last executing test programs: 2m2.107287711s ago: executing program 3 (id=69): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) sendmmsg(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0xf275, @loopback, 0xa, 0x23}, 0x80, 0x0}}], 0x1, 0x40d5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x3}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000340)={@multicast2, @loopback, @remote}, 0xc) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xb8, 0x17, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x80, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syzkaller1\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'batadv0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000050000006b0011000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000004560100008e0100006f776e657200000000000000000000000000000000000000db21b519bf83d1fb180000000000", @ANYRES32=r3, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02040000000000004e464c4f4700000000000000000000000000000000000000000000000000000050000000000000000100000007000300000000005cae641872319dfae5a988272763a36abcf1f74cfd4bf988531a30a528c1c044813d8205fd8b1fdf1c2ccd79b5fb7f9e096fbd1c7eeee4b6646c0b2fc39d3fe20000000072656469726563740000000000000000000000000000000000000000000000000800000000000000feffffff00000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00000000"]}, 0x296) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, 0x3, 0x6, 0x5, 0x0, 0x0, {0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback}, 0xc) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r5, &(0x7f0000000a00)=""/143, 0x8f, 0x5e) 2m1.635014792s ago: executing program 4 (id=71): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000a00)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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", @ANYBLOB="11ad0fa62a2978807a8e8dfa67c8067d98e603c58e7741eff6101f7dba3e990d3c0c48189cbc7d818e4f857a223c76a4e2cd58dd6af9d8e4a08a2b86421350c1a17d139ce9557b4349553f9bbebef80fbded8430b9772d31c61c03266f36811894ab79fec8ccbacca6f8a63a2ef607314056f14f2c1dc27d3e32385c9af9182d068d101ffbb44cfcb71f7af9565659eef91f11f9f7d5c25012450485453b96da2fa7", @ANYBLOB="b13c376fdd66a7d639c02532bf04ce21f7d86f67914cd24c1a16c85d000e56c7368c5baa847b8d1390c871ca73979c130e2e8dba52cb6e29e7ef9ce8e7f092a32dd4dff5839727b3f591e388d041527960a1e20a1e133b12dfc18f1f732ea8614d5847cd54edc1c0aa5422ef3bb9508fdbebcc135de98954f1d9fbffbb190a49b16c1275d4830b8a85acf0b55c1e19533fb1ae4ca8f80bdefda060e3e6837a10fc794ecf34ec4b7a7c76402285c415d76a33d64d218596c8126c7b35076511e52e235fb9be2d0a381962e129748855c39c84436bd553b25d7f0ae7e35b54eebdb608625a42b589438a35d78997"], 0xff, 0x2c1, &(0x7f0000000a40)="$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") r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r1, 0x400, 0x101, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x80) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000440)) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x181541, 0x168) write$cgroup_subtree(r2, &(0x7f0000004340)=ANY=[], 0x761e) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg(r3, &(0x7f0000000600)={&(0x7f0000000180)=@nfc={0x27, r4, 0xffffffffffffffff, 0x4}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="8334d9b198dc20f7864d93c7e56f6cba84701c0f795810ea4a2d23bd117e1b78a5c8732324cc22ea461a02b22c1048cbf3af09cdb58d9daf417c713f2b2038e41c3bcc46d65404c23b343458a8ec6918cff2e368a6a8df963eb8947c6481ae0dd9e8a4ef5ed649e7b73ac764ea0684224ccfc97310e885bfd3ee54dad6fca83da2f35b64971e4896ccbd9bbbbf91c33aface4ddd14fe24fe7a72792b1ad44d565524679156bee6ad734ec2a6807d1c5408d36da967085550532cf80fcb4c9f914601afbe82a924630786da1f86688b21d9123ddc", 0xd4}, {&(0x7f0000000300)="71637a1a7be3739a16e85595699f36d7033ac6e4f7660db946e61135acd79683835e11220a53ef41bda7b52edd749c19dcb433e3947c03f71b0c4fe4e58fbf", 0x3f}, {&(0x7f0000000340)="7d0b31208b8958993738561852b00a2309cb095d0a6e26b6896ed2658e28ece5820e32c9fd83d439b3a4eb9e82a546692419eac6df293f8d360f1af1c810ea7d6a10b05eec724b1cd2c1d2322a34134366e36f21", 0x54}, {&(0x7f0000000400)="de5674ecd0a3e459e9af623281a8", 0xe}], 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x180}, 0x10) bind$nfc_llcp(r2, &(0x7f0000000640)={0x27, r4, 0x0, 0x3, 0x9, 0x6a, "c8bff322b7347f60f89ad7460da8d27fb64fb7a58a9e62f4718ca3b18f1ced0da0dd836e91ba5370733bf2d2a496d9a90f6a5a35fd8e517a1ccb49dc319b98", 0x27}, 0x60) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000015c0)}], 0x1}}], 0x1, 0x0) rename(&(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000900)='./file0\x00') 2m1.626633792s ago: executing program 3 (id=72): unshare(0x66020d00) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x1, 0x0, 0xf8c7}}) 2m1.568319773s ago: executing program 3 (id=74): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x9, 0x0, &(0x7f0000000200)) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local}, "483d545dc3f6a10b"}}}}}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = fsopen(&(0x7f00000002c0)='ecryptfs\x00', 0x1) preadv(r4, 0x0, 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x6}}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) recvmsg(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000006c0)=""/227, 0xe3}], 0x1}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") 2m0.144793945s ago: executing program 3 (id=85): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@cgroup, 0x2e, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x24, 0x0, @val=@iter={0x0}}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0xd, 0x0, 0x0, @time={0x3, 0x83}, {0x0, 0x2}, {0x20}, @raw32={[0x0, 0xb2d1]}}], 0xfe52) poll(&(0x7f0000000240)=[{r1, 0x20}], 0x1, 0xfbe) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="3107000010000080000038000000080001"], 0x60}, 0x1, 0x2, 0x0, 0x1bb5818a0d53d6a}, 0x40) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x401, 0x7, {0x3, 0xbb}, 0x41, 0x2, 0x9}) 1m59.01257254s ago: executing program 3 (id=93): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000200)="80", 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0xc}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x48, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000800) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x42, 0x9, 0x82ba, 0x0, 0x64317119, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x29) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001480)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4008804}, 0x8054) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x20000000002, &(0x7f0000000700)) ptrace$cont(0x21, r3, 0x80000001, 0x4) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x109) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) fremovexattr(r5, &(0x7f0000000000)=@known='system.posix_acl_default\x00') pread64(r0, &(0x7f00000024c0)=""/209, 0xd1, 0x8) 1m57.461390425s ago: executing program 3 (id=100): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000580)=ANY=[@ANYBLOB="696fe544a81e636861727365743d6d6163696e7569742c757466383d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c726f6469722c696f636861727365743d6d6163726f6d616e2c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c666c7d73682c756e695f786c6174653d312c757466383d302c64656275672c00"], 0x81, 0x2a6, &(0x7f0000000180)="$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") syz_emit_ethernet(0x2b, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000ea538ae46463208004500001d0000000000029078ac1e0001e0000001110090786401020200"], 0x0) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m56.895685588s ago: executing program 4 (id=107): syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201b91eeb9ac74040170020924c0102030109021200018509d0050905b802000600006fda3a6d429ce9d6c9da5bcf4c8fb0e4e8c88d69e6a91eb0d6a15a333a3aa1872e1dcadb6044c4256f1394c367df4a56aed29c108aa15532347bd760b326cad56ea01bc9550a5d51a99cd89219dd0dd9f913a6bc09f1e89df4eaac2fac1389631c8574b5338092d484e455f363a0ae03a84e3944312be576f83f020592ebfcc2fac6e187c67e2d0f761efdfa7e4b2ac2b2fc5b88b6b630e76fac37845d024094318752195f16280ce65b0aca4468fb1ab2fb9b40990e"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x10, 0x25, 0xc, 0x9, 0x0, 0x7, 0xd582, 0x4dface899b09d838, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={&(0x7f0000000300), 0xa}, 0x204, 0x14, 0x3, 0x4, 0x3, 0xffffff35, 0x5, 0x0, 0x5, 0x0, 0x7}, r0, 0x4, 0xffffffffffffffff, 0xe) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, r2, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r5, &(0x7f0000000200)=""/185, 0xb9) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000700)=@newlink={0x8c, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x20c89}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xc580c}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}, @IFLA_GRE_IKEY={0x8, 0x4, 0xffff7fff}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x8}]}}}, @IFLA_IFALIAS={0x14, 0x14, 'bond0\x00'}, @IFLA_PHYS_SWITCH_ID={0x10, 0x24, "b298f236482aa0dcc395d7b5"}, @IFLA_VFINFO_LIST={0x4}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000000c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b000000"], 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) unlinkat(r7, &(0x7f0000000140)='./file0\x00', 0x0) 1m56.104341226s ago: executing program 4 (id=114): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0) 1m56.026413137s ago: executing program 4 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000300)='ext3\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x80010, &(0x7f0000000d80)={[], [{@euid_eq}]}, 0x1, 0x5ba, &(0x7f00000018c0)="$eJzs3U1sHFcdAPD/rO04cRLsBipKkcCiCCJF9UeMyAaBSHpCKkZtClyKGkyysd2svZa9lmqXgyNU2hsq4lJxQlYOfEmJVNSWD6kSoohD4cAJFYV7VVOpfEkgtNXMzqZuvLYTbeKJ7N9PGs3Mm919/9n/zGTeexNvAHvWYEScioiuiDgWEf15eSmfYqU5pa9bHbsylU5JNBqPvZ1EEhHPj12Zan1Wks8P5h+wPyLOrEaUntlY78LS8sWJarUyn68P12fmhheWlh+cnpmYrExWZsvl8ki5fOLk6O3b18ePHDjywu++9L9fvvb9j37tB79/Oo33UL5t/X7cLoMxmH8nPdG7rrw7ibhwuysrSHrcdEcz1zfj3sr3fnOHQ+ImffHHl0pFxwAA7Lz0BuBIRHwiu//vj67sbi7i1OFvvNMf/36y6PgAAACAzjX6++ML6RwAAADYtUrZM7BJaSh/FuBQlEpDQ81neD8UfaVqbaF+7EJtcfZ881nZgegpXZiuVkbyZ4UHoidJ10ez5ffWj9+wPhYR90TEc/0HsvWhc7Xq+aI7PwAAAGCXOxRx7fHvvPLhg5u0/1N/7S86SgAAAKATafv/8LW+7E91/VM7HwAAAHaltP3/znf//ofQ/gcAAIBdq9X+f2R8PB4ZH2+s5r9/NVubnL44NXfy+MjQzOK5oXO1+bmhyVptMvsf+zPbf261VpsbPR6LTw3XKwv14YWl5bMztcXZ+tnsd73OVnp2YN+A7T166lyl6BgAAICdc8/HX/1LEhErnzuQTal9+TZtddjd/AA47F1dRQcAFKa76ACAwmjjA8k22/dvtmHl9scCAADcGZ/+iPF/2KuM/8PeZfwf9i7j/7B3aeMDxv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGB7jUYSDQAAAGBXW1havjhRrVbm98LCgbgrwrBg4e5fKLpnEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC72fNjV6Za007V+etf7VRNbGbtdEQMNPO/mk/NLd2xP5vvj56I6PtHEt3r3pdERFeHdf/3vojBeOLpFxuXX06nyI/DDj+WW7ByKSLua3f+J+lhEQP5UXBj/kvZkdGZn/8kzf/qH9eXyf/O6iT/fR3W/crH0vw/fO/6MvnfO+5/tOgIKNKfnis6Aor057WiI6BIZx4rOgKK9JXPFh0BRfrh20VHwKunI2KkXfuvlDYLr7fyb2z/dWU9RJ05Opi2/549tr5sY/uv9GaH1bCFtdMRn4+I1Q39f6XWSwa68rXDWX9AT3JhuloZiYgPpDmMnt50fXSLOi6fXXyiXfnDZ9L8X/nFXG9EvHH1pbk3rr6U1p/O33tV6c3u3ve/7/xEfaLT/aZp7VLE/d3t8p9c7/9NNun//eBN1jH1+reebFc+9ts0/yvNlU3zz53U+FHEp9qe/8n116RLw/WZueGFpeUHp2cmJiuTldlyuTxSLp84OTqcXQ6GWxeFNvrXDn69Xfk3H0rz///xuTz38r/z0vO/b+v8Z9f/haXlixPVamV+4dbr+M9br6+2Kz/yTJr/h769df7bX//3JV/NAtyXlz01Ua/Pj0bsS768sfz4rce8W7W+j9b3leb/6APt//1v3f81r/+lDf3/A/k83T64RZ09J64+2678kw9k43/XXmxcftn5X4w0/+e3Of+T953/t77wwt/+9dN2df+sN83/a2+1xn/TKa2/NRbclJ7/n8mCOZqXuP/b3s0mqOg4AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgvXcDAAD//+5eMnw=") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xfdffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x29000, 0x1000, 0xbb}, 0x20) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r1, 0x20000000}, 0x10) recvmmsg(r0, &(0x7f00000009c0)=[{{&(0x7f00000001c0)=@phonet, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000400)=""/254, 0xfe}, {&(0x7f0000000600)=""/115, 0x73}, {&(0x7f0000000680)=""/154, 0x9a}, {&(0x7f0000000740)=""/36, 0x24}, {&(0x7f0000000780)=""/43, 0x2b}, {&(0x7f00000007c0)=""/107, 0x6b}, {&(0x7f0000000840)=""/212, 0xd4}, {&(0x7f0000000a00)=""/142, 0x8e}], 0x8}, 0x204}], 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x4084) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) syz_open_procfs(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x42, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) futex_waitv(&(0x7f0000004240)=[{0xa968, 0x0, 0x2}], 0x1, 0x0, &(0x7f0000004dc0)={0x77359400}, 0x8123f3f502f2614e) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m55.986416358s ago: executing program 4 (id=119): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8401}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 1m55.769928613s ago: executing program 4 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e7000000000000000400200018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x46, &(0x7f0000000180)=""/70, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m55.751086674s ago: executing program 32 (id=126): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000060000"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000e7000000000000000400200018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0xb, 0x46, &(0x7f0000000180)=""/70, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 1m44.555241245s ago: executing program 1 (id=216): socket$igmp6(0xa, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000008c0), 0x0, 0x4800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x21}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2b, 0x1, 0x1) listen(r1, 0x5) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xb4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x2001000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x104, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x7, 0x2, 0x8, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(0x0, 0x0, 0x9) 1m44.31830253s ago: executing program 1 (id=220): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0, 0x1e, 0x0, 0x1, 0x1}, 0x28) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@delsa={0x34, 0x11, 0x1, 0x60bd2c, 0x25dfdbfe, {@in=@remote, 0x4d4, 0x2, 0xff}, [@mark={0xc, 0x15, {0x35075d, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r2, 0x40406f06, &(0x7f0000000140)={0x8000000000000000, 0x8, 0x100, 0x918, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket(0x40000000015, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000002100)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x8, '\x00', r5, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) sendmmsg(r3, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r5, 0x14}, 0x80, &(0x7f0000004c40)=[{&(0x7f0000000300)='C', 0x1}], 0x1}}], 0x1, 0x20000081) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYBLOB="00000000000000116608fffffff80000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8fffdffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0\x00') 1m44.213397332s ago: executing program 1 (id=221): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x10000a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000001200000004080000", @ANYRES32, @ANYBLOB="001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000140)={0x7ff, 0x6}) setuid(0xee01) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x8, 0xff, 0x7ff, 0x2, @local, @remote, 0x700, 0x1, 0x6, 0x4}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1m42.233520997s ago: executing program 33 (id=100): r0 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semctl$SETVAL(0x0, 0x0, 0x10, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000000)='./file0\x00', 0xa18c14, &(0x7f0000000580)=ANY=[@ANYBLOB="696fe544a81e636861727365743d6d6163696e7569742c757466383d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d6c6f7765722c726f6469722c696f636861727365743d6d6163726f6d616e2c756e695f786c6174653d312c756e695f786c6174653d302c756e695f786c6174653d302c666c7d73682c756e695f786c6174653d312c757466383d302c64656275672c00"], 0x81, 0x2a6, &(0x7f0000000180)="$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") syz_emit_ethernet(0x2b, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c200000ea538ae46463208004500001d0000000000029078ac1e0001e0000001110090786401020200"], 0x0) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m39.198271605s ago: executing program 1 (id=244): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f00000006c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r2, 0x1, &(0x7f00000001c0)={0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x8deb}, 0x10c0e8, 0x1, 0x0, 0x2, 0x6, 0x8001, 0x7fff}, r2, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r3, 0xfffffffffffffffb, 0x1, 0xfffffffffffffffd}) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m38.649057878s ago: executing program 1 (id=249): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x1000000, 0xd500}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}]}, 0x28}}, 0x0) 1m38.132680909s ago: executing program 1 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0xe, 0x59, 0x0, 0x0, 0x80000000, 0xb209a, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffc}, 0x300, 0x5, 0x3, 0xa2ccf8bc01150a04, 0x4, 0x85, 0xe36f, 0x0, 0x81, 0x0, 0xffffffffffff2b61}, r2, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f14010029bd7000fddbdf250c0045"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001500192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) 1m38.132455179s ago: executing program 34 (id=251): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x8200, 0x0) r2 = gettid() perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x2, 0xe, 0x59, 0x0, 0x0, 0x80000000, 0xb209a, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x3, 0xfffffffffffffffc}, 0x300, 0x5, 0x3, 0xa2ccf8bc01150a04, 0x4, 0x85, 0xe36f, 0x0, 0x81, 0x0, 0xffffffffffff2b61}, r2, 0xf, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000f14010029bd7000fddbdf250c0045"], 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001500192340834b80040d8c560a06ffffff7f070000004001000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffedc7fff, 0x1000, 0x4, 0x5}, 0x20) 1m19.290832621s ago: executing program 5 (id=396): syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x38, &(0x7f0000000580)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, r0, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x0, 0x0, 0x3}, {"c516"}}}}}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000100)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES32=0x41424344, @ANYRES32=r1, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfc, 0x0, @perf_config_ext={0x1, 0x5c77}, 0x3830, 0x2, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x701c00) ioctl$EVIOCGID(r3, 0x80084502, &(0x7f0000000180)=""/79) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000d40)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000d00)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000a40)=[{0xa, 0x0, [0x1ff, 0x4, 0x7, 0x503, 0x4, 0x7, 0xffffffff, 0xa, 0x2, 0x86d, 0x9, 0x83f, 0xee, 0x60, 0x689, 0x8000]}, {0x2, 0x0, [0x80, 0xfffffffd, 0x100, 0x0, 0x4, 0x7, 0x6, 0x5, 0x8, 0xae4d, 0x69544143, 0xfffffffd, 0x2, 0xffffffff, 0x8001, 0x6]}], r4, 0x1, 0x1, 0x90}}, 0x20) syz_clone(0x289a2400, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000002b40)='cubic', 0x4) 1m19.048322167s ago: executing program 5 (id=400): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000180)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@quota}, {@test_dummy_encryption_v1}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") r0 = syz_usb_connect$midi(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x4c4, &(0x7f0000000c00)={{0x12, 0x1, 0x310, 0x87, 0x3e, 0xd3, 0x38, 0x6cd, 0x107, 0x8d22, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b2, 0x2, 0x3, 0x2, 0x0, 0x45, "", [{{0x9, 0x4, 0xcb, 0xb, 0xc, 0x49, 0x59, 0xec, 0xc9, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0xa}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "d688b1c0e919"}, {0x5, 0x24, 0x0, 0x401}, {0xd, 0x24, 0xf, 0x1, 0x100, 0x81, 0x79, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x4}, [@obex={0x5, 0x24, 0x15, 0xb444}, @obex={0x5}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x100, 0x99, 0x6, 0x8, 0x44e, 0xaf}, @dmm={0x7, 0x24, 0x14, 0x3, 0x100}, @mbim_extended={0x8, 0x24, 0x1c, 0x100, 0x1, 0x8}]}], [{{0x9, 0x5, 0x80, 0x0, 0x10, 0x6, 0x5, 0x81, [@generic={0x1a, 0x8, "105fc021ed430bb15b0a09819b3d3e4e0ebdf85ca0084a41"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0xa, 0xf8, 0x2, [@generic={0xf2, 0xb, "15fd5b334ec3a583a9b44a68c1846920c4a80464a87bcdf4dbf0cc90a19533e94fc8d36afd307642b4c0fceedeb36b1c617c296bcf9548ceda0f9bd86ddde1a7163d88db2600899785d9bef1a35b17d0b6e14d4e521aa5a1c332b1e2ee03e0b61d6174dc42bb11377374d874fa76101426c90ceea1392bdd3dd02f6a7054b1d229c2bc63ef76e8080bc0916c260e99ae1011c6b696810f27ed50b0bd6078e97e9e412ecce48c32db5594758227f647a3a6c3caa2d410c752b49b766e898fd2e64f355c441aca506fa2d1c903d4143b0c56c42935e67f802e1e186ea20ea4205d5e2de260c26213548a848ade476bf53a"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x10, 0x19, 0x29, 0x9c}}, {{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x2, 0x7}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x5, 0x24}}, {{0x9, 0x5, 0x6, 0x10, 0x10, 0x4, 0xd, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xa}]}}, {{0x9, 0x5, 0xd, 0xc, 0x40, 0x2, 0xa8, 0x2, [@generic={0x3d, 0x1, "30b3a32656a1aae73dbe2a02d6d0b590daa4580c13cbce8bc0148c89c7e983ad825c511dbc48e8081f5d3563c08ae0d568b4a80ff58866c1fb05b0"}, @generic={0x48, 0x31, "3e4fdc9437b9c65d9afea924cefc2d9a80d662d99390cf7e6a94a450a2462785153436b42d7893448021f4c123e7a35961bb27a8f7718c7d9b9911f84ad5523e865ebc4d4277"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x460, 0x3, 0x3, 0x3, [@generic={0x42, 0xe, "fc8188403ce67f00d98cb1c4aaae70db7d07da4a3da42e8c1b7f8b3ee0181b3b1229323b4748beec35db999790798daf319bc53dc0d208bbe197bfc0cfc481c7"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x4e}]}}, {{0x9, 0x5, 0x80, 0x4, 0x400, 0xc, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x51, 0xa}]}}, {{0x9, 0x5, 0x5, 0xc, 0x410, 0x6, 0x0, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x1, 0x7}}, {{0x9, 0x5, 0x0, 0x10, 0x400, 0x3, 0xf, 0x1, [@generic={0x6, 0x7, "fd288297"}]}}]}}, {{0x9, 0x4, 0x6, 0xef, 0x5, 0xa, 0x24, 0x23, 0x6, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x42}, [@processing_unit={0xd, 0x24, 0x7, 0x1, 0x3, 0x8, "78437411e8cd"}, @output_terminal={0x9, 0x24, 0x3, 0x5, 0x400, 0x5, 0x2, 0x82}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x7d}, @extension_unit={0x9, 0x24, 0x8, 0x4, 0x3, 0x0, "f85e"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x401, 0x2, 0x2, 0x40}, @selector_unit={0xb, 0x24, 0x5, 0x3, 0x6, "0b9087f91c16"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x20, 0x5, 0x15, 0x81, [@generic={0xc9, 0x5, "d2ce5a8849f85a5025339db6089f1e72360824c780920f50500cf594f7bb976fb2b9121710e56b1defaab020f6d63521e41c2f39c9c45dceab90b95116e81c0f68e70a8e795bd2d84827cdab32465ab6b409348fcf17c49f7eb5239e7284c0cbe0d4289eb87fd648c586eb1e2ba5154335e5e9ed616107caed9f76eb52658fee691910aa56d5cefdcea471c0187776948e81d9cbd0d21eac13f68a02df0070fbe4713f3d113f29a8ca376fdb69275fb17d9bb32138dca7cfe3a4fcc30bb4beecc496129c06859c"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x4, 0x5390}]}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x4, 0x6, 0x5c}}, {{0x9, 0x5, 0x1, 0x1, 0x400, 0x2, 0x10, 0xe3}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xfc, 0x80, 0x3, [@generic={0xa0, 0x5, "f27cae0a08b5da30d87c1721a5ab1903c28b5061383de695dfe52c8199fd55a1fa0909199b8c73c8e0b7a997010f990dfdca87333a232d48c1cfbafada4a3f1f1f2756a264637641142d73cd3304f36f36f473bd7ed4b2d00c5748f769c853e69137f9da6b5ce27af78ed447a8dc5e25eb732898e9fa4d30eb38b59db76d1ddb203c21fb80356f533352cffaa30df528ed0b71490c6e3c5b2a9cdba4776b"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xbd}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3ff, 0x9a, 0x10, 0x7}}]}}]}}]}}, &(0x7f0000001200)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x250, 0x0, 0x6, 0x2, 0x20, 0xf5}, 0xf, &(0x7f0000001140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x6, 0x7, 0x600}]}, 0x2, [{0x2a, &(0x7f0000001180)=@string={0x2a, 0x3, "e615960b0c411d29de86d2be31f35703a9278bd294978f6149b8e8521b8ea1f5851fa3eddc4060d1"}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x409}}]}) syz_usb_ep_read(r0, 0x0, 0xcf, &(0x7f00000007c0)=""/207) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, &(0x7f0000000240)={0x0, 0x24, 0xf7, {0xf7, 0xb, "15b047ff175e389d96680de880a2ee4f69a30a27ff89e495e4e05a907e3c3d286ea65a1e43ac0d211aecdb77cdac28c366308ce936971ac9558a5142c9323c9dd92ed004d640cd85d9127f48861cabcc4a8f7be9ef575068d7807213d0491256558b6b3d940ae4cf43f9facac612166c490c629b65cb5ae82bfc3ccfcca620b43eb51164afa7cc37a8b7f7532e7b292b9d7d86541d40f3902653c64167acad57e966dd8e8e408f155c1f52fafb035bc10daf783f21aa1317dd9149f899c0b7b29b019d43283c952fc45c568b541ee768667c9e4a6cbfa3790223919113593c96e24cdc3e3e34610a8a82b466337732a1d2490a89de"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x100c}}}, &(0x7f0000000600)={0x44, &(0x7f00000003c0)={0x40, 0x189e0113847bd211, 0x78, "4242d07830cc76fcd497f5f7999d0310247e26805f4feab888c1eeee930cafc0ac9ae99ed4b141f80f2ab2afd1bcaca7daee4d1562a287974bef36e44171759babbdd2196a4f66c781e21e488019cc4b22525900cb9689567e7492074cefdf596e216efd2b2b975c481553dd91a4227453565c2de4819406"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000004c0)={0x20, 0x81, 0x1, 'R'}, &(0x7f0000000500)={0x20, 0x82, 0x3, "a18eda"}, &(0x7f0000000540)={0x20, 0x83, 0x2, "eaf4"}, &(0x7f0000000580)=ANY=[@ANYBLOB="20060000000000000066"], &(0x7f00000005c0)={0x20, 0x85, 0x3, "a07a2f"}}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.current\x00', 0x275a, 0x0) 1m16.346030048s ago: executing program 5 (id=415): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x70bd2b, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0x9, 0x20000007, 0x5, 0x8}, 0x8, 0x8}, [{0xd, 0x1, 0x6, 0x6, 0xcdd0, 0x1}, {0x2ddae982, 0x1b0db6e3, 0xe2f, 0x1000, 0x10, 0x10}, {0x8, 0x8, 0x6, 0x7f, 0x18, 0xc3c}, {0x2, 0xffff, 0x6, 0x2, 0x4, 0x44}, {0xff, 0x80000000, 0x1, 0x6, 0xfffffffc, 0x4}, {0xc000000, 0x0, 0x2f, 0x4, 0xa1a6f23, 0x1}, {0xd, 0xfffffff9, 0x1b21, 0x6, 0x3, 0x9}, {0x0, 0xd, 0x0, 0x0, 0x2, 0x8}, {0x4, 0x400, 0x0, 0x2, 0x8, 0x6}, {0x8e6, 0x76d, 0x7, 0x4, 0x5, 0x8}, {0x4, 0x6, 0x8, 0xc, 0x1fba, 0x6}, {0x10, 0xd1, 0x0, 0x1, 0x2, 0x8}, {0xff, 0xfffffff7, 0x101, 0x8, 0xd, 0x7}, {0x8, 0xa507, 0x10000, 0x1, 0x85f7, 0x8}, {0x5, 0x6, 0xd5b9, 0x10, 0x4, 0x34}, {0x633, 0xfffffffd, 0x0, 0x2, 0xbf}, {0x2522, 0xd5, 0x3, 0x2, 0x40, 0xfff}, {0xe4b5, 0x0, 0xff, 0x6, 0x2, 0x1c00}, {0xfffffff8, 0x2, 0xa, 0x6d, 0x5, 0x96}, {0x1, 0x2, 0xb, 0x10001, 0x10000, 0x9}, {0x80, 0x1, 0x2c, 0x1, 0x3, 0x2}, {0x8, 0x7, 0xd5f, 0x9, 0x1, 0x200}, {0x1000, 0x8000, 0x200, 0x0, 0x4, 0xfff}, {0x101, 0xc6a, 0x2, 0x8e, 0x101, 0x6}, {0x2, 0x658e, 0x9, 0xf1a, 0x3, 0x8}, {0x8001, 0x3, 0x7, 0xf0fa, 0xe, 0xc}, {0xff, 0x6, 0x568, 0xff, 0x6, 0x2}, {0x7f, 0x101, 0x0, 0xffff7fff, 0x2, 0x80000000}, {0x7fffffff, 0x7, 0x5, 0x40, 0x8, 0x2}, {0x0, 0x6, 0x5, 0x7ff, 0x80000000, 0x3}, {0x8, 0x9, 0x400, 0x4, 0x821, 0x9}, {0x0, 0xfff, 0xff79, 0x1312, 0x6, 0x145}, {0x73, 0x588, 0x1, 0x5, 0xb81, 0x80}, {0xfffffffa, 0x8, 0xf66, 0x8, 0x8, 0x4}, {0x1, 0x80, 0x3, 0x8, 0xe0000, 0x5c6d}, {0x15f1, 0x7ff, 0xa3a, 0x0, 0x9, 0xfffffffc}, {0xce9, 0x8, 0x267, 0x2, 0x0, 0xf}, {0x9, 0x1c000, 0x80000000, 0x3, 0xd5fd, 0x6}, {0x9, 0x3, 0x1, 0x40, 0x101, 0x46}, {0x6, 0x8000, 0x8, 0x6, 0x80, 0x56}, {0x9, 0xffffff33, 0x2f3, 0x5, 0x80, 0x80000001}, {0x7, 0x2, 0x8c7c, 0xbb, 0x7, 0x10000}, {0x9, 0x2, 0x5f, 0x2, 0xa0, 0x7ff}, {0xcfa9, 0x46, 0x3, 0x8, 0x6, 0xfffffff9}, {0x5, 0x1, 0x8, 0x5, 0x3, 0x7}, {0x9, 0x5, 0xffffffff, 0x5, 0x101, 0xff}, {0x4, 0x82, 0x7ff, 0x1, 0x1, 0x4}, {0x6, 0x5, 0x6, 0x0, 0x39e, 0x6}, {0x0, 0x8000, 0x1, 0x5, 0x46cb, 0x1}, {0xfff7ff80, 0x4, 0xfff, 0x281, 0x7, 0x3}, {0x8, 0x3, 0x400, 0xb, 0x3, 0x9}, {0x80000000, 0x2, 0x1, 0x7, 0x9, 0x3fd84749}, {0x400, 0x5, 0x7, 0x6, 0x4bb, 0xc0000000}, {0x2, 0xfffffff1, 0xce, 0x29, 0x9, 0x7}, {0x2c00, 0x10000, 0x7, 0x80000001, 0x4, 0x7}, {0x7e67, 0xfffffffb, 0x9, 0x3, 0x7, 0x1ff}, {0x2, 0x21ef, 0x200, 0x5, 0x10000, 0xf}, {0x9, 0x6, 0x47d, 0x1, 0x6, 0x1}, {0x7, 0x4d, 0x6, 0xfffff801, 0x5, 0x5940fba8}, {0x2, 0x6, 0x8000, 0x80, 0x1, 0x2}, {0x7, 0xffffffff, 0x3, 0x3, 0xadf, 0x7}, {0x9, 0x3, 0x1, 0xa, 0x0, 0x2}, {0x7, 0x80000001, 0x507, 0x5, 0x2, 0xb}, {0x6, 0xcbaf, 0x2f, 0xfffffff9, 0x8001, 0x1000}, {0x8, 0x2, 0x3, 0xd4, 0x5, 0x4}, {0x1, 0x3, 0x2, 0xedc8, 0x7fff}, {0x1, 0x4, 0x3, 0x0, 0x5}, {0x0, 0x6, 0xb, 0xffff, 0xfffffeff, 0x2}, {0x3, 0x97, 0x3, 0x4, 0x0, 0x2}, {0x9, 0x2, 0x2, 0x40000000, 0x7800000}, {0xcf16, 0x8, 0x2b, 0x3, 0x5, 0x2833}, {0x5, 0x80000000, 0x7fffffff, 0x1547, 0x5, 0x10001}, {0x0, 0x80000001, 0x1, 0x8, 0x1, 0xb039}, {0x6, 0x400, 0x2, 0x6, 0x7, 0x8}, {0x6aa, 0x80000000, 0x80000000, 0x9, 0x7fff, 0x2}, {0x80000001, 0xc, 0x4, 0x10000, 0x0, 0x4}, {0x8001, 0x0, 0x3, 0x4, 0x2, 0x401}, {0x1, 0x9, 0x724, 0x974, 0x0, 0xfff}, {0x9, 0x8b5, 0x8, 0x4, 0x3, 0x2}, {0x9, 0x1, 0x7, 0x0, 0x7, 0x8001}, {0x1000, 0x6a, 0x7, 0x4, 0xfff, 0x5}, {0x2, 0xeb, 0x5, 0xc, 0x3, 0x9}, {0x464f032d, 0xc, 0xfffffffe, 0x8000, 0x3, 0x2}, {0xffff, 0x8, 0x40, 0x8, 0x70e7, 0xfffffff7}, {0x7413, 0x4f, 0x6f76, 0x80, 0x5}, {0x8000, 0x4f7b, 0xfff, 0x8, 0x151f6434, 0x5}, {0x71, 0x8, 0x1, 0x10000, 0x9, 0x6}, {0xcf1, 0x1, 0x7f80, 0x5f45, 0x8, 0x3}, {0xc, 0x0, 0x10000, 0x8, 0xffff0001, 0x2}, {0xfffffff7, 0x9, 0x37b, 0x5, 0x0, 0x3}, {0x8985, 0x6, 0xc0f0, 0xfffffff9, 0x400, 0x2}, {0x9, 0x2, 0x3ff, 0x5, 0x10, 0x8001}, {0x6, 0x0, 0xe, 0x1, 0x4, 0x4}, {0x671, 0x9, 0x3, 0x1, 0x101, 0x1000}, {0x6, 0x9, 0x4, 0xfffffff7, 0x262, 0x9}, {0xd2, 0x5, 0x7fffffff, 0x4, 0xd, 0x1}, {0x400, 0xd0, 0x10000, 0x9, 0x4, 0x7}, {0xc, 0x2, 0x7, 0x9, 0x4, 0x3}, {0x0, 0x0, 0x5, 0x5, 0x7, 0x7}, {0x7ff, 0x28000, 0xe397, 0x3, 0x7, 0xa4f4}, {0x0, 0x0, 0x0, 0x6, 0x7f8, 0xfffffffe}, {0xb, 0x0, 0x7, 0x1, 0x9, 0x101}, {0x10000, 0x3, 0x4, 0x707}, {0x65c973f7, 0x6, 0x0, 0xffffffff, 0x8, 0x5}, {0x10, 0xa, 0x0, 0x6, 0x4, 0x2}, {0x0, 0x2, 0xff7, 0xa2c1, 0x7, 0x2}, {0x8001, 0xfffffffe, 0xff, 0x7c1, 0x4, 0x3}, {0x7fff, 0x10, 0x80000000, 0x1, 0x7, 0x2d}, {0xb8cc, 0x9ec4, 0x9, 0x5, 0x3, 0x9}, {0x0, 0x2, 0x9, 0x5, 0x10}, {0x6d, 0x7, 0x4, 0x4, 0x4917be32, 0xd9}, {0xde4a, 0xc61, 0x8001, 0x669b, 0x744, 0x80000000}, {0x7fffffff, 0x1, 0x8001, 0x5, 0x2, 0x9}, {0x8000, 0xfffffff7, 0x8, 0x3, 0x9, 0xa4b}, {0x3, 0xb, 0x5, 0x13, 0x4}, {0x2, 0x1, 0x80, 0x18, 0x2, 0x4}, {0x8, 0xfffffff9, 0x7fff, 0xc63c, 0x7, 0x10001}, {0x8, 0xba72, 0xffff59b7, 0x6, 0x800, 0x3}, {0xfffffffe, 0x240, 0x80, 0x5, 0x6, 0x7f}, {0x3, 0x8, 0x6, 0x6, 0x5, 0xe}, {0x200, 0x101, 0x7, 0x0, 0x10c870f1, 0x952b}, {0x7ff, 0x100, 0x7, 0x9, 0x5, 0x1}, {0x9, 0x8, 0x7, 0x8, 0x5, 0x7fff}, {0xd, 0x0, 0x9, 0xcbe, 0x8, 0x24}, {0x6bfdbcf7, 0x7, 0x10000, 0xfffffd70, 0x7, 0x80000000}, {0x0, 0x7, 0x6, 0x7, 0x6, 0x133000}, {0x1000, 0x5, 0x0, 0x5, 0xbbd, 0x5}, {0x3, 0x676c, 0x4, 0x800, 0x5, 0xf6}], [{0x4}, {0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x2}, {0x3}, {0x4}, {0x2}, {}, {}, {}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3}, {}, {0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0xee30a25fe8e126a9}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x0, 0x1}, {0x1}, {0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x1, 0x2}, {0x1}, {0x7}, {0x2}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x8, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {}, {}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x5, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4018, r0}, 0x18) 1m15.991193695s ago: executing program 5 (id=418): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x800) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x14, 0x1, 0x70bd28, 0x25dfdbff, {0x1, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2400a051}, 0x44000) r1 = socket(0xa, 0x5, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000000)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@init_itable}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0) close(0x4) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c0000000206010300000000000000000000000009000200737970300000000005000100060000000500050000000000050004000000000014000780080011400000"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, 0x0) ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000000)={0x101, 0x2000003, 0x1758}) 1m15.409224919s ago: executing program 5 (id=420): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x482, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100), 0x21c004, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m15.312696651s ago: executing program 5 (id=421): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x10000a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000001200000004080000", @ANYRES32, @ANYBLOB="001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000140)={0x7ff, 0x6}) setuid(0xee01) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x8, 0xff, 0x7ff, 0x2, @local, @remote, 0x700, 0x1, 0x6, 0x4}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 1m0.034800544s ago: executing program 35 (id=421): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x10000a, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d100000095"], &(0x7f0000000880)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100, 0xc0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1400000004000000040000001200000004080000", @ANYRES32, @ANYBLOB="001600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000000240)=0xc) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f0000000140)={0x7ff, 0x6}) setuid(0xee01) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r5, 0x29, 0x8, 0xff, 0x7ff, 0x2, @local, @remote, 0x700, 0x1, 0x6, 0x4}}) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 10.334466939s ago: executing program 8 (id=541): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x1, 0x9, 0xffa4, 0xbfd, 0x5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89Z\x99\xb0\x12\xdd\xb2FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xa3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]', 0x3cebe43b0ac7184a) r3 = dup(r2) write$binfmt_elf64(r3, &(0x7f0000000a00)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xef, 0x7f, 0x7, 0x23e, 0x3, 0x3e, 0x5, 0x128, 0x40, 0x2ea, 0x3, 0x5, 0x38, 0x1, 0x6, 0x4eb1, 0x400}, [{0x3, 0x7d, 0x7ffffffffffffffc, 0x8, 0x5, 0xb}]}, 0x78) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x82800000, &(0x7f0000000000), 0x0, 0x0, {0x4103d}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94, {r3}}, 0x58) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r4 = perf_event_open(&(0x7f0000000680)={0x1, 0xdc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, r0, 0xa) syz_emit_ethernet(0x76, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f4a30000403a01fe8000000000000000ff02000000000000000000000000000104009078000000066cf6cd53ffff3cfffe800000000000000000000000000035fe8000000000000000000000000000aa2f0004000328020013d86558da0a7f6b"], 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000500)={@ipv4={'\x00', '\xff\xff', @remote}, 0x2, 0x0, 0x3, 0x1, 0x2, 0x200}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r4, 0x4008240b, &(0x7f0000000980)={0x2, 0x80, 0xff, 0x2, 0x2, 0x7, 0x0, 0x3, 0x1, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000140), 0x9}, 0x101, 0x7, 0x9, 0x2, 0x80000000, 0x5, 0x5, 0x0, 0x344, 0x0, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x88ce359bdb08143e, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448dd, &(0x7f0000000300)) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x80880, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 8.891879141s ago: executing program 0 (id=542): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x2) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r0, &(0x7f0000000200)=""/171, 0xab) write$ppp(r0, &(0x7f0000000380)='\nr', 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x5) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000180)={0x242, 0x1008, 0xfbfbfffd, 0x7ffffffc, 0x0, "1fb73a6900f4ff000000000000d3861000", 0x2, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7e}]}, &(0x7f00000005c0)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f0000000a40)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x1, 0xaaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x9}, 0x0, 0x934, 0x0, 0x0, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8, 0x6, r2}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x0) mlock2(&(0x7f00005ee000/0x2000)=nil, 0x2000, 0x1) r5 = socket(0x840000000002, 0x3, 0xff) connect$inet(r5, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x3, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4007, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d40)=ANY=[@ANYBLOB="140000001000010000000f00000000000000000a20000000000a05000000000000000000070000000900010073797a3000000000c8000000090a010400000000000000000700000108000a40000000000900020073797a31000000000900010073797a300000000008000540000000041c000980100002800c0001800800014000000002080001400000ff"], 0x110}, 0x1, 0x0, 0x0, 0x8840}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) getpeername$packet(r5, 0x0, &(0x7f0000000080)) 8.638029047s ago: executing program 6 (id=543): mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000007, 0x48033, 0xffffffffffffffff, 0x40000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000100000006"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b70400000000000085000000c300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r2, r1}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="00020000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000c3000000950000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2, r1}, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_setup(0x1000, &(0x7f0000000580)) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) 8.05881659s ago: executing program 8 (id=546): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000240)={{r0, &(0x7f0000000040)='\x00', 0x80080, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x1]}, {0x100, 0x81, 0x7a6, 0x1ff}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0xfff}, 0x0, &(0x7f0000000200)}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', 0x0}) r2 = creat(&(0x7f0000000140)='./file0\x00', 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=ANY=[@ANYBLOB="4400000010000b0500000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="07030500eba20200140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="197b42033464ebe2e16cbd23fee8f35c2a014beaac8f0287fe0d5a524ffafaebfacc30dd0337217d02b77d0fe456f0be0db1ddb0633be5f873228bc5c5afe502cd8bdf5d173e74fa2c402f7230aedbe95396daa1e1bf1fa98cbfea685fd336d372389c24718f8c8f2feff7158399d1f8b9809fd2d268efec7415e82ececd4f4ac7a1ceeac96fb0fe7f0275e407914bea18ea1e88e6e730bb2e4894eb2ea36cde230c05eef84a37c20a0b7bb1d9fedbe672a2856e16f29867e480ddbc5e83a5a933f8639ac257"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) stat(&(0x7f00000007c0)='./mnt\x00', 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') preadv(r6, &(0x7f00000011c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1, 0x200000, 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) file_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x102f) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x2000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x40000) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', 0x0, 0x400, &(0x7f0000000140)=ANY=[]) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40e8662e, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000002b00090527bd7000fcdbdf25021f00ff60ad6a60e42f3eb53d2a4aee1e2fe67f037d72390979a1c7d66bff8967a7d084bca5df85e1164d07340035f57e675cb7afa120499461", @ANYRES32=r1, @ANYBLOB="14000300766972745f776966693000000000000008000200640101000800090002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$setflags(r0, 0x2, 0x1) 7.951829612s ago: executing program 0 (id=547): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 7.911516393s ago: executing program 2 (id=548): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x1fffa2}], 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x80000001) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r7 = syz_open_dev$sg(&(0x7f0000000540), 0xb4, 0x42) ioctl$SG_IO(r7, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x0, 0x5, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x3, 0x2, 0x2, 0x0}) ioctl$SCSI_IOCTL_SEND_COMMAND(r7, 0x5393, &(0x7f00000001c0)=ANY=[]) 6.324860578s ago: executing program 2 (id=550): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x2, 0x7}, 0x0, 0xd6f7, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ptrace(0x10, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x8c, 0x100) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') close(0x3) ftruncate(r0, 0x4a8e) syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x9}, 0x400, 0x0, 0xfffffffc, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r1, 0x2000000) pread64(r1, 0x0, 0x0, 0x9) socket(0xa, 0x3, 0xfb) memfd_create(&(0x7f0000000a40)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\x1cKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\v\x15\xa8\f1\xa0\xfb\x87M\xfb\xd3\xd7d\xb2\x90\xfer\fu\xb9Y5\x9f\x17\xab\xbc\x01>\x87\xc6\x8bh\xd7\x16\xd9\xa9\xd5\xf2l\xb0\x11J\xa5\a\x8c\x02\xacR+\x15\x9b\x95-\xbdL\xf3\x90\x8aP(\xdd\x15\xe0\x89+\xedz_\xae\xf8\x98B;\xcc,\xfb\x7f\x00]\x95\\\xb5\x8c01g\xce\xba\x13\x7f\xdc\x82N\xad\xeft\x01&\x88\xd4\x90\b\xf8\x81\a\x9c\xb8p\xf7\xa9\xc1;\xd2v\x87#\xb4\x80\x9b\x8f\"\xc1\x1e\x12\xa8\xc8\xaf\xf8\xb2p\x12\xd2\xabU<\xdeV\x88\x9f\xd2xC:3\x96\xb7[C\xe8n\xbf\x11v\xd9AM\xdb\x18\xd2\x84\xa3FixF\xb0\x10\x89j8=\xf0\xdc\xaa\xbd\xd54J\x05\x05\xc1gQ\xe7Y\xd0X,\xe65\xbb9\xc4\xc4\x87|\xb1\xf8dq\xdf~\xd2\x8d\xdbN\xfe\xcd\x1d\x86\t_\xbbU\x86\x1af\xc8,\xeeE\xbd1\xdb\xa4\xc8\x16p\xbd\xc7\xbd\xe8\x84G\x13 *~\x1b', 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) geteuid() mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) lsetxattr$trusted_overlay_nlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180), &(0x7f0000000200)={'U+', 0x8001}, 0x16, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r4, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10004}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6.27817499s ago: executing program 0 (id=551): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1103, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0xa424, 0x0, 0x3, 0x5, 0x4, 0x6fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) cachestat(r1, &(0x7f0000000100)={0xfffffffffffffffa}, &(0x7f0000000280), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800763e7f41ffce0000b704000000000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r6, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r6, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r6, 0x0, r5, 0x0, 0xfea8, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0x0, 0xfffffffffffffdf3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f00005aa000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 5.928516458s ago: executing program 2 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1103, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0xa424, 0x0, 0x3, 0x5, 0x4, 0x6fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) cachestat(r1, &(0x7f0000000100)={0xfffffffffffffffa}, &(0x7f0000000280), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800763e7f41ffce0000b704000000000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, r4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3ff}, 0x10ecc8, 0x6, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f00005aa000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 5.829765649s ago: executing program 6 (id=554): r0 = socket$inet6(0xa, 0x1, 0x0) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, 0x0, 0x1c0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830c}, 0x19188, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c1}, 0x4041080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x15) openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000840) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x7, 0x1, 0x3, 0x40, 0x7f, 0x8, 0x36b8, 0x7, [{0x8001, 0x0, 0x6f0, 0x7}, {0x7, 0x100, 0x7e, 0x9}, {0x7, 0x5, 0x400, 0x5}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) socket$inet_sctp(0x2, 0x1, 0x84) 5.688495283s ago: executing program 8 (id=555): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 5.521798117s ago: executing program 8 (id=556): socket$nl_route(0x10, 0x3, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x6) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xd}, 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007da000/0x4000)=nil, &(0x7f00009fa000/0x3000)=nil, &(0x7f000033d000/0x1000)=nil, &(0x7f0000151000/0x2000)=nil, &(0x7f0000906000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000ea000/0x9000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb0, 0x1c080, 0xe, 0x20002f4}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x2800, 0x0, 0x0, 0x8, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) syz_open_procfs(0x0, &(0x7f0000000280)='mounts\x00') r5 = msgget$private(0x0, 0x790) msgsnd(r5, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0x401, 0x0) r6 = fsopen(&(0x7f0000000100)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) msgctl$IPC_SET(r5, 0x1, &(0x7f0000001000)={{0x0, 0x0, 0x0, 0x0, 0xee01, 0x0, 0x7}, 0x0, 0x0, 0xc7af, 0x4, 0x7fff, 0x7fffffff, 0x5, 0x180, 0x8, 0x401}) 5.409376529s ago: executing program 6 (id=557): r0 = socket$inet6(0xa, 0x1, 0x0) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, 0x0, 0x1c0, 0x0) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830c}, 0x19188, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c1}, 0x4041080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$inet(0x2, 0x3, 0x2) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[], 0x15) openat(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a115000100ff00142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x4000840) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x7, 0x1, 0x3, 0x40, 0x7f, 0x8, 0x36b8, 0x7, [{0x8001, 0x0, 0x6f0, 0x7}, {0x7, 0x100, 0x7e, 0x9}, {0x7, 0x5, 0x400, 0x5}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x27, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x8, 0x8, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @loopback={0x300}, 0x0, 0x20, 0xb05, 0x8}}) socket$inet_sctp(0x2, 0x1, 0x84) 5.402352249s ago: executing program 0 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x0, 0x130, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) ioprio_set$uid(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x78) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e2b, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x20044800, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x32, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x10}, 0x94) socket$inet(0x2, 0x2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) unshare(0x44040200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 5.36738409s ago: executing program 2 (id=559): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000300), 0x1}, 0x0, 0x7, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x4040090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYRESHEX, @ANYRESHEX=r1], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) fstat(r0, &(0x7f0000000440)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x403, 0x58bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) fchdir(r5) sendmsg$NL80211_CMD_GET_MPP(r10, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r11, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}}, 0x20004040) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.239720993s ago: executing program 7 (id=560): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_flowlabel\x00') ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0xc0105500, &(0x7f0000000040)=ANY=[]) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000280)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000240), 0x40800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000694000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000005000/0x1000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7043, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty, 0xe1eb}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r4}, 0x20) r5 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x1c1300) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, 0x0) ioctl$MON_IOCT_RING_SIZE(r5, 0x9204, 0xd944b) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000340)=0x200, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, @in6={0xa, 0x4e21, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}], 0x38) r7 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0xa9084, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x82}, 0x10c2b8, 0x109, 0x3, 0x0, 0x6, 0x7ffe, 0x7fff}, 0x0, 0xff6fbffffffffffc, r0, 0x1) rt_tgsigqueueinfo(0x0, 0x0, 0x25, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0xf8180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10000, 0x1, 0x7, 0x4, 0x6, 0x7, 0x7fff}, 0x0, 0xff6fc00000000001, r7, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r8, 0x0, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.107498326s ago: executing program 6 (id=561): socket(0x1d, 0x5, 0x3c1) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x100000000000f68, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002001100000008000a0001"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) close(0x3) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa090000000000000000000000000000000000000000000000000000000000000000ae00"/483], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0x40, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r7}, 0x10) 4.179586706s ago: executing program 2 (id=562): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x200000c0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r3, 0x0, 0x0, 0x30, 0x0, @in6={0xa, 0x4e23, 0x1, @empty, 0x5}, @ib={0x1b, 0x0, 0xc, {"7d735931001016095e000303ff010001"}, 0x4, 0x3}}}, 0x118) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'vlan1\x00', @random="1d8fcb3f5c75"}) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) fstatfs(0xffffffffffffffff, 0x0) r4 = add_key$keyring(&(0x7f0000000540), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r4, 0x1) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f00000000c0)={0x8, 0x6, 0x10001}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'lo\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000000300)={[{@dots}, {@nodots}, {@dots}, {@fat=@nocase}, {@fat=@debug}, {@nodots}, {@dots}, {@fat=@quiet}, {@fat=@showexec}, {@fat=@sys_immutable}, {@fat=@dmask={'dmask', 0x3d, 0x8c8}}, {@fat=@fmask={'fmask', 0x3d, 0x3}}, {@fat=@time_offset={'time_offset', 0x3d, 0xa8}}, {@dots}, {@dots}, {@fat=@errors_continue}]}, 0x1, 0x23d, &(0x7f0000000a40)="$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") r8 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r8, 0x10001, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r5, 0x28, 0x1, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e1d, @loopback}}) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0xa) 4.120742678s ago: executing program 7 (id=563): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 4.062525459s ago: executing program 6 (id=564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x9, 0x8, 0x40, 0xc0, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1103, r0}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x10000}, 0x1080e8, 0xa424, 0x0, 0x3, 0x5, 0x4, 0x6fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) cachestat(r1, &(0x7f0000000100)={0xfffffffffffffffa}, &(0x7f0000000280), 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x2, r0}, 0x38) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, &(0x7f0000000040), 0x0}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x31) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000080000a8c5000000a5000000180100002020640500000000000400007b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800763e7f41ffce0000b704000000000000850000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x10000000013, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_int(r5, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r5, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0xfea8, 0xa) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x3}, 0x100e64, 0xc7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, r4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x3ff}, 0x10ecc8, 0x6, 0x0, 0x8, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mremap(&(0x7f00005aa000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffb000/0x4000)=nil) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x3f, 0xe, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) 3.893423383s ago: executing program 7 (id=565): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) shutdown(r0, 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000001540)={{r0, &(0x7f0000000000)='{+!(/:\x00', 0x5400, &(0x7f0000000040)={@align=0xc, {0x8, 0x401, 0x0, 0x4}}, 0x28, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x8000}, 0x5, &(0x7f0000001480)=[{0x3, 0x2, &(0x7f0000000140)='}!+\',#-^[\x00', &(0x7f00000001c0)="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", 0x1000, 0x8}, {0x2, 0x6, &(0x7f00000011c0)='@\x00', &(0x7f0000001200)="cf2488e3dc1ad0686dc3", 0xa, 0x10}, {0x3, 0xffffffe1, &(0x7f0000001240)='\xc3!+^$!+\x00', &(0x7f0000001280)="e10b495532723328677e9ef518c6a78005e3bcad3108e6bf91532922096dffd88e88c4770764994a4ae361e789a9a600e2f67b318e6c5bb8c1979cd8b9d8db6352d5c3ef5371fb7a7105ac78bcb566cf8eb573205ab2faee0d876cf1c0ad4c0f132de4ac", 0x64}, {0x1, 0x3, &(0x7f0000001300)=')[+[,\x00', &(0x7f0000001340)="70a5a46170f9abcf54523dca1a2bacea6884207f613ac1f1e1ed00b864f359", 0x1f, 0x10}, {0x3, 0xe, &(0x7f0000001380)='\\\x00', &(0x7f00000013c0)="e144a51d4a4693cadb1fb60deaf10bb25686122e84ab38c835ca27dd2f47d2cb0dfee407bbf8f7004a3144bfba3582e15b4d5f9e772be24c5a3545751098ca659e5a30dc86a7e8c3c14958d7bef3b460ee134b2e7eb0386d3ab1e1d77c6e92deac539e20a12ea6e30be04aa3f65b44e38c093e6436dc9082d80fb034f02fb00167867784f01a41b30b5a386913f8be11d334e700108fa90b63c77f653fcabc5e5f532b1621ca22b0a3d7f48a6e9de0b6594d99203db94a1b8035f4e7", 0xbc, 0x10}]}) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f00000015c0)="fab3b9e857bb7c305f4593a6b5e852bb9301d01c5c29d2b799d3f6de95d76db3f076bdd47fbc1b876bd79a707f4ea2fa7a040f180211a16dc103b793ffd76b10fa7e2f157fbdfff3e7107fa4f14c6ed739a739fe98876d8dd5a2c67ade0bcef121ed6d563e83617088fa921793f4fcfc1e24686d8f8e6c8c7443e9b28ee43b4743b352882dd151fcf76bbd37d4125aca09d5a875751c18fe5c65f32079f505534f03a5790c") recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.757709986s ago: executing program 7 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0xffffffffffffffff, 0x1, 0x5002) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) getrlimit(0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x1) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x2, 0x1, 0x7, 0x1}, 0x10) syz_usb_connect$rtl8150(0x6, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect$rtl8150(0x7, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x4, 0x2, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0xffffff80}, r0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) 3.60054678s ago: executing program 2 (id=567): syz_emit_ethernet(0x92, &(0x7f0000000200)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x84, 0x65, 0x0, 0xff, 0x1, 0x0, @rand_addr=0x64010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x6, 0x101f, {0x1a, 0x4, 0x3, 0x14, 0x7ff, 0x68, 0x1ce2, 0xd9, 0x2f, 0xe5c, @broadcast, @multicast2, {[@lsrr={0x83, 0x1f, 0xb1, [@loopback, @multicast2, @multicast1, @multicast2, @remote, @local, @rand_addr=0x64010100]}, @timestamp_addr={0x44, 0x34, 0x4c, 0x1, 0x0, [{@multicast2, 0x9}, {@loopback, 0x5}, {@loopback, 0x20005}, {@loopback}, {@remote, 0x1}, {@multicast2, 0x4}]}]}}}}}}}, 0x0) r0 = socket(0x11, 0xa, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) fcntl$lock(r1, 0x5, &(0x7f0000000040)={0x0, 0x1, 0x8000000000010001, 0x5}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x17, 0x114, 0x2, {0x6, 0x6}}], 0x18}, 0x0) pidfd_getfd(r2, r3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0xfc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x3}, 0x15) openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) epoll_create1(0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) mount$tmpfs(0x0, &(0x7f0000000140)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=prefer=']) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0, 0x1d}, 0x8, 0x0, 0x0, 0x8000}, 0x20000) 3.361314715s ago: executing program 0 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x14, 0x0, 0x130, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x8000) ioprio_set$uid(0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x78) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) sendto$inet6(r7, 0x0, 0x0, 0x20044800, 0x0, 0x0) recvmmsg(r2, &(0x7f0000003b80)=[{{0x0, 0x32, &(0x7f00000003c0)=[{0x0}, {0x0}], 0x2}, 0xec}, {{0x0, 0x0, 0x0}, 0xe8c0}], 0x2, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000580), r6) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000340)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x4}, 0x10}, 0x94) socket$inet(0x2, 0x2, 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) unshare(0x44040200) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.510522357s ago: executing program 8 (id=569): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00', 0xfffffffc}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) 246.374935ms ago: executing program 7 (id=570): r0 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003040)={0x54, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x40, 0x12, 0x0, 0x1, [@nested={0x3c, 0xd5, 0x0, 0x1, [@nested={0x35, 0x10e, 0x0, 0x1, [@generic="ff9ad47e6df35f650242063738c06f7a76a8a040324d3b33e3", @typed={0x8, 0x120, 0x0, 0x0, @pid}, @generic="72851876fffd253718cb7b6366fbab0f"]}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x40000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 190.461796ms ago: executing program 8 (id=571): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1005e2, 0x2, 0x4, 0x0, 0x2, 0x1ff}, 0xffffffffffffffff, 0x0, r1, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a40)=@delchain={0x2c, 0x65, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x3, 0xfff2}, {0x9, 0xffe0}}, [@TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x4dc0, 0x9c080, 0xa, 0x1b1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0xfffffffffffffffc, &(0x7f0000000340)=0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000001c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@quota}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x9}}, {@barrier}]}, 0x1, 0x558, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) fstat(r7, &(0x7f0000000700)) 14.56676ms ago: executing program 0 (id=572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$tipc(0x1e, 0x2, 0x0) timer_create(0x2, &(0x7f0000000180)={0x0, 0x4, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020851000000300000018000000000000000000000000000001950000000000000018010000202078250000000000201c007b1af8ff00000000bfa100000000000017010000f8ffffffb702000008000000b50afdffffffeffe850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xc}, 0x94) mremap(&(0x7f00003ef000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r5 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r5, 0xc0606610, 0x0) timer_settime(r4, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timer_gettime(0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r7) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000020775ac717b4ca8b2195d5c489269576fe8416a5a6713314543d0400000f4287fe09634615beda016db937db94a324526eb85c98a09e8fd1fd8db75daed8f767d3b7af0e9f6ed1485d6b838f13f1f0d0f75e43617daf11f5dcd3136e1984bc1f8000ffb9bbf46f296c9d1fe9119621373058", @ANYRES16=r8, @ANYBLOB="01002dbd7000ffdbdf250700000014000180060001000a0000000500020003000000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r12, {0xf, 0xffff}, {}, {0xfff2, 0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0400010400000800020001000000e6af701e1d483a3fffffffff08000300284d9604f376230e48c3824bac00020000000000000000000500050008000000eaff00"/78], 0x48}, 0x1, 0x0, 0x0, 0x20004001}, 0x48005) ioctl$TCSBRKP(r6, 0x5425, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x6}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}]}}]}, 0x40}}, 0x20000000) 6.13466ms ago: executing program 6 (id=573): socket(0x1d, 0x5, 0x3c1) socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0x100000000000f68, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x32a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="1709000000000000000001000000050007000000000008000900fffffffe060002001100000008000a0001"], 0x58}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a32000000001400000011"], 0x94}}, 0x0) close(0x3) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0xffffffff, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa090000000000000000000000000000000000000000000000000000000000000000ae00"/483], 0x610) r6 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r7, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) openat(0xffffffffffffffff, &(0x7f0000000280)='./cgroup\x00', 0x40, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r7, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r8, 0x0, r7}, 0x10) 0s ago: executing program 7 (id=574): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x9}, 0x0, 0x2, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_pidfd_open(0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000086a05b400000000000001090224000100004020090400290203"], 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x14008010) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r4 = epoll_create(0x4) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100200000000800000807000000", @ANYRES32=r6, @ANYBLOB="000000000000000014001a80100004800c000a800800020000000000"], 0x34}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000200)={0x40002022}) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x1b78, &(0x7f0000000100)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r9 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) r10 = dup(r3) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x3, 0x0, 0x0) close(r2) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x1c}}, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.111589][ T3957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.121207][ T4096] lo speed is unknown, defaulting to 1000 [ 48.224919][ T4096] lo speed is unknown, defaulting to 1000 [ 48.232659][ T4142] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.269892][ T4142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.302684][ T4096] lo speed is unknown, defaulting to 1000 [ 48.345725][ T4096] lo speed is unknown, defaulting to 1000 [ 48.377413][ T4142] netlink: 40 bytes leftover after parsing attributes in process `syz.1.148'. [ 48.393209][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 48.393221][ T28] audit: type=1400 audit(1784825277.475:337): avc: denied { write } for pid=4141 comm="syz.1.148" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.487928][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.533196][ T3957] veth0_vlan: entered promiscuous mode [ 48.541118][ T3957] veth1_vlan: entered promiscuous mode [ 48.559089][ T3957] veth0_macvtap: entered promiscuous mode [ 48.566537][ T3957] veth1_macvtap: entered promiscuous mode [ 48.578277][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.589814][ T3957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.600920][ T48] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.609967][ T48] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.623638][ T48] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.633143][ T48] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.660222][ T28] audit: type=1400 audit(1784825277.745:338): avc: denied { mounton } for pid=3957 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.802282][ T28] audit: type=1400 audit(1784825277.885:339): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.828067][ T4158] set_capacity_and_notify: 3 callbacks suppressed [ 48.828084][ T4158] loop1: detected capacity change from 0 to 512 [ 48.847258][ T4160] loop0: detected capacity change from 0 to 512 [ 48.861209][ T4158] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.873833][ T4162] bridge1: entered promiscuous mode [ 48.881921][ T4158] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 48.884181][ T4160] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.900976][ T4158] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 48.913691][ T4158] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.149: Failed to acquire dquot type 1 [ 48.922015][ T4160] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.925280][ T4158] loop1: lost filesystem error report for type 5 error -117 [ 48.935487][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.949229][ C1] EXT4-fs (loop1): last error at time 1784825278: ext4_acquire_dquot:7041 [ 48.961382][ T4158] EXT4-fs (loop1): 1 truncate cleaned up [ 48.978244][ T4158] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 49.033145][ T4158] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 49.092955][ T4172] macvtap1: entered allmulticast mode [ 49.100140][ T4172] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 49.107674][ T4172] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 49.116152][ T4172] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 49.118038][ T28] audit: type=1400 audit(1784825278.205:340): avc: denied { write } for pid=4159 comm="syz.0.150" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.146556][ T4172] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 49.146714][ T28] audit: type=1400 audit(1784825278.205:341): avc: denied { add_name } for pid=4159 comm="syz.0.150" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.177064][ T3624] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 49.241685][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.429314][ T28] audit: type=1400 audit(1784825278.515:342): avc: denied { map } for pid=4181 comm="syz.0.157" path="socket:[6629]" dev="sockfs" ino=6629 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.480201][ T4184] loop0: detected capacity change from 0 to 1024 [ 49.491835][ T4184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.494694][ T28] audit: type=1400 audit(1784825278.575:343): avc: denied { watch } for pid=4185 comm="syz.1.159" path="/33" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 49.526832][ T4184] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.542499][ T4190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.160'. [ 49.550760][ T4184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.158'. [ 49.598713][ T28] audit: type=1400 audit(1784825278.685:344): avc: denied { write } for pid=4183 comm="syz.0.158" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.616041][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.620348][ T4118] Bluetooth: hci0: command 0x1003 tx timeout [ 49.713916][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.739486][ T4206] loop0: detected capacity change from 0 to 128 [ 49.841657][ T4215] loop1: detected capacity change from 0 to 256 [ 49.866971][ T4217] loop1: detected capacity change from 0 to 512 [ 49.873932][ T4217] EXT4-fs: Ignoring removed oldalloc option [ 49.880375][ T4217] EXT4-fs: Ignoring removed oldalloc option [ 49.888396][ T4217] EXT4-fs error (device loop1): ext4_iget_extra_inode:5180: inode #15: comm syz.1.169: corrupted in-inode xattr: invalid ea_ino [ 49.901827][ T4217] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.902291][ T4217] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.169: couldn't read orphan inode 15 (err -117) [ 49.915455][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 49.923508][ T4217] loop1: lost filesystem error report for type 5 error -117 [ 49.929607][ C0] EXT4-fs (loop1): initial error at time 1784825278: ext4_iget_extra_inode:5180 [ 49.930606][ T4217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.936903][ C0] : inode 15 [ 49.936918][ C0] EXT4-fs (loop1): last error at time 1784825279: ext4_orphan_get:1404 [ 50.004430][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.038772][ T4220] netlink: 'syz.1.170': attribute type 11 has an invalid length. [ 51.070586][ T4229] loop0: detected capacity change from 0 to 4096 [ 51.102687][ T4229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.134378][ T4234] netlink: 'syz.2.174': attribute type 1 has an invalid length. [ 51.145589][ T4234] netlink: 224 bytes leftover after parsing attributes in process `syz.2.174'. [ 51.156288][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.205312][ T4238] loop0: detected capacity change from 0 to 1024 [ 51.214820][ T4238] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.246829][ T4238] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.263640][ T4238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.175'. [ 51.378655][ T4256] loop1: detected capacity change from 0 to 256 [ 51.393665][ T4257] loop2: detected capacity change from 0 to 1024 [ 51.401212][ T4257] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.439063][ T4257] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.457936][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.532678][ T4261] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.554112][ T4261] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.556229][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.602233][ T4261] netlink: 16 bytes leftover after parsing attributes in process `syz.1.183'. [ 51.648256][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 51.689451][ T4273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.187'. [ 51.829123][ T4281] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 51.932812][ T4287] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.977131][ T4287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.037220][ T4287] netlink: 28 bytes leftover after parsing attributes in process `syz.2.192'. [ 52.153681][ T4299] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 52.218030][ T4299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.237082][ T4287] syz.2.192 (4287) used greatest stack depth: 10496 bytes left [ 52.280801][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.299273][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.687146][ T4309] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 52.703648][ T4309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=4309 comm=syz.1.197 [ 53.093887][ T4335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.107605][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.121069][ T4335] netlink: 28 bytes leftover after parsing attributes in process `syz.1.206'. [ 53.172070][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.364707][ T4347] xt_ecn: cannot match TCP bits for non-tcp packets [ 53.987764][ T4350] netlink: 12 bytes leftover after parsing attributes in process `syz.5.209'. [ 53.998039][ T4350] netlink: 16 bytes leftover after parsing attributes in process `syz.5.209'. [ 54.039346][ T4350] netlink: 24 bytes leftover after parsing attributes in process `syz.5.209'. [ 54.251216][ T4354] set_capacity_and_notify: 7 callbacks suppressed [ 54.251231][ T4354] loop1: detected capacity change from 0 to 1764 [ 54.919655][ T4358] loop1: detected capacity change from 0 to 764 [ 54.980503][ T4358] rock: directory entry would overflow storage [ 54.986836][ T4358] rock: sig=0x5245, size=8, remaining=5 [ 55.014568][ T4358] lo speed is unknown, defaulting to 1000 [ 55.243674][ T4360] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.250780][ T4360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.370047][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 55.370065][ T28] audit: type=1400 audit(1784825284.455:381): avc: denied { audit_write } for pid=4365 comm="syz.5.214" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 55.434317][ T4368] loop0: detected capacity change from 0 to 256 [ 55.439984][ T4370] loop5: detected capacity change from 0 to 1024 [ 55.455018][ T28] audit: type=1400 audit(1784825284.535:382): avc: denied { remount } for pid=4369 comm="syz.5.218" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 55.482481][ T28] audit: type=1326 audit(1784825284.565:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.508227][ T28] audit: type=1326 audit(1784825284.565:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.534028][ T28] audit: type=1326 audit(1784825284.565:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.565649][ T28] audit: type=1326 audit(1784825284.565:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.591064][ T28] audit: type=1326 audit(1784825284.565:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.617898][ T28] audit: type=1326 audit(1784825284.565:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.643544][ T28] audit: type=1326 audit(1784825284.565:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 55.669397][ T28] audit: type=1326 audit(1784825284.565:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4369 comm="syz.5.218" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f14c6a9de99 code=0x7ffc0000 [ 56.718067][ T4400] capability: warning: `syz.0.227' uses deprecated v2 capabilities in a way that may be insecure [ 56.808254][ T4404] loop5: detected capacity change from 0 to 256 [ 56.898531][ T4406] netlink: 'syz.5.230': attribute type 3 has an invalid length. [ 56.926417][ T4406] netlink: 132 bytes leftover after parsing attributes in process `syz.5.230'. [ 57.033889][ T4411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 57.905762][ T4428] loop5: detected capacity change from 0 to 256 [ 58.096475][ T4425] bond1: entered allmulticast mode [ 58.178702][ T4425] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.356107][ T4429] loop2: detected capacity change from 0 to 512 [ 58.439062][ T4429] EXT4-fs (loop2): invalid inodes per group: 0 [ 58.439062][ T4429] [ 58.637142][ T4458] loop5: detected capacity change from 0 to 256 [ 58.718859][ T4435] lo speed is unknown, defaulting to 1000 [ 59.326129][ T4479] netlink: 168 bytes leftover after parsing attributes in process `syz.0.243'. [ 60.735349][ T4485] loop1: detected capacity change from 0 to 128 [ 60.796413][ T4489] loop5: detected capacity change from 0 to 512 [ 60.827357][ T4489] EXT4-fs (loop5): Filesystem with casefold feature cannot be mounted without CONFIG_UNICODE [ 60.983940][ T1912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.011692][ T28] kauditd_printk_skb: 203 callbacks suppressed [ 61.011708][ T28] audit: type=1400 audit(1784825290.095:594): avc: denied { write } for pid=4490 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.012515][ T4487] loop2: detected capacity change from 0 to 512 [ 61.029581][ T4435] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.130256][ T4487] EXT4-fs (loop2): orphan cleanup on readonly fs [ 61.168407][ T4435] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.176566][ T4435] bridge_slave_0: entered allmulticast mode [ 61.185058][ T4435] bridge_slave_0: entered promiscuous mode [ 61.194923][ T4435] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.202202][ T4435] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.210699][ T4435] bridge_slave_1: entered allmulticast mode [ 61.218865][ T4435] bridge_slave_1: entered promiscuous mode [ 61.297761][ T4487] EXT4-fs (loop2): 1 orphan inode deleted [ 61.341190][ T3298] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 61.355966][ T39] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 61.384749][ T3298] FAT-fs (loop1): Filesystem has been set read-only [ 61.394287][ T4435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.404204][ T39] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u8:2: Failed to release dquot type 1 [ 61.417106][ T3298] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 61.429999][ T4435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.439698][ T39] loop2: lost filesystem error report for type 5 error -117 [ 61.448107][ T4487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 61.477134][ T28] audit: type=1400 audit(1784825290.565:595): avc: denied { write } for pid=4518 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.503792][ T1912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.527358][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.550303][ T4522] netlink: 'syz.2.250': attribute type 3 has an invalid length. [ 61.560774][ T4435] team0: Port device team_slave_0 added [ 61.562153][ T4522] netlink: 132 bytes leftover after parsing attributes in process `syz.2.250'. [ 61.574950][ T4435] team0: Port device team_slave_1 added [ 61.589642][ T1912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.611289][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.625813][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.653723][ T28] audit: type=1400 audit(1784825290.725:596): avc: denied { write } for pid=4523 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.676946][ T4435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.687602][ T28] audit: type=1400 audit(1784825290.745:597): avc: denied { write } for pid=4534 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.710298][ T4435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.717456][ T4435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.743523][ T4435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.769156][ T1912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.861310][ T28] audit: type=1400 audit(1784825290.945:598): avc: denied { read } for pid=4541 comm="syz.5.254" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.887708][ T4435] hsr_slave_0: entered promiscuous mode [ 61.901825][ T4435] hsr_slave_1: entered promiscuous mode [ 61.909331][ T4547] Invalid logical block size (442) [ 61.919356][ T4435] debugfs: 'hsr0' already exists in 'hsr' [ 61.930914][ T4435] Cannot create hsr debugfs directory [ 61.938328][ T28] audit: type=1400 audit(1784825290.945:599): avc: denied { open } for pid=4541 comm="syz.5.254" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 62.034885][ T28] audit: type=1326 audit(1784825291.115:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4557 comm="syz.5.257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14c6a9de99 code=0x0 [ 62.071935][ T1912] bridge_slave_1: left allmulticast mode [ 62.078023][ T1912] bridge_slave_1: left promiscuous mode [ 62.083785][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.095680][ T1912] bridge_slave_0: left allmulticast mode [ 62.101416][ T1912] bridge_slave_0: left promiscuous mode [ 62.107400][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.192939][ T1912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.287126][ T1912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.328893][ T1912] bond0 (unregistering): Released all slaves [ 62.376203][ T4543] lo speed is unknown, defaulting to 1000 [ 62.703738][ T28] audit: type=1400 audit(1784825291.785:601): avc: denied { write } for pid=4572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.857816][ T28] audit: type=1400 audit(1784825291.925:602): avc: denied { write } for pid=4585 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 62.986551][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 63.363226][ T4598] bridge_slave_0: left allmulticast mode [ 63.406982][ T4598] bridge_slave_0: left promiscuous mode [ 63.435417][ T4598] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.487412][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.262'. [ 63.510174][ T4607] netlink: 8 bytes leftover after parsing attributes in process `syz.5.262'. [ 64.072825][ T4598] bridge_slave_1: left allmulticast mode [ 64.086942][ T4598] bridge_slave_1: left promiscuous mode [ 64.100184][ T4612] loop2: detected capacity change from 0 to 512 [ 64.107997][ T4598] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.129620][ T4598] bond0: (slave bond_slave_0): Releasing backup interface [ 64.154158][ T4612] EXT4-fs (loop2): 1 truncate cleaned up [ 64.162393][ T4598] bond0: (slave bond_slave_1): Releasing backup interface [ 64.170675][ T4612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.191492][ T4598] team0: Port device team_slave_0 removed [ 64.208298][ T4598] team0: Port device team_slave_1 removed [ 64.221937][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.240986][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.256233][ T4598] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.263851][ T4598] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.280492][ T4598] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.316641][ T4604] team0: Mode changed to "broadcast" [ 64.433435][ T4609] bridge1: left promiscuous mode [ 64.441434][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 64.470883][ T1912] hsr_slave_0: left promiscuous mode [ 64.480289][ T1912] hsr_slave_1: left promiscuous mode [ 64.486603][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.499800][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.513101][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.513420][ T4618] netlink: 'syz.5.264': attribute type 3 has an invalid length. [ 64.523389][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.547060][ T4618] netlink: 132 bytes leftover after parsing attributes in process `syz.5.264'. [ 64.562804][ T1912] veth1_macvtap: left promiscuous mode [ 64.568370][ T1912] veth0_macvtap: left promiscuous mode [ 64.575049][ T1912] veth1_vlan: left promiscuous mode [ 64.584884][ T1912] veth0_vlan: left promiscuous mode [ 64.694348][ T1912] team0 (unregistering): Port device team_slave_1 removed [ 64.704566][ T1912] team0 (unregistering): Port device team_slave_0 removed [ 64.741432][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.750564][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.796067][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.805380][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.837983][ T4435] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 64.852881][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.869881][ T4435] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 64.888418][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.902027][ T4435] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 64.911033][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.923812][ T4435] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 64.941590][ T4435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.025777][ T30] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 465: padding at end of block bitmap is not set [ 65.045074][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 65.075003][ T30] EXT4-fs (loop2): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 6 with error 117 [ 65.075029][ T30] EXT4-fs (loop2): This should not happen!! Data will be lost [ 65.075029][ T30] [ 65.076867][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 65.127671][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.131886][ T4435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.207389][ T4435] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.234719][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.241812][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.281593][ T2318] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.288698][ T2318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.311141][ T1912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.332366][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.339516][ T4543] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.346991][ T4543] bridge_slave_0: entered allmulticast mode [ 65.353663][ T4543] bridge_slave_0: entered promiscuous mode [ 65.360846][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.367960][ T4543] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.375092][ T4543] bridge_slave_1: entered allmulticast mode [ 65.381893][ T4543] bridge_slave_1: entered promiscuous mode [ 65.392966][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 65.405401][ T1912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.424377][ T4543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.439033][ T4543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.458163][ T4543] team0: Port device team_slave_0 added [ 65.464895][ T4543] team0: Port device team_slave_1 added [ 65.492910][ T4543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.500219][ T4543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.526608][ T4543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.545693][ T1912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.557564][ T4543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.564512][ T4543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.590814][ T4543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.608446][ T4435] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.619720][ T4435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.645231][ T1912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.677515][ T4543] hsr_slave_0: entered promiscuous mode [ 65.683683][ T4543] hsr_slave_1: entered promiscuous mode [ 65.690006][ T4543] debugfs: 'hsr0' already exists in 'hsr' [ 65.696812][ T4543] Cannot create hsr debugfs directory [ 65.763278][ T1912] bridge_slave_1: left allmulticast mode [ 65.769091][ T1912] bridge_slave_1: left promiscuous mode [ 65.774849][ T1912] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.782911][ T1912] bridge_slave_0: left allmulticast mode [ 65.788766][ T1912] bridge_slave_0: left promiscuous mode [ 65.794416][ T1912] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.804399][ T4677] syz.2.272 (4677) used greatest stack depth: 9344 bytes left [ 65.851782][ T1912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.862525][ T1912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.872101][ T1912] bond0 (unregistering): Released all slaves [ 65.900317][ T4435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.937133][ T4708] netlink: 'syz.2.275': attribute type 3 has an invalid length. [ 65.945113][ T4708] netlink: 132 bytes leftover after parsing attributes in process `syz.2.275'. [ 66.013667][ T1912] hsr_slave_0: left promiscuous mode [ 66.023941][ T1912] hsr_slave_1: left promiscuous mode [ 66.036033][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.045179][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.049540][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 66.049554][ T28] audit: type=1400 audit(1784825295.135:685): avc: denied { write } for pid=4713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.082525][ T1912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.092194][ T1912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.102853][ T1912] veth1_macvtap: left promiscuous mode [ 66.106930][ T28] audit: type=1400 audit(1784825295.195:686): avc: denied { write } for pid=4730 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.108754][ T1912] veth0_macvtap: left promiscuous mode [ 66.136139][ T1912] veth1_vlan: left promiscuous mode [ 66.141481][ T1912] veth0_vlan: left promiscuous mode [ 66.203228][ T1912] team0 (unregistering): Port device team_slave_1 removed [ 66.212915][ T1912] team0 (unregistering): Port device team_slave_0 removed [ 66.266428][ T4736] futex_wake_op: syz.0.277 tries to shift op by 144; fix this program [ 66.296812][ T28] audit: type=1400 audit(1784825295.365:687): avc: denied { ioctl } for pid=4733 comm="syz.0.277" path="socket:[9986]" dev="sockfs" ino=9986 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 66.321407][ T4736] loop0: detected capacity change from 0 to 2048 [ 66.546326][ T4736] loop0: p3 < > p4 < > [ 66.550523][ T4736] loop0: partition table partially beyond EOD, truncated [ 66.557787][ T4736] loop0: p3 start 4284289 is beyond EOD, truncated [ 66.589662][ T4543] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 66.624816][ T4543] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.657654][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 66.668566][ T4543] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 66.695566][ T4543] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.703192][ T4543] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 66.730373][ T4543] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.740688][ T4543] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 66.753016][ T4543] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.809885][ T4435] veth0_vlan: entered promiscuous mode [ 66.831846][ T4435] veth1_vlan: entered promiscuous mode [ 66.852611][ T4543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.881823][ T4435] veth0_macvtap: entered promiscuous mode [ 66.899629][ T4543] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.906507][ T28] audit: type=1400 audit(1784825295.995:688): avc: denied { write } for pid=4756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.930961][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.938159][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.947244][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.954309][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.966527][ T4435] veth1_macvtap: entered promiscuous mode [ 66.991258][ T4543] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.046234][ T28] audit: type=1400 audit(1784825296.115:689): avc: denied { write } for pid=4771 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.070180][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 67.088972][ T4779] loop0: detected capacity change from 0 to 256 [ 67.100331][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.149334][ T4435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.182689][ T1912] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.201120][ T1912] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.215585][ T28] audit: type=1400 audit(1784825296.295:690): avc: denied { write } for pid=4787 comm="syz.2.282" lport=45570 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.246095][ T28] audit: type=1400 audit(1784825296.305:691): avc: denied { setopt } for pid=4787 comm="syz.2.282" lport=45570 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 67.279400][ T1912] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.306450][ T1912] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.343950][ T28] audit: type=1400 audit(1784825296.425:692): avc: denied { append } for pid=4803 comm="syz.5.284" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.399924][ T4543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.414882][ T28] audit: type=1400 audit(1784825296.465:693): avc: denied { write } for pid=4789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.444300][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2587804998/2587805000 [ 67.455617][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2587804998/2587804999 [ 67.466070][ T28] audit: type=1400 audit(1784825296.475:694): avc: denied { bind } for pid=4803 comm="syz.5.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.502373][ T4815] syzkaller0: entered promiscuous mode [ 67.508144][ T4815] syzkaller0: entered allmulticast mode [ 67.516213][ T4815] tipc: Started in network mode [ 67.521174][ T4815] tipc: Node identity 4e3e9d58bbe9, cluster identity 4711 [ 67.528556][ T4815] tipc: Enabled bearer , priority 0 [ 67.535893][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 67.545042][ T4815] tipc: Resetting bearer [ 67.566013][ T4812] tipc: Resetting bearer [ 67.575108][ T4812] tipc: Disabling bearer [ 67.670336][ T4834] netlink: 'syz.2.287': attribute type 3 has an invalid length. [ 67.692956][ T4828] netlink: 8 bytes leftover after parsing attributes in process `syz.6.286'. [ 67.703533][ T4834] netlink: 132 bytes leftover after parsing attributes in process `syz.2.287'. [ 67.734201][ T4543] veth0_vlan: entered promiscuous mode [ 67.746718][ T4543] veth1_vlan: entered promiscuous mode [ 67.789687][ T4543] veth0_macvtap: entered promiscuous mode [ 67.798196][ T4543] veth1_macvtap: entered promiscuous mode [ 67.821432][ T4543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.832353][ T4543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.841533][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 67.849871][ T4853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.289'. [ 67.871397][ T4853] bridge_slave_1: left allmulticast mode [ 67.886632][ T4853] bridge_slave_1: left promiscuous mode [ 67.893927][ T4853] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.920626][ T4853] bridge_slave_0: left allmulticast mode [ 67.926619][ T4853] bridge_slave_0: left promiscuous mode [ 67.936352][ T4853] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.979512][ T2318] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.988723][ T2318] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.008003][ T2318] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.017362][ T2318] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.113314][ T4864] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.152663][ T4869] vcan0: Master is either lo or non-ether device [ 68.412933][ T4874] lo speed is unknown, defaulting to 1000 [ 68.422027][ T4874] lo speed is unknown, defaulting to 1000 [ 68.431735][ T4874] lo speed is unknown, defaulting to 1000 [ 68.649700][ T4874] infiniband sz1: set down [ 68.654450][ T3385] lo speed is unknown, defaulting to 1000 [ 68.662264][ T4874] infiniband sz1: added lo [ 68.699620][ T4874] RDS/IB: sz1: added [ 68.705049][ T4874] smc: adding ib device sz1 with port count 1 [ 68.711582][ T4874] smc: ib device sz1 port 1 has no pnetid [ 68.719942][ T4874] lo speed is unknown, defaulting to 1000 [ 68.728710][ T3385] lo speed is unknown, defaulting to 1000 [ 68.832924][ T4890] loop2: detected capacity change from 0 to 512 [ 68.859051][ T4890] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 68.876095][ T4890] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #13: comm syz.2.298: inode has both inline data and extents flags [ 68.922832][ T4890] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 68.923068][ T4890] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.298: couldn't read orphan inode 13 (err -117) [ 68.923131][ T4874] lo speed is unknown, defaulting to 1000 [ 68.932279][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 68.932301][ C0] EXT4-fs (loop2): initial error at time 1784825298: ext4_orphan_get:1399: inode 13 [ 68.932336][ C0] EXT4-fs (loop2): last error at time 1784825298: ext4_orphan_get:1399: inode 13 [ 68.938045][ T4890] loop2: lost filesystem error report for type 5 error -117 [ 68.983227][ T4874] lo speed is unknown, defaulting to 1000 [ 69.020288][ T4890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.046968][ T4874] lo speed is unknown, defaulting to 1000 [ 69.075488][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.139633][ T4874] lo speed is unknown, defaulting to 1000 [ 69.198523][ T4864] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.225169][ T4896] loop2: detected capacity change from 0 to 1024 [ 69.260539][ T4896] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.345191][ T4896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.445609][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.473883][ T4909] netlink: 'syz.5.303': attribute type 8 has an invalid length. [ 69.483886][ T4909] sch_fq: defrate 0 ignored. [ 69.507910][ T4909] loop5: detected capacity change from 0 to 512 [ 69.538862][ T4909] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.303: inode has both inline data and extents flags [ 69.556413][ T4909] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.556662][ T4909] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.303: couldn't read orphan inode 15 (err -117) [ 69.565999][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 69.566024][ C1] EXT4-fs (loop5): initial error at time 1784825298: ext4_orphan_get:1399: inode 15 [ 69.566135][ C1] EXT4-fs (loop5): last error at time 1784825298: ext4_orphan_get:1399: inode 15 [ 69.617827][ T4909] loop5: lost filesystem error report for type 5 error -117 [ 69.619151][ T4909] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.687625][ T4914] random: crng reseeded on system resumption [ 69.712748][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.915937][ T4928] loop2: detected capacity change from 0 to 256 [ 70.260937][ T4932] lo speed is unknown, defaulting to 1000 [ 70.808314][ T4932] lo speed is unknown, defaulting to 1000 [ 70.959616][ T4936] syzkaller0: entered promiscuous mode [ 70.979248][ T4936] syzkaller0: entered allmulticast mode [ 71.002683][ T4936] tipc: Enabled bearer , priority 0 [ 71.035154][ T4936] tipc: Resetting bearer [ 71.061375][ T4935] tipc: Resetting bearer [ 71.092157][ T4935] tipc: Disabling bearer [ 71.339929][ T4864] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.377118][ T4944] netlink: 'syz.0.314': attribute type 3 has an invalid length. [ 71.414706][ T4944] netlink: 132 bytes leftover after parsing attributes in process `syz.0.314'. [ 71.925267][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 71.925280][ T28] audit: type=1326 audit(1784825301.005:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.0.318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dcf99de99 code=0x0 [ 71.961547][ T4959] bond1: up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 71.975082][ T4959] bond1: entered allmulticast mode [ 71.994505][ T4963] ip6gretap1: entered promiscuous mode [ 72.009665][ T4963] ip6gretap1: entered allmulticast mode [ 72.009878][ T4966] loop6: detected capacity change from 0 to 512 [ 72.016854][ T4963] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 72.030923][ T4966] EXT4-fs: test_dummy_encryption option not supported [ 72.061018][ T4966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.069683][ T4974] syzkaller0: entered promiscuous mode [ 72.075240][ T4974] syzkaller0: entered allmulticast mode [ 72.082040][ T4974] tipc: Started in network mode [ 72.087397][ T4974] tipc: Node identity 02fe8f9227f3, cluster identity 4711 [ 72.094619][ T4974] tipc: Enabled bearer , priority 0 [ 72.095846][ T4966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.102465][ T4974] tipc: Resetting bearer [ 72.122001][ T4973] tipc: Resetting bearer [ 72.135134][ T4977] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4977 comm=syz.2.321 [ 72.148532][ T4973] tipc: Disabling bearer [ 72.154907][ T4966] loop6: detected capacity change from 0 to 512 [ 72.169566][ T28] audit: type=1326 audit(1784825301.255:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4978 comm="syz.2.324" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e576de99 code=0x0 [ 72.197031][ T4966] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 72.205096][ T4966] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 72.213389][ T4966] EXT4-fs (loop6): orphan cleanup on readonly fs [ 72.220053][ T4966] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.319: iget: bad i_size value: 12154761577498 [ 72.232704][ T4966] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 72.232999][ T4966] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.319: couldn't read orphan inode 13 (err -117) [ 72.242134][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 72.242155][ C1] EXT4-fs (loop6): initial error at time 1784825301: ext4_orphan_get:1399: inode 13 [ 72.242193][ C1] EXT4-fs (loop6): last error at time 1784825301: ext4_orphan_get:1399: inode 13 [ 72.279653][ T4966] loop6: lost filesystem error report for type 5 error -117 [ 72.281499][ T4966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 72.295615][ T4983] macvtap1: entered allmulticast mode [ 72.303557][ T4966] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.319: dx entry: limit 65535 != root limit 120 [ 72.306253][ T4983] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 72.319207][ T4966] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.319: Corrupt directory, running e2fsck is recommended [ 72.325969][ T4983] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 72.346293][ T4983] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 72.470107][ T4864] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.532434][ T39] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.543282][ T39] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.555178][ T39] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.567465][ T39] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.583323][ T4983] loop5: detected capacity change from 0 to 128 [ 72.619846][ T4987] netlink: 24 bytes leftover after parsing attributes in process `syz.7.326'. [ 72.624039][ T4983] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.644109][ T4983] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 72.666410][ T4983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4983 comm=syz.5.325 [ 72.687433][ T28] audit: type=1400 audit(1784825301.765:717): avc: denied { read } for pid=4990 comm="syz.7.327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.737451][ T28] audit: type=1400 audit(1784825301.825:718): avc: denied { ioctl } for pid=4990 comm="syz.7.327" path="socket:[11561]" dev="sockfs" ino=11561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 72.763828][ T3957] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.796954][ T28] audit: type=1400 audit(1784825301.885:719): avc: denied { watch } for pid=4994 comm="syz.0.329" path=2F6D656D66643A2D263A7B2DAA5D7B202864656C6574656429 dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.840417][ T4999] netlink: 20 bytes leftover after parsing attributes in process `syz.5.331'. [ 72.897748][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.925994][ T5006] loop5: detected capacity change from 0 to 1024 [ 72.943212][ T5006] EXT4-fs: Ignoring removed nomblk_io_submit option [ 72.988182][ T5006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.993098][ T4998] FAULT_INJECTION: forcing a failure. [ 72.993098][ T4998] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 73.034362][ T5006] netlink: 20 bytes leftover after parsing attributes in process `syz.5.334'. [ 73.043303][ T4998] CPU: 0 UID: 0 PID: 4998 Comm: syz.0.330 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 73.043393][ T4998] Tainted: [W]=WARN [ 73.043401][ T4998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 73.043481][ T4998] Call Trace: [ 73.043488][ T4998] [ 73.043497][ T4998] __dump_stack+0x1d/0x30 [ 73.043522][ T4998] dump_stack_lvl+0x95/0xd0 [ 73.043545][ T4998] dump_stack+0x15/0x1b [ 73.043631][ T4998] should_fail_ex+0x25e/0x270 [ 73.043659][ T4998] should_fail_alloc_page+0xf2/0x100 [ 73.043766][ T4998] __alloc_frozen_pages_noprof+0x108/0x350 [ 73.043810][ T4998] alloc_pages_mpol+0xa9/0x1d0 [ 73.043853][ T4998] folio_alloc_mpol_noprof+0x39/0x80 [ 73.043909][ T4998] shmem_get_folio_gfp+0x3ff/0xd90 [ 73.043982][ T4998] shmem_write_begin+0xfc/0x1f0 [ 73.044010][ T4998] generic_perform_write+0x186/0x490 [ 73.044103][ T4998] ? current_time+0x18d/0x250 [ 73.044140][ T4998] shmem_file_write_iter+0xc5/0xf0 [ 73.044241][ T4998] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 73.044273][ T4998] vfs_write+0x57d/0x990 [ 73.044299][ T4998] ksys_write+0xdc/0x1a0 [ 73.044403][ T4998] __x64_sys_write+0x40/0x50 [ 73.044425][ T4998] x64_sys_call+0x27e1/0x3020 [ 73.044453][ T4998] do_syscall_64+0x136/0x3c0 [ 73.044527][ T4998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.044552][ T4998] RIP: 0033:0x7f3dcf95e6ce [ 73.044571][ T4998] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 73.044668][ T4998] RSP: 002b:00007f3dce3f6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.044691][ T4998] RAX: ffffffffffffffda RBX: 00007f3dce3f76c0 RCX: 00007f3dcf95e6ce [ 73.044717][ T4998] RDX: 0000000000040000 RSI: 00007f3dc5fb6000 RDI: 0000000000000007 [ 73.044732][ T4998] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 73.044746][ T4998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 73.044761][ T4998] R13: 00007f3dce3f6ee0 R14: 00007f3dce3f6ea0 R15: 00007f3dc5fb6000 [ 73.044835][ T4998] [ 73.066960][ T28] audit: type=1400 audit(1784825302.155:720): avc: denied { sqpoll } for pid=5005 comm="syz.5.334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.100696][ T5012] loop6: detected capacity change from 0 to 512 [ 73.132061][ T4998] loop0: detected capacity change from 0 to 1024 [ 73.155807][ T28] audit: type=1326 audit(1784825302.205:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.2.338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e576de99 code=0x7ffc0000 [ 73.200889][ T4998] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 73.214176][ T28] audit: type=1326 audit(1784825302.215:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.2.338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f14e576de99 code=0x7ffc0000 [ 73.295293][ T4998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.320849][ T5012] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.343714][ T28] audit: type=1326 audit(1784825302.215:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5021 comm="syz.2.338" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f14e576de99 code=0x7ffc0000 [ 73.343797][ T28] audit: type=1400 audit(1784825302.225:724): avc: denied { write } for pid=5005 comm="syz.5.334" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.464245][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.527449][ T30] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 73.539584][ T5034] FAULT_INJECTION: forcing a failure. [ 73.539584][ T5034] name failslab, interval 1, probability 0, space 0, times 0 [ 73.542976][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.553255][ T5034] CPU: 1 UID: 0 PID: 5034 Comm: syz.7.339 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 73.553289][ T5034] Tainted: [W]=WARN [ 73.553333][ T5034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 73.553346][ T5034] Call Trace: [ 73.553353][ T5034] [ 73.553362][ T5034] __dump_stack+0x1d/0x30 [ 73.553388][ T5034] dump_stack_lvl+0x95/0xd0 [ 73.553408][ T5034] dump_stack+0x15/0x1b [ 73.553429][ T5034] should_fail_ex+0x25e/0x270 [ 73.553516][ T5034] should_failslab+0x8c/0xb0 [ 73.553541][ T5034] __kvmalloc_node_noprof+0x15b/0x590 [ 73.553569][ T5034] ? file_tty_write+0x1ae/0x690 [ 73.553618][ T5034] ? file_tty_write+0x1ae/0x690 [ 73.553647][ T5034] ? mutex_trylock+0x81/0xc0 [ 73.553718][ T5034] file_tty_write+0x1ae/0x690 [ 73.553750][ T5034] ? __pfx_tty_write+0x10/0x10 [ 73.553826][ T5034] tty_write+0x25/0x30 [ 73.553855][ T5034] vfs_write+0x57d/0x990 [ 73.553946][ T5034] ksys_write+0xdc/0x1a0 [ 73.553967][ T5034] __x64_sys_write+0x40/0x50 [ 73.553987][ T5034] x64_sys_call+0x27e1/0x3020 [ 73.554022][ T5034] do_syscall_64+0x136/0x3c0 [ 73.554047][ T5034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.554070][ T5034] RIP: 0033:0x7f4def76de99 [ 73.554166][ T5034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.554185][ T5034] RSP: 002b:00007f4dee1a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 73.554259][ T5034] RAX: ffffffffffffffda RBX: 00007f4def9f6090 RCX: 00007f4def76de99 [ 73.554274][ T5034] RDX: 0000000000001006 RSI: 0000200000001600 RDI: 0000000000000007 [ 73.554288][ T5034] RBP: 00007f4dee1a6090 R08: 0000000000000000 R09: 0000000000000000 [ 73.554302][ T5034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.554357][ T5034] R13: 00007f4def9f6128 R14: 00007f4def9f6090 R15: 00007ffcedccd9b8 [ 73.554377][ T5034] [ 73.795746][ T5046] loop6: detected capacity change from 0 to 512 [ 73.802409][ T5046] EXT4-fs: test_dummy_encryption option not supported [ 73.811941][ T5046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 73.821786][ T5046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.833256][ T5046] loop6: detected capacity change from 0 to 512 [ 73.836320][ T5046] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 73.847817][ T5046] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 73.847958][ T5046] EXT4-fs (loop6): orphan cleanup on readonly fs [ 73.847990][ T5046] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #13: comm syz.6.344: iget: bad i_size value: 12154761577498 [ 73.848092][ T5046] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 73.848224][ T5046] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.344: couldn't read orphan inode 13 (err -117) [ 73.848248][ T5046] loop6: lost filesystem error report for type 5 error -117 [ 73.848698][ T5046] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 73.851216][ T5046] EXT4-fs warning (device loop6): dx_probe:861: inode #2: comm syz.6.344: dx entry: limit 65535 != root limit 120 [ 73.928710][ T5046] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.344: Corrupt directory, running e2fsck is recommended [ 74.214519][ T5053] loop2: detected capacity change from 0 to 512 [ 74.223033][ T5053] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.283678][ T5053] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.345: invalid indirect mapped block 4294967295 (level 0) [ 74.297623][ T5053] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 74.298366][ T5053] EXT4-fs (loop2): Remounting filesystem read-only [ 74.307528][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 74.307554][ C1] EXT4-fs (loop2): initial error at time 1784825303: ext4_free_branches:1023: inode 16 [ 74.307596][ C1] EXT4-fs (loop2): last error at time 1784825303: ext4_free_branches:1023: inode 16 [ 74.339963][ T5053] EXT4-fs (loop2): 1 orphan inode deleted [ 74.345799][ T5053] EXT4-fs (loop2): 1 truncate cleaned up [ 74.352648][ T5053] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.536546][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.198387][ T5075] loop7: detected capacity change from 0 to 1024 [ 75.205645][ T5075] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.218545][ T5075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.234186][ T5075] netlink: 20 bytes leftover after parsing attributes in process `syz.7.350'. [ 75.253431][ T5070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.351'. [ 75.292170][ T5086] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 75.555955][ T5098] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.576892][ T5098] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.592215][ T5098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.356'. [ 75.747497][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.802306][ T5108] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.815040][ T5108] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.870330][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.596382][ T5126] lo speed is unknown, defaulting to 1000 [ 76.937754][ T5126] lo speed is unknown, defaulting to 1000 [ 77.390611][ T28] kauditd_printk_skb: 79 callbacks suppressed [ 77.390627][ T28] audit: type=1400 audit(1784825306.475:804): avc: denied { create } for pid=5131 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.420772][ T5134] set_capacity_and_notify: 3 callbacks suppressed [ 77.420787][ T5134] loop5: detected capacity change from 0 to 512 [ 77.434504][ T5132] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.453717][ T28] audit: type=1400 audit(1784825306.515:805): avc: denied { write } for pid=5131 comm="syz.2.365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.481334][ T5134] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.519307][ T5134] EXT4-fs (loop5): 1 truncate cleaned up [ 77.528854][ T5132] loop2: detected capacity change from 0 to 512 [ 77.543588][ T28] audit: type=1400 audit(1784825306.625:806): avc: denied { write } for pid=5130 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.571325][ T5132] EXT4-fs: Ignoring removed orlov option [ 77.582770][ T5134] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.742733][ T28] audit: type=1400 audit(1784825306.715:807): avc: denied { write } for pid=5128 comm="syz.5.364" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 77.773008][ T5132] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.811559][ T5132] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.823621][ T28] audit: type=1400 audit(1784825306.855:808): avc: denied { write } for pid=5146 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.854229][ T5132] EXT4-fs (loop2): shut down requested (0) [ 77.885829][ T28] audit: type=1400 audit(1784825306.935:809): avc: denied { ioctl } for pid=5131 comm="syz.2.365" path="/88/file1/file1" dev="loop2" ino=15 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 77.950970][ T28] audit: type=1400 audit(1784825306.945:810): avc: denied { read } for pid=2964 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 78.008645][ T28] audit: type=1400 audit(1784825306.945:811): avc: denied { search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.075042][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.092144][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.105401][ T4543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.115756][ T28] audit: type=1400 audit(1784825306.945:812): avc: denied { write search } for pid=2964 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.168945][ T28] audit: type=1400 audit(1784825306.945:813): avc: denied { add_name } for pid=2964 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.502741][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.651277][ T5215] loop5: detected capacity change from 0 to 512 [ 78.665204][ T5215] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 78.784256][ T5224] loop0: detected capacity change from 0 to 256 [ 78.814578][ T5224] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 78.847318][ T1912] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 78.890849][ T5230] loop5: detected capacity change from 0 to 1024 [ 78.899658][ T5230] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.353163][ T5230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.367270][ T5230] netlink: 20 bytes leftover after parsing attributes in process `syz.5.378'. [ 79.413828][ T5238] macvtap1: entered allmulticast mode [ 79.419452][ T5238] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 79.427171][ T5238] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 79.435919][ T5238] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.444214][ T5238] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 79.507260][ T3385] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 79.522808][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.6.380'. [ 79.537584][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.837700][ T5224] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 79.858298][ T5252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.863655][ T5224] FAT-fs (loop0): Filesystem has been set read-only [ 79.892558][ T5224] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 79.898670][ T5252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.966153][ T5261] rdma_rxe: rxe_newlink: failed to add lo [ 79.979787][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.384'. [ 80.006835][ T5252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.384'. [ 80.113361][ T5292] syzkaller0: entered promiscuous mode [ 80.131139][ T5292] syzkaller0: entered allmulticast mode [ 80.161457][ T5292] tipc: Enabled bearer , priority 0 [ 80.192260][ T5292] tipc: Resetting bearer [ 80.219386][ T5290] tipc: Resetting bearer [ 80.239376][ T5290] tipc: Disabling bearer [ 80.249787][ T5238] loop2: detected capacity change from 0 to 128 [ 80.335081][ T5238] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.373989][ T5317] loop0: detected capacity change from 0 to 1024 [ 80.394462][ T5317] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.401927][ T5238] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.447508][ T5317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.489545][ T5317] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 80.586325][ T3299] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.831562][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.871155][ T5368] loop5: detected capacity change from 0 to 512 [ 80.907151][ T5373] loop7: detected capacity change from 0 to 256 [ 80.915750][ T5368] EXT4-fs: test_dummy_encryption option not supported [ 80.924132][ T5373] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.984476][ T5368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.999155][ T5372] tipc: Failed to remove unknown binding: 66,0,0/0:2567293030/2567293032 [ 81.027164][ T5372] tipc: Failed to remove unknown binding: 66,0,0/0:2567293030/2567293031 [ 81.033852][ T5368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.066521][ T5368] loop5: detected capacity change from 0 to 512 [ 81.097219][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.7.404'. [ 81.128680][ T5368] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 81.145598][ T5368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 81.197023][ T5368] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.361495][ T5368] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #13: comm syz.5.400: iget: bad i_size value: 12154761577498 [ 81.384280][ T5393] sg_write: data in/out 352256/136 bytes for SCSI command 0x0-- guessing data in; [ 81.384280][ T5393] program syz.6.407 not setting count and/or reply_len properly [ 81.385940][ T5368] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 81.445449][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 81.461001][ C0] EXT4-fs (loop5): initial error at time 1784825310: ext4_orphan_get:1399: inode 13 [ 81.470416][ C0] EXT4-fs (loop5): last error at time 1784825310: ext4_orphan_get:1399: inode 13 [ 81.697345][ T5394] lo speed is unknown, defaulting to 1000 [ 82.027085][ T5394] lo speed is unknown, defaulting to 1000 [ 82.374338][ T5368] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.400: couldn't read orphan inode 13 (err -117) [ 82.386221][ T5368] loop5: lost filesystem error report for type 5 error -117 [ 82.386827][ T5368] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 82.390665][ T5393] ip6gre1: entered promiscuous mode [ 82.479840][ T5404] netlink: 16 bytes leftover after parsing attributes in process `syz.0.408'. [ 82.492487][ T5393] ip6gre1: entered allmulticast mode [ 82.611153][ T5368] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.400: dx entry: limit 65535 != root limit 120 [ 82.658108][ T5409] set_capacity_and_notify: 1 callbacks suppressed [ 82.658123][ T5409] loop6: detected capacity change from 0 to 512 [ 82.710304][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 82.710318][ T28] audit: type=1400 audit(1784825311.795:850): avc: denied { write } for pid=5396 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.762881][ T5409] EXT4-fs: Ignoring removed oldalloc option [ 82.791728][ T5368] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.400: Corrupt directory, running e2fsck is recommended [ 82.806589][ T5415] loop0: detected capacity change from 0 to 1024 [ 82.817124][ T5409] EXT4-fs: Ignoring removed oldalloc option [ 82.840972][ T5415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.876917][ T5409] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.409: corrupted in-inode xattr: invalid ea_ino [ 82.900070][ T28] audit: type=1400 audit(1784825311.985:851): avc: denied { write } for pid=5416 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.957583][ T5409] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 82.960903][ T5409] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.409: couldn't read orphan inode 15 (err -117) [ 82.970172][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 82.970206][ C1] EXT4-fs (loop6): initial error at time 1784825312: ext4_iget_extra_inode:5180: inode 15 [ 82.970242][ C1] EXT4-fs (loop6): last error at time 1784825312: ext4_iget_extra_inode:5180: inode 15 [ 83.032608][ T5415] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.078123][ T5415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.411'. [ 83.139702][ T28] audit: type=1400 audit(1784825312.225:852): avc: denied { write } for pid=5413 comm="syz.0.411" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.187986][ T5409] loop6: lost filesystem error report for type 5 error -117 [ 83.188652][ T5409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.282741][ T28] audit: type=1400 audit(1784825312.365:853): avc: denied { write } for pid=5408 comm="syz.6.409" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 83.353767][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.371109][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.427960][ T5424] lo speed is unknown, defaulting to 1000 [ 83.468638][ T5429] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 83.573505][ T3957] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.583037][ T5429] bond2: entered promiscuous mode [ 83.598507][ T5429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.627370][ T5426] loop7: detected capacity change from 0 to 128 [ 83.645284][ T5430] 8021q: adding VLAN 0 to HW filter on device bond2 [ 83.663119][ T5430] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 83.709066][ T5430] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 83.753275][ T5430] bond2: (slave ip6gre1): making interface the new active one [ 83.766256][ T5430] ip6gre1: entered promiscuous mode [ 83.773635][ T5430] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 83.804614][ T5424] lo speed is unknown, defaulting to 1000 [ 83.921064][ T5442] loop0: detected capacity change from 0 to 1024 [ 83.929259][ T5439] random: crng reseeded on system resumption [ 83.954550][ T5442] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.975593][ T5442] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.003865][ T5442] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.416: bg 0: block 112: padding at end of block bitmap is not set [ 84.072545][ T5441] loop5: detected capacity change from 0 to 128 [ 84.325597][ T5441] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 84.359056][ T5448] loop6: detected capacity change from 0 to 512 [ 84.372052][ T5441] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.419424][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.5.418'. [ 84.428619][ T28] audit: type=1400 audit(1784825313.495:854): avc: denied { write } for pid=5440 comm="syz.5.418" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 84.460984][ T5448] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 84.526232][ T3957] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.687421][ T5456] loop7: detected capacity change from 0 to 1024 [ 84.695801][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.710580][ T5456] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.845779][ T400] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 84.857651][ T5456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.892271][ T5456] netlink: 20 bytes leftover after parsing attributes in process `syz.7.422'. [ 85.193369][ T5464] lo speed is unknown, defaulting to 1000 [ 85.674505][ T5464] lo speed is unknown, defaulting to 1000 [ 85.897033][ T28] audit: type=1400 audit(1784825314.975:855): avc: denied { write } for pid=5455 comm="syz.7.422" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 86.918099][ T5471] syzkaller0: entered promiscuous mode [ 87.076056][ T5471] syzkaller0: entered allmulticast mode [ 87.120259][ T4543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.250685][ T5469] lo speed is unknown, defaulting to 1000 [ 87.377614][ T5474] tipc: Enabled bearer , priority 0 [ 87.410642][ T5474] tipc: Resetting bearer [ 87.438044][ T5470] tipc: Resetting bearer [ 87.585097][ T5470] tipc: Disabling bearer [ 87.661303][ T5469] lo speed is unknown, defaulting to 1000 [ 87.779310][ T28] audit: type=1400 audit(1784825316.865:856): avc: denied { write } for pid=5487 comm="syz.7.429" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.930141][ T28] audit: type=1400 audit(1784825316.885:857): avc: denied { ioctl } for pid=5487 comm="syz.7.429" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 87.972091][ T5490] tipc: Failed to remove unknown binding: 66,0,0/0:1954268781/1954268783 [ 87.999494][ T5493] macvtap1: entered allmulticast mode [ 88.026067][ T5490] tipc: Failed to remove unknown binding: 66,0,0/0:1954268781/1954268782 [ 88.142775][ T28] audit: type=1400 audit(1784825317.005:858): avc: denied { getopt } for pid=5487 comm="syz.7.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.188467][ T5493] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 88.205553][ T5493] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 88.307943][ T5504] loop7: detected capacity change from 0 to 512 [ 88.339190][ T5504] rdma_rxe: rxe_newlink: failed to add lo [ 88.407593][ T5493] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 88.557713][ T5493] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 90.568753][ T5515] loop0: detected capacity change from 0 to 512 [ 90.998123][ T5515] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 91.356023][ T5512] xt_ecn: cannot match TCP bits for non-tcp packets [ 91.577222][ T11] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 92.585463][ T5519] lo speed is unknown, defaulting to 1000 [ 92.868604][ T5519] lo speed is unknown, defaulting to 1000 [ 93.053461][ T39] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 93.198632][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.439'. [ 93.209245][ T5522] syzkaller0: entered promiscuous mode [ 93.222422][ T5529] loop2: detected capacity change from 0 to 128 [ 93.234694][ T5522] syzkaller0: entered allmulticast mode [ 93.273744][ T28] audit: type=1400 audit(1784825322.355:859): avc: denied { relabelfrom } for pid=5521 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 93.293449][ T28] audit: type=1400 audit(1784825322.355:860): avc: denied { relabelto } for pid=5521 comm="syz.6.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 94.006609][ T5544] loop2: detected capacity change from 0 to 1024 [ 94.026699][ T5544] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.184352][ T5544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.299562][ T5544] netlink: 20 bytes leftover after parsing attributes in process `syz.2.446'. [ 95.499246][ T28] audit: type=1400 audit(1784825324.575:861): avc: denied { write } for pid=5543 comm="syz.2.446" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 96.166098][ T5565] xt_ecn: cannot match TCP bits for non-tcp packets [ 96.573229][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.681848][ T5573] netlink: 96 bytes leftover after parsing attributes in process `syz.2.449'. [ 96.883891][ T28] audit: type=1326 audit(1784825325.965:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5583 comm="syz.0.455" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3dcf99de99 code=0x0 [ 96.945502][ T28] audit: type=1326 audit(1784825326.025:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5585 comm="syz.2.456" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14e576de99 code=0x0 [ 97.046950][ T5594] syzkaller0: entered promiscuous mode [ 97.053849][ T5594] syzkaller0: entered allmulticast mode [ 97.063480][ T5594] tipc: Enabled bearer , priority 0 [ 97.078027][ T5594] tipc: Resetting bearer [ 97.085415][ T5589] tipc: Resetting bearer [ 97.261539][ T5589] tipc: Disabling bearer [ 97.377541][ T5595] lo speed is unknown, defaulting to 1000 [ 97.844452][ T5595] lo speed is unknown, defaulting to 1000 [ 97.956650][ T5598] loop0: detected capacity change from 0 to 1024 [ 97.983238][ T5598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.038019][ T5598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.063420][ T28] audit: type=1400 audit(1784825327.145:864): avc: denied { bind } for pid=5604 comm="syz.6.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.084346][ T5605] tmpfs: Unknown parameter '01777777777777777777777ĪOGNЎpYy+d\njP&UZ$KB&' [ 98.097116][ T5598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.459'. [ 98.180716][ T28] audit: type=1400 audit(1784825327.175:865): avc: denied { setopt } for pid=5604 comm="syz.6.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 98.680700][ T5610] xt_ecn: cannot match TCP bits for non-tcp packets [ 98.702032][ T28] audit: type=1400 audit(1784825327.775:866): avc: denied { write } for pid=5597 comm="syz.0.459" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.125218][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.218558][ T28] audit: type=1400 audit(1784825329.295:867): avc: denied { shutdown } for pid=5640 comm="syz.0.471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.268940][ T5635] loop6: detected capacity change from 0 to 512 [ 100.278923][ T5642] loop0: detected capacity change from 0 to 164 [ 100.334069][ T5642] ISOFS: Logical zone size(0) < hardware blocksize(1024) [ 100.355424][ T5635] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 100.392377][ T5636] lo speed is unknown, defaulting to 1000 [ 100.521774][ T5636] lo speed is unknown, defaulting to 1000 [ 100.539563][ T5650] loop2: detected capacity change from 0 to 256 [ 100.600262][ T5650] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 100.662751][ T400] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 101.144570][ T5662] lo speed is unknown, defaulting to 1000 [ 101.249106][ T5650] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 101.276444][ T5650] FAT-fs (loop2): Filesystem has been set read-only [ 101.301278][ T5650] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 101.618015][ T5662] lo speed is unknown, defaulting to 1000 [ 101.650071][ T5675] loop6: detected capacity change from 0 to 4096 [ 101.659773][ T5675] EXT4-fs error (device loop6): ext4_init_orphan_info:583: comm syz.6.477: inode #0: comm syz.6.477: iget: illegal inode # [ 101.679737][ T5675] loop6: lost filesystem error report for type 5 error -117 [ 101.681047][ T28] audit: type=1400 audit(1784825330.765:868): avc: denied { bind } for pid=5638 comm="syz.7.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.688410][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 101.688439][ C1] EXT4-fs (loop6): initial error at time 1784825330: ext4_init_orphan_info:583 [ 101.688467][ C1] EXT4-fs (loop6): last error at time 1784825330: ext4_init_orphan_info:583 [ 101.702023][ T5675] EXT4-fs (loop6): get orphan inode failed [ 101.707641][ T28] audit: type=1400 audit(1784825330.765:869): avc: denied { connect } for pid=5638 comm="syz.7.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.756857][ T28] audit: type=1400 audit(1784825330.765:870): avc: denied { write } for pid=5638 comm="syz.7.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.785626][ T5675] EXT4-fs (loop6): mount failed [ 101.820316][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.854879][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.866958][ T5681] FAULT_INJECTION: forcing a failure. [ 101.866958][ T5681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 101.885630][ T5636] bridge_slave_0: entered allmulticast mode [ 101.897083][ T28] audit: type=1400 audit(1784825330.975:871): avc: denied { write } for pid=5674 comm="syz.6.477" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 101.903159][ T5672] loop7: detected capacity change from 0 to 512 [ 101.921574][ T5636] bridge_slave_0: entered promiscuous mode [ 101.933532][ T5681] CPU: 1 UID: 0 PID: 5681 Comm: syz.2.479 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 101.933569][ T5681] Tainted: [W]=WARN [ 101.933600][ T5681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 101.933614][ T5681] Call Trace: [ 101.933622][ T5681] [ 101.933709][ T5681] __dump_stack+0x1d/0x30 [ 101.933736][ T5681] dump_stack_lvl+0x95/0xd0 [ 101.933764][ T5681] dump_stack+0x15/0x1b [ 101.933783][ T5681] should_fail_ex+0x25e/0x270 [ 101.933866][ T5681] should_fail_alloc_page+0xf2/0x100 [ 101.933889][ T5681] __alloc_frozen_pages_noprof+0x108/0x350 [ 101.933933][ T5681] alloc_pages_mpol+0xa9/0x1d0 [ 101.934029][ T5681] folio_alloc_mpol_noprof+0x39/0x80 [ 101.934062][ T5681] shmem_get_folio_gfp+0x3ff/0xd90 [ 101.934092][ T5681] shmem_write_begin+0xfc/0x1f0 [ 101.934191][ T5681] generic_perform_write+0x186/0x490 [ 101.934216][ T5681] ? _raw_spin_unlock+0x9/0x30 [ 101.934247][ T5681] shmem_file_write_iter+0xc5/0xf0 [ 101.934309][ T5681] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 101.934342][ T5681] vfs_write+0x57d/0x990 [ 101.934367][ T5681] ksys_write+0xdc/0x1a0 [ 101.934388][ T5681] __x64_sys_write+0x40/0x50 [ 101.934407][ T5681] x64_sys_call+0x27e1/0x3020 [ 101.934474][ T5681] do_syscall_64+0x136/0x3c0 [ 101.934578][ T5681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.934603][ T5681] RIP: 0033:0x7f14e572e6ce [ 101.934622][ T5681] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.934678][ T5681] RSP: 002b:00007f14e41c6da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 101.934700][ T5681] RAX: ffffffffffffffda RBX: 00007f14e41c76c0 RCX: 00007f14e572e6ce [ 101.934717][ T5681] RDX: 0000000000200000 RSI: 00007f14dbda7000 RDI: 0000000000000007 [ 101.934732][ T5681] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.934753][ T5681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 101.934764][ T5681] R13: 00007f14e41c6ee0 R14: 00007f14e41c6ea0 R15: 00007f14dbda7000 [ 101.934851][ T5681] [ 102.145222][ T28] audit: type=1400 audit(1784825330.975:872): avc: denied { open } for pid=5674 comm="syz.6.477" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 102.183580][ T5679] loop0: detected capacity change from 0 to 256 [ 102.201386][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.210051][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.221831][ T5636] bridge_slave_1: entered allmulticast mode [ 102.240412][ T5672] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 102.253378][ T5672] EXT4-fs (loop7): 1 truncate cleaned up [ 102.262342][ T5636] bridge_slave_1: entered promiscuous mode [ 102.262356][ T5679] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 102.305899][ T5672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.354890][ T1912] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 102.379501][ T1912] ip6gretap1 (unregistering): left allmulticast mode [ 102.401862][ T28] audit: type=1400 audit(1784825331.485:873): avc: denied { write } for pid=5638 comm="syz.7.470" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.402475][ T5675] loop6: detected capacity change from 0 to 512 [ 102.444175][ T28] audit: type=1400 audit(1784825331.485:874): avc: denied { write } for pid=5638 comm="syz.7.470" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.468634][ T1912] bond0 (unregistering): Released all slaves [ 102.484472][ T1912] bond1 (unregistering): Released all slaves [ 102.499187][ T28] audit: type=1400 audit(1784825331.485:875): avc: denied { rename } for pid=5638 comm="syz.7.470" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.522611][ T5675] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.544532][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.556235][ T5675] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 102.573016][ T5675] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.595708][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.613716][ T1912] tipc: Left network mode [ 102.617871][ T5675] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)! [ 102.619118][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 102.638936][ T5675] EXT4-fs (loop6): group descriptors corrupted! [ 102.662545][ T5636] team0: Port device team_slave_0 added [ 102.787270][ T5636] team0: Port device team_slave_1 added [ 102.793804][ T4543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.837841][ T5679] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 102.847561][ T5679] FAT-fs (loop0): Filesystem has been set read-only [ 102.854266][ T5679] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 102.878556][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.902165][ T5711] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.938645][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.225038][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.299849][ T5718] loop0: detected capacity change from 0 to 2048 [ 103.332744][ T1912] hsr_slave_0: left promiscuous mode [ 103.376276][ T5718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.406967][ T1912] hsr_slave_1: left promiscuous mode [ 103.418463][ T5717] loop7: detected capacity change from 0 to 256 [ 103.425181][ T5714] loop6: detected capacity change from 0 to 512 [ 103.580595][ T5714] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 103.597283][ T5717] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.731977][ T163] smc: removing ib device sz1 [ 103.741231][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.757719][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.852462][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.930150][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.985615][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 103.985631][ T28] audit: type=1400 audit(1784825333.065:879): avc: denied { write } for pid=5710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.033629][ T5734] netlink: 'syz.6.488': attribute type 3 has an invalid length. [ 104.068544][ T5734] netlink: 132 bytes leftover after parsing attributes in process `syz.6.488'. [ 104.100638][ T5717] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 104.119053][ T5636] hsr_slave_0: entered promiscuous mode [ 104.129134][ T28] audit: type=1400 audit(1784825333.215:880): avc: denied { write } for pid=5736 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.157812][ T5717] FAT-fs (loop7): Filesystem has been set read-only [ 104.170749][ T5636] hsr_slave_1: entered promiscuous mode [ 104.190539][ T5717] FAT-fs (loop7): error, corrupted file size (i_pos 196, 16779008) [ 104.210208][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 104.226980][ T5636] Cannot create hsr debugfs directory [ 104.283928][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 104.431111][ T5743] macvtap1: entered allmulticast mode [ 104.450981][ T5743] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 104.470977][ T5743] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 104.479555][ T5743] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.491308][ T5743] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 104.502973][ T5748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.519029][ T28] audit: type=1400 audit(1784825333.605:881): avc: denied { write } for pid=5747 comm="syz.2.491" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 104.569044][ T126] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 104.586396][ T28] audit: type=1400 audit(1784825333.605:882): avc: denied { write } for pid=5747 comm="syz.2.491" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 104.627407][ T5753] netlink: 'syz.0.487': attribute type 8 has an invalid length. [ 104.658160][ T5753] sch_fq: defrate 0 ignored. [ 104.675588][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 104.676502][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.694685][ T5762] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.487: inode has both inline data and extents flags [ 104.708240][ T28] audit: type=1400 audit(1784825333.665:883): avc: denied { write } for pid=5742 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.731195][ T5762] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 104.732021][ T5762] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.487: couldn't read orphan inode 15 (err -117) [ 104.732277][ T28] audit: type=1400 audit(1784825333.735:884): avc: denied { write } for pid=5766 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 104.741242][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 104.741257][ C1] EXT4-fs (loop0): initial error at time 1784825333: ext4_orphan_get:1399 [ 104.753530][ T28] audit: type=1400 audit(1784825333.735:885): avc: denied { create } for pid=5767 comm="syz.7.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 104.774716][ C1] : inode 15 [ 104.774729][ C1] EXT4-fs (loop0): last error at time 1784825333: ext4_orphan_get:1399: inode 15 [ 104.812394][ T5762] loop0: lost filesystem error report for type 5 error -117 [ 104.851373][ T28] audit: type=1400 audit(1784825333.795:886): avc: denied { setopt } for pid=5767 comm="syz.7.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 104.881002][ T5762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.919762][ T5776] netlink: 'syz.2.493': attribute type 8 has an invalid length. [ 104.932038][ T5776] sch_fq: defrate 0 ignored. [ 104.961230][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.969211][ T5636] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 104.997736][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.004701][ T5776] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.493: inode has both inline data and extents flags [ 105.004752][ T5776] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.005021][ T5776] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.493: couldn't read orphan inode 15 (err -117) [ 105.005058][ T5776] loop2: lost filesystem error report for type 5 error -117 [ 105.007105][ T5636] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 105.031404][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.032073][ T5636] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 105.036227][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.059564][ T5776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.090027][ T5754] bond0: (slave bond_slave_1): Releasing backup interface [ 105.116986][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.157657][ T5743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=5743 comm=syz.6.490 [ 105.179790][ T5636] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 105.181116][ T28] audit: type=1400 audit(1784825334.255:887): avc: denied { write } for pid=5778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 105.184753][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.221923][ T5794] netlink: 24 bytes leftover after parsing attributes in process `syz.0.496'. [ 105.225340][ T28] audit: type=1400 audit(1784825334.305:888): avc: denied { append } for pid=5793 comm="syz.0.496" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 105.306036][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 105.319726][ T5798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.495'. [ 105.422767][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.441747][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.449342][ T5819] netlink: 'syz.2.499': attribute type 3 has an invalid length. [ 105.451201][ T1912] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.464320][ T1912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.472218][ T5819] netlink: 132 bytes leftover after parsing attributes in process `syz.2.499'. [ 105.599591][ T1912] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.606688][ T1912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.734558][ T5817] set_capacity_and_notify: 3 callbacks suppressed [ 105.734615][ T5817] loop6: detected capacity change from 0 to 4096 [ 105.757287][ T5830] xt_ecn: cannot match TCP bits for non-tcp packets [ 105.892715][ T5817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.260199][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.567835][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.682194][ T5853] loop2: detected capacity change from 0 to 128 [ 106.758779][ T5858] capability: warning: `syz.6.502' uses 32-bit capabilities (legacy support in use) [ 106.781023][ T5861] loop7: detected capacity change from 0 to 1024 [ 106.801832][ T5861] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.860441][ T5861] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.915198][ T5861] netlink: 20 bytes leftover after parsing attributes in process `syz.7.504'. [ 106.975833][ T5636] veth0_vlan: entered promiscuous mode [ 106.993190][ T5871] netlink: 'syz.6.505': attribute type 8 has an invalid length. [ 107.018436][ T5871] sch_fq: defrate 0 ignored. [ 107.037645][ T5636] veth1_vlan: entered promiscuous mode [ 107.088164][ T5871] loop6: detected capacity change from 0 to 512 [ 107.114230][ T5636] veth0_macvtap: entered promiscuous mode [ 107.144391][ T5871] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.505: inode has both inline data and extents flags [ 107.173195][ T5636] veth1_macvtap: entered promiscuous mode [ 107.192928][ T5877] FAULT_INJECTION: forcing a failure. [ 107.192928][ T5877] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 107.216152][ T5871] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.216434][ T5871] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.505: couldn't read orphan inode 15 (err -117) [ 107.225746][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 107.225776][ C0] EXT4-fs (loop6): initial error at time 1784825336: ext4_orphan_get:1399: inode 15 [ 107.225841][ C0] EXT4-fs (loop6): last error at time 1784825336: ext4_orphan_get:1399: inode 15 [ 107.226148][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz.2.507 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 107.226205][ T5877] Tainted: [W]=WARN [ 107.226213][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 107.226225][ T5877] Call Trace: [ 107.226231][ T5877] [ 107.226239][ T5877] __dump_stack+0x1d/0x30 [ 107.226285][ T5877] dump_stack_lvl+0x95/0xd0 [ 107.226307][ T5877] dump_stack+0x15/0x1b [ 107.226327][ T5877] should_fail_ex+0x25e/0x270 [ 107.226358][ T5877] should_fail+0xb/0x20 [ 107.226384][ T5877] should_fail_usercopy+0x1a/0x20 [ 107.226442][ T5877] _copy_from_user+0x1c/0xb0 [ 107.226464][ T5877] __sys_bpf+0x1e2/0xc30 [ 107.226494][ T5877] ? get_pid_task+0x92/0xc0 [ 107.226565][ T5877] ? vfs_write+0x780/0x990 [ 107.226591][ T5877] __x64_sys_bpf+0x69/0x80 [ 107.226692][ T5877] x64_sys_call+0x10cb/0x3020 [ 107.226785][ T5877] do_syscall_64+0x136/0x3c0 [ 107.226830][ T5877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.226895][ T5877] RIP: 0033:0x7f14e576de99 [ 107.226912][ T5877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.226931][ T5877] RSP: 002b:00007f14e41c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 107.226952][ T5877] RAX: ffffffffffffffda RBX: 00007f14e59f5fa0 RCX: 00007f14e576de99 [ 107.227046][ T5877] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000005 [ 107.227060][ T5877] RBP: 00007f14e41c7090 R08: 0000000000000000 R09: 0000000000000000 [ 107.227074][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.227088][ T5877] R13: 00007f14e59f6038 R14: 00007f14e59f5fa0 R15: 00007ffe51be2f28 [ 107.227145][ T5877] [ 107.228118][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.255807][ T5871] loop6: lost filesystem error report for type 5 error -117 [ 107.264400][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.279637][ T5871] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.298130][ T68] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.347995][ T4543] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.355289][ T68] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.460595][ T5879] loop2: detected capacity change from 0 to 512 [ 107.514528][ T5879] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 107.549074][ T68] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.572530][ T68] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.583829][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.631711][ T5890] loop6: detected capacity change from 0 to 1024 [ 107.661232][ T5890] EXT4-fs: inline encryption not supported [ 107.693420][ T5890] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 107.706891][ T5890] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.511: lblock 1 mapped to illegal pblock 1 (length 1) [ 107.725576][ T5890] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 107.727348][ T5890] EXT4-fs (loop6): Remounting filesystem read-only [ 107.736430][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 107.736446][ C1] EXT4-fs (loop6): initial error at time 1784825336: ext4_map_blocks:833: inode 3: block 1 [ 107.736505][ C1] EXT4-fs (loop6): last error at time 1784825336: ext4_map_blocks:833: inode 3: block 1 [ 107.773140][ T5890] EXT4-fs (loop6): 1 orphan inode deleted [ 107.777216][ T4737] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 107.779651][ T5890] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.965858][ T5908] syzkaller0: entered promiscuous mode [ 107.989503][ T5908] syzkaller0: entered allmulticast mode [ 107.999730][ T5904] loop0: detected capacity change from 0 to 512 [ 108.036013][ T5881] bond0: (slave bond_slave_1): Releasing backup interface [ 108.046419][ T5904] EXT4-fs (loop0): 1 orphan inode deleted [ 108.055382][ T5904] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.095539][ T5884] loop7: detected capacity change from 0 to 128 [ 108.133755][ T5884] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.168707][ T5884] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.189499][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.251959][ T5918] loop8: detected capacity change from 0 to 1764 [ 108.257828][ T5921] loop0: detected capacity change from 0 to 1024 [ 108.276430][ T5918] program syz.8.516 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.291095][ T5921] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.340823][ T5921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.355199][ T4543] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.375499][ T5921] netlink: 20 bytes leftover after parsing attributes in process `syz.0.517'. [ 108.437407][ T5927] netlink: 24 bytes leftover after parsing attributes in process `syz.7.518'. [ 108.450238][ T5927] FAULT_INJECTION: forcing a failure. [ 108.450238][ T5927] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.464133][ T5927] CPU: 0 UID: 0 PID: 5927 Comm: syz.7.518 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 108.464162][ T5927] Tainted: [W]=WARN [ 108.464168][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 108.464179][ T5927] Call Trace: [ 108.464186][ T5927] [ 108.464266][ T5927] __dump_stack+0x1d/0x30 [ 108.464293][ T5927] dump_stack_lvl+0x95/0xd0 [ 108.464313][ T5927] dump_stack+0x15/0x1b [ 108.464362][ T5927] should_fail_ex+0x25e/0x270 [ 108.464428][ T5927] should_fail+0xb/0x20 [ 108.464451][ T5927] should_fail_usercopy+0x1a/0x20 [ 108.464523][ T5927] _copy_to_user+0x20/0xa0 [ 108.464563][ T5927] simple_read_from_buffer+0xb5/0x130 [ 108.464589][ T5927] proc_fail_nth_read+0x10e/0x150 [ 108.464614][ T5927] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 108.464640][ T5927] vfs_read+0x18e/0x7c0 [ 108.464675][ T5927] ? __rcu_read_unlock+0x4e/0x70 [ 108.464719][ T5927] ? __fget_files+0x184/0x1c0 [ 108.464757][ T5927] ? mutex_lock+0x57/0x90 [ 108.464784][ T5927] ksys_read+0xdc/0x1a0 [ 108.464806][ T5927] __x64_sys_read+0x40/0x50 [ 108.464827][ T5927] x64_sys_call+0x2886/0x3020 [ 108.464855][ T5927] do_syscall_64+0x136/0x3c0 [ 108.464927][ T5927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.464948][ T5927] RIP: 0033:0x7f4def72e6ce [ 108.464966][ T5927] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 108.464993][ T5927] RSP: 002b:00007f4dee1c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 108.465014][ T5927] RAX: ffffffffffffffda RBX: 00007f4dee1c76c0 RCX: 00007f4def72e6ce [ 108.465028][ T5927] RDX: 000000000000000f RSI: 00007f4dee1c70a0 RDI: 0000000000000006 [ 108.465044][ T5927] RBP: 00007f4dee1c7090 R08: 0000000000000000 R09: 0000000000000000 [ 108.465057][ T5927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.465069][ T5927] R13: 00007f4def9f6038 R14: 00007f4def9f5fa0 R15: 00007ffcedccd9b8 [ 108.465133][ T5927] [ 108.673911][ T5935] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.680710][ T5935] EXT4-fs: Ignoring removed i_version option [ 108.691696][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.701538][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.720637][ T5935] EXT4-fs (loop8): 1 orphan inode deleted [ 108.726830][ T5935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.804869][ T5943] netlink: 'syz.6.521': attribute type 8 has an invalid length. [ 108.816618][ T5943] sch_fq: defrate 0 ignored. [ 108.884686][ T5945] xt_ecn: cannot match TCP bits for non-tcp packets [ 109.100404][ T5948] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.524: iget: bad i_size value: 38620345925642 [ 109.118953][ T5943] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.521: inode has both inline data and extents flags [ 109.180659][ T5948] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.181000][ T5948] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.524: couldn't read orphan inode 15 (err -117) [ 109.190240][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 109.190262][ C1] EXT4-fs (loop0): initial error at time 1784825338: ext4_orphan_get:1399: inode 15 [ 109.190297][ C1] EXT4-fs (loop0): last error at time 1784825338: ext4_orphan_get:1399: inode 15 [ 109.237683][ T5943] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 109.238775][ T5943] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.521: couldn't read orphan inode 15 (err -117) [ 109.248063][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 109.248128][ C1] EXT4-fs (loop6): initial error at time 1784825338: ext4_orphan_get:1399: inode 15 [ 109.248179][ C1] EXT4-fs (loop6): last error at time 1784825338: ext4_orphan_get:1399: inode 15 [ 109.330540][ T5636] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.424407][ T5948] loop0: lost filesystem error report for type 5 error -117 [ 109.426278][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.452786][ T5943] loop6: lost filesystem error report for type 5 error -117 [ 109.461310][ T5943] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.581954][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 109.581991][ T28] audit: type=1400 audit(1784825338.665:900): avc: denied { bind } for pid=5947 comm="syz.0.524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 109.612106][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.651065][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.970304][ T5964] netlink: 64 bytes leftover after parsing attributes in process `syz.7.529'. [ 110.031197][ T5967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.040601][ T5961] tipc: Enabled bearer , priority 10 [ 110.084480][ T5969] netlink: 'syz.7.530': attribute type 10 has an invalid length. [ 110.092516][ T5969] netlink: 40 bytes leftover after parsing attributes in process `syz.7.530'. [ 110.101746][ T5969] dummy0: entered promiscuous mode [ 110.117610][ T5969] dummy0: entered allmulticast mode [ 110.124328][ T5969] bridge0: port 3(dummy0) entered blocking state [ 110.131736][ T5969] bridge0: port 3(dummy0) entered disabled state [ 110.140174][ T5969] bridge0: port 3(dummy0) entered blocking state [ 110.146642][ T5969] bridge0: port 3(dummy0) entered forwarding state [ 110.191599][ T5973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.257445][ T5973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.299178][ T28] audit: type=1400 audit(1784825339.365:901): avc: denied { write } for pid=5970 comm="syz.0.532" path="socket:[14528]" dev="sockfs" ino=14528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.337170][ T5973] netlink: 20 bytes leftover after parsing attributes in process `syz.6.533'. [ 110.548027][ T28] audit: type=1400 audit(1784825339.625:902): avc: denied { write } for pid=5972 comm="syz.6.533" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 110.619175][ T4435] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.718478][ T28] audit: type=1400 audit(1784825339.805:903): avc: denied { mounton } for pid=5986 comm="syz.7.535" path="/39/file0" dev="tmpfs" ino=228 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 111.155506][ T3415] tipc: Node number set to 3031755687 [ 115.542610][ T28] audit: type=1400 audit(1784825344.625:904): avc: denied { write } for pid=5997 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.567146][ T28] audit: type=1400 audit(1784825344.625:905): avc: denied { write } for pid=6008 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.767403][ T28] audit: type=1400 audit(1784825344.855:906): avc: denied { write } for pid=6011 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.793842][ T28] audit: type=1400 audit(1784825344.865:907): avc: denied { write } for pid=6022 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 115.980950][ T28] audit: type=1400 audit(1784825345.065:908): avc: denied { write } for pid=6025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.004354][ T28] audit: type=1400 audit(1784825345.065:909): avc: denied { write } for pid=6036 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.027000][ T28] audit: type=1400 audit(1784825346.115:910): avc: denied { write } for pid=6039 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.049944][ T28] audit: type=1400 audit(1784825346.115:911): avc: denied { write } for pid=6050 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.496941][ T28] audit: type=1400 audit(1784825378.575:912): avc: denied { read } for pid=6059 comm="syz.0.536" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.586260][ T28] audit: type=1400 audit(1784825378.575:913): avc: denied { open } for pid=6059 comm="syz.0.536" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 149.891630][ T39] Bluetooth: hci0: Frame reassembly failed (-84) [ 150.063561][ T6074] lo speed is unknown, defaulting to 1000 [ 150.597414][ T28] audit: type=1400 audit(1784825378.625:914): avc: denied { bind } for pid=6059 comm="syz.0.536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 151.177739][ T6107] netlink: 112 bytes leftover after parsing attributes in process `syz.0.542'. [ 151.266336][ T28] audit: type=1400 audit(1784825380.115:915): avc: denied { write } for pid=6087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.289320][ T28] audit: type=1400 audit(1784825380.135:916): avc: denied { write } for pid=6101 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.311210][ T28] audit: type=1400 audit(1784825380.255:917): avc: denied { write } for pid=6103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.335237][ T28] audit: type=1400 audit(1784825380.295:918): avc: denied { write } for pid=6116 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 151.479039][ T6125] set_capacity_and_notify: 4 callbacks suppressed [ 151.479057][ T6125] loop2: detected capacity change from 0 to 512 [ 151.557244][ T6125] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 151.706354][ T6128] lo speed is unknown, defaulting to 1000 [ 151.791255][ T3554] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.999885][ T1912] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 152.009797][ T6130] macvtap1: entered allmulticast mode [ 152.053367][ T6130] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 152.153857][ T6130] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 152.162568][ T6130] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 153.520967][ T6130] netdevsim netdevsim8 netdevsim0: left allmulticast mode [ 153.603377][ T3385] netdevsim netdevsim8 netdevsim0: left promiscuous mode [ 153.813324][ T6145] netlink: 52 bytes leftover after parsing attributes in process `syz.2.550'. [ 153.854014][ T6145] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.862163][ T6145] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.890403][ T6134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6134 comm=syz.8.546 [ 154.416211][ T6167] netlink: 'syz.6.554': attribute type 3 has an invalid length. [ 154.424284][ T6167] netlink: 132 bytes leftover after parsing attributes in process `syz.6.554'. [ 154.492223][ T6152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=6152 comm=syz.7.552 [ 154.533837][ T6170] netlink: 'syz.6.557': attribute type 3 has an invalid length. [ 154.552992][ T28] audit: type=1326 audit(1784825383.635:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.595660][ T6170] netlink: 132 bytes leftover after parsing attributes in process `syz.6.557'. [ 154.613842][ T6174] netlink: 'syz.2.559': attribute type 1 has an invalid length. [ 154.636110][ T28] audit: type=1326 audit(1784825383.635:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.672846][ T6178] vhci_hcd vhci_hcd.4: default hub control req: 0000 v0000 i0000 l0 [ 154.690085][ T28] audit: type=1326 audit(1784825383.635:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.730254][ T28] audit: type=1326 audit(1784825383.635:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.755630][ T28] audit: type=1326 audit(1784825383.635:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.762754][ T6174] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.802224][ T28] audit: type=1400 audit(1784825383.635:924): avc: denied { write } for pid=6164 comm="syz.8.556" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.836898][ T28] audit: type=1400 audit(1784825383.635:925): avc: denied { read } for pid=6164 comm="syz.8.556" path="socket:[15510]" dev="sockfs" ino=15510 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 154.879013][ T28] audit: type=1326 audit(1784825383.705:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 154.906833][ T28] audit: type=1326 audit(1784825383.705:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05c8b6de99 code=0x7ffc0000 [ 155.069696][ T6185] lo speed is unknown, defaulting to 1000 [ 155.206400][ T28] audit: type=1326 audit(1784825383.705:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6164 comm="syz.8.556" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05c8b2e6ce code=0x7ffc0000 [ 155.377527][ T6174] bond2: (slave geneve2): making interface the new active one [ 155.453808][ T6174] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 155.851984][ T6193] loop2: detected capacity change from 0 to 512 [ 155.924712][ T6193] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 156.308172][ T4737] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 157.327993][ T6209] loop2: detected capacity change from 0 to 256 [ 158.147620][ T6209] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.339326][ T6215] lo speed is unknown, defaulting to 1000 [ 160.148413][ T6230] loop8: detected capacity change from 0 to 512 [ 160.202292][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.267528][ T6209] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 160.277377][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.314663][ T6230] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.331056][ T6230] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 160.340616][ T6209] FAT-fs (loop2): Filesystem has been set read-only [ 160.349109][ T6238] sch_fq: defrate 0 ignored. [ 160.382102][ T6209] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 160.392513][ T2983] ================================================================== [ 160.400621][ T2983] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 160.408982][ T2983] [ 160.411312][ T2983] write to 0xffff88811c49ded0 of 8 bytes by task 6072 on cpu 1: [ 160.418948][ T2983] inode_set_ctime_current+0x600/0x8e0 [ 160.424433][ T2983] simple_unlink+0x2d/0x80 [ 160.428833][ T2983] shmem_unlink+0x12d/0x140 [ 160.433339][ T2983] vfs_unlink+0x1c3/0x490 [ 160.437649][ T2983] filename_unlinkat+0x1dc/0x410 [ 160.442579][ T2983] __se_sys_unlink+0x2b/0xe0 [ 160.447158][ T2983] __x64_sys_unlink+0x1f/0x30 [ 160.451814][ T2983] x64_sys_call+0x2eb6/0x3020 [ 160.456476][ T2983] do_syscall_64+0x136/0x3c0 [ 160.461046][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.466925][ T2983] [ 160.469244][ T2983] read to 0xffff88811c49ded0 of 8 bytes by task 2983 on cpu 0: [ 160.476764][ T2983] atime_needs_update+0x2ef/0x3e0 [ 160.481795][ T2983] touch_atime+0x4a/0x300 [ 160.486137][ T2983] do_readlinkat+0x137/0x2f0 [ 160.490736][ T2983] __x64_sys_readlink+0x47/0x60 [ 160.495584][ T2983] x64_sys_call+0x2b51/0x3020 [ 160.500255][ T2983] do_syscall_64+0x136/0x3c0 [ 160.504835][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.510719][ T2983] [ 160.513026][ T2983] value changed: 0x000000006a624628 -> 0x000000006a62462d [ 160.520119][ T2983] [ 160.522429][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 160.528571][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 160.538977][ T2983] Tainted: [W]=WARN [ 160.542759][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/13/2026 [ 160.552804][ T2983] ================================================================== [ 160.695799][ T6230] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.