last executing test programs: 14m17.046238114s ago: executing program 32 (id=181): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000076000d0b000000000000000003000000000000809cc44e0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) 10m26.447905155s ago: executing program 33 (id=1699): perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x1, 0x0) socket(0x15, 0x80000, 0xffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x22, 0x803, 0x5b3b) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x8000000e, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ddc000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ba3000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ba4000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x3893, &(0x7f0000000040)={0x0, 0x1000c89b, 0xc000, 0x800007, 0x41}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="ad9b1de989083e57ba663ec38e280d2327a82c9c"], 0xa8}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x20000844) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) mremap(&(0x7f0000ba3000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ff7000/0x3000)=nil) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @rand_addr=0x64010100}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)}, {&(0x7f0000000200)="943f27b2914a12a7e1a5207a4ae5d45b16022912acf3eb49005358ffa837a66551001e99476b7305f99516a0301ea887ba83abfbc7cf105d0d907688d5998b131670963dfc2cb4aedadfea50fc738a94d26ffc80ea1026ce73dc0add2873a1c5982e8b278de4cc601a10e54e5009b0c9dd4c1896a938eb89840428f62e0cfd59c1e93ac90fece42992ea3e5537dc073d6fdf3365d8d1109eb33fd7e6238a0065ec1096dcc62678cd3e3addfdac05dffad72b616db6", 0xb5}, {&(0x7f00000003c0)="0ebb83a4df128fbbd5b0f16fb049e98e8742e7294f43f3e0610b58c977b4878d5488742cedad1ab94b3b26a144af3832312ea31a9cba8eb721d067616139f509f3af5223c07e408e", 0x48}], 0x3, 0x0, 0x370}, 0x4) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x1, 0x0, 0x0, 0x6, 0x28512, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x106200, 0x11004, 0x20da, 0x0, 0x0, 0x80020005, 0xb, 0x0, 0x5, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, 0x0, 0x4886) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000080)=0x10822) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 10m17.875146031s ago: executing program 34 (id=1751): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f00000014c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7d, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x3, 0x55}, 0x106200, 0xbd, 0x40, 0x8, 0x6, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_emit_ethernet(0x56, 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = io_uring_setup(0x1320, &(0x7f00000000c0)={0x0, 0xb953, 0x1, 0x3, 0x25a}) close(r1) openat$rtc(0xffffffffffffff9c, 0x0, 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x4040811}, 0x0) 10m15.795045887s ago: executing program 35 (id=1763): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0xf2d26f2df432da39, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x1f89, &(0x7f0000000080)={0x0, 0x0, 0x13580, 0x100, 0x2}, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0xd9f, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xa, 0x800014c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0xfffffffffffffdd7, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffe0}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x43) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r6, 0x0, 0xee01) fchown(r6, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x1ffff, 0x0, 0x0, 0xff}}]}}]}, 0x154}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r6) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) 10m13.275404708s ago: executing program 36 (id=1772): r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') sendmsg$TIPC_NL_PUBL_GET(r0, 0x0, 0xd4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, &(0x7f0000000000)=0x3, 0xfff, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4eb) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0xa, 0x40, 0x7, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0, 0x2}, 0x986, 0xfc, 0x4, 0x9, 0x81, 0x9, 0x9, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r4, 0x27, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x4, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x0, 0x5, 0x0, 0x4004e01110e0ab67}, 0x0, 0x8, r3, 0x0) close(0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x60000726) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) ioctl$KDSETMODE(r5, 0x4b3a, 0x0) 5m53.180024284s ago: executing program 37 (id=3245): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db44", 0xe}], 0x1}, 0x0) 5m50.776307253s ago: executing program 0 (id=3383): msgget$private(0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 5m50.075220682s ago: executing program 0 (id=3387): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000084000002040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") unshare(0x24060400) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 5m50.075122012s ago: executing program 38 (id=3387): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000084000002040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"/28], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") unshare(0x24060400) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) 3m53.197955197s ago: executing program 39 (id=4139): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x1220, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x908d, 0xe}, 0x7000, 0x2, 0x0, 0x1, 0x0, 0xa, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r2, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_getaffinity(r1, 0x8, &(0x7f00000000c0)) poll(0x0, 0x0, 0x9) socketpair(0x21, 0x6, 0x800, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r5, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x1a000}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xffffffc0, @loopback, 0x10001}, 0x1c) 3m11.535013732s ago: executing program 40 (id=4318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f00000007c0)={[{@test_dummy_encryption_v1}, {@usrjquota}, {@dax}, {@init_itable}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x9}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}]}, 0x1, 0x587, &(0x7f0000000940)="$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") socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x400000, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb89}, 0x0, 0xfffff7f800000001, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = syz_io_uring_setup(0x1972, &(0x7f0000000080)={0x0, 0x1000, 0x400, 0x4}, &(0x7f0000000140), &(0x7f0000000480), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) add_key(&(0x7f00000028c0)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000006c0)={0x80, 0x31, 0x4, 0x300, 0x0, 0x81, 0x0}) r7 = socket(0x2, 0x80805, 0x4) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380), 0x2, 0x9}}, 0x20) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 2m40.221593779s ago: executing program 41 (id=4544): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32], 0x48) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x80fe) socket$kcm(0xa, 0x2, 0x11) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa07, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, @perf_config_ext={0x4, 0x4}, 0x108052, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbd, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000440), &(0x7f0000000540), 0x8, 0xa, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r1 = creat(&(0x7f0000000000)='./file0\x00', 0x40) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006000400000019000000380000005e020000080400000400200004000500"], 0xb8) close(r1) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 2m16.893687938s ago: executing program 42 (id=4675): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x4, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4048875}, 0x0) 2m4.004784637s ago: executing program 6 (id=4741): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000180)={[{@debug}]}, 0x0, 0x236, &(0x7f0000010000)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0xfffffd64}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x64a, &(0x7f0000000040)={0x0, 0x8835c, 0xc000, 0x20000a, 0x33c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x4}, {0xe, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r5 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000100), &(0x7f00000002c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000100)='.dead\x00', &(0x7f0000000140)=@secondary) 2m3.194022437s ago: executing program 6 (id=4745): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x10, 0x10, 0x8, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0]}}, 0x0, 0x30}, 0x28) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x10000, 0x1, 0x3ff, 0x4}}, 0x80) r1 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x7, &(0x7f0000000300)={0xa, 0xdffffff9, 0x9d0}) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xfff, 0x2002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1}, 0x10000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) read$eventfd(r7, &(0x7f0000000080), 0x8) 2m2.14886661s ago: executing program 6 (id=4751): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32], 0x1c}}, 0x4008054) unshare(0x30000000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/243, 0xec}], 0x4}, 0x1081}], 0x4b, 0x40000040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x140}}, 0xdc955a41d9e63ba0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) 2m1.521227178s ago: executing program 6 (id=4758): r0 = socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x14}, 0x11feb0, 0x1002, 0x20da, 0x7, 0x7, 0xb, 0xb, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x80, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}, 0x2}}}, 0x18) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x24, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10008, 0x209a, 0x5, 0xd, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_route(0x10, 0x3, 0x0) timerfd_create(0x7, 0x80000) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES32=r2], 0x38}}, 0x10) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000000)={0xa2, 0x80010, 0x7fff, 0x6}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000ec0)={'bond0\x00', &(0x7f0000000bc0)=@ethtool_per_queue_op={0x4b, 0x38, [0x7, 0x2, 0x3ff, 0x7ff, 0x7fffffff, 0x1a78, 0x6ec4dca9, 0xd7, 0x4, 0x4, 0x3, 0x7, 0x100, 0x1, 0xa74, 0x80, 0xa, 0x0, 0x2, 0x9, 0x101, 0x7, 0x1, 0x9, 0x9, 0x4ba, 0x5, 0xfffffffb, 0x3, 0x6, 0x3, 0x8, 0x401, 0x4, 0x8, 0x0, 0x7fffffff, 0x6, 0x0, 0xff, 0x7, 0x168d, 0x8, 0x7, 0x0, 0x9, 0xd7, 0x5, 0x1, 0x9, 0x0, 0x4, 0xfd24, 0x1000, 0x9, 0x8, 0x1, 0x1, 0x1, 0x1ff, 0x5, 0x8be, 0x7ff, 0x0, 0xe27, 0x3, 0x3, 0x4, 0xf62, 0x3, 0x2, 0x0, 0x3, 0xdf, 0x200, 0xf, 0x2, 0x77cb, 0x471a7638, 0x4, 0x9, 0x5, 0x6d7aea4, 0x400, 0x1, 0x9, 0x4, 0x8, 0x401, 0x1, 0x8483, 0x1, 0x390, 0x1, 0x9, 0x8, 0x4, 0x1, 0x1, 0x7, 0x4, 0x5f20, 0x4, 0x6, 0x1, 0x4, 0x7, 0x4, 0x1, 0x2, 0x5, 0xfff, 0x3, 0xfffffffe, 0x4, 0x3, 0x5, 0x9, 0x0, 0x0, 0x3, 0xffffffff, 0x9, 0xfef4, 0x6cdc, 0x6, 0x2, 0xfff]}}) 2m1.093096693s ago: executing program 6 (id=4761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x19, &(0x7f0000000ec0)={@local, @empty, @val={@val={0x88a8, 0x0, 0x1, 0x2}, {0x8100, 0x4, 0x0, 0x2}}, {@x25={0x805, {0x0, 0x0, 0xf1}}}}, 0x0) 2m0.427318051s ago: executing program 6 (id=4765): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3260d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x17) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x25f56157, 0xffffffff, 0x0, 'queue0\x00', 0x200000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x80000001, 0x1}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 2m0.342470382s ago: executing program 43 (id=4765): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x3260d) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) syz_read_part_table(0x593, &(0x7f00000005c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x17) close(0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x40400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x25f56157, 0xffffffff, 0x0, 'queue0\x00', 0x200000}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x80000001, 0x1}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r7, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x44}}, 0x0) 1m51.805118078s ago: executing program 0 (id=4767): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x79, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1m51.552165141s ago: executing program 0 (id=4810): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="c80000001000010402400000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="88d10100000000009400128009000100766c616e"], 0xc8}}, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000080, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x12, 0x32b, &(0x7f0000000840)="$eJzs3cFrI1UcB/Bfu9tWKt30IIKC+NCLXoa2/gMG2QWxoNStrB6EWTvVkNmkZMJKVtHevPp3LB69CeI/0It3bx6EXjzuYTGSju22a5aVxTh1+/lA8n7Jy5d5Q3jhdwnv8Ma3t7q7VbabD2P+zRTzETF/L2L1qKrN1U9z9avFOG0/Xm/d+OWl9z/86J325ubVrZSuta+/sZFSuvLyj59/+d0rPw2f/eD7Kz8sxcHqx4e/b/x68PzBC4d/XP+sU6VOlXr9YcrTzX5/mN8si7TTqbpZSu+VRV4VqdOrisGZ+d/K/t7eKOW9nZXlvUFRVSnvjVK3GKVhPw0Ho5R/mnd6KcuytLIcPM723a2tvN30KpitwaCdTzbv0t9mtu82siAAoFH/uP+fvH9UN9n/7+r//1X6/4tg0v8v/rV/z9L/AwAAAAAAAAAAAADA/8G98bg1Ho9bx+PDjymRhQaWyYw8wffPU+TUH/eeiSi/ub19e7se6/n2bnSijCLWohX3I8Yn6vra25tX19KR1Vi59XWdn4yXzubXoxWr0/PrdT6dzS/E8un8RrTiuen5jan5xXjt1VP5LFrx8yfRjzJ2YpJ9kP9qPaW33t18KL909DkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALoYsnZh6fn+WPWq+zp+cr78Wrbg//Xz+tann81+OFy83e+8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKwa3enmZVkMFE9R8cWlJq6+cC7ufYbF3H69ac7Leh5bHO/yJ4k3+KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXlw6HfTKwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBJ1ehONy/LYjDD4lHXnquH/f/wdgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM69PwMAAP//aEUjOw==") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) listen(r0, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r2, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @multicast1}, {0x0, 0x17c1, 0x8}}}}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8001}, 0x1c) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000080)) kexec_load(0x5565, 0x0, 0x0, 0x2a0000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m51.317636524s ago: executing program 0 (id=4812): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c0200002100010000000001a800000000080000000000000000000000000000fc02000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000cc0111"], 0x27c}}, 0x0) 1m48.898774884s ago: executing program 0 (id=4830): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32], 0x1c}}, 0x4008054) unshare(0x30000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/243, 0xec}], 0x4}, 0x1081}], 0x4b, 0x40000040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x140}}, 0xdc955a41d9e63ba0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) 1m48.737027836s ago: executing program 44 (id=4830): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000480)={0x2, {{0x2, 0x400, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32], 0x1c}}, 0x4008054) unshare(0x30000000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) recvmmsg(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000008c0)=""/189, 0xbd}, {&(0x7f0000000cc0)=""/4083, 0xff3}, {&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000001cc0)=""/243, 0xec}], 0x4}, 0x1081}], 0x4b, 0x40000040, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32], 0x140}}, 0xdc955a41d9e63ba0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@data_err_ignore}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@grpid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x3c}}, {@min_batch_time={'min_batch_time', 0x3d, 0x3}}]}, 0x1, 0x47a, &(0x7f00000006c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) 1m0.301506944s ago: executing program 9 (id=5104): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20080) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) r8 = socket$inet(0x2, 0x2, 0x1) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000140)=ANY=[], 0x3, 0x805, &(0x7f0000001580)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1fd) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000b40)={0x54, 0x9, 0x1, {0x1, 0x1}, {0x64, 0x7}, @cond=[{0x7f, 0x2, 0x81, 0x6, 0xffff, 0xe8}, {0x3, 0xffff, 0x1, 0x1, 0x2}]}) ioctl$EVIOCSMASK(r10, 0x40104593, &(0x7f0000000180)={0x0, 0x37, &(0x7f0000000100)="02cf4a0e95a4fe8f2f13bc28be3f3851f40c10381e3e16824396e0e9f36bc3a464d4d9d5a5f6afaad65f48049b43e2476ec934212ac987"}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=@gettfilter={0x6c, 0x2e, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xd, 0xa}, {0xd, 0x5}, {0x3, 0x5}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x100}, {0x8, 0xb, 0x1000}, {0x8, 0xb, 0xfffffff8}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xfffffff4}, {0x8, 0xb, 0xaf}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$char_usb(r10, &(0x7f0000000040)="e2", 0x2250) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000004c0)={0x1, 'veth0_to_team\x00', {}, 0x3}) 58.981206841s ago: executing program 8 (id=5111): r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)}], 0x1}}], 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, 0x0, 0x4000002) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x1, 0xfffffffb, 0x0, 0xffffffff, 0x8, 0x7fffffff]}}, 0x5c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000380), &(0x7f0000000080)=0x8) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @mcast2}, 0x0, {[0xf, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1, 0x3]}}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x2f, 0x0, "a4ed4f5668947075e67f7bd7f84096cf6343677f87fb77863b44a07dcb4456bad81765e9bfd40c142742bfc14f782974f4160725ba56db7af645a80cd7512b449eae9a49677c6596c7878d2e8818726e"}, 0xd8) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000271) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4014080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x40044c1) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 58.382176348s ago: executing program 3 (id=5117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000002000010002000000000200000a20007636150df41a00e5ff14000100fc0100000000000000000000000000010500130001"], 0x38}}, 0x0) (fail_nth: 3) 58.325984189s ago: executing program 3 (id=5118): perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x3, 0x8}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x40006, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0xa48}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0xfffffffe}]}, 0x44}}, 0x0) unshare(0x20000400) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010027bd7000fedbdf2500000000", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x80) 58.302327349s ago: executing program 9 (id=5119): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0}) 58.076630332s ago: executing program 9 (id=5120): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000000700)=0x2, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) sendto$packet(r3, &(0x7f0000000040)="2717a90af1a30d71286f47000000", 0x5ee, 0x40000, &(0x7f0000000180)={0x11, 0x16}, 0x14) 58.025914583s ago: executing program 9 (id=5121): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 57.953308594s ago: executing program 9 (id=5123): openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x1e1802, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc00000019000200000000614bdbdf250000000000000000000000000000000000000000000000000000ffffe000000200000000000000000200000008ffff00ae59e52d895d299e175e641d26c0d77ba50061f44b714c55c33182a64dfbe36b2959f62affd5b40521fc73cdb81944fb0e825d8e18a4fef435dd1525a0fb881177e23e8fc2b488defbfa088ee92ea79e3b66f110e28148d5d0869e13780885b3862fee3ddde93aa12f28d4ea188c0c670b77c6b9f7278bd73cf68741b1c1e404de652745c1c4d86fe895cdc4a3d5e4c569a0ce7f00031b384f4c085d68295a00a2180926c3468d5854007d976cb5892ecfb74d624699d57f8833323f94fa994af77222f0aacece1071ad9dda689849cd58", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000040000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000300000000000000000000000020000000000000000000000000100000000000010100000000000044000500fc020000000000000000000000000001000000022b00000000000000fe8000000000000000000000000000aa000000000100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000051401002cbd7000fbdbdf25080001000100000008fc030004000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r2 = socket$inet(0x2, 0x2, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) ioctl$BTRFS_IOC_SCRUB_CANCEL(r3, 0x941c, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff892f00004000633277fbac14142ce934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000280)="08001efbb07d5a6e", 0x8}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}], 0x20}, 0x20000810) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xf1ffffff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4, 0x3, 0xfffffff1}]}}]}, 0x38}}, 0x0) 57.952282784s ago: executing program 8 (id=5124): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='freezer.self_freezing\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x4040040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) unshare(0x68040200) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xf, 0x1d, 0x0, 0x0, 0x0, 0x10005, 0xf41b8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b82, 0x2, @perf_bp={&(0x7f00000001c0), 0xd}, 0x12b04, 0x0, 0x43a1bd78, 0x8, 0x4, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x5, r1, 0xb) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20842, 0x93) fcntl$setstatus(r2, 0x4, 0x2000) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20d42, 0x4) write$cgroup_subtree(r2, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0xf2, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 57.775920646s ago: executing program 3 (id=5125): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x1, 0x0, 0x0, 0xe, 0x1, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x2c, 0x0, 0x8, 0xfffffffa}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x20, 0x0, 0x10, 0x10, 0x8, [@var={0xa, 0x0, 0x0, 0x11, 0x4, 0xffffffff}]}, {0x0, [0x0, 0x4f, 0x5f, 0x61, 0x0, 0x0]}}, 0x0, 0x30}, 0x28) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f00000000c0)) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x7, 0x37, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=@reiserfs_4={0x10, 0x4, {0x10000, 0x1, 0x3ff, 0x4}}, 0x80) r1 = syz_clone(0x600, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$ARCH_MAP_VDSO_32(0x1e, r1, 0xfff, 0x2002) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000200)={@phonet={0x23, 0x8, 0xf0, 0x4}, {0x0}, 0x0, 0x8}, 0xa0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r6, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000340)=""/247, 0xf7}], 0x1}, 0x10000) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r7, 0x0, 0x20000023896) prctl$PR_MCE_KILL(0x35, 0x0, 0x8) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000040)=""/46, 0x2e}], 0x1, 0x0, 0x0) read$eventfd(r7, &(0x7f0000000080), 0x8) 57.768555846s ago: executing program 3 (id=5127): syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_create1(0x0) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000000480)="$eJzs3c9vHFcdAPDvrL2Okzi1CxygUktFi5IKshvXtLU4lCIhOFVClHsw9saysvZG9rqNrQo2fwESQoDECS5ckPgDkFAkLhwRUiQ4g1QEQpCCBIfSQbM7G5v1rL0xa2+8/nykybw3v77f5/iNZ3aeZgM4t56PiDci4sM0TV+KiNl8eSmfotWZsu3ef/jucjYlkaZv/S2JJF+WbZamado95uV8t+mI+NpXIr6Z7As4nc93dm8v1eu1zbxaba7fqW7t7F5fW19ara3WNhYW5l9dfG3xlcUbQ2nnlYh4/Ut/+v53fvrl13/52Xf+ePMv176VpTWTr++24xgmD1vZaXr5wnTPDpvHDPYkytpT/iCvXBxsn3snmRAAAH1l1/gfiYhPRcRLMRsTh1/OAgAAAGdQ+oWZ+CDpPL8rMNVnOQAAAHCGlNpjYJNSJR8LMBOlUqXSGcP7sbhUqje2mp+51djeWOmMlZ2LcunWWr12Ix8rPBflJKvPt8t79Zd76gsR8XREfG/2YrteWW7UV0b94QcAAACcE5d77v//Odu5/z9ccjrJAQAAAMMzN+oEAAAAgBPn/h8AAADGWnnUCQAAAAAn7qtvvplNaff7r1fe3tm+3Xj7+kpt63ZlfXu5stzYvFNZbTRW2+/sWz/qePVG487nYmP7brVZ22pWr+zs3lxvbG80b67F9Kk0CAAAADjg6U/e/30SEa3PX2xPmalRJwWcislHpe47PQt6/x+e6szfO6WkgFMxMcA2710oXu46Ac62yd4Fffo6MH6M/weO+kaPvoN3ftOZlYacDwAAMHxXP1H8/P/o6/mWS34443RiOL96nv+ns6NKBDh17ef/gw7kcbEAY6U80AhAYJz9v8//j5amj5UQAAAwdDPtKSlV8o/3ZqJUqlQirrS/FrCc3Fqr125ExFMR8bvZ8oWsPt/eMznyngEAAAAAAAAAAAAAAAAAAAAAAAAA6EjTJFIAAABgrEWU/pz8qvMu/6uzL870fj4wlfy7/ZXAUxHxzo/e+sHdpWZzcz5b/vdHy5s/zJe/PIpPMAAAAIBe3fv09vxfo84GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHHz/sN3l7vTAJtfHFbcv34xIuaK4k/GdHs+HeWIuPSPJCb37ZdExMQQ4rfuRcTHi+InWVqPQhbFH8YPoXUvaaVthfFjLv8pFMW/PIT4cJ7dz84/bxT1/1I8354X97/JiP+pH1f/8188Ov9N9On/VwaM8cyDn1f7xr8X8cxk8fmvGz/pE/+FgaKX4xtf393ttzb9ccTV7t+f9hlvf4S9UrW5fqe6tbN7fW19abW2WttYWJh/dfG1xVcWb1RvrdVr+b+FMb777C8+PKz9lwr//iV5Nv3b/2LB8SYK8v/Pg7sPP9qttA7Gv/ZCQfxf/yTf4mD8Uh7n03k5W3+1W251yvs997PfPndY+1f22l9+nP//a/0O2utAR3l2sF8dAOBEbO3s3l6q12ubY1vI7tKfgDSOU5iKJyKN8S18Oys8GNYB0zRNsz5VsOp+RAxynCSG3NJScT57hb5ngFGfmQAAgGHbu+gfdSYAAAAAAAAAAAAAAAAAAABwfp3GW9Z6Y+69AjkZxiu0AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACG4r8BAAD//7gG3Ac=") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)) socket$inet6(0xa, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x208, r4, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1e0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x1b4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x190, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x7}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x208}, 0x1, 0x0, 0x2000000000000000, 0x4004840}, 0x2000000) 57.160941273s ago: executing program 3 (id=5131): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1ec}}, 0x0) shmget$private(0x0, 0xd000, 0x1, &(0x7f0000ff3000/0xd000)=nil) 57.041446915s ago: executing program 8 (id=5132): syz_emit_ethernet(0xda, &(0x7f0000000240)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x2c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x2, [{0x0, 0xd, "5e00020000020000000000"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff003a0000b61af93a93"}]}, @lsrr={0x83, 0x13, 0x0, [@dev, @loopback, @loopback, @multicast2]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b3defc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0xb, "f7d11634eea26b75af"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x11, "ccf0294e2a3bdb4aa40b249e8e0c1a"}]}, @timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x9, 0x0, 0x0, 0x0]}]}}}}}}}, 0x0) 56.997041745s ago: executing program 9 (id=5133): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00'/14], 0x14}}, 0x4000054) 56.965401176s ago: executing program 8 (id=5134): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f00000005c0)="1a9ef439feffff090000000003", 0xd}], 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000040)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x4004991}, 0x4c085) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0], 0x38}}, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xb}, 0x4) 56.756603719s ago: executing program 8 (id=5135): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 56.59254244s ago: executing program 8 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000101000012080400", @ANYRES32, @ANYBLOB="40000060d70000000040000000ebff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500005f01f11915e6189d2d3fafb100030000009500"/84], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', ')\x00'}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x8015, 0x6, 'wrr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='hybla', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000000c0), 0xfd, 0x4a4, &(0x7f0000001300)="$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") 55.244767167s ago: executing program 3 (id=5140): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0xffffffffc}, 0x1006a1, 0x5, 0x10ffc, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) semget$private(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0xa80}, 0xf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) 41.541921057s ago: executing program 45 (id=5133): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x1, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101ac2, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x3c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x60}, 0x1, 0x0, 0x0, 0x20040804}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB='ya\x00'/14], 0x14}}, 0x4000054) 41.505245357s ago: executing program 46 (id=5138): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000101000012080400", @ANYRES32, @ANYBLOB="40000060d70000000040000000ebff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000f8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500005f01f11915e6189d2d3fafb100030000009500"/84], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'user.', ')\x00'}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @private=0xa010101, 0x8015, 0x6, 'wrr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe(0x0) socket$kcm(0x29, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000440)='hybla', 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f00000000c0), 0xfd, 0x4a4, &(0x7f0000001300)="$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") 40.150794654s ago: executing program 47 (id=5140): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$kcm(0x29, 0x5, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0xffffffffc}, 0x1006a1, 0x5, 0x10ffc, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) semget$private(0x0, 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10) write$P9_RXATTRWALK(r2, &(0x7f0000000140)={0xf, 0x1f, 0x2, 0xa80}, 0xf) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[]) 3.380498088s ago: executing program 5 (id=5412): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x37, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setstatus(r0, 0x4, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x57, 0xa, 0x100000}, 0x20) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private0, @remote, [@hopopts={0x3a}], "a87f7292fee6ad36"}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @local, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18e0010}) 3.309030259s ago: executing program 2 (id=5415): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 3.282361s ago: executing program 2 (id=5417): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000039000900f036d67600dfffeb03000000040000000c000180060006008848"], 0x24}}, 0x8090) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="611583000000000061138c0000000000bfa000000000000007000000080000002d0301000000000095000000000000006916000000000000bf67000000000000350607000fff07206706000003000000160302000ee60060bf350000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dc725f431bcab0ef59b8f0e431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa0100000000000000b93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4ffcae1a8a793a7795a9214a92f66e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc3086936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154baa8e51489a614e69722bac30000000000000000000000000000a006b178438e930b2494db1bf624a70a19a45b8b71869afb13cb2ac1d2f3ec0d93a3e4fd0ad076c7d826f218aa6ba8ec5e58b7c64dc8616127087901dc65418a4b25bfa7ae8b5ad9642815f319230425e8bd89c6983d816d97d81a739917eecd26f9a3aecaf0acdaf6cffab38eae3b10b122b4bf521a46bf01a0c136f745113b589459fbe1666087a7c554a55e2b42ab7e405a77f405a348a64e356b7fb61e48ea9c87bf13f97052c51fdd49f3dbccf9874cf61807ae4b1665ccdd026d4580a068395e8cb851eeadb1da6d1009513ca73a685c66fb15f27eb74a7a4eb5966e3ef4be3ca8ba81b2d17d797265390ce616c3d7b566fe956fb93c6a43f4dc6bfc194daeb7b998d550773bc14aca"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="02030002130000002dbd7000ffdbdf25010014102300000005000600000001000a00ffffffffffffff80000000000000000000b5f4943a01fbffffff0000000002000100000000000400050c0000000005000500000000000a000000000000000000000000000000000000000000000107000000000000000400080098"], 0x98}, 0x1, 0x7}, 0x14) 3.189824551s ago: executing program 2 (id=5418): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="f0000000100013070000000000000000ff0100000000000000000000000000010000000000000000fbff000000000001000000c6b2421d310b5fa7a212f7c55495bad0010000ffff0000000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000ac1e00010000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000020004000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40}, 0x40082) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) copy_file_range(r1, 0x0, r1, 0xfffffffffffffffc, 0x7, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r0, 0x20000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r3, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000100)="ae34", 0x2}, {&(0x7f00000001c0)="683f00574249e38ac23c635460fec9a29f5a346181bb4910bb70aecdf7b1b030edc2219af6628c4d46dc78fcab7431de171d9534ce74926162717d466fa42f0ae13728d851e500e688ae78c653ffafabb865befa53e16304f200c80a", 0x5c}], 0x3) r5 = dup3(r2, r0, 0x80000) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfff) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c1e0000050001000200"/28], 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x20000005) unshare(0x62020600) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000752540000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000009500000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r8, r7}, 0xc) bind$802154_raw(r6, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa9}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40811}, 0x20) write$UHID_CREATE(r5, &(0x7f0000003d40)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000002d40)=""/4096, 0x1000, 0x1, 0xc, 0x0, 0x7, 0x7}}, 0x120) 2.780336956s ago: executing program 1 (id=5426): unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$unix(0x1, 0x2, 0x0) fgetxattr(r3, &(0x7f0000000f40)=@known='security.selinux\x00', &(0x7f0000000f80)=""/12, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0xffffffffffffff45, 0x2, {0x6, "00000006000000000000000000001000"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20004014) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'filter\x00', 0x0, 0x0, 0x0, [0xd1a, 0x5, 0x3, 0xfffffffffffffffb, 0x7ff, 0x9]}, &(0x7f0000000080)=0x78) 2.537008709s ago: executing program 4 (id=5428): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={{0x180, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4c0e0) 2.494496239s ago: executing program 4 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x1c, r2, 0x5, 0x70bd2d, 0x25dfdffc, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r1, &(0x7f0000001340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001300)={&(0x7f0000000880)={0xa6c, r2, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PROBE_RESP={0x7c9, 0x91, "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"}, @NL80211_ATTR_IE_ASSOC_RESP={0x142, 0x80, [@ht={0x2d, 0x1a, {0x2, 0x1, 0x3, 0x0, {0x20ea, 0x1, 0x0, 0xb, 0x0, 0x0, 0x1}, 0x1, 0xfffffffc, 0x6}}, @measure_req={0x26, 0xf1, {0xe3, 0xf4, 0x9, "c4b6c387e99011bddbce325feeb1f96765d40eea0695a40d962e67f4128d471f010412f62e2ffb074ae9ca88c26a6b4864b3759b1d103cc0d550d1bdc323052c2ca65dc22f7742881afcf9907dbea4eb5689dbba5a0a979ecd0500ca8bbdfabb2d23d5f97aaaf3887868081ac2a5116ef48acc03e63b49e9228e42c6871376c41a579efb051a7513f46eb4cfe1a49d6fa98423f5d37d7a156e9735c2198affa4a32d6cf76b04a4d064e6f405de2bc0532e3befd2e62b6e581fb3f9ba4f31d1d797166093ff8d11a02b3750ca0674fdd7300ec4dce60f9daa046e7122098894051216a41549f20df59359c6d1a2e7"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x2, 0xb, @device_b, 0x8, @value=@broadcast, 0x202, 0x23d, @device_b, 0x2}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_BEACON_HEAD={0x146, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x5}, @broadcast, @device_b, @random="506e9f3be3c0", {0x8, 0x6}}, 0x3, @random=0x6, 0x1000, @val={0x0, 0xd, @random="2802ca8b270dee93b0e6956c62"}, @val={0x1, 0x1, [{0x36}]}, @val={0x3, 0x1, 0xae}, @val={0x4, 0x6, {0x80, 0x7, 0x7, 0x1}}, @val={0x6, 0x2, 0x1ff}, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x9a, "704980008dd21a6683306195fabec79460228eb213992deda1cfb3ce0cdc5875ee4c4519bf59a68f713f8cb1808e097688983f6f937de552e95d35623bf5dfee38280f5c68e4e88d65e38f259a2ea9f6e6f29cd4e3d4c4658d2cbff48ec078c5defa18bb68c0c81e6a08aece05b38e5c80d70930807a9f7c4d9e90459c47962e3f484cc49a91254497e5b736e00bc45cd318cff5f24519d21d0c"}, {0xdd, 0x5f, "3f0757429e5ae0314b8862a00814b379c63c029b92083f2642243b9011ab2912018adf169074ad8fe807a3dba682afcabc27f27c6754805efbd753365729de88c58002a949cbaea5c948112229fe4093e69188c69d865a95e0bf487b647f8f"}]}}]}, 0xa6c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) recvmmsg(r0, &(0x7f0000008180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x200000000000000) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ec, &(0x7f0000000380)="$eJzs3dFrW18dAPDvvU38rVt/plMf5sBtuEk7dGm7uq34MBVEnwbqfJ+1zUpp2ow23dYytMM/QBBRwRd98kXwDxBkf4IIA30XFUV00wcfpleS3NSuS9qOpYk2nw+c3XNubvI9311yes+9l9wAhtaliJiMiCzLsqsRUcrXp3mJnVZpbPfyxZOFRkkiy+7+NYkkX9f+rPfy5Zn8baci4qtfivhG8mbcja3tlflqtbKet6fqq8mrLNu+trw6v1RZqqzNzs7cnLs1d2Nuuid5jkfE7S/88fvf+ekXb//yU49+d+/Pk99sJdiyN49eaqVebP5ftBUiYv04gg1IoZlhy40B9wUAgIM1jvc/FBEfj4irUYqR5tEcAAAAcJJknx2LV0nr+h8AAABwMqURMRZJWs7v9x2LNC2XW/fwfiROp9XaRv2TWWn3fMF4FNP7y9XKdH7vwHgUk0Z7Jr/Htt2+vq89GxFnI+J7pdFmu7xQqy4O9MwHAAAADI8z++b//yi15v8AAADACTM+6A4AAAAAx878HwAAAE4+838AAAA40b58506jZO3nXy8+3NpcqT28tljZWCmvbi6UF2rrD8pLtdpS8zf7Vg/7vGqt9uDTsbb5eKpe2ahPbWxt31utba7V7y2/9ghsAAAAoI/OXnz22yQidj4zmkZElux5rRiRjezduND//gHHJ32bjf9wfP0A+m9k0B0ABsYhPQyv4qA7AAzcYeNA15t3ftX7vgAAAMdj4qO71/+bBRge+fX/JBl0R4C+c/0fhpfr/zC8igcdAZgUwImXHuGr/u7X/7PsrToFAAD03FizJGk5nweMRZqWyxHvNx8LUEzuL1cr0xHxwYj4Tan4XqM903xn4vQAAAAAAAAAAAAAAAAAAAAAAAAAABxRliWRdTG6uw0AAADw/ywi/VOSP/9ronRlbP/5gQ8k/yw1lxHx6Ed3f/B4vl5fn2ms/9vu+voP8/XX+332AgAAAOikPU9vz+MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJdevniy0C79jPuXz0fEeKf4hTjVXJ6KYkSc/nsShT3vSyJipAfxd55GxLlO8ZNGt2I878X++GlEjA44/pkexIdh9qwx/nyu0/cvjUvNZefvXyEv76r7+Jfujn8jXca/9zt9YPrmqvPPfz7VNf7TiPOFzuNPO37SJf7lI+b49a9tb3d7LftJxETHvz/Ja7GmksKDqY2t7WvLq/NLlaXK2uzszM25W3M35qan7i9XK/m/HWN892O/+PdB+Z/uEn/8kPyvHDH/fz1//OLDrWpx30vF+HGWTV7uvP/PdYnf/tv3iXx3N9oT7fpOq77XhZ/9+sLFA/Jf7JL/Yft/8oj5X/3Kt39/xE0BgD7Y2Npema9WK+sqKsdWGY0+Bp2Pg7ZpH8T2oT/fykP9T+yCt64McFACAACOxX8P+gfdEwAAAAAAAAAAAAAAAAAAABheh/0MWPTg58T2x9wZTKoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6TwAAAP//ejTLPA==") 2.41084477s ago: executing program 5 (id=5430): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xf}}}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) socket(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x2000, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x20, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x74}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x4c0e0) 2.202331053s ago: executing program 5 (id=5433): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x3, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x70bd2c, 0x25dfdbfc, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xfc, 0x80000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @local}}]}, 0x60}, 0x1, 0x7}, 0x0) (fail_nth: 13) 2.133426514s ago: executing program 4 (id=5435): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.132899974s ago: executing program 2 (id=5436): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001a0000007f0a00000000000045000000000000009500000000000000"], &(0x7f0000001780)='GPL\x00', 0x9, 0x99, &(0x7f00000016c0)=""/155, 0x41100, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffef8, 0x0, 0xffffffffffffffff, 0xfffffffffffffe1b}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x100}, 0x50) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) 2.089694244s ago: executing program 2 (id=5437): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @private0, 0x2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020753100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getgroups(0x8, &(0x7f0000001080)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000280), 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x7, 0x1000}, {0x1, 0x8000}], 0x2) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) futex(&(0x7f0000000080), 0x84, 0x2, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) 2.020420175s ago: executing program 4 (id=5438): r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)}], 0x1}}], 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4000002) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x1, 0xfffffffb, 0x0, 0xffffffff, 0x8, 0x7fffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380), &(0x7f0000000080)=0x8) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @mcast2}, 0x0, {[0xf, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1, 0x3]}}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x2f, 0x0, "a4ed4f5668947075e67f7bd7f84096cf6343677f87fb77863b44a07dcb4456bad81765e9bfd40c142742bfc14f782974f4160725ba56db7af645a80cd7512b449eae9a49677c6596c7878d2e8818726e"}, 0xd8) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000271) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4014080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x40044c1) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 1.789285878s ago: executing program 1 (id=5439): r0 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r2, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000014980)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{&(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f0000010700)=[{&(0x7f0000010140)}], 0x1}}], 0x2, 0x0) r3 = socket(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x4000002) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter6\x00') r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2, 0x809}, {0xa, 0x8, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x1, 0xfffffffb, 0x0, 0xffffffff, 0x8, 0x7fffffff]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000380), &(0x7f0000000080)=0x8) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x0, 0x4, @mcast2}, 0x0, {[0xf, 0x0, 0x0, 0x1, 0x89f, 0x8, 0x1, 0x3]}}, 0x5c) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000580)=""/118, 0x76}], 0x1, 0x9, 0x100) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @broadcast}}, 0x0, 0x0, 0x2f, 0x0, "a4ed4f5668947075e67f7bd7f84096cf6343677f87fb77863b44a07dcb4456bad81765e9bfd40c142742bfc14f782974f4160725ba56db7af645a80cd7512b449eae9a49677c6596c7878d2e8818726e"}, 0xd8) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000271) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x4014080) sendmsg$NL80211_CMD_GET_POWER_SAVE(r3, 0x0, 0x40044c1) io_submit(r2, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0}]) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @rand_addr=0x3}}}}) 903.493619ms ago: executing program 2 (id=5440): syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x37, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f00000000c0)) r0 = socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fcntl$setstatus(r0, 0x4, 0x4800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000300)={0x57, 0xa, 0x100000}, 0x20) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000100)=0x7f, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0xfffc, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0xfffffffd}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x4, 0x73}, 0x9c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6(0xa, 0x80002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_emit_ethernet(0x76, &(0x7f00000004c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d3ffff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x502, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private0, @remote, [@hopopts={0x3a}], "a87f7292fee6ad36"}}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000005fc0)={@remote, @local, @empty, 0x7, 0x8000, 0x40, 0x400, 0x5, 0x18e0010}) 896.982159ms ago: executing program 5 (id=5441): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/4096, 0x1000) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c0007000000000000000000080009007100000007000600727200000800080000"], 0x54}}, 0x0) 786.64333ms ago: executing program 5 (id=5442): connect(0xffffffffffffffff, &(0x7f0000000000)=@ieee802154={0x27, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x80) prctl$PR_SET_THP_DISABLE(0x29, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x2000094}, 0x20048001) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r2, 0x0, r4, 0x0, 0x6, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = io_uring_setup(0x6001, &(0x7f0000000000)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r6, r6, 0x0) splice(r3, 0x0, r5, 0x0, 0x6, 0xc) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, &(0x7f00000019c0)={0x0, 0x3, 0x4}) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x44}, 0x1, 0xd, 0x0, 0x4000000}, 0x20004000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000001080)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000680)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r9, r7, 0x25, 0x0, @val=@perf_event={0x2}}, 0x18) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) 784.78894ms ago: executing program 1 (id=5444): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000, &(0x7f0000000400)={[{@lazytime}, {@nodioread_nolock}]}, 0xee, 0x2aa, &(0x7f0000001580)="$eJzs3T9oJFUYAPBvZncvF285Tm0E8Q+IiAbCWQiCjTYKB3IcIoIKJyJWciecd9jtWmlhobVKKpsgdkZL0SLYKLZRUySNhcHCIKLFyOzshnGzYePu7CTs/n6wzJuZb+a9hfnevE2YNwEsrAsR8WRENCJiJSJaEZGUA+4vPhf6q2vLm1cjsuy535NeXLFeGBx3LiK6EfF4RHOw79bGSzt/bj3z0Ps3Ww9+uvHicl3fL+LsQWlvZ/vZ/U8uv/vFpUdvpf1t7f6y/D2qlIzY1kwi7phFZadE0hwb8leWZbW0haNdefvzn/K8vzMiHujlfyvSfsp+cOPMN6145ONyfPla/vC3H++uu71AtbKsld8DuxmwcNLeGDhJVyOiKKfp6moxhv+5kcQb12+8tfL69ZvXXhvZfTRq77CAaST5b/P8B/jTXy19eW4o/39tFPl/LI/NuKXATLQjtp+/sv5LXt53F4fFcE+xyPN/5ZXOwyH/YeFMkf9nZ9UmoB7t3l/4Cu7/sFiM/2EOTJi7Q/n/TsWtAk6xcv4vnXRjgFoZ/8Mcaw0K3ZG75T/Mh/cmGMCX8/+HkceP2Og/fzAXhu7/NT6PC5y0cv4DAIslWxr7iPDu+X4oMF9Ouv8BAAAAAAAAAAAAAAAAAAAOW1vevDr41FXndx9F7D0VEc3/1l/MPNjovY94MOngbX8kediBtDhsKi/fN+UJpvRZxU9fX/6f80Ce3622/mPqDArf3zubCoZeZnHk3HadaxHdPPhis3n4+k/611+Mu9L65z9zaMftY9rZenVMQMWSofUnXvi2snN3Jjjmn/XKqp/Ipa2Ir/P+5+Ko/i+Nu3rL0f1PuzzF8oTe/HvKEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCbfwMAAP//rvtnHA==") r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x2000000, 0x2, 0x1, 0x0, r0, 0x0}]) 719.258661ms ago: executing program 4 (id=5445): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(0xffffffffffffffff, 0xc028583e, &(0x7f0000000340)={{[0x3, 0x5, 0x2, 0x2]}, 0x0, 0x2, 0x5, 0x0, &(0x7f0000000180)=[{{@align=0x8, {0x7047, 0x4, 0x0, 0x80000001}}, 0x2, 0x0, '!:\'-\x00'}, {{@_ha_fsid={[0x780, 0x1d]}, {0x6, 0xa7, 0x7, 0x8e}}, 0x5, 0x0, '/proc/sys/fs/binfmt_misc/register\x00'}, {{@_ha_fsid={[0x4]}, {0x2, 0x9b, 0x80, 0x8}}, 0x17, 0x0, '-\x00'}, {{@_ha_fsid={[0x1, 0x8]}, {0x9, 0xfffa, 0xffffffff, 0x9c}}, 0x0, 0x0, '/proc/sys/fs/binfmt_misc/register\x00'}, {{@_ha_fsid={[0x2, 0x400]}, {0x9c, 0x400, 0x401, 0x8}}, 0xfffffffc, 0x0, '/proc/sys/fs/binfmt_misc/register\x00'}, {{@align=0x8000000000000001, {0x2, 0x100, 0x10001, 0x1}}, 0x0, 0x0, '/proc/sys/fs/binfmt_misc/register\x00'}, {{@_ha_fsid={[0xffff, 0x609c]}, {0xfffb, 0x8000, 0xfffffffb, 0x9}}, 0xfffff6af, 0x0, '/proc/sys/fs/binfmt_misc/register\x00'}]}) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="08002abd7000fedbdf25890000000c0099000e0000004c00000028011d80ec00007cdc000d80700000803d0002005003403d132b30514141094452094d3d35504538010a0924093d4e1c08361a4c2949290038243d501a254e51463f2f2a4a1b441f163f02574d0000000d000100180c3603480c0b0660000000190001001b18010903160c050b180b361b09160436480609300000004400018014000300ff89080000000000060006000600020014000300000002000800c1af03000001fcffa50005000400010000000500070002000000050004000100000020000380060001"], 0x14c}, 0x1, 0x0, 0x0, 0x20008005}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="c50a0000000000007910480000000000610444000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff49, &(0x7f0000000380)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90124fc60100c044002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 644.408802ms ago: executing program 4 (id=5446): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000148000/0x1000)=nil, 0x1000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x383000, 0x0) sendmsg$key(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1f0}}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2c, 0x2000000000000216, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1, @ANYRES8=r3, @ANYBLOB, @ANYBLOB="18ee1da3be2046861826fa08a97ba9dfdafd9c264f94", @ANYRESOCT=r0, @ANYRES32], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1c, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0xa420, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0}, 0x421}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)={0xa0000008}) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r6, 0x100}], 0x1, &(0x7f0000000200), 0x0, 0x0) r7 = open(&(0x7f0000000080)='./file0\x00', 0x248000, 0x3) unlinkat(r7, &(0x7f0000000240)='./file0\x00', 0x200) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r4) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xffffff90) unshare(0x24020400) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x8, 0xffffffffffffffff, &(0x7f0000000000)=0x26) r9 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r4, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002076667e05af493600080020"], 0x4c}}, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r5, 0x40089416, &(0x7f0000000440)) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) flock(r10, 0x8) 526.735823ms ago: executing program 7 (id=5448): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6c69f68dc1cf3e78, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 453.387835ms ago: executing program 1 (id=5449): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@private0, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x12}, 0x4d6, 0x3c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x400, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x820}, 0x2014) 452.548344ms ago: executing program 5 (id=5450): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @private0, 0x2}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3fffff) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0xff, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x2, 0x0, 0x0, 0x8000, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fdatasync(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002e000000180100002020753100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f8ffffff850000009b00000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) getgroups(0x8, &(0x7f0000001080)) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000280), 0x12) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x3, 0x7, 0x1000}, {0x1, 0x8000}], 0x2) semtimedop(0x0, &(0x7f0000000000)=[{0x0, 0xfff9, 0x1000}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) futex(&(0x7f0000000080), 0x84, 0x2, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) 452.351455ms ago: executing program 7 (id=5451): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc0314, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xe}, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 380.650085ms ago: executing program 1 (id=5452): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4023, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0xcb, 0x1ff}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x5a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500004c0000000000069078ac1414bbac1414aa00014e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ec0000006756c073a222158c4371907800001d12d285b6853bc4dc54c6910c1d66f8841a1d12adf059fd"], 0x0) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) sendto$inet(r0, &(0x7f0000000bc0)="35efe0064959b81c75433d1d0e9f0ac54c04ceb7676e3e8c6f42228f2ff5473637c82ddf1b7fba78321b2253238b99f26e81d8a8650f1fbe27e0bcc8bb5f0ccf32c5cb87285a2a9ba79b37bb76fe6e89331368a16954b48cfb09e8cfe310e949ce9cfe7f0b7be83554af724db1b407bc890c5db9ec2433a0eb97ed76a772e45820242d212e027b353669d2a4f41247f3cefe5ad309bd5bcc61f61ee992819c466b491e0d1a5e84a2d01c29eebe956955b361564167e7c00b1683268642604e7fa1eeb305121ff6648a1fbf5bf1957ccc7e75cfc34d266daf2565447370cc38178ca8f9493ee389a441102608a4160759e1dce130e4229f37263cd3368dd0cfd5e78f8ef5ab0ae35d20423f21897f748bdeef6e27df59e58b4331eca9fdb7a7ef86d31ee01070c43d00e50e4685a013bb4bff44bd19224d069c46f358a73bc146d4b2e0c2ee4b228c280ec8de3fa52acf5165b9f598e02b93c42044f946ee5c855bd24ce00ff0e13e2fd4f531161ad966707a78eaaeb27c60334c82ac478c4bf67e3bf65e1137cdab8756b085735eb3f1ec392c66750afacb46766724c5f2cecfa6e92d70000946bacd7a1a55c16c464ff59fddba04029a429d1be4eac9096b984999e5bdb6cc4613197cb12788b57a2a47a3380f48c2dae0059e3d63cf57a2c2140dc8aa5f3108c5ff91f3943e68ac316e616388ce950b5af21529fdbd3e154e329e68ede5bd7ccdae7ad7f8a07a231e00b17a967b4ef3052a894a2ea7db2a1b960f69955ee4e65e6329c5c49b5df55eac452f1f1e69b62b9239142b69983b25c910d070323965e13dd1e438e55be947398b6aedf8d72b90e834e93c5242fb60be326c034e51fca1d7023e529951b4a98a298ab44f4d7d5180516425265d50112e9d59946a682baf7b55a0a537e17fb97856e45b6d30f6f48c441e6ce4802de6b7b7c154c19fa5a1667d31de23337c01e30e8b96c5b49541c3b649fe66abb514ebf31fe836ec38eef10f68969fd0c5f5a4a752d2e1e96c31ab07f359996d0e9b4f75c46711c4f71049d8433276164a70c06ee1d167bbfe6abb1e7a8615daaf187b8d6e7de65237db771b03e8922694c8af88e0d0d5a6c99251d4001959effac40cb4b68db571b27e25e9e43bc324a8a89165d2b7bccc940cc4a79d3690d3748106a68e6d03a70df73cb842b94171f21d02aa41b492d1718b1e10077108b531d0d6c78015f8db344cd3285672bcc7cdd9502d594b5c33dc40d2c4ac3c0a40403b7ca90a9b25138b7d378f97eac53a199c10735a73b7b76fc7f56eae48e0f827536c5818d2a68fbc1e0354225e120f507f4b71ac5a35ec336ac1ab7678cc7fb9d7d42fef9a87a7f3c516b9e85f184011268f64decd9bb24c6c3b74bbaf23eac744309b056309ae94f4875b8c66b74c5ffad57cdb39710b903d87b0fc092444e6f15aeedee1dbae75cbe4d6743cf25c2aa4b8594773808095d4f65b06ccf1febfdd629545969c1bb9e20e03fc89cfd41a426744c3ff4f9051b81d624db49366e6bcb6590f32e8c591939db83cdb9e3d05e2e3692e5d020f02000d65b600f757bf24bc6a9827720f9f1f05f509a8ec2bd33181515efb64ebe15fd51d56fe4de6e363e8b9c3b72f4392406998884799ff9fed80abc92904db3f1db74bba01820160e2ade0e38dad1c99ac99d9a693a4ca4060dfd64511a9d220a553ec9175a00d6f0eb1b874fbab328d0a6c00fe10c9802943015ee43ee804f873167ade0ebd695140c3e8f84835c761c8c1dc19f290a2a43f9a15f67394ffa32039a6c771e7e43316b297d09cd916acf7bbb98f1f3da046c900e584a49670f039822ed4dae8a8711598d8427d5fb96f86e35ff2a59db7f46385b5672680084c64ea015c95f7dd6f69b72babd4c447a19b906194c4caded7a72a972b77eee6304cb1183e52b64e55816f51e714b03aea791b104e48268c1f6ead9c3b6dcd3ba2f0f4060f6297e7efdfe538de146c16690749b9581a22f68f75c9bb707f84c35057e807ce181b0d81a5930e19ccd111d37bd6f905fc72751e628def95765e1ea8b7bda04aaf48d59a16285fec3dedde1ef3cdaa5f4d3d6ee7bf3b0a03d02f887260ce183c085109bba6ec0cf9095273813003ae64a449d60562b31e5caf00a58e57366f24faebb8f61097b3e89d03511ea7755b05d98037637e875ff105890c816ea232315b9ff6781af8f0800b4b893606f36a8dec1bface007976a5de30ac25abfb9f0f159065fb24ff8b1870d515fdd4c0766813e256d845e592651cdf5485284c8c6ab909b1cf31950979062564b21522255531aee0f20edab7c46895450fe1d522dd4047e56a8203f232d789861eb0f3f090df36b2295724a9382da4bece866a966deb8109b245ced8ed59451557ee0f24e36d5621f0640fc16c1cdcd312e0e18cf9fc543199dacd25160785fe3eaeadc64837db1c071c68865a5029cf3df31024a8ac3421d2cf79fec23314c2c8dcf85760d508f0f73c52b535fde49191387bbeb0e7a6a9b9b34397ab09cc9a512730dd03c9c42b18d5e6ddc5916f24f6729306d1a6e7ef461537fb5b9c381617ed6ea042fadcc8397979dd2f691044fd4d81d1794b556d3a92e872bfdba59274e6871492a0b834a4963af6fead707935367b87e850f8156c8bdcb62e3f338b4b40e2dbaca75a4f7ad0171aad0f77169d3543f6003dd91ff68be61c35242105ccf341c7c87bf83b49ef376b19b2e0d5eb08b24f8688bca61be083d07dfc75455a5fe7ff5a38c958b0dcddfa50dc40766209064e769abbaca260b6f7d61c57c64d2ef130d5208974a046770893e34327ee33b5bd29e01ecbfced54469ac76793d686ac693fcba2c3969b8be97e46f76419b0e3c7707ce28a968a4b6b82060fb80d673281ba225dc50c46a2d80d0a2874510fc87b8d4c9e5f424135d31ab2708e17c41cf2540e14ceaf811f3bcc8b24aa77e606aba99304986e258673e681dc917400fbe676c2225bcfeeb14522c08033e9ab56ac0f7d58ae443c4a229302fe8f20ab92806168885b94f4eacdbcb84cb5faed7213374c9dd26a73c09825f999ad1c91a0d0e31c37a81f6f018cfa66d146b0c79250dd58e0f460487a50dbefc7ddaaab7f1b6368de95eb0172e8ec5c50fa6ea6eb52b864e9998a45e656017640f28b852f5c7f247aaeba7c177b5f6c6266a82250ce701c06f3f6a439a9e01c6961d8e224469c6092472220968c743f863619401d1a54c0d4550965747943c45c4e5329d4c635c69dd2eea64cb7885eda2198eff42c7d0f54f6a0d96cb8df93086622ffd611b36868a67baac78f244482ae8128e8c59f8830e69e2880e16ee14ded86703d6780b183fbd4c0dbbb70ca136ecaf0beacce1c6cdb0e12855c4eee5ad25b1a885a75d4a971842b190fb40326f401b4b163264858ce70cbf0466af4ce63a2698eb50e1314d74ce450ef01363d96fa9e62191c3889723a08e2c1679ff8462d38dc24f0958d848a9a3e79fd4c68fd142533676c5b7d4b20c8b8a12820e89b3a518298f912b36469a1609366788cde28ce7b2f9a59437139a0994da081712e5ae9ea184a68574fe32d0f525cc0f2556a8b31aace5907ae27a5f11388e985e095013f78531e188432e65fc455833abe5759774a60f1724032a59d22d3df25274f8a1fc94d0783f53d17e2ff9b23bbf79ad7bcfff1d1336593cff162578bd759352e912890424cc6812912ff286546679d6a37ade4633b1a851f2c5ec2808321d6fd7179cf2be17822b0eb93677663ace1249616a61433ebb2b9ff34c224913db91da706723b1708509006bdd18f9f4549a914374812ac83fdd2573671dec7b197f684d9dc3e935961eb4d0581e8d3e2f184e4eca24943d2c0d5bcd27bfbdb89a8a6a695d0f4b7123f0b96745974d5e389ad64b9e497e51ed82a39868d0026a96fc89f5f4cd10163e03b2d94b371c721f6ed3ac7712a5cb8985d7dea42249e9c01eaa79512aceef3af9a8edd70d9e3f3868154f8dc3db8a2ca183d613b9576c54386b6f66fdb9f2cbc4a20fd8e3646ce4aa05990e653fa799977c1c31c058593d9be1d596083185586295c66a1ddc1f1995248e5e86497552bf6a256c384b4999072316d7381352ac0d2d7b4bc9da11b10ca2aef88232282528f69cb2670dd86acb735497e0fbaaf967949237845d31365a1e3468ea221b531d072759f1f7c25b5861195e9cc0e8144d88ec701844c92a255a253f5491aa26ce6489cf3dcba2ffd7ade59c04bbac7fedae471d6a1f0dc3d5a09ccdd29c228dd3051006928d7784c176272cdf96e310229193abcca972147d2e2bb97d5443c6bc3fd9533acb7f45ad3122a5cffafe752d7d67b37aa22b2c2345213f090f70fbb673bb6fe58751e4408194d0a90a121442aaca4d9c7739e93bfb6504fb34cd9cd5697c17e0065a0b735b9a3f83da3dda7a8ca1d840e5aef1f0b68ebb2673140fb773ce54f26be56f2d9ca9b0401e9ca3c8bbaf7d9fd430cf308bc925ee5c268cf5df4ab94e2c4f1a6309477f60b186099348e04eee167775e68b7261bb1754d7f88dca0ae4f9e0841f6ca7389da68a3df43cf9adae5861990ed34f5f824e694a07036504884a6229013cf727ed7c13c525779b01357889c539390856ef4376d81fd0ea79668dfa9fae4607c08f53112b8e4ee2290086e2122614fab85797c6b03595f8b18847c2e17ccabbff92b2ea528b9c87e7d078ea9783ec0b574a0d270bc0faa51761233cb5868c92207a7a2371a51dc952ad43bfecba9c2fee5f0ae7a4b7eb039a50071e366321e022251162d14faea4a3245225c8ef2fc2bce55f63c3b24930c4222ab5bd9c6a07b98a15ae1da8a55acbf331a44d847d2a7d9bca4b4e279ecf58d4fc38692a9fe2c6dfe127fb2f05b83e1dab00f91ffc07acbf185b2d75af8ab09737541367cc218aa3307fb76dbee7d7e7041385a89dcb3d72130949a819a931e8f7f178bc15ba7772d4fa6667725f3edeaa0b6edba025895a15913cbbb22a020f0dd345489dd0e9528a3cee7ca2086ec697b454bdd2bef1e29aa62e32a598d410c2e24a833f6387893fac1449121610f65161e84ba20a10814cd9b8c7055bc5b38378c24579880012f68d04aa18080f366ef71266235a74bc9cf80676b5245bd024d88162e1c8ff75421b1a365b86d033c21b8b549eeb6d8668d82f1118f1ef6ea3a7c2fa01c592a7d3c4813129fcab664d56e902cda910c8fb016491641540534525f4df295dd377bdee9df8f1ec6bd01ee564649f94edfbad7e0d549b1da83467b68444aa2b9b86ece2c5aa1787cba6463944d9e68747fdc740372b3c13da43cc734122525e1b5c0eb6c1f54797391629b72204853b98d39961f045b22b9d6b2db47e78132f963ae01f2485ac0118188683c9d0baff8c00a762256c36acfd68a71bc3c1550b4ca87cd8aa6b3c53372c826be11dc29ee5d5f279b327be269e6b588a731542c9e79c95020f206206814e3d48a20b4dc0675389ce9cd584816e9d20fe95586df3d9d7cdc8864558de24d2c2470e966daa10874c0250b03f0d1f17f6b38856108e8e2070cb53bb9900d258594b3baef5591fafcedf958be6416dcea302ed75a4ee138aec6ca6725ac6c2840331d080ff07acde6f52a6790c8c3c62ee45489654c1b9ff6e8ecdbc093e41fa5a2095a4175700faeaa0a51edadba9f66c03c5bee1a0015dabe4f8dc85f8071be819f7be4cdff9e5974cde60c4a07c354e82e1c1e75c1b8a0b8480f60de049487c26d46a7fcfdeae961d84d40", 0x1000, 0x81, &(0x7f0000001bc0)={0x2, 0x8001, @private=0xa010100}, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0d03ffffffff280a62e08243bd1812e25ab6e6e2df25130000002c4b9c6819c2c3fc54b56e2a39208b7c94120920b489d6ad002d7ed092e68678f67ef803994309c70ca61d5119adc36ae5c58838292e9a9d2f9b5f1a41d297cf25441f43aed628ed76f8c8f2c4d54ea41630d475076bda3fa2ec931fd2cccf2e3db40d582ba80fe84f7683718417abf79c533fec20d19b0ebd4086b9897ab988ea49bd23ede2717394c3f4d7180035"], 0x14}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000001c00)=ANY=[@ANYRES16=r3, @ANYBLOB="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"], 0x230}}, 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}, @in={0x2, 0x4e23, @empty}], 0x22) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000780)={[{@barrier}, {@journal_async_commit}, {@nodiscard}, {@noinit_itable}, {@jqfmt_vfsv0}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@usrjquota}, {@nobarrier}, {@errors_continue}, {@nobarrier}, {@noblock_validity}, {@data_err_abort}]}, 0x3, 0x465, &(0x7f0000000f00)="$eJzs3M9vFFUcAPDvzLYgP1sRf4CoVWJs/NHSgsrBi0YTDxhN9IDH2hZCWKihNRFCpBqDFxND1LPxaOJf4M2LUU8mXvVuSIhyAT3VzOwM7C67pYXtLnQ/n2SX92Ze+963b97Mm3m7BNC3RrK3JGJrRPwREUO1bGOBkdo/Vy+fnf738tnpJJaW3v47yctduXx2uixa/tyWIjOaRqSfJkUljeZPnzk+Va3Oniry4wsn3h+fP33muWMnpo7OHp09OXnw4IH9Ey++MPn8Mq3fuOI4s7iu7P5obs+u19+98Mb04Qvv/fJ91t6txf76ODplJAv8n6Vc3eYvs7cnO11Zj22rSycDPWwIq1KJiKy7BvPxPxSVuN55Q/HaJz1tHLCmsmvTMlfRxSVgHUtihcViZQWBu0V5oc/uf8tXl6Yed4RLL9dugLK4rxav2p6BSIsyg033t500EhGHF//7JnvFGj2HAACo9/n014fi2VbzvzQeqCu3vVhDGY6IeyNiR0TcFxE7I+L+iLzsgxHxUNuaNrTc2rw0dOP8J714y8GtQDb/e6lY22qc/5Wzv8pwpchty+MfTI4cq87uK/4mozG4MctPLFPHj6/+/kW7ffXzv+yV1V/OBYt2XBxoekA3M7UwlU9KO+DSxxG7B1rFn1xbCchu/XdFxO7V/ertZeLY09/taVfo5vEvowPrTEvfRjxV6//FaIq/lCy/Pjl+T1Rn942XR8WNfv3t/Fvt6r+t+Dsg6//Njcd/c5HhpH69dn71dZz/87O29zS3evxvSN7J+6U8q3w4tbBwaiJiQ3Iozzdsn7z+s2W+LJ/FP7q39fjfUUtsyt4ejojsIH4kIh6NiMeKtj8eEU9ExN5l4v/5lfb77oT+n2l5/rt2/Df1/+oTleM//dCu/pX1/4E8NVpsyc9/N7HSBt7O3w4AAADuFmn+GfgkHbuWTtOxsdpn+HfG5rQ6N7/wzJG5D07O1D4rPxyDafmka6jueehEslj8xlp+snhWXO7fXzw3/qqyKc+PTc9VZ3ocO/S7LW3Gf+avSq9bB6y5Vutoky3Xaxu+yAasA83jP23Mnnuzm40Busr3taF/3WT8p91qB9B9rv/Qv1qN/3NNeWsBsD65/kP/Mv6hfxn/0L+Mf+hLt/O9/n5OZKfMO6AZ1aGiH7tfe6S9jl1iLRKt/58mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9X/AQAA//9l+OT1") chdir(&(0x7f0000000400)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdir(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) sendto$inet6(r1, &(0x7f00000004c0)="99b9b5", 0x3, 0x2000c851, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x5}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="29921d69fe42e7e9fc327809dcde2ce0f3bc5aacc32917409b9d68fa0eecfa42dded8569a8cf54d05a09b77d5d24d7fcb336cac1a2b1b9f08d8134732c4d65d9b2d3ab6d6577ebd13996014fd415c2f0eb04b46cdf01e0df00f2f221e21d82ea607a444a3c5988a7", @ANYBLOB="01060000b5100000000009000000240004801300010062726f6164636173742d6c696e6b00400c0007800800050002000000"], 0x38}}, 0xc000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd27, 0x25dfdbfb, {0x7, 0x0, 0x0, r6, 0x80, 0xff, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000) 331.771586ms ago: executing program 7 (id=5453): r0 = io_uring_setup(0x2a6d, &(0x7f00000002c0)={0x0, 0xd610, 0x0, 0x4, 0x28b}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xd, &(0x7f0000000140)={0x7, 0x0, 0x0, 0x0}, 0x20) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4df30c", 0x18, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x6, 0x0, 0x0, {[@generic={0x3, 0x2}, @generic={0x2, 0x2}]}}}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x40, 0x0, 0x4, {{0x1c, 0x4, 0x0, 0x6, 0x70, 0x65, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @private=0xa010100, {[@timestamp_addr={0x44, 0x1c, 0x14, 0x1, 0x3, [{@empty, 0x4}, {@loopback, 0x4}, {@multicast1, 0x7ff}]}, @lsrr={0x83, 0x17, 0xbb, [@broadcast, @multicast2, @multicast2, @empty, @rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x1c, 0x1a, 0x3, 0x0, [{@multicast1, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@private=0xa010100, 0xe}]}, @timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x5, [{@multicast1, 0x7}]}, @end]}}}}}) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x8800) (async) openat(r1, &(0x7f0000000340)='./file0\x00', 0x121700, 0x51) 225.379787ms ago: executing program 7 (id=5454): sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r0}, 0x38) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 112.913969ms ago: executing program 7 (id=5455): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x1, 0x2002) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000240)=""/105) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x110, r2, 0xffffd000) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xfffc, 0x40000000, @remote, 0x7}, 0x78) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040)=0x200, 0x4) 100.649949ms ago: executing program 1 (id=5456): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x4000, &(0x7f0000000480), 0x1, 0x3d0, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103001, 0x111) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000140)={0x17c04, r0, 0xc000, 0x973f, 0x81, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000040)={0x32, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0xc0}, @pad1]}, 0x28) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f0000000000)=@srh={0x0, 0x0, 0x4, 0x0, 0xd4, 0x50, 0x800}, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x76}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0xcc, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x68, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61031a85}, @NFTA_HOOK_DEV={0x14, 0x3, 'pimreg\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2890b1ab}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'dvmrp1\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}]}, @NFTA_CHAIN_USERDATA={0x43, 0xc, "c616b2593da5402c7fa341093c03e47c1ab336c16c8a28f501abc49d53f5ca3f4cefcc2074ded87a0656d29ad5cee5693700ffa73e1f5349e465fd910f38c4"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELFLOWTABLE={0x1c, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}}, @NFT_MSG_DELSET={0xa8, 0xb, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x3}, [@NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xe}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x18c, 0x16, 0xa, 0x402, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x200}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x95c5}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'veth1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3573}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x488}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 0s ago: executing program 7 (id=5457): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x3ff, 0x8001, 0x2000, 0x0, 0x12, "d8ff7498540eb2a6"}) msgrcv(0x0, &(0x7f0000000240)={0x0, ""/245}, 0xfd, 0x1, 0x1000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = io_uring_setup(0x69a7, &(0x7f0000000140)={0x0, 0xd843, 0x40, 0x2, 0x204}) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000cc0)={0x1, 0x1, 0x0, &(0x7f0000000c40)=[{0x0}], 0x0}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r5], 0x4) write$UHID_CREATE2(r1, &(0x7f0000000340)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0xe, 0x0, 0x12, 0x9, 0x6, 0x3, "06e7255b7183b2a8876f0f4bd14f"}}, 0x126) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000001c00)={0xa, {0x6, 0x2, 0xd}}, 0xa) msgsnd(0x0, &(0x7f0000000480)={0x2, "95ae98ce6c21d22a9fbb4dbbafbfe45a49e50e19f3b621b1c0d97f91b1b0d22f170ebb58ca7c2baba13fe7717341c333c3854270fbd737e4557ef0bc786776767722b4ed1f958f8bdbb8aac0d911580263f2cbb43fbcea81b850e4ba2efe77777d2e9a5b500da8d80a946a09b4299d71462a050b15406934cb00"/137}, 0xfffffffffffffd7a, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f0000000200)=""/48) kernel console output (not intermixed with test programs): 000701: ext4_orphan_get:1397: inode 15 [ 854.391747][T25397] loop1: lost filesystem error report for type 5 error -117 [ 854.392357][T25397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 854.415864][ T28] audit: type=1400 audit(2779000701.592:7242): avc: denied { write } for pid=25391 comm="syz.1.5050" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 854.445332][T25410] loop5: p1 [ 854.448761][T25410] loop5: p1 size 5119 extends beyond EOD, truncated [ 854.469533][T25414] syzkaller0: entered promiscuous mode [ 854.477920][T25414] syzkaller0: entered allmulticast mode [ 854.514205][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.586585][ T28] audit: type=1400 audit(2779000701.762:7243): avc: denied { ioctl } for pid=25418 comm="" path="socket:[74718]" dev="sockfs" ino=74718 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 854.613073][T25421] netlink: 'syz.1.5062': attribute type 21 has an invalid length. [ 854.640443][T25420] netlink: '': attribute type 21 has an invalid length. [ 854.675611][T25421] IPv6: NLM_F_CREATE should be specified when creating new route [ 854.684175][T25421] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.691410][T25421] IPv6: NLM_F_CREATE should be set when creating new route [ 854.698834][T25421] IPv6: NLM_F_CREATE should be set when creating new route [ 854.706084][T25421] IPv6: NLM_F_CREATE should be set when creating new route [ 854.713472][T25420] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 854.740701][ T28] audit: type=1326 audit(2779000701.912:7244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.9.5060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191342cdd9 code=0x7ffc0000 [ 854.771729][ T28] audit: type=1326 audit(2779000701.912:7245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.9.5060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191342cdd9 code=0x7ffc0000 [ 854.816746][ T28] audit: type=1326 audit(2779000701.942:7246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.9.5060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f191342cdd9 code=0x7ffc0000 [ 854.962070][ T28] audit: type=1326 audit(2779000701.942:7247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25424 comm="syz.9.5060" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f191342cdd9 code=0x7ffc0000 [ 855.005241][T25429] random: crng reseeded on system resumption [ 855.171926][T25439] netlink: 'syz.1.5066': attribute type 2 has an invalid length. [ 855.496670][T25448] loop8: detected capacity change from 0 to 512 [ 855.572309][T25448] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.5065: corrupted xattr block 95: invalid header [ 855.970048][T25448] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 855.982697][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 855.999082][ C0] EXT4-fs (loop8): initial error at time 2779000703: ext4_expand_extra_isize_ea:2810: inode 11 [ 856.010517][ C0] EXT4-fs (loop8): last error at time 2779000703: ext4_expand_extra_isize_ea:2810: inode 11 [ 856.562011][T25448] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5065: bg 0: block 7: invalid block bitmap [ 856.669173][T25451] FAULT_INJECTION: forcing a failure. [ 856.669173][T25451] name failslab, interval 1, probability 0, space 0, times 0 [ 856.691195][T25448] loop8: lost filesystem error report for type 5 error -117 [ 856.701161][T25448] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 857.023329][T25451] CPU: 1 UID: 0 PID: 25451 Comm: syz.9.5068 Tainted: G W syzkaller #0 PREEMPT(full) [ 857.023369][T25451] Tainted: [W]=WARN [ 857.023379][T25451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 857.023402][T25451] Call Trace: [ 857.023411][T25451] [ 857.023421][T25451] __dump_stack+0x1d/0x30 [ 857.023461][T25451] dump_stack_lvl+0x95/0xd0 [ 857.023491][T25451] dump_stack+0x15/0x1b [ 857.023556][T25451] should_fail_ex+0x263/0x280 [ 857.023590][T25451] should_failslab+0x8c/0xb0 [ 857.023629][T25451] __kmalloc_noprof+0xb8/0x4d0 [ 857.023702][T25451] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 857.023735][T25451] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 857.023767][T25451] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 857.023792][T25451] ? selinux_capable+0x31/0x40 [ 857.023837][T25451] ? security_capable+0x7b/0x90 [ 857.023872][T25451] ? ns_capable+0x7c/0xb0 [ 857.023916][T25451] genl_rcv_msg+0x432/0x470 [ 857.024001][T25451] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 857.024046][T25451] netlink_rcv_skb+0x123/0x220 [ 857.024081][T25451] ? __pfx_genl_rcv_msg+0x10/0x10 [ 857.024115][T25451] genl_rcv+0x28/0x40 [ 857.024201][T25451] netlink_unicast+0x5a8/0x680 [ 857.024290][T25451] netlink_sendmsg+0x5c8/0x6f0 [ 857.024442][T25451] ? __pfx_netlink_sendmsg+0x10/0x10 [ 857.024489][T25451] ____sys_sendmsg+0x563/0x5b0 [ 857.024523][T25451] ___sys_sendmsg+0x195/0x1e0 [ 857.024607][T25451] ? _raw_spin_unlock+0x9/0x30 [ 857.024716][T25451] __x64_sys_sendmsg+0xd4/0x160 [ 857.024753][T25451] x64_sys_call+0x194c/0x3020 [ 857.024864][T25451] do_syscall_64+0x12c/0x3b0 [ 857.024980][T25451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.025009][T25451] RIP: 0033:0x7f191342cdd9 [ 857.025030][T25451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.025105][T25451] RSP: 002b:00007f1911e87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 857.025130][T25451] RAX: ffffffffffffffda RBX: 00007f19136a5fa0 RCX: 00007f191342cdd9 [ 857.025149][T25451] RDX: 0000000000000080 RSI: 00002000000001c0 RDI: 0000000000000007 [ 857.025167][T25451] RBP: 00007f1911e87090 R08: 0000000000000000 R09: 0000000000000000 [ 857.025184][T25451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.025200][T25451] R13: 00007f19136a6038 R14: 00007f19136a5fa0 R15: 00007fff9e771fc8 [ 857.025226][T25451] [ 857.372213][ T28] kauditd_printk_skb: 187 callbacks suppressed [ 857.372290][ T28] audit: type=1400 audit(2779000704.542:7435): avc: denied { write } for pid=25452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.445375][ T28] audit: type=1400 audit(2779000704.622:7436): avc: denied { write } for pid=25467 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.722365][ T28] audit: type=1400 audit(2779000704.892:7437): avc: denied { write } for pid=25470 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.789340][ T28] audit: type=1400 audit(2779000704.962:7438): avc: denied { write } for pid=25481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.091724][ T28] audit: type=1400 audit(2779000705.262:7439): avc: denied { write } for pid=25484 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.155496][ T28] audit: type=1400 audit(2779000705.332:7440): avc: denied { write } for pid=25498 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.306851][ T28] audit: type=1400 audit(2779000705.482:7441): avc: denied { write } for pid=25501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.339922][ T28] audit: type=1400 audit(2779000705.512:7442): avc: denied { write } for pid=25512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.449346][ T28] audit: type=1400 audit(2779000705.622:7443): avc: denied { write } for pid=25515 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.815925][T25536] loop1: detected capacity change from 0 to 256 [ 858.839258][T25448] loop8: lost filesystem error report for type 5 error -117 [ 858.842285][ T28] audit: type=1400 audit(2779000705.692:7444): avc: denied { write } for pid=25526 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.924491][T25448] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.5065: corrupted xattr block 95: invalid header [ 858.939066][T25448] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 858.940686][T25448] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 858.966529][T25536] FAULT_INJECTION: forcing a failure. [ 858.966529][T25536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.966628][T25536] CPU: 0 UID: 0 PID: 25536 Comm: syz.1.5071 Tainted: G W syzkaller #0 PREEMPT(full) [ 858.966664][T25536] Tainted: [W]=WARN [ 858.966674][T25536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 858.966784][T25536] Call Trace: [ 858.966793][T25536] [ 858.966803][T25536] __dump_stack+0x1d/0x30 [ 858.966889][T25536] dump_stack_lvl+0x95/0xd0 [ 858.966915][T25536] dump_stack+0x15/0x1b [ 858.966940][T25536] should_fail_ex+0x263/0x280 [ 858.966978][T25536] should_fail+0xb/0x20 [ 858.967130][T25536] should_fail_usercopy+0x1a/0x20 [ 858.967170][T25536] _copy_to_user+0x20/0xa0 [ 858.967210][T25536] simple_read_from_buffer+0xb5/0x130 [ 858.967254][T25536] proc_fail_nth_read+0x10e/0x150 [ 858.967366][T25536] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 858.967403][T25536] vfs_read+0x1ab/0x7f0 [ 858.967447][T25536] ? __rcu_read_unlock+0x4e/0x70 [ 858.967473][T25536] ? __fget_files+0x184/0x1c0 [ 858.967498][T25536] ? fput+0x8f/0xc0 [ 858.967523][T25536] ? mutex_lock+0x57/0x90 [ 858.967560][T25536] ksys_read+0xdc/0x1a0 [ 858.967643][T25536] __x64_sys_read+0x40/0x50 [ 858.967679][T25536] x64_sys_call+0x2886/0x3020 [ 858.967705][T25536] do_syscall_64+0x12c/0x3b0 [ 858.967794][T25536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.967823][T25536] RIP: 0033:0x7f09c027d60e [ 858.967843][T25536] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.967868][T25536] RSP: 002b:00007f09bed0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 858.967917][T25536] RAX: ffffffffffffffda RBX: 00007f09bed0f6c0 RCX: 00007f09c027d60e [ 858.967933][T25536] RDX: 000000000000000f RSI: 00007f09bed0f0a0 RDI: 0000000000000006 [ 858.968013][T25536] RBP: 00007f09bed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 858.968031][T25536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.968047][T25536] R13: 00007f09c0536038 R14: 00007f09c0535fa0 R15: 00007fffd13a1588 [ 858.968075][T25536] [ 859.278398][T25448] EXT4-fs (loop8): 1 orphan inode deleted [ 859.284531][T25448] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 859.299897][T25448] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.438932][T25563] ip6gretap0: entered promiscuous mode [ 859.458743][T25563] macvtap1: entered promiscuous mode [ 859.479121][T25563] ip6gretap0: left promiscuous mode [ 859.552789][T25567] sit0: entered allmulticast mode [ 859.573195][T25567] sit0: entered promiscuous mode [ 859.855347][T25592] loop8: detected capacity change from 0 to 128 [ 859.873839][T25576] loop3: detected capacity change from 0 to 128 [ 859.887120][T25576] FAT-fs (loop3): bogus number of reserved sectors [ 859.893852][T25576] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 859.909068][T25576] FAT-fs (loop3): Can't find a valid FAT filesystem [ 859.927296][T25595] bio_check_eod: 14 callbacks suppressed [ 859.927318][T25595] syz.8.5079: attempt to access beyond end of device [ 859.927318][T25595] loop8: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 859.947322][T25595] syz.8.5079: attempt to access beyond end of device [ 859.947322][T25595] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 859.961154][T25595] syz.8.5079: attempt to access beyond end of device [ 859.961154][T25595] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 859.990045][T25595] syz.8.5079: attempt to access beyond end of device [ 859.990045][T25595] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 860.065899][T25595] syz.8.5079: attempt to access beyond end of device [ 860.065899][T25595] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 860.113298][T25595] syz.8.5079: attempt to access beyond end of device [ 860.113298][T25595] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 860.129081][T25595] syz.8.5079: attempt to access beyond end of device [ 860.129081][T25595] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 860.142545][T25595] syz.8.5079: attempt to access beyond end of device [ 860.142545][T25595] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 860.156155][T25595] syz.8.5079: attempt to access beyond end of device [ 860.156155][T25595] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 860.200461][T25595] syz.8.5079: attempt to access beyond end of device [ 860.200461][T25595] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 860.556497][T25597] netlink: 'syz.3.5080': attribute type 21 has an invalid length. [ 861.084003][T25597] netlink: 'syz.3.5080': attribute type 6 has an invalid length. [ 861.092097][T25597] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5080'. [ 861.205859][T25628] loop1: detected capacity change from 0 to 256 [ 861.366882][T25638] loop1: detected capacity change from 0 to 1024 [ 861.393246][T25638] EXT4-fs: Ignoring removed orlov option [ 861.418832][T25638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 861.508812][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 861.541901][T25626] netlink: 'syz.8.5088': attribute type 21 has an invalid length. [ 861.576587][T25626] netlink: 'syz.8.5088': attribute type 6 has an invalid length. [ 861.588655][T25651] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5096'. [ 861.602685][T25626] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5088'. [ 861.612167][T25651] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5096'. [ 861.793271][T25667] loop3: detected capacity change from 0 to 512 [ 861.811958][T25667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 861.833155][T25667] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 861.884592][T25676] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5104'. [ 861.905609][T25678] loop8: detected capacity change from 0 to 1024 [ 861.912653][T25678] EXT4-fs: inline encryption not supported [ 862.001552][T25678] EXT4-fs (loop8): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 862.031469][T25678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 862.080208][T23039] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 862.152864][T25682] loop9: detected capacity change from 0 to 764 [ 862.164353][T25682] Symlink component flag not implemented [ 862.170053][T25682] Symlink component flag not implemented [ 862.277633][T20477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.143849][T25690] loop3: detected capacity change from 0 to 512 [ 863.438507][T25690] FAT-fs (loop3): FAT read failed (blocknr 128) [ 863.499025][T25703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.524631][T25703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.647554][T25703] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 863.687449][T25694] netlink: 'syz.8.5111': attribute type 21 has an invalid length. [ 863.708256][T25694] netlink: 'syz.8.5111': attribute type 6 has an invalid length. [ 863.743669][T25694] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5111'. [ 863.811886][T25714] FAULT_INJECTION: forcing a failure. [ 863.811886][T25714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.835286][T25714] CPU: 1 UID: 0 PID: 25714 Comm: syz.3.5117 Tainted: G W syzkaller #0 PREEMPT(full) [ 863.835327][T25714] Tainted: [W]=WARN [ 863.835336][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 863.835353][T25714] Call Trace: [ 863.835362][T25714] [ 863.835373][T25714] __dump_stack+0x1d/0x30 [ 863.835412][T25714] dump_stack_lvl+0x95/0xd0 [ 863.835437][T25714] dump_stack+0x15/0x1b [ 863.835455][T25714] should_fail_ex+0x263/0x280 [ 863.835484][T25714] should_fail+0xb/0x20 [ 863.835545][T25714] should_fail_usercopy+0x1a/0x20 [ 863.835672][T25714] _copy_from_iter+0xcf/0xea0 [ 863.835704][T25714] ? __alloc_skb+0x4f6/0x690 [ 863.835724][T25714] ? __alloc_skb+0x200/0x690 [ 863.835752][T25714] netlink_sendmsg+0x4ae/0x6f0 [ 863.835807][T25714] ? __pfx_netlink_sendmsg+0x10/0x10 [ 863.835855][T25714] ____sys_sendmsg+0x563/0x5b0 [ 863.835888][T25714] ___sys_sendmsg+0x195/0x1e0 [ 863.835936][T25714] __x64_sys_sendmsg+0xd4/0x160 [ 863.835978][T25714] x64_sys_call+0x194c/0x3020 [ 863.836008][T25714] do_syscall_64+0x12c/0x3b0 [ 863.836046][T25714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.836085][T25714] RIP: 0033:0x7faac370cdd9 [ 863.836107][T25714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.836172][T25714] RSP: 002b:00007faac215f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.836198][T25714] RAX: ffffffffffffffda RBX: 00007faac3985fa0 RCX: 00007faac370cdd9 [ 863.836217][T25714] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 863.836373][T25714] RBP: 00007faac215f090 R08: 0000000000000000 R09: 0000000000000000 [ 863.836390][T25714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.836407][T25714] R13: 00007faac3986038 R14: 00007faac3985fa0 R15: 00007ffcc12b41a8 [ 863.836452][T25714] [ 863.867744][ T28] kauditd_printk_skb: 537 callbacks suppressed [ 863.867764][ T28] audit: type=1326 audit(2779000711.012:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25712 comm="syz.5.5116" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39d5a3cdd9 code=0x0 [ 863.950387][T25718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 864.069637][T25723] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25723 comm=syz.9.5120 [ 864.097274][T25718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.125834][T25721] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5116'. [ 864.150554][T25718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 864.175452][T25718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.239998][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5123'. [ 864.360387][T25727] loop1: detected capacity change from 0 to 512 [ 864.431164][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'. [ 864.492079][T25754] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5126'. [ 864.530382][T25746] loop3: detected capacity change from 0 to 512 [ 864.541442][T25746] EXT4-fs: Ignoring removed bh option [ 864.546935][T25746] EXT4-fs: inline encryption not supported [ 864.553936][T25746] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 864.589652][T25761] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 864.642142][T25746] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 864.669257][T25771] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.5129: bad orphan inode 15 [ 864.679595][T25746] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.5127: bg 0: block 248: padding at end of block bitmap is not set [ 864.685930][T25771] loop1: lost filesystem error report for type 5 error -117 [ 864.694240][T25746] loop3: lost filesystem error report for type 5 error -117 [ 864.694549][T25746] Quota error (device loop3): write_blk: dquota write failed [ 864.694571][T25746] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 864.694601][T25746] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.5127: Failed to acquire dquot type 1 [ 864.694628][T25746] loop3: lost filesystem error report for type 5 error -28 [ 864.695246][T25746] EXT4-fs (loop3): 1 truncate cleaned up [ 864.695778][T25746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 864.735592][ T28] audit: type=1400 audit(2779000711.872:7983): avc: denied { setattr } for pid=25745 comm="syz.3.5127" path="socket:[76072]" dev="sockfs" ino=76072 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 864.756628][T25771] ext4_test_bit(bit=14, block=18) = 1 [ 864.765285][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 864.765307][ C0] EXT4-fs (loop1): initial error at time 2779000711: ext4_orphan_get:1423 [ 864.765331][ C0] EXT4-fs (loop1): last error at time 2779000711: ext4_orphan_get:1423 [ 864.934744][T25771] is_bad_inode(inode)=0 [ 864.943884][T25771] NEXT_ORPHAN(inode)=1023 [ 864.952743][T25771] max_ino=32 [ 864.962696][T25771] i_nlink=0 [ 864.968167][ T28] audit: type=1400 audit(2779000712.142:7984): avc: denied { bind } for pid=25780 comm="syz.5.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 864.997095][T25771] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.5129: corrupted xattr block 19: invalid header [ 865.012594][T25771] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 865.012884][T25771] EXT4-fs warning (device loop1): ext4_evict_inode:287: xattr delete (err -117) [ 865.035156][T20477] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 865.037147][ T28] audit: type=1400 audit(2779000712.202:7985): avc: denied { setopt } for pid=25780 comm="syz.5.5130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 865.235907][T25826] set_capacity_and_notify: 1 callbacks suppressed [ 865.235926][T25826] loop9: detected capacity change from 0 to 128 [ 865.253834][T25771] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 865.290317][T25771] ext4 filesystem being mounted at /43/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 865.329571][T25826] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 865.361978][T25826] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 865.428037][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 865.451909][ T28] audit: type=1400 audit(2779000712.622:7986): avc: denied { write } for pid=25825 comm="syz.9.5133" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 865.531143][ T28] audit: type=1400 audit(2779000712.652:7987): avc: denied { setattr } for pid=25825 comm="syz.9.5133" path="/97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 865.687834][T25849] loop1: detected capacity change from 0 to 512 [ 865.755321][ T28] audit: type=1400 audit(2779000712.932:7988): avc: denied { relabelfrom } for pid=25848 comm="syz.1.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 866.754077][ T28] audit: type=1400 audit(2779000712.932:7989): avc: denied { relabelto } for pid=25848 comm="syz.1.5139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 866.943546][T25853] loop8: detected capacity change from 0 to 512 [ 867.065327][T25853] EXT4-fs error (device loop8): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.8.5138: corrupted xattr block 95: invalid header [ 867.307960][T25853] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 867.314916][T25853] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.5138: bg 0: block 7: invalid block bitmap [ 867.325245][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 867.325427][ C0] EXT4-fs (loop8): initial error at time 2779000714: ext4_expand_extra_isize_ea:2810: inode 11 [ 867.325992][ C0] EXT4-fs (loop8): last error at time 2779000714: ext4_expand_extra_isize_ea:2810: inode 11 [ 867.450890][T25857] netlink: 'syz.5.5141': attribute type 1 has an invalid length. [ 867.606824][T25857] FAULT_INJECTION: forcing a failure. [ 867.606824][T25857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.606864][T25857] CPU: 1 UID: 0 PID: 25857 Comm: syz.5.5141 Tainted: G W syzkaller #0 PREEMPT(full) [ 867.606968][T25857] Tainted: [W]=WARN [ 867.606977][T25857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 867.606994][T25857] Call Trace: [ 867.607002][T25857] [ 867.607010][T25857] __dump_stack+0x1d/0x30 [ 867.607040][T25857] dump_stack_lvl+0x95/0xd0 [ 867.607067][T25857] dump_stack+0x15/0x1b [ 867.607088][T25857] should_fail_ex+0x263/0x280 [ 867.607128][T25857] should_fail+0xb/0x20 [ 867.607160][T25857] should_fail_usercopy+0x1a/0x20 [ 867.607233][T25857] _copy_from_iter+0xcf/0xea0 [ 867.607267][T25857] ? __alloc_skb+0x4f6/0x690 [ 867.607291][T25857] ? __alloc_skb+0x200/0x690 [ 867.607317][T25857] netlink_sendmsg+0x4ae/0x6f0 [ 867.607399][T25857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.607568][T25857] ____sys_sendmsg+0x563/0x5b0 [ 867.607606][T25857] ___sys_sendmsg+0x195/0x1e0 [ 867.607629][T25857] ? path_openat+0x1b01/0x2050 [ 867.607684][T25857] __sys_sendmmsg+0x185/0x320 [ 867.607742][T25857] __x64_sys_sendmmsg+0x57/0x70 [ 867.607774][T25857] x64_sys_call+0x27aa/0x3020 [ 867.607827][T25857] do_syscall_64+0x12c/0x3b0 [ 867.607919][T25857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.607949][T25857] RIP: 0033:0x7f39d5a3cdd9 [ 867.607969][T25857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.607993][T25857] RSP: 002b:00007f39d4497028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 867.608034][T25857] RAX: ffffffffffffffda RBX: 00007f39d5cb5fa0 RCX: 00007f39d5a3cdd9 [ 867.608054][T25857] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000000a [ 867.608072][T25857] RBP: 00007f39d4497090 R08: 0000000000000000 R09: 0000000000000000 [ 867.608089][T25857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.608103][T25857] R13: 00007f39d5cb6038 R14: 00007f39d5cb5fa0 R15: 00007ffcfb85ba28 [ 867.608127][T25857] [ 868.200536][T25865] __nla_validate_parse: 3 callbacks suppressed [ 868.200557][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5143'. [ 880.786990][ T28] audit: type=1400 audit(2779000727.962:7990): avc: denied { mounton } for pid=25983 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 881.218441][T25983] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.218510][T25983] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.218687][T25983] bridge_slave_0: entered allmulticast mode [ 881.219329][T25983] bridge_slave_0: entered promiscuous mode [ 881.226522][T25983] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.226666][T25983] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.226756][T25983] bridge_slave_1: entered allmulticast mode [ 881.227309][T25983] bridge_slave_1: entered promiscuous mode [ 881.241072][T25985] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.241147][T25985] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.241291][T25985] bridge_slave_0: entered allmulticast mode [ 881.241753][T25985] bridge_slave_0: entered promiscuous mode [ 881.249023][T25985] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.249074][T25985] bridge0: port 2(bridge_slave_1) entered disabled state [ 881.249235][T25985] bridge_slave_1: entered allmulticast mode [ 881.249928][T25985] bridge_slave_1: entered promiscuous mode [ 881.259067][T25983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.266849][T25983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.275116][T25985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.282053][T25985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 881.289408][T25983] team0: Port device team_slave_0 added [ 881.290574][T25983] team0: Port device team_slave_1 added [ 881.311805][T25985] team0: Port device team_slave_0 added [ 881.319918][T25985] team0: Port device team_slave_1 added [ 881.327595][T25983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.327614][T25983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.327731][T25983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.328521][T25983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.328537][T25983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.328621][T25983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.338475][T25985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.338552][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.338590][T25985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 881.340730][T25985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.340747][T25985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.340780][T25985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 881.368320][T25983] hsr_slave_0: entered promiscuous mode [ 881.369028][T25983] hsr_slave_1: entered promiscuous mode [ 881.369420][T25983] debugfs: 'hsr0' already exists in 'hsr' [ 881.369438][T25983] Cannot create hsr debugfs directory [ 881.390807][T25985] hsr_slave_0: entered promiscuous mode [ 881.817379][T25853] loop8: lost filesystem error report for type 5 error -117 [ 881.830254][T25853] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 881.830462][T25985] hsr_slave_1: entered promiscuous mode [ 881.830785][T25985] debugfs: 'hsr0' already exists in 'hsr' [ 881.830803][T25985] Cannot create hsr debugfs directory [ 881.840424][T25853] loop8: lost filesystem error report for type 5 error -117 [ 881.864343][T25853] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2972: inode #11: comm syz.8.5138: corrupted xattr block 95: invalid header [ 881.885460][T25853] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 881.885664][T25853] EXT4-fs warning (device loop8): ext4_evict_inode:287: xattr delete (err -117) [ 881.903847][T25853] EXT4-fs (loop8): 1 orphan inode deleted [ 881.903883][T26016] loop5: detected capacity change from 0 to 2048 [ 881.910495][T25853] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 881.917082][T26016] EXT4-fs: Ignoring removed mblk_io_submit option [ 881.935539][T26016] EXT4-fs: Ignoring removed i_version option [ 881.959013][T25853] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 882.006172][T25825] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 882.467992][T26034] loop1: detected capacity change from 0 to 128 [ 882.478177][T26034] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 882.513897][T26029] netlink: 'syz.5.5151': attribute type 21 has an invalid length. [ 882.523993][T26029] netlink: 'syz.5.5151': attribute type 6 has an invalid length. [ 882.532428][T26034] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 882.546007][T26029] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5151'. [ 882.553475][T26034] ext2 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 882.570333][ T28] audit: type=1400 audit(2779000729.742:7991): avc: denied { write } for pid=26033 comm="syz.1.5152" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.597823][ T28] audit: type=1400 audit(2779000729.742:7992): avc: denied { create } for pid=26033 comm="syz.1.5152" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 882.598277][T26034] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5152'. [ 882.661645][ T28] audit: type=1400 audit(2779000729.772:7993): avc: denied { write } for pid=26033 comm="syz.1.5152" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 882.689510][T24231] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 882.705969][ T28] audit: type=1400 audit(2779000729.772:7994): avc: denied { create } for pid=26033 comm="syz.1.5152" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 882.764035][ T28] audit: type=1400 audit(2779000729.772:7995): avc: denied { read } for pid=26033 comm="syz.1.5152" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 882.830705][T26043] netlink: 92 bytes leftover after parsing attributes in process `syz.1.5153'. [ 882.840015][T26043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5153'. [ 882.852185][T26043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5153'. [ 882.889797][ T28] audit: type=1400 audit(2779000730.062:7996): avc: denied { connect } for pid=26044 comm="syz.5.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 882.985162][ T28] audit: type=1400 audit(2779000730.122:7997): avc: denied { sqpoll } for pid=26044 comm="syz.5.5154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 883.020627][T26045] loop5: detected capacity change from 0 to 512 [ 883.083168][ T28] audit: type=1400 audit(2779000730.262:7998): avc: denied { write } for pid=26047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.143644][T26064] loop5: detected capacity change from 0 to 128 [ 883.164440][ T28] audit: type=1400 audit(2779000730.322:7999): avc: denied { write } for pid=26065 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.370170][T26082] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5158'. [ 883.420397][T26020] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.430081][T26020] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.437367][T26020] bridge_slave_0: entered allmulticast mode [ 883.444252][T26020] bridge_slave_0: entered promiscuous mode [ 883.451733][T25983] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 883.471954][T25983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 883.483811][T26070] netlink: 'syz.1.5155': attribute type 21 has an invalid length. [ 883.501755][T26020] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.512986][T26020] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.530515][T26020] bridge_slave_1: entered allmulticast mode [ 883.542738][T26020] bridge_slave_1: entered promiscuous mode [ 883.571929][T26020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.583665][T26020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.601506][ T30] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.614664][T25983] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 883.628689][T25983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 883.636640][T26070] netlink: 'syz.1.5155': attribute type 6 has an invalid length. [ 883.673786][T26070] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5155'. [ 883.746713][T26093] loop5: detected capacity change from 0 to 764 [ 883.762780][T26093] Symlink component flag not implemented [ 883.768577][T26093] Symlink component flag not implemented [ 883.886228][T26020] team0: Port device team_slave_0 added [ 883.918461][T26020] team0: Port device team_slave_1 added [ 884.045889][T26020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.087566][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.355169][T26020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.400110][T26020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.427325][T26020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 884.475990][T26020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.543535][T26020] hsr_slave_0: entered promiscuous mode [ 884.556173][T26020] hsr_slave_1: entered promiscuous mode [ 884.571792][T26020] debugfs: 'hsr0' already exists in 'hsr' [ 884.586420][T26020] Cannot create hsr debugfs directory [ 884.599848][T25983] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 884.613107][T25983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.649174][ T30] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.742721][T25983] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 884.760891][T25983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.834166][ T30] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.938225][ T30] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.112382][T26020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.160046][T25985] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 885.190932][T25985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 885.202324][T26155] loop1: detected capacity change from 0 to 164 [ 885.219601][T25985] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 885.228302][T26155] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 885.247556][T26155] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 885.262203][T25985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 885.298825][T25983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 885.334889][T26020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.379687][T25985] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 885.394205][T26163] loop1: detected capacity change from 0 to 512 [ 885.406919][T25985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 885.434625][T26163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 885.449046][T25985] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 885.479027][T25985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 885.488958][T26163] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 885.508353][ T30] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.655552][T26020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.688419][ T30] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.721023][T25983] 8021q: adding VLAN 0 to HW filter on device team0 [ 885.749437][T26020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.787398][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.794527][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.830656][T13999] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.837910][T13999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.885683][ T30] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.977321][ T30] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.028685][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 886.028704][ T28] audit: type=1400 audit(2779000733.202:8013): avc: denied { write } for pid=26185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.068187][T25985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.078103][T26020] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 886.089077][T26020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 886.105511][T26020] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 886.134846][T26020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 886.146969][ T28] audit: type=1400 audit(2779000733.322:8014): avc: denied { write } for pid=26197 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.179371][T26020] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.201291][T26020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 886.221168][T25985] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.243908][T26020] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.256287][T26020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 886.278625][T13999] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.285774][T13999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.324882][T13997] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.331992][T13997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.370887][ T30] bridge_slave_1: left allmulticast mode [ 886.376594][ T30] bridge_slave_1: left promiscuous mode [ 886.397031][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.423710][ T30] bridge_slave_0: left allmulticast mode [ 886.429464][ T30] bridge_slave_0: left promiscuous mode [ 886.435312][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.454211][ T30] bridge_slave_1: left allmulticast mode [ 886.459914][ T30] bridge_slave_1: left promiscuous mode [ 886.465752][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.495387][ T28] audit: type=1400 audit(2779000733.642:8015): avc: denied { write } for pid=26201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.521104][ T30] bridge_slave_0: left allmulticast mode [ 886.526862][ T30] bridge_slave_0: left promiscuous mode [ 886.536762][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.551307][T26205] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5167'. [ 886.562872][ T30] bridge_slave_1: left allmulticast mode [ 886.570042][ T28] audit: type=1400 audit(2779000733.742:8016): avc: denied { write } for pid=26222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.576949][ T30] bridge_slave_1: left promiscuous mode [ 886.625183][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.634018][ T30] bridge_slave_0: left allmulticast mode [ 886.641932][ T30] bridge_slave_0: left promiscuous mode [ 886.647743][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.770093][ T28] audit: type=1400 audit(2779000733.942:8017): avc: denied { write } for pid=26224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.813760][ T28] audit: type=1400 audit(2779000733.992:8018): avc: denied { write } for pid=26235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 886.838861][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.852148][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.867625][ T30] bond0 (unregistering): Released all slaves [ 886.937543][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.954618][ T30] bond0 (unregistering): (slave c@0Ů): Releasing backup interface [ 886.966908][ T30] bond0 (unregistering): Released all slaves [ 887.002865][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 887.015980][ T28] audit: type=1400 audit(2779000734.182:8019): avc: denied { write } for pid=26237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.051025][ T28] audit: type=1400 audit(2779000734.222:8020): avc: denied { write } for pid=26248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.165082][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 887.175442][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 887.186623][ T30] bond0 (unregistering): Released all slaves [ 887.279730][T26020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 887.302119][T25983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.365693][T26265] ip6t_srh: unknown srh match flags 5802 [ 887.795403][ T28] audit: type=1400 audit(2779000734.972:8021): avc: denied { write } for pid=26255 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 887.909349][T26269] loop5: detected capacity change from 0 to 512 [ 887.982087][ T28] audit: type=1400 audit(2779000735.152:8022): avc: denied { write } for pid=26281 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.011933][T26269] journal_path: Non-blockdev passed as './file0' [ 888.029120][T26269] EXT4-fs: error: could not find journal device path [ 888.152288][T25983] veth0_vlan: entered promiscuous mode [ 888.179633][T25983] veth1_vlan: entered promiscuous mode [ 888.217588][T25983] veth0_macvtap: entered promiscuous mode [ 888.236440][T25983] veth1_macvtap: entered promiscuous mode [ 888.266248][T25983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 888.310825][ T30] hsr_slave_0: left promiscuous mode [ 888.320361][ T30] hsr_slave_1: left promiscuous mode [ 888.334064][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.359492][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.369422][T26303] loop5: detected capacity change from 0 to 512 [ 888.378107][ T30] hsr_slave_0: left promiscuous mode [ 888.400407][ T30] hsr_slave_1: left promiscuous mode [ 888.428775][ T30] hsr_slave_0: left promiscuous mode [ 888.443582][ T30] hsr_slave_1: left promiscuous mode [ 888.457069][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 888.465823][T26303] netlink: 'syz.5.5171': attribute type 1 has an invalid length. [ 888.485213][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 888.505317][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 888.532551][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 888.576301][ T30] veth1_macvtap: left promiscuous mode [ 888.589952][ T30] veth0_macvtap: left promiscuous mode [ 888.607135][ T30] veth1_vlan: left promiscuous mode [ 888.621557][ T30] veth0_vlan: left promiscuous mode [ 888.644204][ T30] veth1_macvtap: left promiscuous mode [ 888.660663][ T30] veth0_macvtap: left promiscuous mode [ 888.678901][ T30] veth1_vlan: left promiscuous mode [ 888.697383][ T30] veth0_vlan: left promiscuous mode [ 888.929052][ T30] team0 (unregistering): Port device team_slave_1 removed [ 888.939113][ T30] team0 (unregistering): Port device team_slave_0 removed [ 889.021190][ T30] team0 (unregistering): Port device team_slave_1 removed [ 889.035036][ T30] team0 (unregistering): Port device team_slave_0 removed [ 889.114026][ T30] team0 (unregistering): Port device team_slave_1 removed [ 889.131191][ T30] team0 (unregistering): Port device team_slave_0 removed [ 889.176183][T25983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.197775][T26321] ipvlan2: entered promiscuous mode [ 889.212485][T26321] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 889.225185][T26321] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 889.237099][T26321] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 889.261714][ T5345] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.271041][ T5345] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.287342][ T5345] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.301769][ T5345] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.316001][T26020] 8021q: adding VLAN 0 to HW filter on device team0 [ 889.339247][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.346749][ T5345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.369817][ T5349] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.376954][ T5349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.414633][T25985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.486982][T26336] netlink: 'syz.1.5173': attribute type 11 has an invalid length. [ 889.531542][T26336] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5173'. [ 889.649240][T25985] veth0_vlan: entered promiscuous mode [ 889.663040][T25985] veth1_vlan: entered promiscuous mode [ 889.702777][T25985] veth0_macvtap: entered promiscuous mode [ 889.709579][T26336] netlink: 'syz.1.5173': attribute type 1 has an invalid length. [ 889.727833][T25985] veth1_macvtap: entered promiscuous mode [ 889.745447][T25985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.793324][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 889.801453][T26361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5173'. [ 889.806799][T25985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.844529][ T1026] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.870990][ T1026] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.901817][ T1026] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.925434][T26020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.946049][ T1026] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.979254][T26383] loop7: detected capacity change from 0 to 512 [ 890.068797][T26394] loop2: detected capacity change from 0 to 1024 [ 890.082471][T26394] EXT4-fs: test_dummy_encryption option not supported [ 890.118463][ T30] IPVS: stop unused estimator thread 0... [ 890.218144][T26406] nfs4: Unknown parameter '' [ 890.278959][ T30] IPVS: stop unused estimator thread 0... [ 890.525973][T26416] loop2: detected capacity change from 0 to 512 [ 890.751214][T26416] EXT4-fs (loop2): 1 orphan inode deleted [ 890.769422][T26416] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 890.801494][T26416] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 891.143935][T26416] IPVS: set_ctl: invalid protocol: 176 10.1.1.1:20265 [ 891.155917][T26416] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 891.183100][T15089] IPVS: starting estimator thread 0... [ 891.201048][ T30] __quota_error: 11 callbacks suppressed [ 891.201087][ T30] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 891.420459][T26421] IPVS: using max 2256 ests per chain, 112800 per kthread [ 891.457265][ T30] EXT4-fs error (device loop2): ext4_release_dquot:7070: comm kworker/u8:1: Failed to release dquot type 1 [ 891.510298][ T28] audit: type=1400 audit(2779000738.682:8034): avc: denied { write } for pid=26381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.685259][ T28] audit: type=1400 audit(2779000738.852:8035): avc: denied { write } for pid=26430 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 891.771128][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 891.794557][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 891.817995][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 891.840177][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.187847][T25985] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 892.204282][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.259650][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.282656][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.384786][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.432459][T26437] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5191'. [ 892.439964][T26020] veth0_vlan: entered promiscuous mode [ 892.507644][T26020] veth1_vlan: entered promiscuous mode [ 892.517704][ T28] audit: type=1400 audit(2779000739.692:8036): avc: denied { write } for pid=26451 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.584713][T26020] veth0_macvtap: entered promiscuous mode [ 892.613271][ T28] audit: type=1400 audit(2779000739.772:8037): avc: denied { write } for pid=26481 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 892.649285][T26020] veth1_macvtap: entered promiscuous mode [ 892.688340][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 892.699802][T26483] loop7: detected capacity change from 0 to 512 [ 892.724503][T26020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 892.782094][T26483] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 892.832276][T26020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 892.839883][T26483] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 892.887152][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.909640][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.952025][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 892.984458][ T28] audit: type=1400 audit(2779000740.162:8038): avc: denied { write } for pid=26482 comm="syz.7.5198" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 892.990439][T26483] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5198: bg 0: block 505: padding at end of block bitmap is not set [ 893.057049][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.137553][T26483] Quota error (device loop7): write_blk: dquota write failed [ 893.170556][T26483] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 893.213144][T26483] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 893.262199][T26483] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5198: Failed to acquire dquot type 1 [ 893.262248][T26498] Quota error (device loop7): write_blk: dquota write failed [ 893.285349][T26501] loop4: detected capacity change from 0 to 1024 [ 893.305932][T26501] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 893.336904][T26501] JBD2: no valid journal superblock found [ 893.342685][T26501] EXT4-fs (loop4): Could not load journal inode [ 893.351486][T26498] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5198: Failed to acquire dquot type 1 [ 893.397520][T26501] loop4: detected capacity change from 0 to 512 [ 893.440475][T25983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 893.451172][T26501] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 893.467361][T26501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 893.489332][T26501] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.5147: Allocating blocks 41-42 which overlap fs metadata [ 893.507890][T26469] netlink: 'syz.1.5195': attribute type 21 has an invalid length. [ 893.538093][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 893.551461][T26501] loop4: lost filesystem error report for type 5 error -117 [ 893.552561][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 893.566397][ C1] EXT4-fs (loop4): initial error at time 2779000740: ext4_mb_mark_diskspace_used:4222 [ 893.576028][ C1] EXT4-fs (loop4): last error at time 2779000740: ext4_mb_mark_diskspace_used:4222 [ 893.591692][T26501] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.5147: Failed to acquire dquot type 0 [ 893.609532][T26469] netlink: 'syz.1.5195': attribute type 6 has an invalid length. [ 893.635765][T26501] loop4: lost filesystem error report for type 5 error -117 [ 893.637417][T26501] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 893.672894][T26501] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.5147: corrupted inode contents [ 893.692370][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.728377][T26501] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.5147: mark_inode_dirty error [ 893.766449][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.766666][T26501] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.5147: corrupted inode contents [ 893.791014][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.791784][T26501] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.5147: mark_inode_dirty error [ 893.812641][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.815025][T26501] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.5147: corrupted inode contents [ 893.844884][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.852956][T26501] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 893.887883][T26501] loop4: lost filesystem error report for type 5 error -117 [ 893.889347][T26501] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.5147: corrupted inode contents [ 893.922768][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.923873][T26501] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.5147: mark_inode_dirty error [ 893.956831][T26501] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 893.957241][T26501] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 893.979217][T26501] loop4: lost filesystem error report for type 5 error -117 [ 893.980255][T26501] EXT4-fs (loop4): 1 truncate cleaned up [ 894.000429][T26501] EXT4-fs (loop4): pa ffff888107c79230: logic 1, phys. 41, len 23 [ 894.008734][T26501] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5459: group 0, free 22, pa_free 23 [ 894.021682][T26501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 894.084398][T26020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.099358][T26566] loop1: detected capacity change from 0 to 512 [ 894.138120][T26566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.172262][T26566] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 894.187441][T26566] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5214: bg 0: block 505: padding at end of block bitmap is not set [ 894.210394][T26566] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.5214: Failed to acquire dquot type 1 [ 894.230644][T26577] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 894.247936][T26566] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.5214: Failed to acquire dquot type 1 [ 894.300495][T26584] syzkaller0: entered promiscuous mode [ 894.308203][T26584] syzkaller0: entered allmulticast mode [ 894.375450][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.562512][T26610] loop1: detected capacity change from 0 to 512 [ 894.596553][T26610] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.5222: inode has both inline data and extents flags [ 894.613917][T26610] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 894.614125][T26610] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5222: couldn't read orphan inode 15 (err -117) [ 894.623336][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 894.623372][ C0] EXT4-fs (loop1): initial error at time 2779000741: ext4_orphan_get:1397: inode 15 [ 894.623436][ C0] EXT4-fs (loop1): last error at time 2779000741: ext4_orphan_get:1397: inode 15 [ 894.715829][T26614] ip6t_srh: unknown srh match flags 5802 [ 894.818279][T26610] loop1: lost filesystem error report for type 5 error -117 [ 894.846998][T26610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.909387][T26602] netlink: 'syz.4.5220': attribute type 21 has an invalid length. [ 895.110376][T26602] netlink: 'syz.4.5220': attribute type 6 has an invalid length. [ 895.129458][T26602] __nla_validate_parse: 3 callbacks suppressed [ 895.129474][T26602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5220'. [ 895.242846][T26610] netlink: 'syz.1.5222': attribute type 1 has an invalid length. [ 895.807365][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.866767][T26619] netlink: 'syz.5.5223': attribute type 21 has an invalid length. [ 895.888443][T26619] netlink: 'syz.5.5223': attribute type 6 has an invalid length. [ 895.907401][T26619] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5223'. [ 895.978777][T26660] loop7: detected capacity change from 0 to 512 [ 895.987466][T26660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 896.000953][T26660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 896.009414][T26660] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 896.094213][T26660] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4222: comm syz.7.5231: Allocating blocks 41-42 which overlap fs metadata [ 896.132736][T26660] loop7: lost filesystem error report for type 5 error -117 [ 896.133360][T26660] EXT4-fs (loop7): Remounting filesystem read-only [ 896.147342][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 896.147366][ C1] EXT4-fs (loop7): initial error at time 2779000743: ext4_mb_mark_diskspace_used:4222 [ 896.147404][ C1] EXT4-fs (loop7): last error at time 2779000743: ext4_mb_mark_diskspace_used:4222 [ 896.204055][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 896.204075][ T28] audit: type=1400 audit(2779000743.372:8061): avc: denied { getopt } for pid=26670 comm="syz.5.5232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 896.259035][T26675] loop5: detected capacity change from 0 to 128 [ 896.269234][T26660] Quota error (device loop7): write_blk: dquota write failed [ 896.303762][T26675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5233'. [ 896.319404][T26660] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5 [ 896.336763][ T28] audit: type=1400 audit(2779000743.502:8062): avc: denied { write } for pid=26662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.365037][T26675] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5233'. [ 896.375994][T26660] Quota error (device loop7): write_blk: dquota write failed [ 896.389165][T26660] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 896.421107][T26660] EXT4-fs (loop7): 1 truncate cleaned up [ 896.429097][ T28] audit: type=1400 audit(2779000743.602:8063): avc: denied { write } for pid=26680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.460094][T26660] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 896.668948][T25983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 896.698719][T26698] loop4: detected capacity change from 0 to 512 [ 896.735782][ T28] audit: type=1400 audit(2779000743.902:8064): avc: denied { write } for pid=26682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 896.791964][T26703] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 897.139461][T26698] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 897.201171][T26698] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 897.331309][ T28] audit: type=1400 audit(2779000744.502:8065): avc: denied { write } for pid=26707 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 897.489319][T26710] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5238'. [ 897.530965][T26710] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.538385][T26710] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.617618][T26718] syzkaller1: entered promiscuous mode [ 897.623122][ T28] audit: type=1400 audit(2779000744.792:8066): avc: denied { write } for pid=26716 comm="syz.2.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 897.638845][T26718] syzkaller1: entered allmulticast mode [ 897.707985][T26725] FAULT_INJECTION: forcing a failure. [ 897.707985][T26725] name failslab, interval 1, probability 0, space 0, times 0 [ 897.727117][T26725] CPU: 1 UID: 0 PID: 26725 Comm: syz.7.5241 Tainted: G W syzkaller #0 PREEMPT(full) [ 897.727164][T26725] Tainted: [W]=WARN [ 897.727173][T26725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.727247][T26725] Call Trace: [ 897.727255][T26725] [ 897.727266][T26725] __dump_stack+0x1d/0x30 [ 897.727363][T26725] dump_stack_lvl+0x95/0xd0 [ 897.727393][T26725] dump_stack+0x15/0x1b [ 897.727589][T26725] should_fail_ex+0x263/0x280 [ 897.727667][T26725] ? audit_log_d_path+0x8d/0x150 [ 897.727701][T26725] should_failslab+0x8c/0xb0 [ 897.727742][T26725] __kmalloc_cache_noprof+0x5f/0x400 [ 897.727835][T26725] audit_log_d_path+0x8d/0x150 [ 897.727861][T26725] audit_log_d_path_exe+0x42/0x70 [ 897.727886][T26725] audit_log_task+0x1e8/0x250 [ 897.727910][T26725] audit_seccomp+0x60/0x100 [ 897.728003][T26725] ? __seccomp_filter+0x8db/0x1350 [ 897.728042][T26725] __seccomp_filter+0x8ec/0x1350 [ 897.728083][T26725] ? putname+0x7c/0xc0 [ 897.728106][T26725] ? putname+0x7c/0xc0 [ 897.728137][T26725] ? kmem_cache_free+0xca/0x380 [ 897.728200][T26725] __secure_computing+0x81/0x150 [ 897.728242][T26725] do_syscall_64+0xce/0x3b0 [ 897.728358][T26725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.728384][T26725] RIP: 0033:0x7f4b3f7bd60e [ 897.728406][T26725] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 897.728458][T26725] RSP: 002b:00007f4b3e256fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 897.728485][T26725] RAX: ffffffffffffffda RBX: 00007f4b3e2576c0 RCX: 00007f4b3f7bd60e [ 897.728509][T26725] RDX: 000000000000000f RSI: 00007f4b3e2570a0 RDI: 0000000000000003 [ 897.728528][T26725] RBP: 00007f4b3e257090 R08: 0000000000000000 R09: 0000000000000000 [ 897.728542][T26725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 897.728575][T26725] R13: 00007f4b3fa76038 R14: 00007f4b3fa75fa0 R15: 00007ffd8b1e67a8 [ 897.728601][T26725] [ 897.774649][T26693] netlink: 'syz.5.5235': attribute type 21 has an invalid length. [ 897.944754][T26693] netlink: 'syz.5.5235': attribute type 6 has an invalid length. [ 897.952686][T26693] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5235'. [ 898.002150][T26728] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5242'. [ 898.024254][T26728] netlink: 'syz.4.5242': attribute type 1 has an invalid length. [ 898.283495][T26766] ip6t_srh: unknown srh match flags 5802 [ 899.117322][T26790] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 899.219997][T26790] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5248'. [ 899.270888][T26790] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.288194][T26790] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.313383][T26790] bond0 (unregistering): Released all slaves [ 899.465853][T26797] FAULT_INJECTION: forcing a failure. [ 899.465853][T26797] name failslab, interval 1, probability 0, space 0, times 0 [ 899.486538][T26794] loop7: detected capacity change from 0 to 8192 [ 899.500185][T26797] CPU: 1 UID: 0 PID: 26797 Comm: syz.4.5249 Tainted: G W syzkaller #0 PREEMPT(full) [ 899.500260][T26797] Tainted: [W]=WARN [ 899.500267][T26797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 899.500281][T26797] Call Trace: [ 899.500290][T26797] [ 899.500300][T26797] __dump_stack+0x1d/0x30 [ 899.500329][T26797] dump_stack_lvl+0x95/0xd0 [ 899.500383][T26797] dump_stack+0x15/0x1b [ 899.500442][T26797] should_fail_ex+0x263/0x280 [ 899.500477][T26797] should_failslab+0x8c/0xb0 [ 899.500519][T26797] kmem_cache_alloc_noprof+0x66/0x3f0 [ 899.500616][T26797] ? security_inode_alloc+0x37/0x100 [ 899.500648][T26797] security_inode_alloc+0x37/0x100 [ 899.500685][T26797] inode_init_always_gfp+0x4a0/0x4e0 [ 899.500758][T26797] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 899.500829][T26797] alloc_inode+0x58/0x170 [ 899.500868][T26797] new_inode+0x1d/0xe0 [ 899.500937][T26797] __debugfs_create_file+0x97/0x2b0 [ 899.501046][T26797] debugfs_create_file_full+0x3f/0x60 [ 899.501076][T26797] ? __pfx_macsec_setup+0x10/0x10 [ 899.501160][T26797] ref_tracker_dir_debugfs+0x10e/0x220 [ 899.501202][T26797] alloc_netdev_mqs+0x1a7/0xa70 [ 899.501228][T26797] rtnl_create_link+0x239/0x720 [ 899.501258][T26797] rtnl_newlink_create+0x174/0x650 [ 899.501327][T26797] rtnl_newlink+0x1185/0x1400 [ 899.501376][T26797] ? strlen+0x19/0x40 [ 899.501411][T26797] ? __memcg_slab_free_hook+0x10f/0x2c0 [ 899.501508][T26797] ? __rcu_read_unlock+0x4e/0x70 [ 899.501537][T26797] ? avc_has_perm_noaudit+0xab/0x130 [ 899.501577][T26797] ? cred_has_capability+0x224/0x2a0 [ 899.501606][T26797] ? selinux_capable+0x31/0x40 [ 899.501730][T26797] ? security_capable+0x7b/0x90 [ 899.501828][T26797] ? ns_capable+0x7c/0xb0 [ 899.501872][T26797] ? __pfx_rtnl_newlink+0x10/0x10 [ 899.501917][T26797] rtnetlink_rcv_msg+0x64b/0x720 [ 899.501954][T26797] netlink_rcv_skb+0x123/0x220 [ 899.501981][T26797] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 899.502019][T26797] rtnetlink_rcv+0x1c/0x30 [ 899.502113][T26797] netlink_unicast+0x5a8/0x680 [ 899.502140][T26797] netlink_sendmsg+0x5c8/0x6f0 [ 899.502180][T26797] ? __pfx_netlink_sendmsg+0x10/0x10 [ 899.502228][T26797] ____sys_sendmsg+0x563/0x5b0 [ 899.502340][T26797] ___sys_sendmsg+0x195/0x1e0 [ 899.502382][T26797] __x64_sys_sendmsg+0xd4/0x160 [ 899.502420][T26797] x64_sys_call+0x194c/0x3020 [ 899.502450][T26797] do_syscall_64+0x12c/0x3b0 [ 899.502480][T26797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.502505][T26797] RIP: 0033:0x7f6900cdcdd9 [ 899.502526][T26797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.502588][T26797] RSP: 002b:00007f68ff737028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.502611][T26797] RAX: ffffffffffffffda RBX: 00007f6900f55fa0 RCX: 00007f6900cdcdd9 [ 899.502630][T26797] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 899.502712][T26797] RBP: 00007f68ff737090 R08: 0000000000000000 R09: 0000000000000000 [ 899.502729][T26797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.502745][T26797] R13: 00007f6900f56038 R14: 00007f6900f55fa0 R15: 00007ffe9da45cd8 [ 899.502770][T26797] [ 899.821368][T26797] debugfs: out of free dentries, can not create file 'netdev@ffff88811c17c598' [ 899.838328][T26797] batadv0: entered promiscuous mode [ 899.843785][T26797] macsec1: entered promiscuous mode [ 899.849171][T26797] macsec1: entered allmulticast mode [ 899.854521][T26797] batadv0: entered allmulticast mode [ 899.860717][T26797] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 899.949270][T26805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 899.969307][T26805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 900.018742][T26805] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5250'. [ 900.058712][T26805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5250'. [ 900.160959][T26814] vlan2: entered promiscuous mode [ 900.166400][T26814] batadv0: entered promiscuous mode [ 900.349771][ T3694] Bluetooth: hci0: command 0x1003 tx timeout [ 900.391846][T14629] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 900.505359][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 900.741717][T26856] __nla_validate_parse: 1 callbacks suppressed [ 900.741735][T26856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5259'. [ 900.759806][T26852] sg_read: process 36 (syz.4.5258) changed security contexts after opening file descriptor, this is not allowed. [ 900.798706][T26856] loop5: detected capacity change from 0 to 760 [ 900.877103][T26865] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5260'. [ 900.963505][T26865] hsr_slave_0: left promiscuous mode [ 900.971478][T26865] hsr_slave_1: left promiscuous mode [ 901.009557][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 901.021074][T26867] loop1: detected capacity change from 0 to 4096 [ 901.036841][T26843] netlink: 'syz.2.5256': attribute type 21 has an invalid length. [ 901.075769][T26843] netlink: 'syz.2.5256': attribute type 6 has an invalid length. [ 901.083578][T26843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5256'. [ 901.146595][T26867] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.213056][T26867] syz_tun: entered allmulticast mode [ 901.286364][T26888] loop4: detected capacity change from 0 to 512 [ 901.311937][T26890] syz_tun: left allmulticast mode [ 901.329055][T26878] loop5: detected capacity change from 0 to 764 [ 901.380691][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 901.405081][T26888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 901.448030][T26888] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 901.470029][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 901.470086][ T28] audit: type=1400 audit(2779000748.394:8178): avc: denied { write } for pid=26887 comm="syz.4.5263" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 901.559731][T26020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 901.731429][T26916] loop4: detected capacity change from 0 to 512 [ 901.758450][T26916] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 901.770280][ T28] audit: type=1400 audit(2779000748.656:8179): avc: denied { write } for pid=26903 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.822190][T26916] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5269: invalid indirect mapped block 4294967295 (level 0) [ 901.868063][ T28] audit: type=1400 audit(2779000748.759:8180): avc: denied { write } for pid=26927 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 901.890862][T26916] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 901.891059][T26916] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #16: comm syz.4.5269: invalid indirect mapped block 4294967295 (level 1) [ 901.900385][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 901.900409][ C0] EXT4-fs (loop4): initial error at time 2779000748: ext4_free_branches:1023: inode 16 [ 901.900447][ C0] EXT4-fs (loop4): last error at time 2779000748: ext4_free_branches:1023: inode 16 [ 901.980901][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 901.987727][T26916] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 901.988149][T26916] EXT4-fs (loop4): 1 orphan inode deleted [ 902.037214][T26916] EXT4-fs (loop4): 1 truncate cleaned up [ 902.064111][T26916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 902.092181][T26930] loop2: detected capacity change from 0 to 4096 [ 902.111074][T26930] EXT4-fs (loop2): Invalid log block size: 511 [ 902.124726][ T28] audit: type=1400 audit(2779000749.002:8181): avc: denied { listen } for pid=26915 comm="syz.4.5269" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 902.221371][ T28] audit: type=1400 audit(2779000749.077:8182): avc: denied { accept } for pid=26915 comm="syz.4.5269" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 902.302240][T26940] loop7: detected capacity change from 0 to 128 [ 902.449135][ T28] audit: type=1400 audit(2779000749.133:8183): avc: denied { ioctl } for pid=26929 comm="syz.2.5273" path="socket:[80540]" dev="sockfs" ino=80540 ioctlcmd=0x89e8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 902.678312][T26020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 902.924431][ T28] audit: type=1400 audit(2779000749.750:8184): avc: denied { write } for pid=26934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.015530][ T28] audit: type=1400 audit(2779000749.816:8185): avc: denied { write } for pid=26956 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 903.063487][T26955] random: crng reseeded on system resumption [ 903.073964][ T28] audit: type=1400 audit(2779000749.872:8186): avc: denied { getopt } for pid=26954 comm="syz.4.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 903.117951][ T3021] 8021q: adding VLAN 0 to HW filter on device eth17 [ 903.269026][T26966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19668 sclass=netlink_route_socket pid=26966 comm=syz.4.5278 [ 903.358390][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 903.368862][ T28] audit: type=1400 audit(2779000750.171:8187): avc: denied { setattr } for pid=26877 comm="syz.5.5262" name="task" dev="proc" ino=79470 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 903.464654][T26988] FAULT_INJECTION: forcing a failure. [ 903.464654][T26988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.517297][T26988] CPU: 1 UID: 0 PID: 26988 Comm: syz.2.5283 Tainted: G W syzkaller #0 PREEMPT(full) [ 903.517413][T26988] Tainted: [W]=WARN [ 903.517497][T26988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 903.517511][T26988] Call Trace: [ 903.517519][T26988] [ 903.517528][T26988] __dump_stack+0x1d/0x30 [ 903.517554][T26988] dump_stack_lvl+0x95/0xd0 [ 903.517576][T26988] dump_stack+0x15/0x1b [ 903.517596][T26988] should_fail_ex+0x263/0x280 [ 903.517696][T26988] should_fail+0xb/0x20 [ 903.517721][T26988] should_fail_usercopy+0x1a/0x20 [ 903.517807][T26988] _copy_from_user+0x1c/0xb0 [ 903.517840][T26988] get_sg_io_hdr+0x81/0x420 [ 903.517868][T26988] ? path_openat+0x1b01/0x2050 [ 903.517951][T26988] ? __rcu_read_unlock+0x4e/0x70 [ 903.517979][T26988] sg_new_write+0xc3/0x8a0 [ 903.518015][T26988] ? do_vfs_ioctl+0x84f/0xe70 [ 903.518049][T26988] sg_ioctl+0xbec/0x1340 [ 903.518072][T26988] ? mutex_lock+0x57/0x90 [ 903.518143][T26988] ? __pfx_sg_ioctl+0x10/0x10 [ 903.518165][T26988] __se_sys_ioctl+0xce/0x140 [ 903.518196][T26988] __x64_sys_ioctl+0x43/0x50 [ 903.518255][T26988] x64_sys_call+0x1563/0x3020 [ 903.518281][T26988] do_syscall_64+0x12c/0x3b0 [ 903.518327][T26988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.518411][T26988] RIP: 0033:0x7f0867c3cdd9 [ 903.518427][T26988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.518451][T26988] RSP: 002b:00007f086668f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 903.518475][T26988] RAX: ffffffffffffffda RBX: 00007f0867eb5fa0 RCX: 00007f0867c3cdd9 [ 903.518490][T26988] RDX: 0000200000000440 RSI: 0000000000002285 RDI: 0000000000000003 [ 903.518568][T26988] RBP: 00007f086668f090 R08: 0000000000000000 R09: 0000000000000000 [ 903.518581][T26988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.518594][T26988] R13: 00007f0867eb6038 R14: 00007f0867eb5fa0 R15: 00007fffc7c021b8 [ 903.518617][T26988] [ 903.847612][ T3021] 8021q: adding VLAN 0 to HW filter on device eth18 [ 904.120885][T27028] Cannot find del_set index 0 as target [ 904.223755][T27024] loop5: detected capacity change from 0 to 4096 [ 904.314866][ T3021] 8021q: adding VLAN 0 to HW filter on device eth19 [ 904.378458][T27024] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 904.388150][T27038] netlink: 'syz.7.5296': attribute type 21 has an invalid length. [ 904.431194][T27024] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 904.674181][T27049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5299'. [ 904.970317][T26993] loop2: detected capacity change from 0 to 512 [ 905.212172][ T3021] 8021q: adding VLAN 0 to HW filter on device eth20 [ 905.244950][T26993] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 905.249026][T26993] System zones: 1-12 [ 905.254627][T26993] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.5285: Directory hole found for htree index block 0 [ 905.422101][T26993] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 905.423867][T26993] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 905.434001][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 905.434033][ C0] EXT4-fs (loop2): initial error at time 2779000752: dx_probe:791: inode 2 [ 905.434716][ C0] EXT4-fs (loop2): last error at time 2779000752: dx_probe:791: inode 2 [ 905.591832][T26993] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.5285: Directory hole found for htree index block 0 [ 905.670611][T26993] loop2: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 905.891223][T26993] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 905.947031][T26993] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 906.000440][T26993] random: crng reseeded on system resumption [ 906.077018][T27117] loop4: detected capacity change from 0 to 256 [ 906.085417][T25985] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 906.177374][T27121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5311'. [ 906.278392][T27132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 906.285749][T27132] IPv6: NLM_F_CREATE should be set when creating new route [ 906.293064][T27132] IPv6: NLM_F_CREATE should be set when creating new route [ 906.500905][T27143] netlink: 'syz.2.5320': attribute type 4 has an invalid length. [ 906.559876][T27143] netlink: 'syz.2.5320': attribute type 4 has an invalid length. [ 906.699052][T27144] loop5: detected capacity change from 0 to 764 [ 906.717298][T27144] Symlink component flag not implemented [ 906.723028][T27144] Symlink component flag not implemented [ 906.907587][T27143] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.914957][T27143] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.243715][T27143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.276434][T27143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.504645][T13996] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.540686][T13996] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.577447][T13996] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.615394][T13996] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.686384][T27160] loop7: detected capacity change from 0 to 128 [ 908.338502][T27181] ipt_REJECT: ECHOREPLY no longer supported. [ 908.430639][T27185] FAULT_INJECTION: forcing a failure. [ 908.430639][T27185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.466240][T27185] CPU: 1 UID: 0 PID: 27185 Comm: syz.1.5334 Tainted: G W syzkaller #0 PREEMPT(full) [ 908.466287][T27185] Tainted: [W]=WARN [ 908.466359][T27185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 908.466437][T27185] Call Trace: [ 908.466444][T27185] [ 908.466453][T27185] __dump_stack+0x1d/0x30 [ 908.466488][T27185] dump_stack_lvl+0x95/0xd0 [ 908.466518][T27185] dump_stack+0x15/0x1b [ 908.466588][T27185] should_fail_ex+0x263/0x280 [ 908.466627][T27185] should_fail+0xb/0x20 [ 908.466664][T27185] should_fail_usercopy+0x1a/0x20 [ 908.466705][T27185] _copy_to_user+0x20/0xa0 [ 908.466770][T27185] simple_read_from_buffer+0xb5/0x130 [ 908.466891][T27185] proc_fail_nth_read+0x10e/0x150 [ 908.466969][T27185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 908.467086][T27185] vfs_read+0x1ab/0x7f0 [ 908.467126][T27185] ? __rcu_read_unlock+0x4e/0x70 [ 908.467158][T27185] ? __fget_files+0x184/0x1c0 [ 908.467323][T27185] ? mutex_lock+0x57/0x90 [ 908.467357][T27185] ksys_read+0xdc/0x1a0 [ 908.467420][T27185] __x64_sys_read+0x40/0x50 [ 908.467462][T27185] x64_sys_call+0x2886/0x3020 [ 908.467537][T27185] do_syscall_64+0x12c/0x3b0 [ 908.467634][T27185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.467664][T27185] RIP: 0033:0x7f09c027d60e [ 908.467687][T27185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 908.467721][T27185] RSP: 002b:00007f09bed0efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 908.467752][T27185] RAX: ffffffffffffffda RBX: 00007f09bed0f6c0 RCX: 00007f09c027d60e [ 908.467839][T27185] RDX: 000000000000000f RSI: 00007f09bed0f0a0 RDI: 0000000000000004 [ 908.467859][T27185] RBP: 00007f09bed0f090 R08: 0000000000000000 R09: 0000000000000000 [ 908.467878][T27185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 908.467894][T27185] R13: 00007f09c0536038 R14: 00007f09c0535fa0 R15: 00007fffd13a1588 [ 908.467971][T27185] [ 908.672402][T27181] loop5: detected capacity change from 0 to 512 [ 908.751154][T27181] EXT4-fs: Ignoring removed bh option [ 908.836396][T27188] loop2: detected capacity change from 0 to 2048 [ 908.907001][T27181] EXT4-fs: Ignoring removed mblk_io_submit option [ 908.937408][T27181] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 908.978831][T27181] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 909.004417][T27195] loop1: detected capacity change from 0 to 128 [ 909.012047][T27181] EXT4-fs (loop5): write access unavailable, skipping orphan cleanup [ 909.027426][T27181] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 909.035432][T27195] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 909.063180][T27195] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 909.086615][T27181] netlink: 'syz.5.5332': attribute type 2 has an invalid length. [ 909.117015][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 909.117034][ T28] audit: type=1400 audit(2779000755.548:8215): avc: denied { remount } for pid=27194 comm="syz.1.5337" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 909.178160][T16982] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 909.254055][ T30] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 909.445394][ T28] audit: type=1400 audit(2779000755.856:8216): avc: denied { setopt } for pid=27212 comm="syz.7.5344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 909.579670][ T28] audit: type=1400 audit(2779000755.978:8217): avc: denied { read append } for pid=27217 comm="syz.2.5346" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 909.706619][T27219] loop5: detected capacity change from 0 to 764 [ 909.983626][T27219] Symlink component flag not implemented [ 909.990159][T27219] Symlink component flag not implemented [ 910.275907][ T28] audit: type=1400 audit(2779000755.978:8218): avc: denied { open } for pid=27217 comm="syz.2.5346" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 910.646363][T27229] random: crng reseeded on system resumption [ 911.044932][T27234] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5349'. [ 911.086707][T27234] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5349'. [ 911.097691][ T28] audit: type=1400 audit(2779000757.353:8219): avc: denied { nlmsg_read } for pid=27232 comm="syz.1.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 911.149881][T27234] ip6_vti0: Master is either lo or non-ether device [ 911.187654][ T28] audit: type=1400 audit(2779000757.456:8220): avc: denied { bind } for pid=27232 comm="syz.1.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.298225][ T28] audit: type=1400 audit(2779000757.456:8221): avc: denied { read } for pid=27232 comm="syz.1.5349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 911.627796][T27243] loop7: detected capacity change from 0 to 1024 [ 911.675122][T27243] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 911.758784][T27243] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 911.841771][ T28] audit: type=1400 audit(2779000758.092:8222): avc: denied { write } for pid=27242 comm="syz.7.5351" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 911.906572][ T28] audit: type=1400 audit(2779000758.167:8223): avc: denied { write } for pid=27242 comm="syz.7.5351" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 911.966427][T27250] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27250 comm=syz.7.5351 [ 912.107698][T27257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5353'. [ 912.386126][T27263] loop5: detected capacity change from 0 to 512 [ 912.499357][T27249] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5351: bg 0: block 112: padding at end of block bitmap is not set [ 912.501873][ T28] audit: type=1400 audit(2779000758.709:8224): avc: denied { write } for pid=27242 comm="syz.7.5351" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 912.591743][T27278] loop1: detected capacity change from 0 to 1024 [ 912.610986][T27278] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 912.688080][T27285] loop2: detected capacity change from 0 to 2048 [ 912.705871][T27285] EXT4-fs: Ignoring removed i_version option [ 912.708202][T27283] loop5: detected capacity change from 0 to 2048 [ 912.748794][T27285] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 912.788261][T27285] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 912.839068][T25983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 912.861770][T27285] EXT4-fs (loop2): shut down requested (0) [ 912.982548][T25985] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.293548][T27322] loop4: detected capacity change from 0 to 4096 [ 913.316160][T27322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 913.384972][T27304] loop7: detected capacity change from 0 to 512 [ 913.483530][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 913.506380][T27305] loop1: detected capacity change from 0 to 512 [ 913.519686][T26020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.527954][T27331] netlink: 'syz.2.5377': attribute type 1 has an invalid length. [ 913.544346][T27331] netlink: 'syz.2.5377': attribute type 2 has an invalid length. [ 913.560628][T27305] EXT4-fs: Ignoring removed bh option [ 913.575350][T27331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5377'. [ 913.585343][T27305] EXT4-fs: inline encryption not supported [ 913.613625][T27305] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 913.645200][T27338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=27338 comm=syz.4.5379 [ 913.715978][T27338] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=48 sclass=netlink_tcpdiag_socket pid=27338 comm=syz.4.5379 [ 913.744948][T27340] loop2: detected capacity change from 0 to 512 [ 913.751569][T27340] ext4: Unknown parameter 'smackfstransmute' [ 913.885458][T27305] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 913.947820][T27305] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.5369: bg 0: block 248: padding at end of block bitmap is not set [ 914.037900][T27305] loop1: lost filesystem error report for type 5 error -117 [ 914.089216][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 914.103150][ C1] EXT4-fs (loop1): last error at time 2779000760: ext4_validate_block_bitmap:441 [ 914.374720][T27305] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.5369: Failed to acquire dquot type 1 [ 914.478549][T27305] loop1: lost filesystem error report for type 5 error -28 [ 914.558979][T27305] EXT4-fs (loop1): 1 truncate cleaned up [ 914.601192][T27361] xt_hashlimit: size too large, truncated to 1048576 [ 914.604979][T27305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 914.621567][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 914.621584][ T28] audit: type=1400 audit(2779000760.682:8228): avc: denied { mount } for pid=27352 comm="syz.4.5384" name="/" dev="rpc_pipefs" ino=81278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 914.654457][ T28] audit: type=1400 audit(2779000760.682:8229): avc: denied { append } for pid=27360 comm="syz.5.5387" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 914.774721][T27370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=27370 comm=syz.2.5388 [ 914.805811][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 914.942025][ T28] audit: type=1400 audit(2779000760.991:8230): avc: denied { connect } for pid=27375 comm="syz.2.5391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 915.062024][T27379] loop2: detected capacity change from 0 to 2048 [ 915.068902][T27379] EXT4-fs: Ignoring removed mblk_io_submit option [ 915.081738][T27379] EXT4-fs: Ignoring removed i_version option [ 915.111645][T27379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 915.164484][ T28] audit: type=1400 audit(2779000761.206:8231): avc: denied { write } for pid=27378 comm="syz.2.5392" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 915.190057][T27382] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5387'. [ 915.275315][T27382] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5387'. [ 915.314555][T27382] netlink: 172 bytes leftover after parsing attributes in process `syz.5.5387'. [ 915.342395][T25985] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.367151][T27382] netlink: 100 bytes leftover after parsing attributes in process `syz.5.5387'. [ 915.410646][T27382] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5387'. [ 915.433405][T27389] netlink: 'syz.2.5394': attribute type 1 has an invalid length. [ 915.933822][ T28] audit: type=1400 audit(2779000761.908:8232): avc: denied { watch } for pid=27385 comm="syz.4.5393" path="/32/file0/file0" dev="loop4" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 915.983747][T27372] syz.1.5389 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 915.994858][T27372] CPU: 1 UID: 0 PID: 27372 Comm: syz.1.5389 Tainted: G W syzkaller #0 PREEMPT(full) [ 915.994929][T27372] Tainted: [W]=WARN [ 915.994938][T27372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 915.994956][T27372] Call Trace: [ 915.994966][T27372] [ 915.995050][T27372] __dump_stack+0x1d/0x30 [ 915.995100][T27372] dump_stack_lvl+0x95/0xd0 [ 915.995125][T27372] dump_stack+0x15/0x1b [ 915.995153][T27372] dump_header+0x80/0x240 [ 915.995178][T27372] oom_kill_process+0x295/0x350 [ 915.995268][T27372] out_of_memory+0x97d/0xb80 [ 915.995304][T27372] try_charge_memcg+0x62f/0xa10 [ 915.995344][T27372] charge_memcg+0x6d/0x120 [ 915.995408][T27372] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 915.995441][T27372] __swap_cache_prepare_and_add+0x69/0x4a0 [ 915.995471][T27372] ? alloc_pages_mpol+0x217/0x260 [ 915.995503][T27372] swap_cache_alloc_folio+0xa2/0x120 [ 915.995596][T27372] swap_cluster_readahead+0x25f/0x3c0 [ 915.995630][T27372] swapin_readahead+0xde/0x840 [ 915.995687][T27372] ? __mod_memcg_lruvec_state+0x1bf/0x2b0 [ 915.995846][T27372] ? drain_obj_stock+0x438/0x680 [ 915.995879][T27372] ? __rcu_read_unlock+0x4e/0x70 [ 915.995944][T27372] ? swap_cache_get_folio+0x1e0/0x1f0 [ 915.995971][T27372] do_swap_page+0x31e/0x2180 [ 915.995998][T27372] ? __memcg_slab_free_hook+0x75/0x2c0 [ 915.996081][T27372] ? bpf_map_area_free+0x15/0x20 [ 915.996161][T27372] ? __rcu_read_lock+0x36/0x50 [ 915.996237][T27372] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 915.996271][T27372] handle_mm_fault+0xb2e/0x2e70 [ 915.996390][T27372] ? vma_start_read+0x1c7/0x2c0 [ 915.996443][T27372] do_user_addr_fault+0x62f/0x1050 [ 915.996593][T27372] ? trace_page_fault_user+0x1f/0xa0 [ 915.996634][T27372] exc_page_fault+0x62/0xa0 [ 915.996674][T27372] asm_exc_page_fault+0x26/0x30 [ 915.996701][T27372] RIP: 0033:0x7f09c02bcdeb [ 915.996723][T27372] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 [ 915.996747][T27372] RSP: 002b:00007f09bed0f028 EFLAGS: 00010217 [ 915.996824][T27372] RAX: 000000000000000c RBX: 00007f09c0535fa0 RCX: ffffffffffffffe8 [ 915.996840][T27372] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 0000000000000000 [ 915.996854][T27372] RBP: 00007f09c0352d69 R08: 0000000000000000 R09: 0000000000000000 [ 915.996871][T27372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.996939][T27372] R13: 00007f09c0536038 R14: 00007f09c0535fa0 R15: 00007fffd13a1588 [ 915.996960][T27372] [ 915.996968][T27372] memory: usage 307200kB, limit 307200kB, failcnt 3459 [ 916.258586][T27372] memory+swap: usage 307800kB, limit 9007199254740988kB, failcnt 0 [ 916.282296][T27372] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 916.300632][T27372] Memory cgroup stats for /syz1: [ 916.300893][T27372] cache 0 [ 916.327781][T27372] rss 0 [ 916.342635][T27372] shmem 0 [ 916.380980][T27372] mapped_file 0 [ 916.401110][T27372] dirty 0 [ 916.414729][T27398] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 916.425023][T15093] IPVS: starting estimator thread 0... [ 916.437758][T27372] writeback 0 [ 916.449768][T27372] workingset_refault_anon 887 [ 916.471507][T27372] workingset_refault_file 3719 [ 916.496960][T27372] swap 614400 [ 916.510662][T27372] swapcached 16539648 [ 916.527105][T27356] netlink: 'syz.7.5385': attribute type 21 has an invalid length. [ 916.536674][T27372] pgpgin 396323 [ 916.547653][T27400] IPVS: using max 2400 ests per chain, 120000 per kthread [ 916.559098][T27372] pgpgout 396323 [ 916.565051][T27372] pgfault 457149 [ 916.569293][T27356] netlink: 'syz.7.5385': attribute type 6 has an invalid length. [ 916.577152][T27372] pgmajfault 375 [ 916.582454][T27372] inactive_anon 0 [ 916.586234][T27356] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5385'. [ 916.595698][T27372] active_anon 0 [ 916.599613][T27372] inactive_file 0 [ 916.605657][T27372] active_file 0 [ 916.612451][T27372] unevictable 0 [ 916.618161][T27372] hierarchical_memory_limit 314572800 [ 916.630955][T27372] hierarchical_memsw_limit 9223372036854771712 [ 916.643862][T27372] total_cache 0 [ 916.656820][T27372] total_rss 0 [ 916.666406][T27372] total_shmem 0 [ 916.707207][T27372] total_mapped_file 0 [ 916.711357][T27372] total_dirty 0 [ 916.714856][T27372] total_writeback 0 [ 916.737352][T27414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 916.739425][T27372] total_workingset_refault_anon 887 [ 916.752123][T27372] total_workingset_refault_file 3719 [ 916.757617][T27372] total_swap 614400 [ 916.820048][T27416] ip6t_srh: unknown srh match flags 5802 [ 916.920695][T27372] total_swapcached 16539648 [ 916.936772][T27372] total_pgpgin 396323 [ 916.987073][T27372] total_pgpgout 396323 [ 917.066964][T27372] total_pgfault 457149 [ 917.133959][T27372] total_pgmajfault 375 [ 917.206264][T27372] total_inactive_anon 0 [ 917.281280][T27372] total_active_anon 0 [ 917.358072][T27372] total_inactive_file 0 [ 917.580298][T27372] total_active_file 0 [ 917.608712][T27372] total_unevictable 0 [ 917.634676][T27372] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.5389,pid=27371,uid=0 [ 917.700875][T27372] Memory cgroup out of memory: Killed process 27371 (syz.1.5389) total-vm:94168kB, anon-rss:1232kB, file-rss:22352kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 917.798213][ T28] audit: type=1400 audit(2779000763.666:8233): avc: denied { write } for pid=27418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 917.840253][T27440] set_capacity_and_notify: 1 callbacks suppressed [ 917.840270][T27440] loop7: detected capacity change from 0 to 512 [ 917.925682][ T28] audit: type=1400 audit(2779000763.741:8234): avc: denied { write } for pid=27443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.131926][T27440] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.5408: inode has both inline data and extents flags [ 918.230793][T27440] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 918.233453][T27440] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.5408: couldn't read orphan inode 15 (err -117) [ 918.254965][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 918.255018][ C1] EXT4-fs (loop7): initial error at time 2779000764: ext4_orphan_get:1397: inode 15 [ 918.255230][ C1] EXT4-fs (loop7): last error at time 2779000764: ext4_orphan_get:1397: inode 15 [ 918.298894][T27440] loop7: lost filesystem error report for type 5 error -117 [ 918.306373][T27440] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.345020][ T28] audit: type=1400 audit(2779000764.152:8235): avc: denied { write } for pid=27439 comm="syz.7.5408" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 918.367992][T27453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 918.387607][T27453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 918.426041][T27440] FAULT_INJECTION: forcing a failure. [ 918.426041][T27440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 918.449598][ T28] audit: type=1400 audit(2779000764.218:8236): avc: denied { write } for pid=27446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.498312][T27440] CPU: 1 UID: 0 PID: 27440 Comm: syz.7.5408 Tainted: G W syzkaller #0 PREEMPT(full) [ 918.498413][T27440] Tainted: [W]=WARN [ 918.498423][T27440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 918.498439][T27440] Call Trace: [ 918.498446][T27440] [ 918.498455][T27440] __dump_stack+0x1d/0x30 [ 918.498479][T27440] dump_stack_lvl+0x95/0xd0 [ 918.498507][T27440] dump_stack+0x15/0x1b [ 918.498560][T27440] should_fail_ex+0x263/0x280 [ 918.498686][T27440] should_fail+0xb/0x20 [ 918.498718][T27440] should_fail_usercopy+0x1a/0x20 [ 918.498754][T27440] strncpy_from_user+0x27/0x250 [ 918.498783][T27440] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 918.498855][T27440] do_getname+0x59/0x1c0 [ 918.498882][T27440] getname_flags+0x1d/0x30 [ 918.498904][T27440] __x64_sys_execve+0x42/0x80 [ 918.499017][T27440] x64_sys_call+0x2752/0x3020 [ 918.499050][T27440] do_syscall_64+0x12c/0x3b0 [ 918.499089][T27440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 918.499118][T27440] RIP: 0033:0x7f4b3f7fcdd9 [ 918.499192][T27440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.499216][T27440] RSP: 002b:00007f4b3e257028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 918.499242][T27440] RAX: ffffffffffffffda RBX: 00007f4b3fa75fa0 RCX: 00007f4b3f7fcdd9 [ 918.499260][T27440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 918.499273][T27440] RBP: 00007f4b3e257090 R08: 0000000000000000 R09: 0000000000000000 [ 918.499326][T27440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 918.499343][T27440] R13: 00007f4b3fa76038 R14: 00007f4b3fa75fa0 R15: 00007ffd8b1e67a8 [ 918.499369][T27440] [ 918.696906][ T28] audit: type=1400 audit(2779000764.302:8237): avc: denied { write } for pid=27463 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 918.861061][T25983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.901412][T27489] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 919.020331][T27506] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5419'. [ 919.031750][T27506] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5419'. [ 919.041043][T27506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5419'. [ 919.197310][T27526] netlink: 15 bytes leftover after parsing attributes in process `syz.4.5423'. [ 919.681473][T27540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5426'. [ 919.704916][T27564] loop4: detected capacity change from 0 to 512 [ 919.726814][T27564] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 919.770541][T27564] EXT4-fs (loop4): orphan cleanup on readonly fs [ 919.792573][T27564] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.5429: Failed to acquire dquot type 1 [ 919.806779][T27572] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5430'. [ 919.815237][T27564] loop4: lost filesystem error report for type 5 error -5 [ 919.816195][T27564] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5429: bg 0: block 40: padding at end of block bitmap is not set [ 919.819555][T27572] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5430'. [ 919.836140][T27564] loop4: lost filesystem error report for type 5 error -117 [ 919.848079][T27564] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 919.855467][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 919.855494][ C0] EXT4-fs (loop4): initial error at time 2779000765: ext4_acquire_dquot:7034 [ 919.855526][ C0] EXT4-fs (loop4): last error at time 2779000765: ext4_validate_block_bitmap:441 [ 919.894333][T27564] loop4: lost filesystem error report for type 5 error -117 [ 919.894613][T27564] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #16: comm syz.4.5429: data will be lost [ 919.925241][T27564] EXT4-fs (loop4): 1 truncate cleaned up [ 919.931599][T27564] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 919.994833][T26020] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.047446][T27590] FAULT_INJECTION: forcing a failure. [ 920.047446][T27590] name failslab, interval 1, probability 0, space 0, times 0 [ 920.108051][T27590] CPU: 0 UID: 0 PID: 27590 Comm: syz.5.5433 Tainted: G W syzkaller #0 PREEMPT(full) [ 920.108093][T27590] Tainted: [W]=WARN [ 920.108103][T27590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 920.108118][T27590] Call Trace: [ 920.108170][T27590] [ 920.108181][T27590] __dump_stack+0x1d/0x30 [ 920.108214][T27590] dump_stack_lvl+0x95/0xd0 [ 920.108242][T27590] dump_stack+0x15/0x1b [ 920.108267][T27590] should_fail_ex+0x263/0x280 [ 920.108304][T27590] ? call_usermodehelper_setup+0x72/0x190 [ 920.108385][T27590] should_failslab+0x8c/0xb0 [ 920.108429][T27590] ? __pfx_free_modprobe_argv+0x10/0x10 [ 920.108460][T27590] __kmalloc_cache_noprof+0x5f/0x400 [ 920.108532][T27590] ? __pfx_free_modprobe_argv+0x10/0x10 [ 920.108569][T27590] call_usermodehelper_setup+0x72/0x190 [ 920.108613][T27590] __request_module+0x264/0x3c0 [ 920.108652][T27590] ? crypto_alg_lookup+0x310/0x360 [ 920.108689][T27590] crypto_alg_mod_lookup+0xe4/0x490 [ 920.108733][T27590] crypto_find_alg+0x61/0x70 [ 920.108769][T27590] crypto_type_has_alg+0x28/0x60 [ 920.108811][T27590] crypto_has_skcipher+0x27/0x40 [ 920.108845][T27590] xfrm_ealg_get_byid+0x289/0x2e0 [ 920.108933][T27590] pfkey_add+0xb0c/0x1330 [ 920.108972][T27590] pfkey_sendmsg+0x876/0x9b0 [ 920.109019][T27590] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 920.109163][T27590] ____sys_sendmsg+0x563/0x5b0 [ 920.109196][T27590] ___sys_sendmsg+0x195/0x1e0 [ 920.109241][T27590] __x64_sys_sendmsg+0xd4/0x160 [ 920.109363][T27590] x64_sys_call+0x194c/0x3020 [ 920.109404][T27590] do_syscall_64+0x12c/0x3b0 [ 920.109444][T27590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.109470][T27590] RIP: 0033:0x7f39d5a3cdd9 [ 920.109551][T27590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.109570][T27590] RSP: 002b:00007f39d4497028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 920.109591][T27590] RAX: ffffffffffffffda RBX: 00007f39d5cb5fa0 RCX: 00007f39d5a3cdd9 [ 920.109607][T27590] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 920.109622][T27590] RBP: 00007f39d4497090 R08: 0000000000000000 R09: 0000000000000000 [ 920.109635][T27590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 920.109649][T27590] R13: 00007f39d5cb6038 R14: 00007f39d5cb5fa0 R15: 00007ffcfb85ba28 [ 920.109708][T27590] [ 920.116666][T27602] loop2: detected capacity change from 0 to 128 [ 920.378889][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 920.378956][ T28] audit: type=1400 audit(2779000766.079:8248): avc: denied { write } for pid=27578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.427092][T27611] bio_check_eod: 52 callbacks suppressed [ 920.427119][T27611] syz.2.5437: attempt to access beyond end of device [ 920.427119][T27611] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 920.518056][T27611] syz.2.5437: attempt to access beyond end of device [ 920.518056][T27611] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 920.535707][T27611] syz.2.5437: attempt to access beyond end of device [ 920.535707][T27611] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 920.561487][ T28] audit: type=1400 audit(2779000766.247:8249): avc: denied { write } for pid=27613 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.597487][T27611] syz.2.5437: attempt to access beyond end of device [ 920.597487][T27611] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 920.653931][T27611] syz.2.5437: attempt to access beyond end of device [ 920.653931][T27611] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 920.719861][T27611] syz.2.5437: attempt to access beyond end of device [ 920.719861][T27611] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 920.796579][T27611] syz.2.5437: attempt to access beyond end of device [ 920.796579][T27611] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 920.840303][ T28] audit: type=1400 audit(2779000766.509:8250): avc: denied { write } for pid=27621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.857142][T27611] syz.2.5437: attempt to access beyond end of device [ 920.857142][T27611] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 920.920947][T27611] syz.2.5437: attempt to access beyond end of device [ 920.920947][T27611] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 920.922413][ T28] audit: type=1400 audit(2779000766.584:8251): avc: denied { write } for pid=27639 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 920.949129][T27611] syz.2.5437: attempt to access beyond end of device [ 920.949129][T27611] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 920.999555][T27644] netlink: 'syz.7.5434': attribute type 4 has an invalid length. [ 921.051878][T27609] netlink: 'syz.1.5439': attribute type 21 has an invalid length. [ 921.067030][T27646] netlink: 'syz.7.5434': attribute type 4 has an invalid length. [ 921.128473][T27648] loop7: detected capacity change from 0 to 512 [ 921.155116][T27606] netlink: 'syz.4.5438': attribute type 21 has an invalid length. [ 921.170077][T27648] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 921.185187][T27648] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 921.198244][T27588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=27588 comm=syz.7.5434 [ 921.214154][T27609] netlink: 'syz.1.5439': attribute type 6 has an invalid length. [ 921.226495][T27609] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5439'. [ 921.242418][T27606] netlink: 'syz.4.5438': attribute type 6 has an invalid length. [ 921.252153][T27606] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5438'. [ 921.322797][T27661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5441'. [ 921.394015][T27668] loop1: detected capacity change from 0 to 128 [ 921.400367][ T28] audit: type=1400 audit(2779000767.033:8252): avc: denied { write } for pid=27650 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.429603][T27668] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 921.458992][T25983] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 921.488980][T27668] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 921.521328][ T28] audit: type=1400 audit(2779000767.126:8253): avc: denied { write } for pid=27676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.546244][ T28] audit: type=1400 audit(2779000767.173:8254): avc: denied { write } for pid=27666 comm="syz.1.5444" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 921.669860][T24231] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 921.737966][T27702] loop5: detected capacity change from 0 to 128 [ 921.744990][ T28] audit: type=1400 audit(2779000767.360:8255): avc: denied { write } for pid=27685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.843746][ T28] audit: type=1400 audit(2779000767.454:8256): avc: denied { write } for pid=27709 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 921.878711][T27708] loop1: detected capacity change from 0 to 512 [ 921.910448][T27708] journal_path: Non-blockdev passed as './file0' [ 921.923504][T27708] EXT4-fs: error: could not find journal device path [ 922.005211][T27708] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 922.029616][T27708] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 922.074816][ T28] audit: type=1400 audit(2779000767.669:8257): avc: denied { name_bind } for pid=27726 comm="syz.7.5455" src=65532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 922.109624][T27730] loop1: detected capacity change from 0 to 512 [ 922.128701][T27730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.160452][ T3903] ================================================================== [ 922.168612][ T3903] BUG: KCSAN: data-race in __filemap_add_folio / nr_blockdev_pages [ 922.176660][ T3903] [ 922.179012][ T3903] read-write to 0xffff88810048bb78 of 8 bytes by task 27730 on cpu 1: [ 922.187194][ T3903] __filemap_add_folio+0x671/0x880 [ 922.192347][ T3903] filemap_add_folio+0x1d3/0x350 [ 922.197414][ T3903] __filemap_get_folio_mpol+0x326/0x680 [ 922.203436][ T3903] bdev_getblk+0x173/0x3f0 [ 922.207895][ T3903] ext4_read_block_bitmap_nowait+0x168/0x680 [ 922.214017][ T3903] ext4_mb_prefetch+0x143/0x230 [ 922.218912][ T3903] ext4_mb_scan_group+0x183/0xf20 [ 922.223985][ T3903] ext4_mb_regular_allocator+0x677/0x16a0 [ 922.229749][ T3903] ext4_mb_new_blocks+0x7db/0x1e90 [ 922.234910][ T3903] ext4_ind_map_blocks+0xbfa/0x15a0 [ 922.240154][ T3903] ext4_map_create_blocks+0x8a/0x3a0 [ 922.245482][ T3903] ext4_map_blocks+0x594/0x970 [ 922.250307][ T3903] _ext4_get_block+0x117/0x370 [ 922.255106][ T3903] ext4_get_block+0x39/0x50 [ 922.259656][ T3903] ext4_block_write_begin+0x650/0xcf0 [ 922.265076][ T3903] ext4_convert_inline_data_to_extent+0x3e2/0x7d0 [ 922.271536][ T3903] ext4_try_to_write_inline_data+0x54/0x90 [ 922.277492][ T3903] ext4_write_begin+0x1a6/0xe50 [ 922.282379][ T3903] ext4_da_write_begin+0x1ef/0x680 [ 922.287530][ T3903] generic_perform_write+0x183/0x490 [ 922.292850][ T3903] ext4_buffered_write_iter+0x304/0x4c0 [ 922.298469][ T3903] ext4_file_write_iter+0x380/0xfa0 [ 922.303713][ T3903] do_iter_readv_writev+0x4fd/0x5a0 [ 922.309046][ T3903] vfs_writev+0x2e1/0x900 [ 922.313435][ T3903] __se_sys_pwritev2+0xfc/0x1c0 [ 922.318323][ T3903] __x64_sys_pwritev2+0x67/0x80 [ 922.323233][ T3903] x64_sys_call+0xe07/0x3020 [ 922.327965][ T3903] do_syscall_64+0x12c/0x3b0 [ 922.332605][ T3903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.338547][ T3903] [ 922.340913][ T3903] read to 0xffff88810048bb78 of 8 bytes by task 3903 on cpu 0: [ 922.348529][ T3903] nr_blockdev_pages+0x7e/0xd0 [ 922.353332][ T3903] si_meminfo+0x87/0xd0 [ 922.357542][ T3903] update_defense_level+0x47/0x5d0 [ 922.362681][ T3903] defense_work_handler+0x1f/0x80 [ 922.367902][ T3903] process_scheduled_works+0x4f0/0x9c0 [ 922.373391][ T3903] worker_thread+0x58a/0x780 [ 922.378018][ T3903] kthread+0x22a/0x280 [ 922.382106][ T3903] ret_from_fork+0x146/0x330 [ 922.386732][ T3903] ret_from_fork_asm+0x1a/0x30 [ 922.391531][ T3903] [ 922.393883][ T3903] value changed: 0x000000000000000b -> 0x000000000000000c [ 922.401012][ T3903] [ 922.403359][ T3903] Reported by Kernel Concurrency Sanitizer on: [ 922.409543][ T3903] CPU: 0 UID: 0 PID: 3903 Comm: kworker/0:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 922.420532][ T3903] Tainted: [W]=WARN [ 922.424349][ T3903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 922.434425][ T3903] Workqueue: events_long defense_work_handler [ 922.440520][ T3903] ================================================================== [ 922.564133][T13004] hid (null): report_id 3511357295 is invalid [ 922.572665][T13004] hid-generic 0000:0012:0009.0009: report_id 3511357295 is invalid [ 922.584814][T13004] hid-generic 0000:0012:0009.0009: item 0 4 1 8 parsing failed [ 922.600439][T13004] hid-generic 0000:0012:0009.0009: probe with driver hid-generic failed with error -22 [ 922.670866][T24231] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.