0x7f0000000500)="0ebd01c962f3ef1b5fa9cfa45454b701090af743f49467c275ff871282623919beaa84c67c6a195ced79e5ecfa2990d634ca738fcd22ecce97c38b68df89eb6269d97a5f581b718d307cb856bb96be50d2fb185e457312f3a25f1cb3b8d98eb1bcddb95a1381aa59daa9", 0x6a, 0x5, 0x0, 0x2, r8}]) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f0000000140)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1818e18, &(0x7f0000000080)={[{@nobarrier}, {@grpid}]}, 0x22, 0x655, &(0x7f00000012c0)="$eJzs3c9vG1kdAPDvjONskg2bLkKIjUBE4rAroU3jsmKBC93lQA8rsRJ7QIjDRk1Soro/lKQSLZVIJA4gFQkhrhXqAf4B7qh3bggJuHHhglQQKqIHqno1P9w4jh2nTWwnmc9HcvzmzdjvfT1+mfc8fp4AKmsh+5NGvBHx7OMkYq5j3WwUKxfK7R7/5+7l7JZEq/XdfyeRlHnt7ZPy/tVyYSoi/vR+xKdr+8vdvH3n6nKzVfhJxPmtazfPb96+8/b6teUrq1dWrzcufO2dd5e+3nin0VHRl5fVKavPpQ++8/lf/PSHX137c/PtJC7GR/Ufr0RXHMdlIRbiWRliZ/5ERLybJXq8LqfNGQih0mrl+7EeEZ+NuajlS4W5WL831soBQ9WqRbQOlgzaADitNG+oqnY/oD22P9w4+KN2oj68nsloPHqvGADtj3+i/MhhKg9y5nHSMTIqPks4dwzlZ2U8vTt1/+nd+fux53OIJ8/3zsQxlNPP9k5EfK5X/Elet3N5pFn86Z6xfhoRSxExWdbvW0eoQ9KRHsbnMAd5kfg790MW/8XyPst//yXL7/5Ya9TxA1BND98rD+Tb2dLu8S/re7T7P9Gj/zN79FMyua7nqI/6+Ne//9c+3k/l/Z60qx+W9Vk+7P2U+/rEf//5pV/1K7/o/83fb9+y8tt9wVF4tBMx3xX/z7Jgy/5PFn/SY/9nm3x8ce9zNfqMBr79l39d6lf+uONvPYh4s+f4Z7dXmqUOOD95fm29ubpU/O1Zxh/++IPf9Su/d/yvDCHS3rL9P9Mn/o79n3Y/LntNbvZ+yp3ujN9/+OBav/JnB+7/9J+TSTHenCxzfrSztbXRiJhMPig3KfOXt7Y2Lhwcb7HNk1Z+3yjif+tLvdv/nvd/V1TT7X+Zh3Dze1cf91v3Mu//jpPJz1qHrEM/Wfwrg/f/vvaf5f3ykGX87/u3vtBv3UHxTx8lMAAAAAAAAKigND8Hm6SLz9NpurhYzJf9TMykzRubW19eu3Hr+krEW/n3IetppEn+lZG5YjlZW2+uNsrvw7aXL3QtfyUiXo+IX9em8+XFyzeaK+MOHgAAAAAAAAAAAAAAAAAAAE6IV8v5/+3rVP+3Vsz/Bypi8AXm9l3/ATgjhnmBSeBky9v/QYf410ZXF2C0HP+hurR/qC7tH6pL+4fq0v6hurR/qK697f8f98ZWEWDkHP8BAAAA4Ex6/YsP/5ZExPY3pvNbZrJcVx9rzYBhe7E2XhtaPYDR06Khup6f+vcLP1A5h+j//3aquG+1hl4bYBySXpl556D8YdB+jf9hz0fu2jl63QAAAAAAAAAAAACAwptvmP8PVWXaH1TXEeb/++kAOOX89D9UlzE+MGAWf0z1WzFo/j8AAAAAAAAAAAAAcGxm81uSLpZzgWcjTRcXIz4VEeeinqytN1eXIuK1iPhrrf5KttwYd6UBAAAAAAAAAAAAAAAAAADgjNm8fefqcrO5utGZ+P++nLOdaF8FdfDGrUNsc2Dim/GCj4pk9C/LdESMfacMLTHRkZNEbGd7/kRUbGMzTkY18sSY/zEBAAAAAAAAAAAAAAAAAEAFdcw97m3+NyOuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM3u71/wckVmaKBxxq472JcccIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJxOnwQAAP//+jg4qw==") socket$inet_mptcp(0x2, 0x1, 0x106) 58.890167167s ago: executing program 6 (id=7847): r0 = socket$netlink(0x10, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, 0x0) socket$kcm(0x2, 0x2, 0x73) r1 = perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x800}, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000840)=@l2tp={0x2, 0x0, @multicast2, 0x5}, 0x80, 0x0}, 0xc801) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000040)=@phonet={0x23, 0x81, 0x0, 0x4}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xa3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 58.889800327s ago: executing program 6 (id=7848): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x4080, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) socket$kcm(0x21, 0x2, 0x2) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000540)={0xc, 0x6, 0x42, 0x0, 0x1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) 57.965584446s ago: executing program 6 (id=7856): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_clone(0x4000000, &(0x7f0000000140)="7003aeb9c3eba42d948b10c19f32a897dfc60e2860dfeeab413c72d5775733ad062fed344ef6c7439f586f119f2499baa6452e1dd2e9c6ffa7b5973bb4b3373f6e0aa51532b60428ebba965f0c", 0x4d, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="830da9fd44d3627787f7e9c1ca58506200491553a147d727a77640") pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x80000) (async) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x80000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}]}}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x8, 0x4) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60866}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 42.922296679s ago: executing program 38 (id=7856): socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) syz_clone(0x4000000, &(0x7f0000000140)="7003aeb9c3eba42d948b10c19f32a897dfc60e2860dfeeab413c72d5775733ad062fed344ef6c7439f586f119f2499baa6452e1dd2e9c6ffa7b5973bb4b3373f6e0aa51532b60428ebba965f0c", 0x4d, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="830da9fd44d3627787f7e9c1ca58506200491553a147d727a77640") pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x80000) (async) accept4$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000300)=0x1c, 0x80000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) (async) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000000c0)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xfc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x121484b, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@noxattr}]}}) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040)=0x8, 0x4) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, 0x0, 0x60866}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 3.257810847s ago: executing program 1 (id=8481): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 3.106508242s ago: executing program 1 (id=8483): pipe2$9p(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 2.2211005s ago: executing program 0 (id=8501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000000000000000000000007fffffff0001000000000071273fa79d93014b8e3381"], 0xfdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x1100, 0x0, 0x0, 0x2}, 0x48) 2.105161124s ago: executing program 0 (id=8502): syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x3ff, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000980), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="db1a0000000000000000030000002c00070073797374656d5f753a6f626a6563745f77ef45ff4873ceff6368696c645f657865635f743a7330001400060076657468315f6d61637654617000000008000400ac1414aa080005"], 0x64}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$unix(0x1, 0x5, 0x0) bind$unix(r3, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e23}, 0x6e) listen(r3, 0x0) write$selinux_attr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000003c0)={0x8000080, 0x0, 0x0, 0x0, {0x10}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.027495846s ago: executing program 5 (id=8503): ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r0, 0x0, 0x0, 0x400c050, &(0x7f0000000340)={0xa, 0x4e25, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, 0x0) sync_file_range(0xffffffffffffffff, 0x8, 0xbf, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202, 0x0) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x81100) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000480)=r2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff5000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44956) r3 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettfilter={0x34, 0x2e, 0x200, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x4548d6414dfe7da0}, {0x3, 0xf}, {0x1, 0xe}}, [{0x8, 0xb, 0x2}, {0x8, 0xb, 0xfac}]}, 0x34}, 0x1, 0x0, 0x0, 0x40005}, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x400080000}, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f00000006c0)={{r1}, 0x0, 0x18, @unused=[0x2, 0x7fff, 0xffff, 0x8], @devid}) r5 = socket(0x3, 0x800, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x59) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) getsockname$packet(r2, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000001740), 0x0, 0x4000000, 0x0, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) connect$pppl2tp(r2, 0x0, 0x0) shutdown(r2, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, &(0x7f00000018c0)=0x7, 0x4) r7 = accept(0xffffffffffffffff, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001a80)=0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001ac0)={0x0, 0x3}, &(0x7f0000001b00)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, 0x0, &(0x7f0000001b80)) 1.881310971s ago: executing program 5 (id=8507): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe654, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) sendmsg$inet6(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)="7f", 0x1}], 0x1}, 0x4040851) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r4, 0x1}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x2, 0x1, "fa"}, 0x9) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000400)='`', 0x1}], 0x1}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000100)={r7, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4a64, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x30, r8, 0x0, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x30}}, 0x0) 1.806012743s ago: executing program 7 (id=8508): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f00000002c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x40036d, 0xc000, 0x40c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x200000000000008e, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="010000000000ff7f1c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc79f, 0x830d}, 0x0, 0x2, 0x6d05, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000100)={0x400000000000027d, &(0x7f0000000000)=[{}]}) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000700)="5c00000011006bec9e3be35c6e17aa210725876c0d000000ba090000160af3653c001ac004000202080003000300e4002c000000ea2933afd81715daae69b556a705251e618294ff0051f60a84c9f4d4938037e786a6d00003000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000005000000030000000000000c02000000000000000100000d00000000feffffff0000000000000061000c1ae6a5dd03973991931488ec647a1329b07d80a9ff1006effbac0bbf231ad479da8f544894496e1bd8ed4df8df43cc73da56d64aa89759eebb6b02c25730af5e2883840dc9695a3b53496009932ab245fea874e6dc354bf4a4373be90a14fcc7690b808e8a3ec3c89d157da99aa599bd613876ba27d4591551a0dd47892b84c87d5bcdac08d0a9ec2a12dc941cbb"], &(0x7f0000000080)=""/166, 0x3d, 0xa6, 0x1}, 0x28) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x8000) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32=0x0, @ANYBLOB="0c801b001900000e"], 0x30}}, 0x0) 1.753601475s ago: executing program 4 (id=8509): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x0, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setrlimit(0x7, &(0x7f0000000000)={0x3, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3d, &(0x7f0000000000)={0x77359400}) 1.753302505s ago: executing program 4 (id=8510): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x12a, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x114, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast2, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x9, 0x1, 0x0, 0x1, 0x1, 0x6}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0xd, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x2, {0x6, 0x7, 0x2, 0x15, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "9af60dbdd5043e7ed2339f8b4856ce5d1f3928c4a9c26295ef174722cf5cba5412c79da7120fb7298dbc41e58f0f5ac12bf909a8329dbfc5ccd40746ea92eb642ef95a4f188c365a4b927640db8c5ea1bcc1008e194e4977288a999966ab5ccaf3605103c361e6296640f8d1bfaf3d0a558e3e5335a338d9779a4a5eca92fbbb842d29b088fef66efa62301ad6adebbe5e449ff753644b5dfaf412e9b5e0a23a67f8ef64977137d11a47bbc82255929df77ebd6ec68c489e974bea1a"}}}}}}, 0x0) 1.753187105s ago: executing program 7 (id=8511): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@nombcache}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") chdir(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) syz_open_dev$tty1(0xc, 0x4, 0x4) unshare(0x20000400) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xf, {"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", 0x1000}}, 0x1006) pselect6(0x40, &(0x7f0000000100)={0xfffffffffffffffe, 0x7, 0x8, 0x4, 0x4, 0xa, 0x21, 0x10000000000}, &(0x7f0000000040)={0x1f, 0xfffffffffffffffd, 0x80000005, 0x0, 0xffffffffffffffe3, 0x7, 0x3}, 0x0, 0x0, 0x0) 1.712211636s ago: executing program 4 (id=8512): prctl$PR_SET_NO_NEW_PRIVS(0x41, 0x1) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000b40)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000001ff, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0xffffffffffffff01}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000540)=0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xff}, 0x18) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000041) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000016c0)=@base={0x9, 0x4, 0x8, 0x8, 0x8}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, r3}, 0x38) 1.633888148s ago: executing program 7 (id=8513): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x102802, 0x3, 0x2, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) ioctl$KDDELIO(r2, 0x7040, 0x6) sync() sync() bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) r3 = syz_open_procfs(0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r3, 0x0}]) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000400)='.\x00', 0x0, &(0x7f0000000140)={0x0, 0x71, 0x140000}, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f0000009900)=[{{&(0x7f0000000180)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001cc0)=""/56, 0x38}], 0x3, &(0x7f0000001d40)=""/212, 0xd4}, 0x8}, {{&(0x7f0000001e40)=@hci, 0x80, &(0x7f0000002000)=[{&(0x7f0000001ec0)=""/57, 0x39}, {&(0x7f0000001f00)=""/236, 0xec}], 0x2, &(0x7f0000002040)=""/244, 0xf4}, 0x4}, {{&(0x7f0000002140)=@nfc_llcp, 0x80, &(0x7f00000022c0)=[{&(0x7f00000021c0)=""/215, 0xd7}], 0x1, &(0x7f0000002300)=""/4096, 0x1000}, 0x6}, {{&(0x7f0000003300)=@l2tp6={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000003380)=""/33, 0x21}, {&(0x7f00000033c0)=""/99, 0x63}, {&(0x7f0000003440)=""/167, 0xa7}, {&(0x7f0000003500)=""/28, 0x1c}, {&(0x7f0000003540)=""/73, 0x49}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/4, 0x4}, {&(0x7f0000004600)=""/243, 0xf3}, {&(0x7f0000004700)=""/4096, 0x1000}], 0x9, &(0x7f00000057c0)=""/126, 0x7e}, 0xfffffff3}, {{&(0x7f0000005840)=@nfc, 0x80, &(0x7f00000059c0)=[{&(0x7f00000058c0)=""/134, 0x86}, {&(0x7f0000005980)=""/12, 0xc}], 0x2, &(0x7f0000005a00)=""/242, 0xf2}, 0x8000}, {{&(0x7f0000005b00)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005b80)=""/100, 0x64}], 0x1, &(0x7f0000005c40)=""/4096, 0x1000}, 0x9}, {{0x0, 0x0, &(0x7f0000008040)=[{&(0x7f0000006c40)=""/142, 0x8e}, {&(0x7f0000006d00)=""/31, 0x1f}, {&(0x7f0000006d40)=""/4096, 0x1000}, {&(0x7f0000007d40)=""/221, 0xdd}, {&(0x7f0000007e40)=""/68, 0x44}, {&(0x7f0000007ec0)=""/3, 0x3}, {&(0x7f0000007f00)=""/6, 0x6}, {&(0x7f0000007f40)=""/209, 0xd1}], 0x8, &(0x7f00000080c0)=""/120, 0x78}, 0x4}, {{0x0, 0x0, &(0x7f0000009600)=[{&(0x7f0000008140)=""/210, 0xd2}, {&(0x7f0000008240)=""/16, 0x10}, {&(0x7f0000008280)=""/251, 0xfb}, {&(0x7f0000008380)=""/139, 0x8b}, {&(0x7f0000008440)=""/185, 0xb9}, {&(0x7f0000008500)=""/60, 0x3c}, {&(0x7f0000008540)=""/56, 0x38}, {&(0x7f0000008580)=""/4096, 0x1000}, {&(0x7f0000009580)=""/88, 0x58}], 0x9, &(0x7f00000096c0)=""/25, 0x19}, 0x1}, {{&(0x7f0000009700), 0x80, &(0x7f0000009880)=[{&(0x7f0000009780)=""/250, 0xfa}], 0x1, &(0x7f00000098c0)=""/3, 0x3}, 0x8}], 0x9, 0x2, 0x0) 1.604871429s ago: executing program 1 (id=8514): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10016, &(0x7f0000000280), 0x0, 0x654, &(0x7f0000006b80)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000540000000000000070000006b1199"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0404802c000100000308000340000000760800024000000012090001006e797a3000000000090002f272797a3200000000140000001100010000000000010000000000000a266835f68dc47b697b4464c066663dd6efd8"], 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4f, 0x4, @perf_config_ext={0x3, 0x8}, 0x11c0ad, 0x0, 0x0, 0x8, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'lo\x00'}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a7ec80adaf5235, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x10, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000100000000009500"/24], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000240)={0x1, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800006ebc1e2b00000000570000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r5, r5, 0x2f, 0x0, @void}, 0x10) socket(0x10, 0x3, 0x0) 1.501457443s ago: executing program 4 (id=8515): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x643c1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000", @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0xd5e, 0x6a4, &(0x7f0000000040)="17f41d1abbaad08e3bb618c1e016ffecaedd0b2ae6570c448a11cdc05bc3415352b8eddf732349b3beb33c954284311c4fe91f8b31855108dba81fac", 0x3c) r4 = socket(0x400000000010, 0x3, 0x0) r5 = getpid() r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r9, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r7, 0x0) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e21, 0xd31, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}}, 0x32) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}}, 0x0) 1.157595614s ago: executing program 1 (id=8516): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x0, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3d, &(0x7f0000000000)={0x77359400}) mq_timedreceive(r0, 0x0, 0x0, 0x200000200009, 0x0) 1.147930834s ago: executing program 0 (id=8517): socket$nl_route(0x10, 0x3, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1004, 0x100000000000d) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r2, 0x5408, 0x0) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r3 = syz_open_pts(r2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0xff) 1.065489287s ago: executing program 7 (id=8518): r0 = open(&(0x7f0000000240)='./file0\x00', 0xa0000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) perf_event_open(&(0x7f0000000040)={0x1, 0x5, 0x65, 0x81, 0x0, 0x0, 0x0, 0x5, 0x40041, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x19d01, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, r0, 0xb) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0) r2 = gettid() r3 = fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0) pread64(r3, &(0x7f0000001940)=""/4096, 0x1000, 0x102) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='ro\x00\xe5\xe1otcontext', &(0x7f00000001c0)='E\xe1\x85\x00\b\x9c\xbaV\xed\xf8\xce\x19\x13\xdd\x03\v\xe9\x0e\xbbp\xfa>\x107aj\xf6\xc0(z\xear8\xd2\xb9\x9b\b\xaa\x95\x89f\xe9\xbd\'\xcf?\x14sK\xa9QO\xd6:vT\xaa\xec\xd6\x176\xf9\x01+\xdbI\x16\xe0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\x13\xad\xd8{\xd2$55~\xea\xd6;\xd6\x06\x00WA:\xab0yJL\xe7S\xecuh\xb8\f\xcdjQ[\x8fJ:\x9e\xa1\xba|\xfe\x04\xdc\x82v\xa8:\x88\x8d-Ro\t,\xe3$K\x95\x9e\xbb\xb6\xf2\xc0\xc2\x01\x00\x00\x00\\\xe2\x12H\xc0\x11\xb3\n\x18\xb3!,;\x0f\xe7&\xb1\x96\x18\xe7qi\x11zC\x84G\xf2\xf5\x01\xdb\xdc\xc6\b,\x95?J8n\xcc\x06\'\xce>:\xab\xaf\xb8\xaax6m\x1b\x91\xf8\xa3\x90\xb4\x8e\x92\n\x1e2\x99f\x05\x01\xa5\x82\x90\xf4\xddw\xb7NF\"qq{\xe8\xb2:\x89\x9f\xca\rp16{c\x12`\n9\xe6\x87\xa2y\xb9\xfc\xab.k\x81%C\xfaT\xaf\x13\x83IhD\x9cy\xd8m\xd5P\"\xb8U\x86\xbe\xe4\xbf\xaa\b\x06\xabtot\xe0\a\x1d\xe7\xf2\x02$\x95\x8a\x98\xb4\x9a\xb0\xbb\x8a\x99\xd1#\x12\xbe\xd7\xf5\x9d\xdf/\xe0\xa1,pK\xd2;\xf9\x1dH\xac\xfaXL\xe0Xf\xe7J\xf1\x9f+n\xe6G\xe9/\xd9\xa8l\xa5\x99V\x96[\xbe\x1aN\xa2^\xec\xd5:9+\xd2\xab\x9e\xf7#;)Ud\np1)\xf3o\x0e\xccYZ\vI\'\x83\t1y\xe5\xf8\xd7\xcd\x04>\xbb\x8b^\x15r\'\xa4\x1fQa\x93g8', 0x0) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x28000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x7, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xc, 0xffffffffffffffff, 0xb) r5 = socket(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x148, 0xe74, 0x4, 0x3f9, 0x1}}) write(r5, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r5, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) timer_create(0x8, &(0x7f0000000080)={0x0, 0x11}, &(0x7f00000001c0)) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f0000b4bffc)=0x10, 0x4) write(r5, &(0x7f0000000000)='\"', 0x1) recvmmsg(r5, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x2283, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.055296937s ago: executing program 4 (id=8519): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) r0 = shmget$private(0x0, 0x2000, 0x400, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_RMID(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)=ANY=[@ANYBLOB="1929789a19ac838c2134b9d2f41850b2f6a3cad989fa2dcf8c5ef02b906d6920d0a716dda765356683943d0f64234746151a84cf98e21ccaf0bf65423aa2f9bb3ca9583962aff6829aff94b854da751994f37031d70800000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket(0x40000000000d, 0x5, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r6, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x22008001}, 0x4000) r7 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x106200, 0x1000, 0x20d6, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x80000001}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x8000) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(r5, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01002ace7000ffdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000814) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r10, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback, 0x80}, @in6={0xa, 0x400, 0xffffffff, @private0, 0x2}], 0x38) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) 953.70134ms ago: executing program 5 (id=8520): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000100)="84c4947c", 0x4}], 0x1}}], 0x1, 0x4000000) (fail_nth: 1) 758.850206ms ago: executing program 5 (id=8521): r0 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x0, 0x1, 0x56, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) r1 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r1}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) setrlimit(0x7, &(0x7f0000000000)={0x3, 0x3}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x3d, &(0x7f0000000000)={0x77359400}) 738.635047ms ago: executing program 5 (id=8522): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x12a, &(0x7f0000000e80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @val={@val={0x88a8, 0x4, 0x1, 0x4}, {0x8100, 0x6, 0x1, 0x1}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x3, 0x114, 0x66, 0x0, 0xe, 0x2f, 0x0, @multicast2, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x3, {{0x8, 0x1, 0x9, 0x1, 0x0, 0x1, 0x1, 0x6}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x1, {{0x8, 0x2, 0xd, 0x0, 0x1, 0x3, 0x0, 0x1}, 0x2, {0x6, 0x7, 0x2, 0x15, 0x0, 0x1, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "9af60dbdd5043e7ed2339f8b4856ce5d1f3928c4a9c26295ef174722cf5cba5412c79da7120fb7298dbc41e58f0f5ac12bf909a8329dbfc5ccd40746ea92eb642ef95a4f188c365a4b927640db8c5ea1bcc1008e194e4977288a999966ab5ccaf3605103c361e6296640f8d1bfaf3d0a558e3e5335a338d9779a4a5eca92fbbb842d29b088fef66efa62301ad6adebbe5e449ff753644b5dfaf412e9b5e0a23a67f8ef64977137d11a47bbc82255929df77ebd6ec68c489e974bea1a"}}}}}}, 0x0) 704.640248ms ago: executing program 4 (id=8523): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x3, @broadcast, 'macvlan1\x00'}}, 0x1e) sendmmsg(r2, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="ab", 0x5ea}], 0x1}}], 0x484, 0x24048084) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000080)={0x1, 0x0, 0x20000012, 0x17, 0x175, &(0x7f0000000580)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)=""/134, 0x86}, {&(0x7f0000000800)=""/199, 0xc7}, {&(0x7f0000000900)}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/103, 0x67}], 0x1, &(0x7f0000000dc0)=""/172, 0xac}, 0x6}, {{&(0x7f0000000b00)=@qipcrtr, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000b80)=""/36, 0x24}], 0x1, &(0x7f0000000e80)=""/215, 0xd7}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)}, 0xfffffff9}, {{&(0x7f0000000f80)=@x25, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001000)=""/242, 0xf2}, {&(0x7f0000001100)=""/32, 0x20}, {&(0x7f0000001140)=""/103, 0x67}], 0x3, &(0x7f0000001740)=""/50, 0x32}, 0x2}, {{&(0x7f0000001780)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002980)=[{&(0x7f0000001800)=""/4096, 0x1000}, {&(0x7f0000002800)=""/99, 0x63}, {&(0x7f0000002880)=""/214, 0xd6}], 0x3}, 0x45}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000940)=""/55, 0x37}, {&(0x7f0000002a00)=""/16, 0x10}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)=""/64, 0x40}, {&(0x7f0000002b00)=""/196, 0xc4}, {&(0x7f0000002c00)=""/138, 0x8a}, {&(0x7f0000002cc0)=""/248, 0xf8}], 0x7, &(0x7f0000002e40)=""/49, 0x31}, 0x10000}, {{&(0x7f0000002e80)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f0000003400)=[{&(0x7f0000002f00)=""/163, 0xa3}, {&(0x7f0000002fc0)=""/22, 0x16}, {&(0x7f0000000c00)=""/143, 0x8f}, {&(0x7f00000030c0)=""/228, 0xe4}, {&(0x7f00000031c0)=""/125, 0x7d}, {&(0x7f0000003240)=""/218, 0xda}, {&(0x7f0000003340)=""/184, 0xb8}], 0x7, &(0x7f0000003480)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000004480)=@alg, 0x80, &(0x7f00000055c0)=[{&(0x7f0000004500)=""/145, 0x91}, {&(0x7f00000045c0)=""/4096, 0x1000}], 0x2, &(0x7f0000005600)=""/24, 0x18}, 0x7}], 0x9, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xf, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000580)={'netdevsim0\x00'}) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b113000000000008510000001000000850000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) syz_clone(0x18080080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x2000, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) tgkill(r0, r0, 0x38) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x1052, &(0x7f0000000340)={0x0, 0xe87, 0x0, 0x10000002}, &(0x7f0000000600), &(0x7f00000000c0), &(0x7f00000006c0)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000051400030076657468315f6d61637674617000006ae4d14bcc83b1c23824000900"], 0xa4}}, 0x0) splice(0xffffffffffffffff, &(0x7f0000000280)=0x356, r4, &(0x7f00000002c0)=0x9, 0xf2, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000700)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r6, 0xa4e0, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @loopback, 0x10080bff}, @ib={0x1b, 0xffe, 0x100fff, {"4a50abf0c8ed50dd38fa0200de629163"}, 0x7ffffffffffffffe, 0x7, 0x4}}}, 0x118) 703.913748ms ago: executing program 5 (id=8524): pipe2$9p(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x100000000000022d) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000000), 0x4) r0 = creat(&(0x7f0000000140)='./file2\x00', 0x99) fallocate(r0, 0x0, 0xbf5, 0x2000402) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) 649.63959ms ago: executing program 7 (id=8525): syz_usb_connect$midi(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x499, 0x102b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4, 0x80, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x7}}}}}]}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 424.467677ms ago: executing program 0 (id=8526): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='b *'], 0xa) syz_mount_image$msdos(&(0x7f0000000480), &(0x7f0000000280)='./file1\x00', 0x200400, &(0x7f0000000580)=ANY=[@ANYRES64=0x0], 0x1, 0x24a, &(0x7f0000001fc0)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000c0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0xb7, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) fcntl$setpipe(r1, 0x408, 0x7) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000080)=0x5) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 277.883291ms ago: executing program 0 (id=8527): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x604200, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB], 0x40}}, 0x0) getrusage(0x1, &(0x7f0000000940)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000100000061114c0000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000200)='./file0/file0\x00', 0x40a, &(0x7f00000008c0)={[{@orlov}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x200000f8}}, {@grpquota}, {@nombcache}, {@noinit_itable}]}, 0x1, 0x463, &(0x7f0000000440)="$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") r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000003c0), 0x121000, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x300, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) write$P9_RLINK(r5, &(0x7f0000000040)={0x7, 0x47, 0x2}, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup, 0x20, 0x1, 0x1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000340)}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x9, 0x5, 0x7, 0xc1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001880), 0x0, 0x1, r6}, 0x38) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket(0x10, 0x3, 0x0) accept4$phonet_pipe(r2, 0x0, &(0x7f0000000a00), 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x70bd2c, 0x25dfdbfc, {0x2, 0x0, 0x20}, [@IFAL_ADDRESS={0x14, 0x1e, @dev={0xfe, 0x80, '\x00', 0x3e}}]}, 0x30}, 0x1, 0x0, 0x0, 0x44001}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a0001e08de765287481c30080"], 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x74, r9, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @mcast2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x74}}, 0x20000000) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000040)='.\x00', 0xe0, &(0x7f00000008c0)=ANY=[], 0xfd, 0x0, &(0x7f0000000000)) 154.275466ms ago: executing program 1 (id=8528): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x105006, &(0x7f00000002c0)={[{@quota}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@max_batch_time={'max_batch_time', 0x3d, 0x858c}}, {@acl}, {@debug}]}, 0x3, 0x43e, &(0x7f0000000d80)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0xfffffffffffffe71) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000370400000000ffdbdf2500000000", @ANYRES32=r0, @ANYBLOB="83450500000000002c0012800900010069706970000000001c00028006000f0002000000060011004e220000080001"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r0, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000002380)=ANY=[@ANYBLOB="60030000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="740102803800010024000c4448376e03711901006c625f73746174735f526566726573685f696e74657276616c00000000000000059b8c2d5393e8ac500004000100000040000100240001006c625f706f72745f73748c74730000000000000000000000000000f200000000050003000b00008aefe80008", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004004700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400020000003c000100000001006e6f746966795f70656572735f696e74657276616c0000000000000000000000000003000300000000000400080000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8000028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000064000100240001006d6fe765000000000000000000000000000000000000000000000000000000000500030005000000110004006163786976656261636b750100", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="b000028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400710f00002500010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600020008000100", @ANYRES32=r0, @ANYBLOB="4400028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB='\b\x00\a\x00\x00\x00\x00\x00'], 0x360}, 0x1, 0x0, 0x0, 0xc840}, 0xc084) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x2, &(0x7f0000000340)=[{0x5, 0x0, 0x0, 0x7fff0000}, {0x4, 0x4, 0x4}]}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) lstat(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000500)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001280)=@mangle={'mangle\x00', 0x2, 0x6, 0x630, 0x350, 0x280, 0x1b0, 0x280, 0x560, 0x560, 0x560, 0x560, 0x560, 0x560, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, @local, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2a}, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00', {}, {}, 0x0, 0x5, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0xf}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0xfc}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x690) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000480)={0x1, {{0x2, 0x4e23, @multicast1}}}, 0x88) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) 41.567199ms ago: executing program 0 (id=8529): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x643c1, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000", @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'xfrm0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) setsockopt(0xffffffffffffffff, 0xd5e, 0x6a4, &(0x7f0000000040)="17f41d1abbaad08e3bb618c1e016ffecaedd0b2ae6570c448a11cdc05bc3415352b8eddf732349b3beb33c954284311c4fe91f8b31855108dba81fac", 0x3c) r4 = socket(0x400000000010, 0x3, 0x0) r5 = getpid() r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r7 = openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r9, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000280)=[0x8], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r7, 0x0) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x4, 0x4, 0x3, {0xa, 0x4e21, 0xd31, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9}}}, 0x32) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r10, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r11, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002"], 0x84}}, 0x0) 20.28274ms ago: executing program 1 (id=8530): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x4031, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000200)={0x1, 0x2, 0xfffffffffffffffe, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) io_uring_enter(0xffffffffffffffff, 0x749d, 0x4, 0x2000, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1, 0x7, 0xf7, 0xd, 0x2, 0x6, 0x67a3, 0x39e, 0x40, 0x3c6, 0x2, 0xb47, 0x38, 0x3, 0x4, 0x5, 0x1}, [{0x5, 0x2, 0xdd5, 0x3, 0x6, 0x7, 0xb3, 0x6}, {0x70000000, 0x80000001, 0x7, 0x6, 0x0, 0x8, 0x3ff, 0x8}, {0x2, 0x3, 0x7, 0x8, 0x2, 0x8181, 0x2, 0x9}], "5066a60f9c9aab0e925532cfd24ce997a8163df0a805a8423a792fd50e95a53e9988d7524e5c2e9d3158051884e381a30a6f21b43ba08b8966872e0a67497d81ba1f4d5f47ac42c03a2f74d973bcbcbd5c1d95707eb6a0735415e310600ff62a59d5c5ccbeae0ecfe85273b0969902acba642838934c7beb8c0a050948c2e5cb1659e061971aa1e7dab6f30a045013f769530e131f9ada4f4fe91df824a2b3320b39637805f0b042d07e5b9bb2f121bcd450e6b2fe0b1b134ef3f293f77912aecf79395ff31ead815d1c40d665ce9e6a8b5e8c466b7d07de8e57e6d30bf18699387c5d00034b68d5826ff1"}, 0x1d3) r4 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r4, 0x29, 0x4b, &(0x7f0000000100), 0x4) fallocate(r3, 0x0, 0x1, 0x8ffff) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x5, 0x71, 0x8200, 0x8, 0x5, 0x8, 0x7c, 0x0, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={r5, 0xfffffff8}, 0x8) 0s ago: executing program 7 (id=8531): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x6b8, 0x328, 0x470, 0x470, 0x128, 0x470, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x5e8, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x82}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x2, 0x5}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2], 0x1}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x90, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x1, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x718) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2022, 0x36, 0x100, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4042, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x1, 0x0, 0x0, 0x4, 0x398, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_ifreq(r1, 0x8923, &(0x7f0000000080)={'lo\x00', @ifru_flags=0x4000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000500)={0x0, 0x200, 0x0, 'queue0\x00', 0x1fd}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000440)={0x0, 0x0, {0x1, 0x2, 0x0, 0x1, 0x1}, 0x801}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) write$sndseq(r3, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x9, 0x4}, {}, {}, @result}], 0x1c) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000080)) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000c00)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x428}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sched_getattr(r5, &(0x7f0000000040)={0x38}, 0x38, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x7, @none, 0x0, 0x2}, 0xe) listen(r6, 0xa1) accept4$bt_l2cap(r6, 0x0, 0x0, 0x800) kernel console output (not intermixed with test programs): Normal: 2866*4kB (UME) 4076*8kB (UME) 1928*16kB (UME) 1461*32kB (UME) 1073*64kB (UME) 843*128kB (UME) 805*256kB (UME) 682*512kB (UME) 587*1024kB (UME) 340*2048kB (UME) 534*4096kB (UM) = 4338184kB [ 1115.321982][T30528] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1115.331443][T30528] 54015 total pagecache pages [ 1115.336310][T30528] 13 pages in swap cache [ 1115.340664][T30528] Free swap = 124852kB [ 1115.344902][T30528] Total swap = 124996kB [ 1115.349090][T30528] 2097051 pages RAM [ 1115.352960][T30528] 0 pages HighMem/MovableOnly [ 1115.357920][T30528] 81643 pages reserved [ 1115.577609][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7641'. [ 1115.717632][T30549] hub 8-0:1.0: USB hub found [ 1115.738775][T30549] hub 8-0:1.0: 8 ports detected [ 1115.835219][T30563] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1115.934345][T30566] netlink: 52 bytes leftover after parsing attributes in process `syz.6.7652'. [ 1116.089963][ T28] audit: type=1326 audit(2000000987.397:10235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.115864][ T28] audit: type=1326 audit(2000000987.397:10236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.164195][ T28] audit: type=1326 audit(2000000987.397:10237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.196532][ T28] audit: type=1326 audit(2000000987.397:10238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.222921][ T28] audit: type=1326 audit(2000000987.397:10239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.249061][ T28] audit: type=1326 audit(2000000987.397:10240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.275627][ T28] audit: type=1326 audit(2000000987.397:10241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.301906][ T28] audit: type=1326 audit(2000000987.397:10242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.328951][ T28] audit: type=1326 audit(2000000987.397:10243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30570 comm="syz.6.7654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1116.562766][T30579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7657'. [ 1116.884263][T30588] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7661'. [ 1118.620765][T30626] netlink: 192 bytes leftover after parsing attributes in process `syz.6.7674'. [ 1119.313642][T30654] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1119.522263][T30670] netlink: 192 bytes leftover after parsing attributes in process `syz.7.7688'. [ 1119.649957][T30674] hub 8-0:1.0: USB hub found [ 1119.664782][T30674] hub 8-0:1.0: 8 ports detected [ 1120.493074][T28742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.503729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.512498][T28742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.543949][ T28] kauditd_printk_skb: 114 callbacks suppressed [ 1120.543965][ T28] audit: type=1326 audit(2000000991.857:10358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30710 comm="syz.5.7702" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x0 [ 1120.677041][T30713] netlink: 192 bytes leftover after parsing attributes in process `syz.6.7703'. [ 1120.798314][T30728] hub 8-0:1.0: USB hub found [ 1120.803122][T30728] hub 8-0:1.0: 8 ports detected [ 1120.893438][ T28] audit: type=1326 audit(2000000992.207:10359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1120.919563][ T28] audit: type=1326 audit(2000000992.207:10360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1120.945272][ T28] audit: type=1326 audit(2000000992.217:10361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1120.970777][ T28] audit: type=1326 audit(2000000992.217:10362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.000477][ T28] audit: type=1326 audit(2000000992.217:10363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.040978][ T28] audit: type=1326 audit(2000000992.217:10364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.122919][T30735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7707'. [ 1121.145023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.192305][ T28] audit: type=1326 audit(2000000992.497:10365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.218082][ T28] audit: type=1326 audit(2000000992.497:10366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.279657][T15724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.398935][ T28] audit: type=1326 audit(2000000992.717:10367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30732 comm="syz.6.7706" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbe2c6dce59 code=0x7ffc0000 [ 1121.887386][T30751] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7712'. [ 1121.973694][T15724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.045268][T30756] netlink: 192 bytes leftover after parsing attributes in process `syz.6.7714'. [ 1122.123467][T30761] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7716'. [ 1122.189196][T30766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7718'. [ 1122.366788][T30773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7721'. [ 1122.811325][T30785] netlink: 'syz.5.7725': attribute type 7 has an invalid length. [ 1123.113880][T30792] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1123.142324][T30792] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7728'. [ 1123.165684][T30787] netlink: 192 bytes leftover after parsing attributes in process `syz.7.7726'. [ 1124.579528][T30816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1124.599332][T30816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1124.618971][T30816] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7734'. [ 1124.928808][T30830] netlink: 192 bytes leftover after parsing attributes in process `syz.5.7739'. [ 1125.112815][T30837] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7741'. [ 1125.143111][T30837] tc_dump_action: action bad kind [ 1125.231425][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.244038][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.251551][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.258987][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x4 [ 1125.266395][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.273775][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.281208][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.288607][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x2 [ 1125.295998][T28742] hid-generic 00A0:0006:0003.0009: unknown main item tag 0x0 [ 1125.304494][T28742] hid-generic 00A0:0006:0003.0009: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1125.332571][T30842] fido_id[30842]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1125.465879][T30846] netlink: 592 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1125.540033][T30846] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1125.569804][T30846] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1125.589994][T30846] netlink: 60 bytes leftover after parsing attributes in process `syz.7.7744'. [ 1125.671335][T30854] warn_alloc: 5 callbacks suppressed [ 1125.671375][T30854] syz.6.7743: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 1125.691902][T30854] CPU: 0 UID: 0 PID: 30854 Comm: syz.6.7743 Tainted: G W syzkaller #0 PREEMPT(full) [ 1125.691947][T30854] Tainted: [W]=WARN [ 1125.691957][T30854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1125.691972][T30854] Call Trace: [ 1125.691979][T30854] [ 1125.691987][T30854] __dump_stack+0x1d/0x30 [ 1125.692064][T30854] dump_stack_lvl+0x95/0xd0 [ 1125.692089][T30854] dump_stack+0x15/0x1b [ 1125.692109][T30854] warn_alloc+0x145/0x1c0 [ 1125.692139][T30854] ? futex_unqueue+0xc5/0xf0 [ 1125.692180][T30854] __vmalloc_node_range_noprof+0xa5/0x11c0 [ 1125.692215][T30854] ? perf_trace_run_bpf_submit+0xac/0x110 [ 1125.692324][T30854] ? perf_trace_kmalloc+0xeb/0x130 [ 1125.692429][T30854] vmalloc_user_noprof+0x7d/0xb0 [ 1125.692459][T30854] ? xskq_create+0x80/0xe0 [ 1125.692494][T30854] xskq_create+0x80/0xe0 [ 1125.692526][T30854] xsk_init_queue+0x70/0xb0 [ 1125.692566][T30854] xsk_setsockopt+0x3f5/0x640 [ 1125.692709][T30854] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1125.692814][T30854] __sys_setsockopt+0x184/0x200 [ 1125.692840][T30854] __x64_sys_setsockopt+0x64/0x80 [ 1125.692865][T30854] x64_sys_call+0x2327/0x3020 [ 1125.692896][T30854] do_syscall_64+0x12c/0x3b0 [ 1125.693000][T30854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.693076][T30854] RIP: 0033:0x7fbe2c6dce59 [ 1125.693098][T30854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1125.693124][T30854] RSP: 002b:00007fbe2b0f5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1125.693151][T30854] RAX: ffffffffffffffda RBX: 00007fbe2c956180 RCX: 00007fbe2c6dce59 [ 1125.693171][T30854] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1125.693246][T30854] RBP: 00007fbe2c772d6f R08: 0000000000000004 R09: 0000000000000000 [ 1125.693263][T30854] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1125.693278][T30854] R13: 00007fbe2c956218 R14: 00007fbe2c956180 R15: 00007ffef0da1588 [ 1125.693298][T30854] [ 1125.693323][T30854] Mem-Info: [ 1125.895912][T30854] active_anon:45273 inactive_anon:8 isolated_anon:0 [ 1125.895912][T30854] active_file:14296 inactive_file:3425 isolated_file:0 [ 1125.895912][T30854] unevictable:3 dirty:368 writeback:0 [ 1125.895912][T30854] slab_reclaimable:3989 slab_unreclaimable:26221 [ 1125.895912][T30854] mapped:35598 shmem:38030 pagetables:3655 [ 1125.895912][T30854] sec_pagetables:0 bounce:0 [ 1125.895912][T30854] kernel_misc_reclaimable:0 [ 1125.895912][T30854] free:1828465 free_pcp:4536 free_cma:0 [ 1125.941232][T30854] Node 0 active_anon:181092kB inactive_anon:32kB active_file:57184kB inactive_file:13700kB unevictable:12kB isolated(anon):0kB isolated(file):0kB mapped:142392kB dirty:1472kB writeback:0kB shmem:152120kB kernel_stack:5008kB pagetables:14620kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1125.971944][T30854] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1126.001717][T30854] lowmem_reserve[]: 0 2878 7857 7857 [ 1126.007344][T30854] Node 0 DMA32 free:2944408kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948036kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 1126.038919][T30854] lowmem_reserve[]: 0 0 4978 4978 [ 1126.044239][T30854] Node 0 Normal free:4354092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:181092kB inactive_anon:32kB active_file:57184kB inactive_file:13700kB unevictable:12kB writepending:1472kB zspages:0kB present:5242880kB managed:5098236kB mlocked:12kB bounce:0kB free_pcp:14516kB local_pcp:10120kB free_cma:0kB [ 1126.077972][T30854] lowmem_reserve[]: 0 0 0 0 [ 1126.082746][T30854] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1126.096229][T30854] Node 0 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944408kB [ 1126.112971][T30854] Node 0 Normal: 2378*4kB (UE) 3190*8kB (UME) 1351*16kB (UME) 1456*32kB (UME) 1089*64kB (UME) 867*128kB (UME) 805*256kB (UME) 693*512kB (UME) 597*1024kB (UME) 347*2048kB (UME) 534*4096kB (UM) = 4354056kB [ 1126.134203][T30854] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1126.143673][T30854] 55760 total pagecache pages [ 1126.148490][T30854] 13 pages in swap cache [ 1126.152762][T30854] Free swap = 124852kB [ 1126.156992][T30854] Total swap = 124996kB [ 1126.161206][T30854] 2097051 pages RAM [ 1126.165079][T30854] 0 pages HighMem/MovableOnly [ 1126.169828][T30854] 81643 pages reserved [ 1126.190012][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 1126.190039][ T28] audit: type=1107 audit(2000000996.946:10375): pid=30852 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1126.190039][ T28] SbXPd]hooPqX QI' [ 1126.703360][T30874] netlink: 192 bytes leftover after parsing attributes in process `syz.5.7751'. [ 1128.789673][T30883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.474981][T30883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.763601][T30883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.772167][T30883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.840132][T30892] __nla_validate_parse: 2 callbacks suppressed [ 1129.840176][T30892] netlink: 592 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1129.987602][ T28] audit: type=1107 audit(2000001001.305:10376): pid=30903 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1129.987602][ T28] SbXPd]hooPqX QI' [ 1130.022429][T30896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1130.032846][T30896] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1130.042406][T30896] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7758'. [ 1130.139061][T30912] SELinux: security_context_str_to_sid (~) failed with errno=-22 [ 1130.163646][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.171438][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.196137][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.204011][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.211776][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.219540][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.227283][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.235119][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.242871][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.250633][T30912] netlink: 'syz.1.7766': attribute type 1 has an invalid length. [ 1130.264527][T30914] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7767'. [ 1131.536533][T30936] sctp: [Deprecated]: syz.7.7772 (pid 30936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.536533][T30936] Use struct sctp_sack_info instead [ 1131.604416][T30935] sctp: [Deprecated]: syz.7.7772 (pid 30935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1131.604416][T30935] Use struct sctp_sack_info instead [ 1131.705303][ T28] audit: type=1107 audit(2000001003.015:10377): pid=30944 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1131.705303][ T28] SbXPd]hooPqX QI' [ 1131.829764][T30951] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7778'. [ 1132.105030][T30962] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7781'. [ 1132.265131][T30970] netlink: 164 bytes leftover after parsing attributes in process `syz.5.7784'. [ 1132.708760][ T28] audit: type=1400 audit(2000001004.025:10378): avc: denied { map } for pid=30980 comm="syz.1.7787" path="socket:[104249]" dev="sockfs" ino=104249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1132.733554][ T28] audit: type=1400 audit(2000001004.025:10379): avc: denied { read } for pid=30980 comm="syz.1.7787" path="socket:[104249]" dev="sockfs" ino=104249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 1133.274940][T31006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7795'. [ 1133.330124][T31008] netlink: 176 bytes leftover after parsing attributes in process `syz.7.7792'. [ 1133.554934][ T28] audit: type=1400 audit(2000001004.865:10380): avc: denied { append } for pid=31005 comm="syz.5.7795" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1133.792273][ T28] audit: type=1400 audit(2000001004.985:10381): avc: denied { ioctl } for pid=31005 comm="syz.5.7795" path="socket:[104328]" dev="sockfs" ino=104328 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1134.144333][T31019] llc_conn_state_process: llc_conn_service failed [ 1134.912396][T31034] __nla_validate_parse: 5 callbacks suppressed [ 1134.912823][T31034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7804'. [ 1135.157548][ T28] audit: type=1400 audit(2000001006.475:10382): avc: denied { rename } for pid=31046 comm="syz.7.7808" name="file0" dev="tmpfs" ino=1822 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1135.181243][T31048] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7808'. [ 1135.277092][T31063] validate_nla: 95 callbacks suppressed [ 1135.277115][T31063] netlink: 'syz.4.7816': attribute type 1 has an invalid length. [ 1135.310547][T31063] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7816'. [ 1135.498702][T31086] FAULT_INJECTION: forcing a failure. [ 1135.498702][T31086] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1135.533794][T31086] CPU: 0 UID: 0 PID: 31086 Comm: syz.4.7824 Tainted: G W syzkaller #0 PREEMPT(full) [ 1135.533841][T31086] Tainted: [W]=WARN [ 1135.533894][T31086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1135.533962][T31086] Call Trace: [ 1135.533973][T31086] [ 1135.533985][T31086] __dump_stack+0x1d/0x30 [ 1135.534021][T31086] dump_stack_lvl+0x95/0xd0 [ 1135.534053][T31086] dump_stack+0x15/0x1b [ 1135.534084][T31086] should_fail_ex+0x263/0x280 [ 1135.534182][T31086] should_fail+0xb/0x20 [ 1135.534218][T31086] should_fail_usercopy+0x1a/0x20 [ 1135.534322][T31086] _copy_from_user+0x1c/0xb0 [ 1135.534369][T31086] ucma_write+0xd8/0x260 [ 1135.534412][T31086] ? __pfx_ucma_write+0x10/0x10 [ 1135.534470][T31086] vfs_write+0x269/0x9f0 [ 1135.534513][T31086] ? __rcu_read_unlock+0x4e/0x70 [ 1135.534546][T31086] ? __fget_files+0x184/0x1c0 [ 1135.534580][T31086] ksys_write+0xdc/0x1a0 [ 1135.534671][T31086] __x64_sys_write+0x40/0x50 [ 1135.534753][T31086] x64_sys_call+0x27e1/0x3020 [ 1135.534838][T31086] do_syscall_64+0x12c/0x3b0 [ 1135.534886][T31086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.534918][T31086] RIP: 0033:0x7fe44453ce59 [ 1135.534941][T31086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.535027][T31086] RSP: 002b:00007fe442f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1135.535058][T31086] RAX: ffffffffffffffda RBX: 00007fe4447b5fa0 RCX: 00007fe44453ce59 [ 1135.535084][T31086] RDX: 0000000000000118 RSI: 0000200000000140 RDI: 0000000000000003 [ 1135.535105][T31086] RBP: 00007fe442f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.535124][T31086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.535144][T31086] R13: 00007fe4447b6038 R14: 00007fe4447b5fa0 R15: 00007ffca3e129d8 [ 1135.535191][T31086] [ 1136.068876][ T28] audit: type=1400 audit(2000001007.385:10383): avc: denied { append } for pid=31102 comm="syz.4.7831" name="loop2" dev="devtmpfs" ino=1999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1136.122535][T31106] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7832'. [ 1136.369599][T31126] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7838'. [ 1136.378948][ T28] audit: type=1400 audit(2000001007.685:10384): avc: denied { read } for pid=31135 comm="syz.4.7845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1136.400114][T31126] random: crng reseeded on system resumption [ 1137.246598][T31150] FAULT_INJECTION: forcing a failure. [ 1137.246598][T31150] name failslab, interval 1, probability 0, space 0, times 0 [ 1137.259655][T31150] CPU: 1 UID: 0 PID: 31150 Comm: syz.7.7850 Tainted: G W syzkaller #0 PREEMPT(full) [ 1137.259700][T31150] Tainted: [W]=WARN [ 1137.259710][T31150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1137.259757][T31150] Call Trace: [ 1137.259767][T31150] [ 1137.259839][T31150] __dump_stack+0x1d/0x30 [ 1137.259872][T31150] dump_stack_lvl+0x95/0xd0 [ 1137.259900][T31150] dump_stack+0x15/0x1b [ 1137.259969][T31150] should_fail_ex+0x263/0x280 [ 1137.260007][T31150] should_failslab+0x8c/0xb0 [ 1137.260049][T31150] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1137.260161][T31150] ? do_getname+0x2e/0x1c0 [ 1137.260188][T31150] do_getname+0x2e/0x1c0 [ 1137.260213][T31150] __se_sys_symlinkat+0x32/0x1b0 [ 1137.260256][T31150] __x64_sys_symlinkat+0x43/0x50 [ 1137.260302][T31150] x64_sys_call+0x2b7d/0x3020 [ 1137.260401][T31150] do_syscall_64+0x12c/0x3b0 [ 1137.260442][T31150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1137.260472][T31150] RIP: 0033:0x7f436120ce59 [ 1137.260492][T31150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1137.260535][T31150] RSP: 002b:00007f435fc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1137.260613][T31150] RAX: ffffffffffffffda RBX: 00007f4361485fa0 RCX: 00007f436120ce59 [ 1137.260632][T31150] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 1137.260651][T31150] RBP: 00007f435fc67090 R08: 0000000000000000 R09: 0000000000000000 [ 1137.260669][T31150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1137.260686][T31150] R13: 00007f4361486038 R14: 00007f4361485fa0 R15: 00007ffc8cf4e458 [ 1137.260712][T31150] [ 1137.613952][T31186] vlan3: entered promiscuous mode [ 1137.623936][T31186] bridge0: entered promiscuous mode [ 1137.836970][T31188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.844268][T31188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.943693][T31188] bridge_slave_0: left allmulticast mode [ 1137.957891][T31188] bridge_slave_0: left promiscuous mode [ 1137.970195][T31188] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.994296][T31188] bridge_slave_1: left allmulticast mode [ 1138.006361][T31188] bridge_slave_1: left promiscuous mode [ 1138.017540][T31188] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.040091][T31188] bond0: (slave bond_slave_0): Releasing backup interface [ 1138.062361][T31188] bond0: (slave bond_slave_1): Releasing backup interface [ 1138.088733][T31188] team0: Port device team_slave_0 removed [ 1138.108852][T31188] team0: Port device team_slave_1 removed [ 1138.124858][T31188] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1138.144127][T31188] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1138.159661][T31188] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1138.171215][T31188] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.185193][T31188] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1138.212119][T31206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1138.220072][T31206] 8021q: adding VLAN 0 to HW filter on device team0 [ 1138.229698][T31206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1138.251678][T31206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1138.262423][T31206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1138.274674][T31206] veth1_macvtap: left promiscuous mode [ 1138.280921][T31206] veth0_macvtap: left promiscuous mode [ 1138.287230][T31206] veth1_macvtap: entered promiscuous mode [ 1138.295782][T31206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1138.304337][T31206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1138.312929][T31206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.321450][T31206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1138.330871][T31206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1138.340317][T31206] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1138.377644][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.387573][T16481] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.411399][T16481] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1138.428349][T16481] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.437534][T16481] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1138.451947][T16481] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.479670][T16481] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1138.496068][T31214] FAULT_INJECTION: forcing a failure. [ 1138.496068][T31214] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.512026][T16481] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.522211][T16481] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1138.531620][T16482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.540290][T16482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.612130][T31214] CPU: 1 UID: 0 PID: 31214 Comm: syz.1.7872 Tainted: G W syzkaller #0 PREEMPT(full) [ 1138.612178][T31214] Tainted: [W]=WARN [ 1138.612188][T31214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1138.612205][T31214] Call Trace: [ 1138.612214][T31214] [ 1138.612277][T31214] __dump_stack+0x1d/0x30 [ 1138.612305][T31214] dump_stack_lvl+0x95/0xd0 [ 1138.612364][T31214] dump_stack+0x15/0x1b [ 1138.612389][T31214] should_fail_ex+0x263/0x280 [ 1138.612427][T31214] should_failslab+0x8c/0xb0 [ 1138.612509][T31214] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1138.612551][T31214] ? skb_clone+0x151/0x1f0 [ 1138.612682][T31214] skb_clone+0x151/0x1f0 [ 1138.612737][T31214] __netlink_deliver_tap+0x2c9/0x500 [ 1138.612787][T31214] netlink_unicast+0x653/0x680 [ 1138.612822][T31214] netlink_sendmsg+0x5c8/0x6f0 [ 1138.612910][T31214] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1138.613001][T31214] ____sys_sendmsg+0x563/0x5b0 [ 1138.613037][T31214] ___sys_sendmsg+0x195/0x1e0 [ 1138.613174][T31214] __x64_sys_sendmsg+0xd4/0x160 [ 1138.613211][T31214] x64_sys_call+0x194c/0x3020 [ 1138.613363][T31214] do_syscall_64+0x12c/0x3b0 [ 1138.613418][T31214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.613528][T31214] RIP: 0033:0x7fafa0fdce59 [ 1138.613550][T31214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.613579][T31214] RSP: 002b:00007faf9fa2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1138.613600][T31214] RAX: ffffffffffffffda RBX: 00007fafa1255fa0 RCX: 00007fafa0fdce59 [ 1138.613641][T31214] RDX: 0000000000000000 RSI: 00002000000035c0 RDI: 0000000000000003 [ 1138.613659][T31214] RBP: 00007faf9fa2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.613677][T31214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.613690][T31214] R13: 00007fafa1256038 R14: 00007fafa1255fa0 R15: 00007ffd56de58f8 [ 1138.613714][T31214] [ 1138.813628][ T4918] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.110550][T31224] netlink: 'syz.1.7875': attribute type 1 has an invalid length. [ 1139.124898][T15724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1139.148435][T31224] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1139.149730][T31227] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7877'. [ 1139.186751][T31228] bond3: (slave ip6erspan0): making interface the new active one [ 1139.196740][T31228] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1139.216978][T31232] netlink: 592 bytes leftover after parsing attributes in process `syz.4.7878'. [ 1139.380946][T31237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7880'. [ 1140.388465][T31268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7891'. [ 1140.453029][T31273] netlink: 592 bytes leftover after parsing attributes in process `syz.5.7892'. [ 1140.573754][T31278] hub 8-0:1.0: USB hub found [ 1140.583206][T31278] hub 8-0:1.0: 8 ports detected [ 1141.213700][T31297] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7902'. [ 1141.291449][T31301] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1141.320483][T28482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.389895][T31301] team0: Mode changed to "loadbalance" [ 1141.412762][T31301] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7904'. [ 1141.768256][T31308] random: crng reseeded on system resumption [ 1141.936120][T31315] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1142.132896][T31317] hub 8-0:1.0: USB hub found [ 1142.137886][T31317] hub 8-0:1.0: 8 ports detected [ 1142.340559][T31321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7908'. [ 1142.598242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.880786][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.890944][T31323] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7911'. [ 1143.533988][T31334] nfs4: Unknown parameter 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1143.695979][T31352] netlink: 592 bytes leftover after parsing attributes in process `syz.1.7920'. [ 1143.715333][T31350] -1: renamed from syzkaller0 [ 1143.744863][T31350] netlink: 'syz.7.7919': attribute type 4 has an invalid length. [ 1144.665115][ T28] audit: type=1400 audit(2000001015.604:10385): avc: denied { ioctl } for pid=31362 comm="syz.1.7924" path="socket:[106029]" dev="sockfs" ino=106029 ioctlcmd=0x8901 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1144.990206][T31375] xt_hashlimit: overflow, try lower: 18446744073709551614/4 [ 1145.006856][T31375] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7928'. [ 1145.135409][T31387] Set syz1 is full, maxelem 65536 reached [ 1145.673887][T31371] syz.4.7925 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1145.688054][T31371] CPU: 0 UID: 0 PID: 31371 Comm: syz.4.7925 Tainted: G W syzkaller #0 PREEMPT(full) [ 1145.688086][T31371] Tainted: [W]=WARN [ 1145.688097][T31371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1145.688110][T31371] Call Trace: [ 1145.688117][T31371] [ 1145.688125][T31371] __dump_stack+0x1d/0x30 [ 1145.688264][T31371] dump_stack_lvl+0x95/0xd0 [ 1145.688284][T31371] dump_stack+0x15/0x1b [ 1145.688377][T31371] dump_header+0x80/0x240 [ 1145.688398][T31371] oom_kill_process+0x295/0x350 [ 1145.688428][T31371] out_of_memory+0x97d/0xb80 [ 1145.688507][T31371] try_charge_memcg+0x62f/0xa10 [ 1145.688541][T31371] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1145.688564][T31371] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1145.688628][T31371] alloc_pages_mpol+0xb3/0x260 [ 1145.688651][T31371] alloc_pages_noprof+0x8f/0x140 [ 1145.688674][T31371] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1145.688704][T31371] __kvmalloc_node_noprof+0x3d4/0x640 [ 1145.688800][T31371] ? futex_hash_allocate+0x190/0x9a0 [ 1145.688830][T31371] ? futex_hash_allocate+0x190/0x9a0 [ 1145.688896][T31371] futex_hash_allocate+0x190/0x9a0 [ 1145.689003][T31371] futex_hash_prctl+0xd8/0xf0 [ 1145.689032][T31371] __se_sys_prctl+0x4f4/0x1400 [ 1145.689123][T31371] __x64_sys_prctl+0x67/0x80 [ 1145.689147][T31371] x64_sys_call+0x2533/0x3020 [ 1145.689170][T31371] do_syscall_64+0x12c/0x3b0 [ 1145.689250][T31371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1145.689271][T31371] RIP: 0033:0x7fe44453ce59 [ 1145.689286][T31371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1145.689359][T31371] RSP: 002b:00007fe442f8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1145.689378][T31371] RAX: ffffffffffffffda RBX: 00007fe4447b5fa0 RCX: 00007fe44453ce59 [ 1145.689405][T31371] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1145.689417][T31371] RBP: 00007fe4445d2d6f R08: 0000000000000000 R09: 0000000000000000 [ 1145.689429][T31371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1145.689441][T31371] R13: 00007fe4447b6038 R14: 00007fe4447b5fa0 R15: 00007ffca3e129d8 [ 1145.689567][T31371] [ 1145.689574][T31371] memory: usage 307200kB, limit 307200kB, failcnt 959 [ 1145.931014][T31371] memory+swap: usage 307400kB, limit 9007199254740988kB, failcnt 0 [ 1145.939035][T31371] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 1145.946419][T31371] Memory cgroup stats for /syz4: [ 1145.946709][T31371] cache 0 [ 1145.954766][T31371] rss 0 [ 1145.963634][T31371] shmem 0 [ 1145.966615][T31371] mapped_file 0 [ 1145.970128][T31371] dirty 0 [ 1145.973420][T31371] writeback 0 [ 1145.976879][T31371] workingset_refault_anon 670 [ 1145.984867][T31397] netlink: 592 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1145.992016][T31371] workingset_refault_file 7277 [ 1145.998730][T31371] swap 204800 [ 1146.002076][T31371] swapcached 207945728 [ 1146.006196][T31371] pgpgin 1179568 [ 1146.009757][T31371] pgpgout 1179563 [ 1146.013386][T31371] pgfault 1248907 [ 1146.017108][T31371] pgmajfault 278 [ 1146.020664][T31371] inactive_anon 0 [ 1146.024348][T31371] active_anon 20480 [ 1146.028193][T31371] inactive_file 0 [ 1146.036942][T31371] active_file 0 [ 1146.041255][T31371] unevictable 0 [ 1146.044735][T31371] hierarchical_memory_limit 314572800 [ 1146.050134][T31371] hierarchical_memsw_limit 9223372036854771712 [ 1146.056377][T31371] total_cache 0 [ 1146.060040][T31371] total_rss 0 [ 1146.063351][T31371] total_shmem 0 [ 1146.066876][T31371] total_mapped_file 0 [ 1146.067738][T31397] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1146.070869][T31371] total_dirty 0 [ 1146.070882][T31371] total_writeback 0 [ 1146.079823][T31397] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1146.079857][T31397] netlink: 60 bytes leftover after parsing attributes in process `syz.5.7937'. [ 1146.080543][T31396] hub 8-0:1.0: USB hub found [ 1146.083338][T31371] total_workingset_refault_anon 670 [ 1146.087375][T31396] hub 8-0:1.0: 8 ports detected [ 1146.096088][T31371] total_workingset_refault_file 7277 [ 1146.125009][T31371] total_swap 204800 [ 1146.128880][T31371] total_swapcached 207945728 [ 1146.133543][T31371] total_pgpgin 1179568 [ 1146.148525][T31371] total_pgpgout 1179563 [ 1146.153767][T31371] total_pgfault 1248907 [ 1146.157962][T31371] total_pgmajfault 278 [ 1146.162096][T31371] total_inactive_anon 0 [ 1146.166288][T31371] total_active_anon 20480 [ 1146.170643][T31371] total_inactive_file 0 [ 1146.174891][T31371] total_active_file 0 [ 1146.178906][T31371] total_unevictable 0 [ 1146.182960][T31371] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.7925,pid=31370,uid=0 [ 1146.197745][T31371] Memory cgroup out of memory: Killed process 31370 (syz.4.7925) total-vm:94168kB, anon-rss:1232kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1146.334959][T31415] syzkaller0: entered promiscuous mode [ 1146.340606][T31415] syzkaller0: entered allmulticast mode [ 1146.349882][T31415] FAULT_INJECTION: forcing a failure. [ 1146.349882][T31415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1146.386341][T31415] CPU: 0 UID: 0 PID: 31415 Comm: syz.5.7945 Tainted: G W syzkaller #0 PREEMPT(full) [ 1146.386399][T31415] Tainted: [W]=WARN [ 1146.386417][T31415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.386435][T31415] Call Trace: [ 1146.386446][T31415] [ 1146.386457][T31415] __dump_stack+0x1d/0x30 [ 1146.386531][T31415] dump_stack_lvl+0x95/0xd0 [ 1146.386557][T31415] dump_stack+0x15/0x1b [ 1146.386584][T31415] should_fail_ex+0x263/0x280 [ 1146.386650][T31415] should_fail+0xb/0x20 [ 1146.386684][T31415] should_fail_usercopy+0x1a/0x20 [ 1146.386790][T31415] _copy_from_user+0x1c/0xb0 [ 1146.386832][T31415] __copy_msghdr+0x244/0x300 [ 1146.386868][T31415] ___sys_sendmsg+0x10c/0x1e0 [ 1146.386921][T31415] __x64_sys_sendmsg+0xd4/0x160 [ 1146.387009][T31415] x64_sys_call+0x194c/0x3020 [ 1146.387044][T31415] do_syscall_64+0x12c/0x3b0 [ 1146.387132][T31415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.387162][T31415] RIP: 0033:0x7fad87ccce59 [ 1146.387191][T31415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.387216][T31415] RSP: 002b:00007fad86727028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.387245][T31415] RAX: ffffffffffffffda RBX: 00007fad87f45fa0 RCX: 00007fad87ccce59 [ 1146.387265][T31415] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1146.387364][T31415] RBP: 00007fad86727090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.387382][T31415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.387400][T31415] R13: 00007fad87f46038 R14: 00007fad87f45fa0 R15: 00007ffca111ec08 [ 1146.387436][T31415] [ 1146.647281][T31427] 8021q: VLANs not supported on ip_vti0 [ 1146.691546][T31433] syzkaller0: entered promiscuous mode [ 1146.697062][T31433] syzkaller0: entered allmulticast mode [ 1146.722533][T31435] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7950'. [ 1146.759762][T31437] FAULT_INJECTION: forcing a failure. [ 1146.759762][T31437] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.773512][T31437] CPU: 0 UID: 0 PID: 31437 Comm: syz.7.7951 Tainted: G W syzkaller #0 PREEMPT(full) [ 1146.773553][T31437] Tainted: [W]=WARN [ 1146.773575][T31437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1146.773590][T31437] Call Trace: [ 1146.773596][T31437] [ 1146.773604][T31437] __dump_stack+0x1d/0x30 [ 1146.773713][T31437] dump_stack_lvl+0x95/0xd0 [ 1146.773780][T31437] dump_stack+0x15/0x1b [ 1146.773800][T31437] should_fail_ex+0x263/0x280 [ 1146.773837][T31437] should_failslab+0x8c/0xb0 [ 1146.773936][T31437] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1146.774003][T31437] ? __alloc_skb+0x2d6/0x690 [ 1146.774022][T31437] ? __rtnl_unlock+0x95/0xb0 [ 1146.774043][T31437] __alloc_skb+0x2d6/0x690 [ 1146.774068][T31437] ? __alloc_skb+0x200/0x690 [ 1146.774094][T31437] netlink_ack+0xfd/0x500 [ 1146.774167][T31437] netlink_rcv_skb+0x192/0x220 [ 1146.774204][T31437] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1146.774314][T31437] rtnetlink_rcv+0x1c/0x30 [ 1146.774350][T31437] netlink_unicast+0x5a8/0x680 [ 1146.774442][T31437] netlink_sendmsg+0x5c8/0x6f0 [ 1146.774485][T31437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1146.774519][T31437] ____sys_sendmsg+0x563/0x5b0 [ 1146.774616][T31437] ___sys_sendmsg+0x195/0x1e0 [ 1146.774667][T31437] __x64_sys_sendmsg+0xd4/0x160 [ 1146.774698][T31437] x64_sys_call+0x194c/0x3020 [ 1146.774773][T31437] do_syscall_64+0x12c/0x3b0 [ 1146.774813][T31437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.774990][T31437] RIP: 0033:0x7f436120ce59 [ 1146.775012][T31437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.775037][T31437] RSP: 002b:00007f435fc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1146.775059][T31437] RAX: ffffffffffffffda RBX: 00007f4361485fa0 RCX: 00007f436120ce59 [ 1146.775074][T31437] RDX: 0000000004040000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1146.775087][T31437] RBP: 00007f435fc67090 R08: 0000000000000000 R09: 0000000000000000 [ 1146.775123][T31437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1146.775137][T31437] R13: 00007f4361486038 R14: 00007f4361485fa0 R15: 00007ffc8cf4e458 [ 1146.775157][T31437] [ 1147.072441][T31448] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7956'. [ 1147.092950][T31445] hub 8-0:1.0: USB hub found [ 1147.099584][T31445] hub 8-0:1.0: 8 ports detected [ 1147.118562][T31448] bond1: entered promiscuous mode [ 1147.140607][T31448] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1147.690898][T31480] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7968'. [ 1147.957328][T31480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1148.004723][T31480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1148.046820][ T28] audit: type=1326 audit(2000001019.353:10386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.094015][ T28] audit: type=1326 audit(2000001019.353:10387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.120099][ T28] audit: type=1326 audit(2000001019.353:10388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.147222][ T28] audit: type=1326 audit(2000001019.353:10389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.174175][ T28] audit: type=1326 audit(2000001019.353:10390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.200598][ T28] audit: type=1326 audit(2000001019.353:10391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.219154][T31499] pimreg: entered allmulticast mode [ 1148.251870][ T28] audit: type=1326 audit(2000001019.353:10392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.277954][ T28] audit: type=1326 audit(2000001019.463:10393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31494 comm="syz.5.7973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1148.328067][T31503] 9p: Unknown access argument any%access=client: -22 [ 1148.340761][T31505] netlink: 'syz.1.7976': attribute type 1 has an invalid length. [ 1148.349214][T31505] netlink: 5 bytes leftover after parsing attributes in process `syz.1.7976'. [ 1148.410454][T31511] FAULT_INJECTION: forcing a failure. [ 1148.410454][T31511] name failslab, interval 1, probability 0, space 0, times 0 [ 1148.423655][T31511] CPU: 0 UID: 0 PID: 31511 Comm: syz.1.7979 Tainted: G W syzkaller #0 PREEMPT(full) [ 1148.423698][T31511] Tainted: [W]=WARN [ 1148.423708][T31511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1148.423801][T31511] Call Trace: [ 1148.423811][T31511] [ 1148.423824][T31511] __dump_stack+0x1d/0x30 [ 1148.423851][T31511] dump_stack_lvl+0x95/0xd0 [ 1148.423876][T31511] dump_stack+0x15/0x1b [ 1148.423901][T31511] should_fail_ex+0x263/0x280 [ 1148.423971][T31511] should_failslab+0x8c/0xb0 [ 1148.424012][T31511] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 1148.424053][T31511] ? __d_alloc+0x37/0x340 [ 1148.424097][T31511] __d_alloc+0x37/0x340 [ 1148.424123][T31511] d_alloc_parallel+0x54/0xce0 [ 1148.424153][T31511] ? __rcu_read_unlock+0x4e/0x70 [ 1148.424192][T31511] ? __d_lookup+0x316/0x340 [ 1148.424232][T31511] path_openat+0x8b9/0x2050 [ 1148.424283][T31511] do_file_open+0x16c/0x290 [ 1148.424330][T31511] do_sys_openat2+0x94/0x130 [ 1148.424381][T31511] __x64_sys_creat+0x65/0x90 [ 1148.424410][T31511] x64_sys_call+0x2ea0/0x3020 [ 1148.424442][T31511] do_syscall_64+0x12c/0x3b0 [ 1148.424483][T31511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.424588][T31511] RIP: 0033:0x7fafa0fdce59 [ 1148.424606][T31511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1148.424630][T31511] RSP: 002b:00007faf9fa2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1148.424668][T31511] RAX: ffffffffffffffda RBX: 00007fafa1255fa0 RCX: 00007fafa0fdce59 [ 1148.424728][T31511] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000580 [ 1148.424746][T31511] RBP: 00007faf9fa2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.424864][T31511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.424883][T31511] R13: 00007fafa1256038 R14: 00007fafa1255fa0 R15: 00007ffd56de58f8 [ 1148.424908][T31511] [ 1148.747246][ T28] audit: type=1400 audit(2000001020.053:10394): avc: denied { connect } for pid=31521 comm="syz.4.7984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1148.769617][T31522] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7984'. [ 1149.194087][T31492] pimreg: left allmulticast mode [ 1149.912155][T31553] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1150.412546][T31570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8001'. [ 1150.421848][T28465] bridge0: entered promiscuous mode [ 1151.132540][T31565] syz.1.8000 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1151.143549][T31565] CPU: 1 UID: 0 PID: 31565 Comm: syz.1.8000 Tainted: G W syzkaller #0 PREEMPT(full) [ 1151.143592][T31565] Tainted: [W]=WARN [ 1151.143599][T31565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1151.143613][T31565] Call Trace: [ 1151.143662][T31565] [ 1151.143674][T31565] __dump_stack+0x1d/0x30 [ 1151.143704][T31565] dump_stack_lvl+0x95/0xd0 [ 1151.143733][T31565] dump_stack+0x15/0x1b [ 1151.143821][T31565] dump_header+0x80/0x240 [ 1151.143848][T31565] oom_kill_process+0x295/0x350 [ 1151.143960][T31565] out_of_memory+0x97d/0xb80 [ 1151.143994][T31565] try_charge_memcg+0x62f/0xa10 [ 1151.144047][T31565] charge_memcg+0x6d/0x120 [ 1151.144080][T31565] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 1151.144122][T31565] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1151.144153][T31565] ? alloc_pages_mpol+0x217/0x260 [ 1151.144188][T31565] swap_cache_alloc_folio+0xa2/0x120 [ 1151.144232][T31565] swap_cluster_readahead+0x35c/0x3c0 [ 1151.144264][T31565] swapin_readahead+0xde/0x840 [ 1151.144292][T31565] ? _raw_spin_unlock+0x9/0x30 [ 1151.144380][T31565] ? swap_put_entries_cluster+0x46c/0x490 [ 1151.144407][T31565] ? __entry_text_end+0x1d808/0x102179 [ 1151.144463][T31565] ? __rcu_read_unlock+0x4e/0x70 [ 1151.144486][T31565] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1151.144519][T31565] do_swap_page+0x31e/0x2180 [ 1151.144601][T31565] ? css_rstat_updated+0xbb/0x280 [ 1151.144673][T31565] ? __rcu_read_lock+0x36/0x50 [ 1151.144693][T31565] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1151.144716][T31565] handle_mm_fault+0xb30/0x2e70 [ 1151.144749][T31565] ? vma_start_read+0x1c7/0x2c0 [ 1151.144881][T31565] do_user_addr_fault+0x62f/0x1050 [ 1151.144988][T31565] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1151.145014][T31565] ? trace_page_fault_user+0x1f/0xa0 [ 1151.145050][T31565] exc_page_fault+0x62/0xa0 [ 1151.145078][T31565] asm_exc_page_fault+0x26/0x30 [ 1151.145105][T31565] RIP: 0033:0x7fafa0e9a996 [ 1151.145144][T31565] Code: 0b ff ff 4c 8b 67 38 48 89 fb 4c 39 e2 0f 82 8a 0b ff ff 29 d0 48 39 f0 72 22 8b 43 18 39 43 30 0f 83 58 0b ff ff 48 83 c4 18 <5b> 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 80 00 00 00 00 4c 8b 6f 28 [ 1151.145170][T31565] RSP: 002b:00007ffd56de5958 EFLAGS: 00010202 [ 1151.145187][T31565] RAX: 000000007fffffff RBX: 00007fafa1d85720 RCX: fffffffffffffe98 [ 1151.145202][T31565] RDX: 0000001b2da24220 RSI: 0000000000000008 RDI: 00007fafa1d85720 [ 1151.145219][T31565] RBP: 0000000000000018 R08: 00007fafa1240000 R09: 00007fafa1242000 [ 1151.145233][T31565] R10: 00000000818be055 R11: 0000000000000007 R12: 0000001b2da24218 [ 1151.145303][T31565] R13: 0000000000000017 R14: ffffffff818befeb R15: 00007fafa1d85720 [ 1151.145379][T31565] ? __vmalloc_node_range_noprof+0xfb/0x11c0 [ 1151.145408][T31565] [ 1151.145417][T31565] memory: usage 307200kB, limit 307200kB, failcnt 609 [ 1151.203966][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.423657][T31565] memory+swap: usage 307596kB, limit 9007199254740988kB, failcnt 0 [ 1151.423680][T31565] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 1151.423698][T31565] Memory cgroup stats for /syz1: [ 1151.424019][T31565] cache 0 [ 1151.424030][T31565] rss 0 [ 1151.424039][T31565] shmem 0 [ 1151.424048][T31565] mapped_file 0 [ 1151.424058][T31565] dirty 0 [ 1151.424067][T31565] writeback 0 [ 1151.424078][T31565] workingset_refault_anon 754 [ 1151.424135][T31565] workingset_refault_file 0 [ 1151.424144][T31565] swap 405504 [ 1151.424153][T31565] swapcached 163590144 [ 1151.424163][T31565] pgpgin 890006 [ 1151.424173][T31565] pgpgout 890005 [ 1151.424183][T31565] pgfault 1037292 [ 1151.424193][T31565] pgmajfault 375 [ 1151.424203][T31565] inactive_anon 4096 [ 1151.424214][T31565] active_anon 0 [ 1151.424223][T31565] inactive_file 0 [ 1151.424234][T31565] active_file 0 [ 1151.424244][T31565] unevictable 0 [ 1151.424316][T31565] hierarchical_memory_limit 314572800 [ 1151.424341][T31565] hierarchical_memsw_limit 9223372036854771712 [ 1151.424355][T31565] total_cache 0 [ 1151.424365][T31565] total_rss 0 [ 1151.424420][T31565] total_shmem 0 [ 1151.424430][T31565] total_mapped_file 0 [ 1151.424495][T31565] total_dirty 0 [ 1151.424505][T31565] total_writeback 0 [ 1151.424515][T31565] total_workingset_refault_anon 754 [ 1151.424528][T31565] total_workingset_refault_file 0 [ 1151.424585][T31565] total_swap 405504 [ 1151.424596][T31565] total_swapcached 163590144 [ 1151.424608][T31565] total_pgpgin 890006 [ 1151.424654][T31565] total_pgpgout 890005 [ 1151.424666][T31565] total_pgfault 1037292 [ 1151.424677][T31565] total_pgmajfault 375 [ 1151.424688][T31565] total_inactive_anon 4096 [ 1151.424699][T31565] total_active_anon 0 [ 1151.424709][T31565] total_inactive_file 0 [ 1151.424718][T31565] total_active_file 0 [ 1151.424725][T31565] total_unevictable 0 [ 1151.424810][T31565] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8000,pid=31565,uid=0 [ 1151.424942][T31565] Memory cgroup out of memory: Killed process 31565 (syz.1.8000) total-vm:94168kB, anon-rss:1236kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1151.679688][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.720141][T31606] veth0_to_team: entered promiscuous mode [ 1152.140310][T31622] __nla_validate_parse: 1 callbacks suppressed [ 1152.140374][T31622] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8020'. [ 1152.395199][T31627] netlink: 80 bytes leftover after parsing attributes in process `syz.7.8022'. [ 1152.525294][T31634] netlink: 277 bytes leftover after parsing attributes in process `syz.7.8025'. [ 1152.654488][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.738704][T31641] Set syz1 is full, maxelem 65536 reached [ 1152.835707][ T28] audit: type=1400 audit(2000001024.142:10395): avc: denied { firmware_load } for pid=31633 comm="syz.7.8025" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1153.890675][T31646] netlink: 140 bytes leftover after parsing attributes in process `syz.4.8027'. [ 1153.968601][T31635] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.975800][T31635] bridge0: port 1(bridge_slave_0) entered disabled state [ 1153.993767][T31635] bridge_slave_0: entered allmulticast mode [ 1154.010975][T31635] bridge_slave_0: entered promiscuous mode [ 1154.022916][T31667] netlink: 'syz.5.8031': attribute type 30 has an invalid length. [ 1154.036504][T31635] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.056293][T31635] bridge0: port 2(bridge_slave_1) entered disabled state [ 1154.068140][T31667] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=31667 comm=syz.5.8031 [ 1154.088093][T31635] bridge_slave_1: entered allmulticast mode [ 1154.101021][T31635] bridge_slave_1: entered promiscuous mode [ 1154.120454][T31667] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8031'. [ 1154.173301][T31635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1154.319666][T31635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1154.961652][T31635] team0: Port device team_slave_0 added [ 1154.968389][T31635] team0: Port device team_slave_1 added [ 1155.022738][T31635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1155.095810][ T28] audit: type=1107 audit(2000001026.402:10396): pid=31685 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1155.095810][ T28] SbXPd]hooPqX QI' [ 1155.134078][T31635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.204837][T31635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1155.223924][T31688] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8038'. [ 1155.234027][T31635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1155.241508][T31635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1155.270572][T31693] netlink: 'syz.7.8041': attribute type 2 has an invalid length. [ 1155.282350][T31635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1155.287469][T31693] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8041'. [ 1155.350035][T31704] netlink: 592 bytes leftover after parsing attributes in process `syz.7.8044'. [ 1155.351097][T31635] hsr_slave_0: entered promiscuous mode [ 1155.367530][T31635] hsr_slave_1: entered promiscuous mode [ 1155.373593][T31635] debugfs: 'hsr0' already exists in 'hsr' [ 1155.381633][T31635] Cannot create hsr debugfs directory [ 1155.441454][T31704] netlink: 60 bytes leftover after parsing attributes in process `syz.7.8044'. [ 1155.458345][T31704] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8044'. [ 1155.645320][ T28] audit: type=1326 audit(2000001026.952:10397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1155.670981][ T28] audit: type=1326 audit(2000001026.952:10398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.094160][ T28] audit: type=1326 audit(2000001026.952:10399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.130394][ T28] audit: type=1326 audit(2000001026.952:10400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.174940][ T28] audit: type=1326 audit(2000001026.952:10401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.225489][ T28] audit: type=1326 audit(2000001026.952:10402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.251092][ T28] audit: type=1326 audit(2000001026.952:10403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.276749][ T28] audit: type=1326 audit(2000001026.952:10404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31726 comm="syz.5.8049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad87ccce59 code=0x7ffc0000 [ 1156.594945][T31752] 9p: Unknown uid 00000000004294967295 [ 1157.351827][T31635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1157.460472][T31635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.539917][T31769] __nla_validate_parse: 3 callbacks suppressed [ 1157.539939][T31769] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8060'. [ 1157.570424][T31635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1157.610680][T31768] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8061'. [ 1157.638102][T31635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.671521][T31635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1157.691898][T31762] netlink: 192 bytes leftover after parsing attributes in process `syz.7.8059'. [ 1157.707559][T31779] netlink: 592 bytes leftover after parsing attributes in process `syz.5.8063'. [ 1157.717660][T31635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.728266][T31635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1157.740474][T31635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1157.847480][T31635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.887449][T31635] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.911513][T31803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8067'. [ 1157.940118][T16473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.947273][T16473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.956116][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 1157.956134][ T28] audit: type=1107 audit(2000001029.272:10510): pid=31800 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1157.956134][ T28] SbXPd]hooPqX QI' [ 1158.010299][T16473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.017434][T16473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.111211][T31635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1158.212814][ T28] audit: type=1400 audit(2000001029.522:10511): avc: denied { write } for pid=31804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1158.287686][ T28] audit: type=1400 audit(2000001029.592:10512): avc: denied { write } for pid=31825 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.428193][T31827] uprobe: syz.7.8070:31827 failed to unregister, leaking uprobe [ 1159.439794][ T28] audit: type=1400 audit(2000001030.751:10513): avc: denied { write } for pid=31834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1159.474041][T31635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1160.451622][ T28] audit: type=1400 audit(2000001030.881:10514): avc: denied { write } for pid=31850 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.558215][T31855] hub 8-0:1.0: USB hub found [ 1160.581501][T31855] hub 8-0:1.0: 8 ports detected [ 1160.699398][ T28] audit: type=1400 audit(2000001032.001:10515): avc: denied { write } for pid=31852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.713714][T31635] veth0_vlan: entered promiscuous mode [ 1160.748360][ T28] audit: type=1400 audit(2000001032.051:10516): avc: denied { write } for pid=31879 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1160.773518][T31635] veth1_vlan: entered promiscuous mode [ 1160.773771][T31881] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8075'. [ 1160.792485][T31869] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8073'. [ 1160.809766][T31635] veth0_macvtap: entered promiscuous mode [ 1160.811999][ T28] audit: type=1400 audit(2000001032.101:10517): avc: denied { getopt } for pid=31862 comm="syz.5.8072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1160.841861][T31635] veth1_macvtap: entered promiscuous mode [ 1160.865709][T31635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1160.878022][T31635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1160.905520][T29807] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.929684][T29807] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.953041][T29807] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1160.987647][T29807] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.013435][ T28] audit: type=1400 audit(2000001032.281:10518): avc: denied { write } for pid=31886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.050818][ T28] audit: type=1400 audit(2000001032.281:10519): avc: denied { write } for pid=31910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1161.426625][T31943] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8084'. [ 1161.438067][T31943] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8084'. [ 1161.447455][T31943] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=31943 comm=syz.7.8084 [ 1161.793129][T31971] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1161.809571][T31972] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8090'. [ 1162.930892][T32009] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8094'. [ 1163.317682][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 1163.317698][ T28] audit: type=1400 audit(2000001034.621:10529): avc: denied { write } for pid=32012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.429257][ T28] audit: type=1400 audit(2000001034.731:10530): avc: denied { write } for pid=32039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1163.859104][T32053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8103'. [ 1163.915871][T32057] IPv6: sit1: Disabled Multicast RS [ 1163.921995][T32057] sit1: entered allmulticast mode [ 1164.064193][ T28] audit: type=1400 audit(2000001035.361:10531): avc: denied { write } for pid=32047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.123668][ T28] audit: type=1400 audit(2000001035.431:10532): avc: denied { write } for pid=32076 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.351104][T32096] netlink: 592 bytes leftover after parsing attributes in process `syz.4.8110'. [ 1164.395106][T32096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8110'. [ 1164.408869][T32096] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8110'. [ 1164.434672][ T28] audit: type=1400 audit(2000001035.731:10533): avc: denied { write } for pid=32079 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.442081][T32096] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8110'. [ 1164.516399][ T28] audit: type=1400 audit(2000001035.811:10534): avc: denied { write } for pid=32104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1164.594552][T32107] netlink: 48 bytes leftover after parsing attributes in process `syz.7.8112'. [ 1164.704601][T32121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8115'. [ 1164.985178][ T28] audit: type=1400 audit(2000001036.291:10535): avc: denied { ioctl } for pid=32130 comm="syz.4.8120" path="socket:[108383]" dev="sockfs" ino=108383 ioctlcmd=0x8b34 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1165.010365][ T28] audit: type=1400 audit(2000001036.291:10536): avc: denied { accept } for pid=32130 comm="syz.4.8120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1165.193740][T32138] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8123'. [ 1165.447650][T32159] netlink: 'syz.0.8131': attribute type 1 has an invalid length. [ 1165.517165][T32159] bond1 (unregistering): Released all slaves [ 1165.556159][T32161] netlink: 76 bytes leftover after parsing attributes in process `syz.5.8132'. [ 1165.567673][T32161] syzkaller0: entered promiscuous mode [ 1165.578712][T32161] syzkaller0: entered allmulticast mode [ 1166.032000][T32183] netlink: zone id is out of range [ 1166.037261][T32183] netlink: zone id is out of range [ 1166.042549][T32183] netlink: zone id is out of range [ 1166.047814][T32183] netlink: zone id is out of range [ 1166.052960][T32183] netlink: zone id is out of range [ 1166.058109][T32183] netlink: zone id is out of range [ 1166.063292][T32183] netlink: zone id is out of range [ 1166.085960][T32183] netlink: set zone limit has 8 unknown bytes [ 1166.129359][T32194] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1166.758895][ T28] audit: type=1107 audit(2000001038.060:10537): pid=32220 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1166.758895][ T28] SbXPd]hooPqX QI' [ 1166.845666][ T3378] IPVS: starting estimator thread 0... [ 1167.002461][T32228] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1167.002495][T32234] FAULT_INJECTION: forcing a failure. [ 1167.002495][T32234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.022740][T32234] CPU: 0 UID: 0 PID: 32234 Comm: syz.5.8160 Tainted: G W syzkaller #0 PREEMPT(full) [ 1167.022780][T32234] Tainted: [W]=WARN [ 1167.022790][T32234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1167.022876][T32234] Call Trace: [ 1167.022886][T32234] [ 1167.022896][T32234] __dump_stack+0x1d/0x30 [ 1167.022982][T32234] dump_stack_lvl+0x95/0xd0 [ 1167.023004][T32234] dump_stack+0x15/0x1b [ 1167.023030][T32234] should_fail_ex+0x263/0x280 [ 1167.023087][T32234] should_fail+0xb/0x20 [ 1167.023122][T32234] should_fail_usercopy+0x1a/0x20 [ 1167.023153][T32234] _copy_from_iter+0xcf/0xea0 [ 1167.023218][T32234] ? alloc_pages_mpol+0x217/0x260 [ 1167.023252][T32234] copy_page_from_iter+0x161/0x1f0 [ 1167.023297][T32234] tun_get_user+0xbe3/0x27e0 [ 1167.023342][T32234] ? ref_tracker_alloc+0x1eb/0x2f0 [ 1167.023453][T32234] tun_chr_write_iter+0x15e/0x210 [ 1167.023488][T32234] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1167.023584][T32234] vfs_write+0x5a6/0x9f0 [ 1167.023627][T32234] ksys_write+0xdc/0x1a0 [ 1167.023668][T32234] __x64_sys_write+0x40/0x50 [ 1167.023723][T32234] x64_sys_call+0x27e1/0x3020 [ 1167.023756][T32234] do_syscall_64+0x12c/0x3b0 [ 1167.023790][T32234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.023818][T32234] RIP: 0033:0x7fad87c8d68e [ 1167.023838][T32234] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.023863][T32234] RSP: 002b:00007fad86726fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.023950][T32234] RAX: ffffffffffffffda RBX: 00007fad867276c0 RCX: 00007fad87c8d68e [ 1167.023970][T32234] RDX: 0000000000000046 RSI: 0000200000000000 RDI: 00000000000000c8 [ 1167.023989][T32234] RBP: 00007fad86727090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.024007][T32234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.024020][T32234] R13: 00007fad87f46038 R14: 00007fad87f45fa0 R15: 00007ffca111ec08 [ 1167.024044][T32234] [ 1167.210937][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1167.309901][T32252] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 1167.319569][ T28] audit: type=1400 audit(2000001038.570:10538): avc: denied { relabelto } for pid=32251 comm="syz.0.8168" name="14" dev="tmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 1167.753854][T32274] Invalid ELF header magic: != ELF [ 1168.033641][T32277] __nla_validate_parse: 13 callbacks suppressed [ 1168.033692][T32277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8178'. [ 1168.157672][T32280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8178'. [ 1168.621737][T28465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.650308][T32286] netlink: 592 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1168.662849][T32290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8183'. [ 1168.673678][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.694160][T28482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1168.708481][T32289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8184'. [ 1168.760976][T32289] bridge_slave_1: left allmulticast mode [ 1168.771355][T32286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1168.795162][T32289] bridge_slave_1: left promiscuous mode [ 1168.808948][T32286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1168.834103][T32289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.858445][T32286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8182'. [ 1168.869440][T32295] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8185'. [ 1168.886669][T32289] bridge_slave_0: left allmulticast mode [ 1168.907713][T32289] bridge_slave_0: left promiscuous mode [ 1168.935584][T32289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.152622][T28483] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.763414][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.771886][T28465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.990172][T32326] tipc: Started in network mode [ 1169.995244][T32326] tipc: Node identity 2007ff, cluster identity 4711 [ 1170.002242][T32326] tipc: Node number set to 2099199 [ 1170.998934][T32343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8200'. [ 1171.127825][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 1171.127856][ T28] audit: type=1107 audit(2000001042.430:10594): pid=32350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1171.127856][ T28] SbXPd]hooPqX QI' [ 1172.299856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1172.570605][ T28] audit: type=1107 audit(2000001043.870:10595): pid=32385 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1172.570605][ T28] SbXPd]hooPqX QI' [ 1172.641973][T32390] FAULT_INJECTION: forcing a failure. [ 1172.641973][T32390] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1172.682728][T32390] CPU: 1 UID: 0 PID: 32390 Comm: syz.0.8217 Tainted: G W syzkaller #0 PREEMPT(full) [ 1172.682827][T32390] Tainted: [W]=WARN [ 1172.682837][T32390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1172.682855][T32390] Call Trace: [ 1172.682863][T32390] [ 1172.682873][T32390] __dump_stack+0x1d/0x30 [ 1172.682979][T32390] dump_stack_lvl+0x95/0xd0 [ 1172.683007][T32390] dump_stack+0x15/0x1b [ 1172.683034][T32390] should_fail_ex+0x263/0x280 [ 1172.683110][T32390] should_fail_alloc_page+0xf2/0x100 [ 1172.683197][T32390] __alloc_frozen_pages_noprof+0x108/0x350 [ 1172.683232][T32390] alloc_pages_mpol+0xb3/0x260 [ 1172.683327][T32390] ? __rcu_read_unlock+0x33/0x70 [ 1172.683351][T32390] alloc_pages_noprof+0x8f/0x140 [ 1172.683383][T32390] pte_alloc_one+0x1c/0xc0 [ 1172.683566][T32390] __pte_alloc+0x32/0x2a0 [ 1172.683588][T32390] handle_mm_fault+0x23a0/0x2e70 [ 1172.683616][T32390] ? vma_start_read+0x1c7/0x2c0 [ 1172.683733][T32390] do_user_addr_fault+0x62f/0x1050 [ 1172.683776][T32390] ? ksys_mmap_pgoff+0xc1/0x310 [ 1172.683806][T32390] ? __x64_sys_mmap+0x49/0x70 [ 1172.683919][T32390] ? trace_page_fault_user+0x1f/0xa0 [ 1172.683950][T32390] exc_page_fault+0x62/0xa0 [ 1172.684055][T32390] asm_exc_page_fault+0x26/0x30 [ 1172.684081][T32390] RIP: 0033:0x7f93420741ce [ 1172.684104][T32390] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 1172.684130][T32390] RSP: 002b:00007f9340c16470 EFLAGS: 00010246 [ 1172.684154][T32390] RAX: 0000000000000001 RBX: 00007f9340c16530 RCX: 0000000000000101 [ 1172.684242][T32390] RDX: 0000000000000030 RSI: 0000000000000001 RDI: 00007f9340c165d0 [ 1172.684261][T32390] RBP: 0000000000000102 R08: 00007f93387f7000 R09: 0000000000000000 [ 1172.684280][T32390] R10: 0000000000000000 R11: 00007f9340c16540 R12: 0000000000000001 [ 1172.684298][T32390] R13: 00007f9342272900 R14: 0000000000000000 R15: 00007f9340c165d0 [ 1172.684326][T32390] [ 1172.684362][T32390] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1172.901329][T32398] gtp0: entered promiscuous mode [ 1172.914234][T32398] gtp0: entered allmulticast mode [ 1173.049327][T32402] __nla_validate_parse: 6 callbacks suppressed [ 1173.049383][T32402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1173.144150][ T28] audit: type=1107 audit(2000001044.450:10596): pid=32415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1173.144150][ T28] SbXPd]hooPqX QI' [ 1173.204401][T32418] FAULT_INJECTION: forcing a failure. [ 1173.204401][T32418] name failslab, interval 1, probability 0, space 0, times 0 [ 1173.217054][T32418] CPU: 1 UID: 0 PID: 32418 Comm: syz.7.8229 Tainted: G W syzkaller #0 PREEMPT(full) [ 1173.217186][T32418] Tainted: [W]=WARN [ 1173.217195][T32418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1173.217209][T32418] Call Trace: [ 1173.217216][T32418] [ 1173.217225][T32418] __dump_stack+0x1d/0x30 [ 1173.217251][T32418] dump_stack_lvl+0x95/0xd0 [ 1173.217278][T32418] dump_stack+0x15/0x1b [ 1173.217368][T32418] should_fail_ex+0x263/0x280 [ 1173.217398][T32418] should_failslab+0x8c/0xb0 [ 1173.217453][T32418] __kvmalloc_node_noprof+0x155/0x640 [ 1173.217475][T32418] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 1173.217517][T32418] bpf_test_run_xdp_live+0x17e/0x1360 [ 1173.217578][T32418] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1173.217615][T32418] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1173.217668][T32418] ? mutex_unlock+0x4e/0x90 [ 1173.217743][T32418] ? 0xffffffffa0205240 [ 1173.217758][T32418] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1173.217790][T32418] ? 0xffffffffa0205240 [ 1173.217835][T32418] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1173.217940][T32418] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1173.217982][T32418] ? __rcu_read_unlock+0x4e/0x70 [ 1173.218008][T32418] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1173.218052][T32418] bpf_prog_test_run+0x204/0x340 [ 1173.218154][T32418] __sys_bpf+0x52e/0x7e0 [ 1173.218193][T32418] __x64_sys_bpf+0x41/0x50 [ 1173.218216][T32418] x64_sys_call+0x10cb/0x3020 [ 1173.218241][T32418] do_syscall_64+0x12c/0x3b0 [ 1173.218349][T32418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1173.218374][T32418] RIP: 0033:0x7f436120ce59 [ 1173.218441][T32418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1173.218461][T32418] RSP: 002b:00007f435fc67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1173.218502][T32418] RAX: ffffffffffffffda RBX: 00007f4361485fa0 RCX: 00007f436120ce59 [ 1173.218546][T32418] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1173.218564][T32418] RBP: 00007f435fc67090 R08: 0000000000000000 R09: 0000000000000000 [ 1173.218582][T32418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1173.218600][T32418] R13: 00007f4361486038 R14: 00007f4361485fa0 R15: 00007ffc8cf4e458 [ 1173.218628][T32418] [ 1173.475852][T32421] netlink: 40 bytes leftover after parsing attributes in process `syz.7.8230'. [ 1173.597566][T32429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8233'. [ 1174.076259][ T28] audit: type=1107 audit(2000001045.379:10597): pid=32459 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1174.076259][ T28] SbXPd]hooPqX QI' [ 1174.166169][T32469] xt_hashlimit: size too large, truncated to 1048576 [ 1174.180301][T32468] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8244'. [ 1174.334980][T32479] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1174.347358][T32479] netlink: 80 bytes leftover after parsing attributes in process `syz.4.8247'. [ 1174.387326][T32483] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8248'. [ 1174.409956][T32483] netlink: 'syz.0.8248': attribute type 7 has an invalid length. [ 1174.424501][T32483] netlink: 'syz.0.8248': attribute type 8 has an invalid length. [ 1174.435680][T32483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8248'. [ 1174.579416][T32494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8253'. [ 1174.580888][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8254'. [ 1174.684414][T32505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8256'. [ 1174.740959][T32511] hub 8-0:1.0: USB hub found [ 1174.745749][T32511] hub 8-0:1.0: 8 ports detected [ 1174.767780][T32511] netlink: 'syz.1.8257': attribute type 36 has an invalid length. [ 1174.789330][T32511] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1174.856950][T32511] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1175.001043][ T28] audit: type=1400 audit(2000001046.299:10598): avc: denied { create } for pid=32523 comm="syz.4.8262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tipc_socket permissive=1 [ 1175.041252][ T28] audit: type=1400 audit(2000001046.329:10599): avc: denied { create } for pid=32523 comm="syz.4.8262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1175.070258][ T28] audit: type=1400 audit(2000001046.329:10600): avc: denied { setopt } for pid=32523 comm="syz.4.8262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1175.092228][ T28] audit: type=1400 audit(2000001046.329:10601): avc: denied { connect } for pid=32523 comm="syz.4.8262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 1175.113679][ T28] audit: type=1400 audit(2000001046.359:10602): avc: denied { create } for pid=32523 comm="syz.4.8262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 1175.165907][ T28] audit: type=1400 audit(2000001046.359:10603): avc: denied { ioctl } for pid=32523 comm="syz.4.8262" path="socket:[110883]" dev="sockfs" ino=110883 ioctlcmd=0x9409 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 1175.277732][ T23] IPVS: starting estimator thread 0... [ 1175.323393][T32552] FAULT_INJECTION: forcing a failure. [ 1175.323393][T32552] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1175.347621][T32552] CPU: 0 UID: 0 PID: 32552 Comm: syz.0.8271 Tainted: G W syzkaller #0 PREEMPT(full) [ 1175.347735][T32552] Tainted: [W]=WARN [ 1175.347743][T32552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1175.347756][T32552] Call Trace: [ 1175.347764][T32552] [ 1175.347818][T32552] __dump_stack+0x1d/0x30 [ 1175.347851][T32552] dump_stack_lvl+0x95/0xd0 [ 1175.347880][T32552] dump_stack+0x15/0x1b [ 1175.347900][T32552] should_fail_ex+0x263/0x280 [ 1175.348035][T32552] should_fail_alloc_page+0xf2/0x100 [ 1175.348072][T32552] __alloc_frozen_pages_noprof+0x108/0x350 [ 1175.348102][T32552] alloc_pages_mpol+0xb3/0x260 [ 1175.348181][T32552] ? __rcu_read_unlock+0x33/0x70 [ 1175.348204][T32552] alloc_pages_noprof+0x8f/0x140 [ 1175.348229][T32552] pte_alloc_one+0x1c/0xc0 [ 1175.348265][T32552] __pte_alloc+0x32/0x2a0 [ 1175.348407][T32552] handle_mm_fault+0x23a0/0x2e70 [ 1175.348449][T32552] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 1175.348523][T32552] do_user_addr_fault+0x3fd/0x1050 [ 1175.348567][T32552] exc_page_fault+0x62/0xa0 [ 1175.348598][T32552] asm_exc_page_fault+0x26/0x30 [ 1175.348625][T32552] RIP: 0010:strncpy_from_user+0xa4/0x250 [ 1175.348686][T32552] Code: 30 50 ff 49 83 ff 07 0f 86 85 00 00 00 48 c7 04 24 00 00 00 00 4c 89 64 24 10 48 8b 6c 24 08 4c 89 7c 24 18 4d 89 fd 4d 89 e6 <4d> 8b 24 24 48 b8 ff fe fe fe fe fe fe fe 4d 8d 3c 04 4c 89 e3 48 [ 1175.348711][T32552] RSP: 0018:ffffc900022c3d18 EFLAGS: 00050202 [ 1175.348733][T32552] RAX: ffffffff8209077d RBX: ffff888100b67e40 RCX: ffff888101eb6600 [ 1175.348752][T32552] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000007 [ 1175.348827][T32552] RBP: ffff888100b67e58 R08: 0001888100b67e47 R09: 0000000000000000 [ 1175.348845][T32552] R10: ffff888100b67e40 R11: 0000000000000000 R12: 0000200000000540 [ 1175.348863][T32552] R13: 00000000000000a8 R14: 0000200000000540 R15: 00000000000000a8 [ 1175.348884][T32552] ? strncpy_from_user+0x7d/0x250 [ 1175.348917][T32552] ? strncpy_from_user+0x7d/0x250 [ 1175.348950][T32552] do_getname+0x59/0x1c0 [ 1175.349032][T32552] getname_flags+0x1d/0x30 [ 1175.349050][T32552] __se_sys_statx+0x5e/0x1b0 [ 1175.349073][T32552] ? vfs_write+0x86e/0x9f0 [ 1175.349110][T32552] ? __rcu_read_unlock+0x4e/0x70 [ 1175.349143][T32552] ? __fget_files+0x184/0x1c0 [ 1175.349171][T32552] ? mutex_lock+0x57/0x90 [ 1175.349199][T32552] ? mutex_unlock+0x4e/0x90 [ 1175.349229][T32552] ? fput+0x8f/0xc0 [ 1175.349256][T32552] ? ksys_write+0x194/0x1a0 [ 1175.349296][T32552] __x64_sys_statx+0x67/0x80 [ 1175.349327][T32552] x64_sys_call+0x1ab/0x3020 [ 1175.349363][T32552] do_syscall_64+0x12c/0x3b0 [ 1175.349443][T32552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1175.349473][T32552] RIP: 0033:0x7f93421bce59 [ 1175.349511][T32552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1175.349537][T32552] RSP: 002b:00007f9340c17028 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 1175.349565][T32552] RAX: ffffffffffffffda RBX: 00007f9342435fa0 RCX: 00007f93421bce59 [ 1175.349585][T32552] RDX: 0000000000006000 RSI: 0000200000000540 RDI: ffffffffffffffff [ 1175.349604][T32552] RBP: 00007f9340c17090 R08: 0000000000000000 R09: 0000000000000000 [ 1175.349652][T32552] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 1175.349730][T32552] R13: 00007f9342436038 R14: 00007f9342435fa0 R15: 00007ffd1314f5d8 [ 1175.349759][T32552] [ 1175.458699][T32543] IPVS: using max 2208 ests per chain, 110400 per kthread [ 1175.744781][T32569] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1175.965023][T32609] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1176.117955][T32612] veth3: entered allmulticast mode [ 1176.193950][T32625] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32625 comm=syz.1.8296 [ 1176.286191][T32645] netlink: 'syz.7.8303': attribute type 1 has an invalid length. [ 1176.304838][T32645] macvtap1: entered promiscuous mode [ 1176.313718][T32645] team0: entered promiscuous mode [ 1176.318865][T32645] team_slave_0: entered promiscuous mode [ 1176.325104][T32645] team_slave_1: entered promiscuous mode [ 1176.331998][T32645] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1176.445413][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1176.445455][ T28] audit: type=1400 audit(2000000000.369:10610): avc: denied { write } for pid=32662 comm="syz.4.8312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1176.499431][ T28] audit: type=1107 audit(2000000000.409:10611): pid=32668 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1176.499431][ T28] SbXPd]hooPqX QI' [ 1177.682305][ T28] audit: type=1107 audit(2000000001.589:10612): pid=32705 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1177.682305][ T28] SbXPd]hooPqX QI' [ 1177.931392][T32710] hub 8-0:1.0: USB hub found [ 1177.943042][T32710] hub 8-0:1.0: 8 ports detected [ 1178.065233][T32712] __nla_validate_parse: 11 callbacks suppressed [ 1178.065254][T32712] netlink: 192 bytes leftover after parsing attributes in process `syz.4.8327'. [ 1178.169771][T32717] netlink: 592 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1178.391874][T32717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1178.457933][T32717] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1178.468344][T32717] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8329'. [ 1178.619324][T32725] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1540 sclass=netlink_tcpdiag_socket pid=32725 comm=syz.7.8330 [ 1178.752186][T32739] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8337'. [ 1178.781970][ T28] audit: type=1400 audit(2000000002.659:10613): avc: denied { map } for pid=32722 comm="syz.0.8332" path="socket:[111890]" dev="sockfs" ino=111890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1178.806474][ T28] audit: type=1400 audit(2000000002.659:10614): avc: denied { accept } for pid=32722 comm="syz.0.8332" path="socket:[111890]" dev="sockfs" ino=111890 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1178.848196][ T28] audit: type=1107 audit(2000000002.759:10615): pid=32736 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='B鵟Z^%PqQ@#8|@}7[)ѻx]lH 6Rhڜ>@˯o3]Kca&Ƙ91nv:f}I&7򁷧exh߰J& Z_S` MA*ѰS} [ 1178.848196][ T28] SbXPd]hooPqX QI' [ 1178.927392][T32742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.937020][T32742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1179.037530][T32745] netlink: 192 bytes leftover after parsing attributes in process `syz.7.8339'. [ 1179.203688][T32755] FAULT_INJECTION: forcing a failure. [ 1179.203688][T32755] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.216840][T32755] CPU: 1 UID: 0 PID: 32755 Comm: syz.1.8343 Tainted: G W syzkaller #0 PREEMPT(full) [ 1179.216903][T32755] Tainted: [W]=WARN [ 1179.216911][T32755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1179.216926][T32755] Call Trace: [ 1179.216934][T32755] [ 1179.216944][T32755] __dump_stack+0x1d/0x30 [ 1179.216997][T32755] dump_stack_lvl+0x95/0xd0 [ 1179.217021][T32755] dump_stack+0x15/0x1b [ 1179.217044][T32755] should_fail_ex+0x263/0x280 [ 1179.217114][T32755] should_fail+0xb/0x20 [ 1179.217151][T32755] should_fail_usercopy+0x1a/0x20 [ 1179.217240][T32755] _copy_from_user+0x1c/0xb0 [ 1179.217281][T32755] __sys_bpf+0x183/0x7e0 [ 1179.217324][T32755] __x64_sys_bpf+0x41/0x50 [ 1179.217349][T32755] x64_sys_call+0x10cb/0x3020 [ 1179.217445][T32755] do_syscall_64+0x12c/0x3b0 [ 1179.217548][T32755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.217574][T32755] RIP: 0033:0x7fafa0fdce59 [ 1179.217600][T32755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1179.217638][T32755] RSP: 002b:00007faf9fa2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1179.217676][T32755] RAX: ffffffffffffffda RBX: 00007fafa1255fa0 RCX: 00007fafa0fdce59 [ 1179.217693][T32755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 1179.217707][T32755] RBP: 00007faf9fa2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.217722][T32755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1179.217736][T32755] R13: 00007fafa1256038 R14: 00007fafa1255fa0 R15: 00007ffd56de58f8 [ 1179.217763][T32755] [ 1179.488440][T32750] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8341'. [ 1179.507846][T32763] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8344'. [ 1179.517123][T32750] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8341'. [ 1179.526106][T32750] netlink: 'syz.5.8341': attribute type 2 has an invalid length. [ 1179.533855][T32750] netlink: 'syz.5.8341': attribute type 3 has an invalid length. [ 1179.555619][ T28] audit: type=1326 audit(2000000003.469:10616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1179.581230][ T28] audit: type=1326 audit(2000000003.469:10617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1180.609349][ T334] Invalid ELF header type: 2 != 1 [ 1180.618041][ T28] audit: type=1326 audit(2000000003.469:10618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1180.643739][ T28] audit: type=1326 audit(2000000003.469:10619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1180.680318][ T311] Invalid argument reading file caps for ./file0 [ 1180.999798][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.007684][ T315] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.023880][ T315] bridge_slave_0: entered allmulticast mode [ 1181.030421][ T315] bridge_slave_0: entered promiscuous mode [ 1181.058378][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.065491][ T315] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.072702][ T315] bridge_slave_1: entered allmulticast mode [ 1181.079281][ T315] bridge_slave_1: entered promiscuous mode [ 1181.216844][ T315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1181.376299][ T315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1181.566227][ T315] team0: Port device team_slave_0 added [ 1181.617403][ T315] team0: Port device team_slave_1 added [ 1181.620199][ T28] audit: type=1326 audit(2000000003.469:10620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1181.651884][ T28] audit: type=1326 audit(2000000003.469:10621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1181.719156][ T315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.760049][ T315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1181.995635][ T315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.044936][ T315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1182.067451][ T315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.126869][ T315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.279548][ T315] hsr_slave_0: entered promiscuous mode [ 1182.294580][ T315] hsr_slave_1: entered promiscuous mode [ 1182.310930][ T315] debugfs: 'hsr0' already exists in 'hsr' [ 1182.320542][ T315] Cannot create hsr debugfs directory [ 1182.507339][ T315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.598085][ T315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.627862][ T28] audit: type=1326 audit(2000000003.469:10622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1182.653571][ T28] audit: type=1326 audit(2000000003.469:10623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1182.698237][ T28] audit: type=1326 audit(2000000003.469:10624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1182.747820][ T315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.759654][ T28] audit: type=1326 audit(2000000003.469:10625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1182.826662][ T315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1182.850837][ T28] audit: type=1326 audit(2000000003.469:10626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1182.899326][ T415] rdma_op ffff88811a406580 conn xmit_rdma 0000000000000000 [ 1182.920674][ T28] audit: type=1326 audit(2000000003.469:10627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1183.009029][ T315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1183.041019][ T417] 9pnet_fd: Insufficient options for proto=fd [ 1183.048331][ T315] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1183.055590][ T28] audit: type=1326 audit(2000000003.469:10628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1183.090694][ T315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1183.110190][ T315] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1183.125073][ T315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1183.134969][ T28] audit: type=1326 audit(2000000003.469:10629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32761 comm="syz.1.8344" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafa0fdce59 code=0x7ffc0000 [ 1183.174822][ T315] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1183.193193][ T315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1183.210310][ T315] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1183.270194][ T315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.305832][ T429] __nla_validate_parse: 15 callbacks suppressed [ 1183.305891][ T429] netlink: 592 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1183.326406][ T315] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.337489][T16482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.344625][T16482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.356162][T16472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.363288][T16472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.391960][ T429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1183.407645][ T315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1183.418528][ T429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1183.429125][ T315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1183.440525][ T429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8384'. [ 1183.556635][ T438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1183.564997][ T438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1183.576745][ T438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.628604][ T438] bridge0: port 1(vlan2) entered blocking state [ 1183.634964][ T438] bridge0: port 1(vlan2) entered forwarding state [ 1183.643825][ T438] bridge0: port 2(batadv1) entered blocking state [ 1183.650355][ T438] bridge0: port 2(batadv1) entered forwarding state [ 1183.657075][ T438] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1183.785255][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.889344][ T315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1183.968154][ T315] veth0_vlan: entered promiscuous mode [ 1183.973889][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1183.980726][ T315] veth1_vlan: entered promiscuous mode [ 1184.000805][ T315] veth0_macvtap: entered promiscuous mode [ 1184.008944][ T315] veth1_macvtap: entered promiscuous mode [ 1184.020923][ T315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1184.033780][ T315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1184.046064][T16472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.057208][T16472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.066538][T16472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.077543][T16472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1184.523768][T16482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.054878][ T504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8395'. [ 1185.479194][ T509] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8402'. [ 1185.564640][T16482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.583056][T16482] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.635238][ T28] kauditd_printk_skb: 248 callbacks suppressed [ 1186.635253][ T28] audit: type=1326 audit(2000000010.559:10878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.4.8403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4444fd68e code=0x7ffc0000 [ 1186.669770][T15724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1186.737741][ T28] audit: type=1326 audit(2000000010.659:10879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.4.8403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4444fd68e code=0x7ffc0000 [ 1186.926648][ T28] audit: type=1326 audit(2000000010.759:10880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.4.8403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4444fd68e code=0x7ffc0000 [ 1187.010478][ T28] audit: type=1326 audit(2000000010.929:10881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.4.8403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe4444fd68e code=0x7ffc0000 [ 1187.120702][ T28] audit: type=1326 audit(2000000011.029:10882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=512 comm="syz.4.8403" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe44453ce59 code=0x7ffc0000 [ 1187.236929][ T546] xt_hashlimit: size too large, truncated to 1048576 [ 1187.771176][ T559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8416'. [ 1187.844084][ T563] syzkaller0: entered promiscuous mode [ 1187.871815][ T563] syzkaller0: entered allmulticast mode [ 1187.986351][ T575] tipc: Started in network mode [ 1187.991401][ T575] tipc: Node identity ce8f57e7524a, cluster identity 4711 [ 1187.999156][ T575] tipc: Enabled bearer , priority 0 [ 1188.006437][ T575] syzkaller0: entered promiscuous mode [ 1188.012303][ T575] syzkaller0: entered allmulticast mode [ 1188.021401][ T28] audit: type=1400 audit(2000000011.939:10883): avc: denied { watch_reads } for pid=574 comm="syz.1.8422" path="/7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1188.049087][ T576] tipc: Resetting bearer [ 1188.056595][ T578] usb usb7: usbfs: process 578 (syz.5.8423) did not claim interface 0 before use [ 1188.073343][ T578] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1188.083145][ T574] tipc: Resetting bearer [ 1188.093100][ T574] tipc: Disabling bearer [ 1188.662912][ T598] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8429'. [ 1188.963242][ T606] netlink: 'syz.1.8433': attribute type 1 has an invalid length. [ 1189.173769][ T613] netlink: 'syz.1.8435': attribute type 1 has an invalid length. [ 1189.227064][ T613] gretap1: entered allmulticast mode [ 1189.295767][ T28] audit: type=1400 audit(2000000013.219:10884): avc: denied { ioctl } for pid=617 comm="syz.7.8437" path="socket:[113263]" dev="sockfs" ino=113263 ioctlcmd=0x89a1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1189.324192][ T593] syz.5.8425 (593) used greatest stack depth: 8160 bytes left [ 1189.544472][ T627] FAULT_INJECTION: forcing a failure. [ 1189.544472][ T627] name failslab, interval 1, probability 0, space 0, times 0 [ 1189.562495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1189.587338][ T627] CPU: 0 UID: 0 PID: 627 Comm: syz.7.8440 Tainted: G W syzkaller #0 PREEMPT(full) [ 1189.587374][ T627] Tainted: [W]=WARN [ 1189.587458][ T627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1189.587476][ T627] Call Trace: [ 1189.587484][ T627] [ 1189.587495][ T627] __dump_stack+0x1d/0x30 [ 1189.587522][ T627] dump_stack_lvl+0x95/0xd0 [ 1189.587545][ T627] dump_stack+0x15/0x1b [ 1189.587578][ T627] should_fail_ex+0x263/0x280 [ 1189.587641][ T627] ? pfkey_add+0xbaf/0x1330 [ 1189.587667][ T627] should_failslab+0x8c/0xb0 [ 1189.587721][ T627] __kmalloc_cache_noprof+0x5f/0x400 [ 1189.587760][ T627] pfkey_add+0xbaf/0x1330 [ 1189.587796][ T627] pfkey_sendmsg+0x876/0x9b0 [ 1189.587909][ T627] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1189.587934][ T627] ____sys_sendmsg+0x563/0x5b0 [ 1189.587971][ T627] ___sys_sendmsg+0x195/0x1e0 [ 1189.588018][ T627] __x64_sys_sendmsg+0xd4/0x160 [ 1189.588091][ T627] x64_sys_call+0x194c/0x3020 [ 1189.588124][ T627] do_syscall_64+0x12c/0x3b0 [ 1189.588160][ T627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.588215][ T627] RIP: 0033:0x7f436120ce59 [ 1189.588235][ T627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1189.588255][ T627] RSP: 002b:00007f435fc67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1189.588310][ T627] RAX: ffffffffffffffda RBX: 00007f4361485fa0 RCX: 00007f436120ce59 [ 1189.588328][ T627] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000d [ 1189.588346][ T627] RBP: 00007f435fc67090 R08: 0000000000000000 R09: 0000000000000000 [ 1189.588360][ T627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1189.588373][ T627] R13: 00007f4361486038 R14: 00007f4361485fa0 R15: 00007ffc8cf4e458 [ 1189.588393][ T627] [ 1189.808491][ T631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8438'. [ 1189.931782][ T642] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 1189.978443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.274028][ T28] audit: type=1326 audit(2000000014.199:10885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=659 comm="syz.7.8450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f436120ce59 code=0x0 [ 1190.357193][ T668] netlink: 592 bytes leftover after parsing attributes in process `syz.5.8453'. [ 1190.370930][ T669] netlink: 592 bytes leftover after parsing attributes in process `syz.1.8454'. [ 1190.381695][ T668] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8453'. [ 1190.395617][ T668] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8453'. [ 1190.404616][ T668] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8453'. [ 1190.416119][ T670] netlink: 168 bytes leftover after parsing attributes in process `syz.7.8450'. [ 1190.426041][ T669] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8454'. [ 1190.472722][ T669] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8454'. [ 1190.579959][ T678] No such timeout policy "syz0" [ 1190.610970][ T683] FAULT_INJECTION: forcing a failure. [ 1190.610970][ T683] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.623992][ T683] CPU: 1 UID: 0 PID: 683 Comm: syz.4.8459 Tainted: G W syzkaller #0 PREEMPT(full) [ 1190.624107][ T683] Tainted: [W]=WARN [ 1190.624115][ T683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1190.624132][ T683] Call Trace: [ 1190.624142][ T683] [ 1190.624153][ T683] __dump_stack+0x1d/0x30 [ 1190.624185][ T683] dump_stack_lvl+0x95/0xd0 [ 1190.624271][ T683] dump_stack+0x15/0x1b [ 1190.624296][ T683] should_fail_ex+0x263/0x280 [ 1190.624331][ T683] should_failslab+0x8c/0xb0 [ 1190.624375][ T683] __kmalloc_noprof+0xb8/0x4d0 [ 1190.624417][ T683] ? security_prepare_creds+0x52/0x120 [ 1190.624471][ T683] security_prepare_creds+0x52/0x120 [ 1190.624503][ T683] prepare_creds+0x381/0x540 [ 1190.624531][ T683] __se_sys_setns+0x230/0xff0 [ 1190.624619][ T683] ? fput+0x8f/0xc0 [ 1190.624648][ T683] __x64_sys_setns+0x31/0x40 [ 1190.624752][ T683] x64_sys_call+0x1bef/0x3020 [ 1190.624778][ T683] do_syscall_64+0x12c/0x3b0 [ 1190.624849][ T683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.624872][ T683] RIP: 0033:0x7fe44453ce59 [ 1190.624889][ T683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1190.624994][ T683] RSP: 002b:00007fe442f8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 1190.625082][ T683] RAX: ffffffffffffffda RBX: 00007fe4447b5fa0 RCX: 00007fe44453ce59 [ 1190.625097][ T683] RDX: 0000000000000000 RSI: 0000000010000000 RDI: 0000000000000003 [ 1190.625114][ T683] RBP: 00007fe442f8f090 R08: 0000000000000000 R09: 0000000000000000 [ 1190.625132][ T683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1190.625149][ T683] R13: 00007fe4447b6038 R14: 00007fe4447b5fa0 R15: 00007ffca3e129d8 [ 1190.625237][ T683] [ 1190.834393][ T676] netlink: 'syz.5.8456': attribute type 4 has an invalid length. [ 1190.912551][ T28] audit: type=1400 audit(2000000014.829:10886): avc: denied { connect } for pid=697 comm="syz.4.8462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1190.958563][ T699] netlink: 'syz.5.8461': attribute type 1 has an invalid length. [ 1191.104824][ T707] block device autoloading is deprecated and will be removed. [ 1191.116601][ T707] 8021q: VLANs not supported on ip_vti0 [ 1191.336775][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.380328][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.428900][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.476628][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.501441][ T713] loop0: detected capacity change from 0 to 1764 [ 1191.525560][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.549527][ T713] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1191.567926][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.591741][ T28] audit: type=1400 audit(2000000015.509:10887): avc: denied { mount } for pid=711 comm="syz.0.8468" name="/" dev="loop0" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1191.663097][ T717] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1191.742111][ T28] audit: type=1400 audit(2000000015.659:10888): avc: denied { unmount } for pid=31635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 1192.120872][ T740] 8021q: VLANs not supported on ip_vti0 [ 1192.183159][ T744] syzkaller0: entered promiscuous mode [ 1192.206559][ T744] syzkaller0: entered allmulticast mode [ 1192.217794][ T28] audit: type=1400 audit(2000000016.139:10889): avc: denied { create } for pid=747 comm="syz.7.8482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 1192.495948][ T771] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 1192.523725][ T771] Cannot find add_set index 0 as target [ 1192.540862][ T776] 8021q: VLANs not supported on ip_vti0 [ 1192.651230][ T781] FAULT_INJECTION: forcing a failure. [ 1192.651230][ T781] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.705391][ T781] CPU: 1 UID: 0 PID: 781 Comm: syz.0.8494 Tainted: G W syzkaller #0 PREEMPT(full) [ 1192.705454][ T781] Tainted: [W]=WARN [ 1192.705464][ T781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1192.705482][ T781] Call Trace: [ 1192.705492][ T781] [ 1192.705502][ T781] __dump_stack+0x1d/0x30 [ 1192.705556][ T781] dump_stack_lvl+0x95/0xd0 [ 1192.705748][ T781] dump_stack+0x15/0x1b [ 1192.705890][ T781] should_fail_ex+0x263/0x280 [ 1192.705993][ T781] should_failslab+0x8c/0xb0 [ 1192.706035][ T781] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1192.706208][ T781] ? inet_twsk_alloc+0x90/0x360 [ 1192.706320][ T781] inet_twsk_alloc+0x90/0x360 [ 1192.706376][ T781] tcp_time_wait+0x3d/0x5c0 [ 1192.706442][ T781] tcp_rcv_state_process+0x858/0x21f0 [ 1192.706535][ T781] tcp_v6_do_rcv+0x8ea/0xd80 [ 1192.706562][ T781] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 1192.706670][ T781] __release_sock+0x108/0x2f0 [ 1192.706697][ T781] ? tcp_send_fin+0x580/0x690 [ 1192.706730][ T781] release_sock+0x125/0x180 [ 1192.706953][ T781] ? __pfx_tcp_shutdown+0x10/0x10 [ 1192.707099][ T781] inet_shutdown+0x1f4/0x210 [ 1192.707222][ T781] __x64_sys_shutdown+0xd6/0x130 [ 1192.707314][ T781] x64_sys_call+0xdcc/0x3020 [ 1192.707466][ T781] do_syscall_64+0x12c/0x3b0 [ 1192.707533][ T781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.707562][ T781] RIP: 0033:0x7f93421bce59 [ 1192.707581][ T781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1192.707603][ T781] RSP: 002b:00007f9340c17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000030 [ 1192.707709][ T781] RAX: ffffffffffffffda RBX: 00007f9342435fa0 RCX: 00007f93421bce59 [ 1192.707724][ T781] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 1192.707737][ T781] RBP: 00007f9340c17090 R08: 0000000000000000 R09: 0000000000000000 [ 1192.707753][ T781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1192.707770][ T781] R13: 00007f9342436038 R14: 00007f9342435fa0 R15: 00007ffd1314f5d8 [ 1192.707931][ T781] [ 1192.999601][ T790] xt_hashlimit: size too large, truncated to 1048576 [ 1193.449327][ T28] audit: type=1400 audit(2000000017.359:10890): avc: denied { create } for pid=811 comm="syz.5.8503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1193.548161][ T820] batadv_slave_0: entered allmulticast mode [ 1193.912728][ T845] __nla_validate_parse: 15 callbacks suppressed [ 1193.912835][ T845] netlink: 592 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1193.974951][ T846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1193.999247][ T840] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8514'. [ 1194.013539][ T846] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1194.135878][ T846] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8515'. [ 1194.432731][ T862] FAULT_INJECTION: forcing a failure. [ 1194.432731][ T862] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1194.462767][ T862] CPU: 1 UID: 0 PID: 862 Comm: syz.5.8520 Tainted: G W syzkaller #0 PREEMPT(full) [ 1194.462832][ T862] Tainted: [W]=WARN [ 1194.462842][ T862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1194.462882][ T862] Call Trace: [ 1194.462889][ T862] [ 1194.462896][ T862] __dump_stack+0x1d/0x30 [ 1194.462930][ T862] dump_stack_lvl+0x95/0xd0 [ 1194.462954][ T862] dump_stack+0x15/0x1b [ 1194.462975][ T862] should_fail_ex+0x263/0x280 [ 1194.463006][ T862] should_fail+0xb/0x20 [ 1194.463052][ T862] should_fail_usercopy+0x1a/0x20 [ 1194.463144][ T862] _copy_from_user+0x1c/0xb0 [ 1194.463222][ T862] ___sys_sendmsg+0xc1/0x1e0 [ 1194.463266][ T862] ? path_openat+0x1b01/0x2050 [ 1194.463342][ T862] __sys_sendmmsg+0x185/0x320 [ 1194.463426][ T862] __x64_sys_sendmmsg+0x57/0x70 [ 1194.463453][ T862] x64_sys_call+0x27aa/0x3020 [ 1194.463480][ T862] do_syscall_64+0x12c/0x3b0 [ 1194.463550][ T862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.463574][ T862] RIP: 0033:0x7fad87ccce59 [ 1194.463591][ T862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1194.463653][ T862] RSP: 002b:00007fad86727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1194.463675][ T862] RAX: ffffffffffffffda RBX: 00007fad87f45fa0 RCX: 00007fad87ccce59 [ 1194.463691][ T862] RDX: 0000000000000001 RSI: 0000200000004440 RDI: 0000000000000003 [ 1194.463705][ T862] RBP: 00007fad86727090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.463720][ T862] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.463734][ T862] R13: 00007fad87f46038 R14: 00007fad87f45fa0 R15: 00007ffca111ec08 [ 1194.463803][ T862] [ 1194.739949][ T873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1194.853465][ T873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1195.044908][ T879] loop0: detected capacity change from 0 to 512 [ 1195.097970][ T28] audit: type=1400 audit(2000000019.019:10891): avc: denied { mount } for pid=878 comm="syz.0.8526" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1195.164999][ T28] audit: type=1400 audit(2000000019.019:10892): avc: denied { unmount } for pid=31635 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1195.191410][ T881] loop0: detected capacity change from 0 to 2048 [ 1195.227090][ T881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1195.245176][ T881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8527'. [ 1195.263250][ T881] netlink: 'syz.0.8527': attribute type 30 has an invalid length. [ 1195.272191][ T28] audit: type=1400 audit(2000000019.189:10893): avc: denied { remount } for pid=880 comm="syz.0.8527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 1195.272209][ T881] EXT4-fs: Ignoring removed orlov option [ 1195.292145][ T881] EXT4-fs (loop0): stripe (536871160) is not aligned with cluster size (16), stripe is disabled [ 1195.308730][ T881] EXT4-fs (loop0): can't enable nombcache during remount [ 1195.328618][T31635] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1195.454245][ T874] ================================================================== [ 1195.462382][ T874] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 1195.470219][ T874] [ 1195.472546][ T874] write to 0xffffea000571d7d8 of 8 bytes by task 870 on cpu 0: [ 1195.480094][ T874] __filemap_remove_folio+0x201/0x2e0 [ 1195.485481][ T874] filemap_remove_folio+0x6d/0x1d0 [ 1195.490605][ T874] truncate_inode_folio+0x42/0x50 [ 1195.495644][ T874] shmem_undo_range+0x26d/0xb10 [ 1195.500499][ T874] shmem_fallocate+0x881/0x920 [ 1195.505275][ T874] vfs_fallocate+0x3b6/0x400 [ 1195.509881][ T874] __x64_sys_fallocate+0x7a/0xd0 [ 1195.514834][ T874] x64_sys_call+0x298e/0x3020 [ 1195.519524][ T874] do_syscall_64+0x12c/0x3b0 [ 1195.524126][ T874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.530090][ T874] [ 1195.532423][ T874] read to 0xffffea000571d7d8 of 8 bytes by task 874 on cpu 1: [ 1195.539882][ T874] folio_mapping+0xa1/0xe0 [ 1195.544314][ T874] evict_folios+0xdb0/0x3370 [ 1195.548942][ T874] try_to_shrink_lruvec+0x858/0xc20 [ 1195.554155][ T874] shrink_lruvec+0x256/0x1bc0 [ 1195.558865][ T874] shrink_node+0x697/0x20a0 [ 1195.563391][ T874] do_try_to_free_pages+0x408/0xc90 [ 1195.568597][ T874] try_to_free_mem_cgroup_pages+0x201/0x420 [ 1195.574500][ T874] try_charge_memcg+0x373/0xa10 [ 1195.579369][ T874] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 1195.584925][ T874] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1195.590739][ T874] alloc_pages_mpol+0xb3/0x260 [ 1195.595511][ T874] alloc_pages_noprof+0x8f/0x140 [ 1195.600456][ T874] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1195.606352][ T874] __kvmalloc_node_noprof+0x3d4/0x640 [ 1195.611747][ T874] futex_hash_allocate+0x190/0x9a0 [ 1195.616876][ T874] futex_hash_prctl+0xd8/0xf0 [ 1195.621778][ T874] __se_sys_prctl+0x4f4/0x1400 [ 1195.626561][ T874] __x64_sys_prctl+0x67/0x80 [ 1195.631167][ T874] x64_sys_call+0x2533/0x3020 [ 1195.635862][ T874] do_syscall_64+0x12c/0x3b0 [ 1195.640474][ T874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.646493][ T874] [ 1195.648828][ T874] value changed: 0xffff888138a48490 -> 0x0000000000000000 [ 1195.655937][ T874] [ 1195.658264][ T874] Reported by Kernel Concurrency Sanitizer on: [ 1195.664415][ T874] CPU: 1 UID: 0 PID: 874 Comm: syz.5.8524 Tainted: G W syzkaller #0 PREEMPT(full) [ 1195.675180][ T874] Tainted: [W]=WARN [ 1195.678988][ T874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1195.689046][ T874] ================================================================== [ 1195.709564][ T28] audit: type=1400 audit(2000000019.629:10894): avc: denied { accept } for pid=889 comm="syz.7.8531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1195.779925][ T897] netlink: 592 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1195.837578][ T897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1195.857644][ T897] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1195.898975][ T897] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8529'. [ 1196.225336][ T736] syz.1.8473 (736) used greatest stack depth: 8088 bytes left [ 1198.522687][ C1] net_ratelimit: 648 callbacks suppressed [ 1198.522729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1199.803204][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.722803][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog