last executing test programs: 14m9.554153208s ago: executing program 32 (id=90): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) dup3(0xffffffffffffffff, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000100)="7a9cfa15105fe03b2fe6d5ea86b0048ea2622304419e2004d0decc38f78b1622cfbb7cceee2c92099e7bd19f64c488c49f13c05b7840b781d0c09f22b71fba5f096c16ddde36abc570765a7da0de61770075ef3e94dd37455f8ffd5bc0f9d1b1c1b62e6107f719", 0x67}]) 13m45.98108549s ago: executing program 33 (id=251): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r1 = getpgrp(0xffffffffffffffff) ioprio_set$pid(0x2, r1, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r2, 0x0, 0xffffffffffff8000, 0x0) close(r5) r6 = openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) unshare(0x22020400) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0/file0\x00', 0x200000, &(0x7f0000000180)={[{@minixdf}, {}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@noinit_itable}, {@resgid}, {@dioread_nolock}, {@debug}, {@noblock_validity}, {@nomblk_io_submit}], [{@subj_user={'subj_user', 0x3d, 'bsddf'}}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_user={'obj_user', 0x3d, 'ext4\x00'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}]}, 0xfe, 0x576, &(0x7f00000006c0)="$eJzs3d9rW1UcAPDvTZv91nUwhvoghT1YmUvX1h8ThM0XQXQ40PcZ2qyMpsto0rHWwbYH9+KLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5KY3XbYmbdplS2s+H7jLOfee7NyTc78n5/4oCWBgjab/5CJejYhvk4jDLduGI9s4ulpu5dH16XRJol7//K8kkmxds3ySvR7MMq9ExG9fR5zIra+3urQ8VyyXSwtZfrw2f2W8urR88tJ8cbY0W7o8OZX0uq1vnv/nh8/ufXz6m+Mr3//y4MidJM7GoWxbazuewc3WzGiMZp9JPs4+VXCiB5XtJD3vLF6IoSzO85GOAYdjKIt64P/vRkTUgQGViH8YUM15QPPcvkfnwbvGww9XT4DWt3949dpI7GucGx1YSZ44M0rPd0d6UH9ax69/3r2TLrHJdYgb2euhHtQLcPNWRJwaHl4//iXZ+Ld9pxoXjzf2dB2D9v0D/XQvnf+81W7+k1ub/0Sb+c/BNrG7HZvHf+5BD6rpKJ3/fdB2/rs2dI0MZbmXGnO+fHLxUrl0KiJejoixyO9N8xvdzzm9cr/eaVvr/C9d0vqbc8FsPx4M733yPTPFWvFZ2tzq4a2I19rOf5O1/k/a9H/6eZzvso5jpbuvd9q2efufr/rPEW+07f/Hd7SS9vcnp06/MzX5/nvvjjeOh/HmUbHe37eP/d6p/rGP+tv+tP8PbNz+kaT1fm1163X8tO/fUqdt2z3+9yRfNNJ7snXXirXawkTEnuTT9esnH7+3mW+WT9s/dnzj8a/d8b8/Ir7ssv23j97uWLTfx3/a/pkt9f/WE/c/+erHTvV31/9vN1Jj2Zpuxr9ud/BZPjsAAAAAAADYaXKN50mTXGEtncsVCqvPdxyNA7lypVo7cbGyeHlm9bnTkcjnmne6D7c8DzGRPQ/bzE8+lZ+KiCMR8d3Q/ka+MF0pz/S78QAAAAAAAAAAAAAAAAAAALBDHOzw9/8Rkfwx1O+9A547P/kNg2vT+O/FLz0BO5Lvfxhc4h8Gl/iHwSX+YXCJfxhc4h8Gl/iHwSX+AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKfOnzuXLvWVR9en0/zM1aXFucrVkzOl6lxhfnG6MF1ZuFKYrVRmy6XCdGV+s/+vXKlcmZiMxWvjtVK1Nl5dWr4wX1m8XLtwab44W7pQyr+QVgEAAAAAAAAAAAAAAAAAAMDuUl1aniuWy6WFLhL52ELh3ZDYHxFdFD4T/d/V55o4kx0M23r78E5phUTHxL5tdG6fByYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaPFfAAAA//8Mpy++") r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000040)={0x0, r7, 0x0, 0x18, 0x4, 0x1000000000000}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r9, 0xffffffffffffffff, 0x35, 0x0, @val=@iter={0x0}}, 0x20) write$cgroup_int(r6, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40009, 0x1040, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, @perf_bp={0x0, 0xf}, 0x102000, 0x9, 0x0, 0x6, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) 13m37.531552725s ago: executing program 34 (id=309): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0xffc99a3b) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x4, 0x0, 0x9, 0x7, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x209, 0x2, @perf_config_ext={0x8, 0xfffffffffffffff2}, 0x0, 0xfffffffffffffffe, 0x10ffe, 0x5, 0x2, 0x4, 0x4, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdffffffffffffff7, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0xb, 0x8, 0x0, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, @perf_config_ext={0x0, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xbb1, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) lsm_list_modules(&(0x7f0000002600)=[0x0], 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_open_dev$usbfs(0x0, 0x77, 0x1013c1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)="48000000140081fb7059ae08060c040002fff903905800000000000000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc06020000004603b886a5e54f8f", 0x48}, {&(0x7f0000000040)="1496668e677f4e8e91566cf504f4c4d0fe3c41", 0x13}, {&(0x7f0000000880)="88bfef898b2fbf3537a469e32cba14c56a135854a06487fa4eae526d4218f7fe2ac87a312797705d2746e49f75270eaa9e3e98523986a1c7653a5ae13adfc442ce34ee4fd6d0d67cae2feddc6671a2b3c93729fb6257c2de7a95bc3be270636920dcf4a73cb5195087e5a816aa3317a49ce9bfd7617c7e9f47df90c0fcfe9d3bd9ae313200a94177a371ef2e27c1a6822a8ad6cc5f996190d7fc50d79626f7adac15a84f977548b1718e67b1d3bccf99a89003981e", 0xb5}], 0x3}, 0x4000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000380), 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000a6b000/0x1000)=nil, &(0x7f0000cf1000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000ca2000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000167000/0x3000)=nil, 0x0}, 0x68) syz_open_dev$usbmon(0x0, 0x1000, 0x80) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r1], 0x3c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r4, 0x4a8e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0xfffffffc}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100050808004149014006040800", 0x58}], 0x1) 12m16.4013547s ago: executing program 35 (id=873): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000224fe5c730000000000000001000000050001000600000005000400000000000900020073797a31000000000500050002000000140003006861b75d7c22763e20614444fa73683a"], 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000540)=0x84) 11m40.702022277s ago: executing program 36 (id=983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) geteuid() r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x1}, 0x1020, 0x1ff, 0x4, 0x9, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x0, 0x99, 0x7, 0x0, 0x0, 0x48233, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_bp={&(0x7f0000000040), 0xd}, 0x986, 0xfc, 0x4, 0x8, 0x81, 0x7, 0x9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, r1, 0xffffffffffffffff, r0, 0x28fd2b534d43c0ee) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_clone(0x400b000, 0x0, 0xfffffffffffffded, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mbind(&(0x7f00006dc000/0x3000)=nil, 0x3000, 0x4001, &(0x7f0000000240)=0x40000000000ff, 0x603e, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) personality(0x500006) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x275a, 0x0) syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nodots}, {@dots}, {@nodots}, {@fat=@errors_continue}, {@nodots}, {@fat=@flush}, {@dots}]}, 0x1, 0x562, &(0x7f00000010c0)="$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") r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'dummy0\x00', &(0x7f0000000280)=@ethtool_sset_info={0x37, 0x1c, 0x5, [0x6, 0x7f, 0x10]}}) write$binfmt_elf32(r6, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x78) ioctl$TIOCL_SETVESABLANK(r6, 0x541c, &(0x7f0000000180)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 11m30.706224105s ago: executing program 37 (id=1121): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) add_key$keyring(&(0x7f0000000080), &(0x7f0000001140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) (async, rerun: 64) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xed, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd900, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0xffff888237d05000, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x8) (rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1cf, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x6, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r1 = syz_io_uring_setup(0x6af7, &(0x7f0000000580)={0x0, 0xbbda, 0x0, 0x0, 0x353}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000e86000/0x2000)=nil, &(0x7f000098b000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async, rerun: 64) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 32) r2 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async, rerun: 32) pipe(&(0x7f00000002c0)) (rerun: 32) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = getpid() mount$cgroup2(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000700), 0xc0, &(0x7f0000000140)=ANY=[@ANYBLOB="646566636f6e74657874f79fd54c"]) (async) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x4002004) (async, rerun: 64) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 10m47.747435729s ago: executing program 38 (id=1381): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x503, 0x800004, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff}, [@IFA_LABEL={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFA_CACHEINFO={0x14, 0x6, {0x3ff, 0xfffffffc}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc090}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newchain={0x24, 0x64, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff1, 0xc}, {0x0, 0xc}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20040000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000700b00000000000000000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x6dd30ecb6f81936c, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r4}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r4, 0x68, &(0x7f0000000200)}, 0x10) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={0x0, @xdp={0x2c, 0x0, r3, 0x2d}, @tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1}}, @vsock={0x28, 0x0, 0x0, @local}, 0x1ff, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='veth0\x00', 0x3, 0x80000000, 0x6}) 10m0.551146156s ago: executing program 39 (id=1556): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x15144, 0x3ff, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x80b04) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0x0, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000021, 0x0, 0x0, 0x3, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x5e05, 0x5bd1, 0x1c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shutdown(0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0xa0582) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf250107000000000000000001000a00000008000b00736970000c00070000000000000000000800090064000000090006006e6f6e650000000008000800000000000800050001000000"], 0x58}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x88a, &(0x7f00000000c0)={[{@errors_remount}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@resuid}, {@grpjquota, 0x22}, {@grpquota}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x470, &(0x7f0000000500)="$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") r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x8082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) readv(r3, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/84, 0x54}], 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="28000000100083b328010028bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f636f6d70726573739cdf4bbd3c08fe226865636b3d7374726963742c6d6f64653d30783030303030303030303030303030306f64653d3078303030303030303030303030306137632c757466382c757466e74632eba896382ebc4ae78d89"], 0x0, 0x569, &(0x7f0000000200)="$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") r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) 9m6.544556642s ago: executing program 0 (id=1975): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000000111401072bbd7000fddbdf2508004b"], 0x18}}, 0x84) socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}, 0x40000002) socket(0x28, 0x5, 0x0) socket$netlink(0x10, 0x3, 0xf) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x24008821}, 0x802) 9m6.541330502s ago: executing program 0 (id=1976): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000f83000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m6.456739464s ago: executing program 0 (id=1979): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 9m6.237376468s ago: executing program 0 (id=1981): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='attr/prev\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000740)=""/4100, 0x1004}], 0x1, 0x145, 0x0) socket$inet(0xa, 0x1, 0x0) (async) r3 = socket$inet(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000700)) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x2d8, 0x98, 0x2d8, 0x98, 0x138, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@multicast1, @local, 0x0, 0x0, 'wg1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private2, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1fb, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) fstat(r0, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000200), 0xb, 0x40000) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r1) madvise(&(0x7f0000000000/0x4000)=nil, 0xfffffffffffffff4, 0x0) pwrite64(r1, &(0x7f0000000140)='+', 0x1, 0x2cf2) (async) pwrite64(r1, &(0x7f0000000140)='+', 0x1, 0x2cf2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf20, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0xb}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) (async) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000680), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x30, r5, 0x2000) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) (async) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x101001, 0x0) ioctl$PTP_PEROUT_REQUEST(r6, 0x40043d0d, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f00000001c0)={'sit0\x00', &(0x7f00000000c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xac, 0x14, 0x14, 0x2a}, 0x16, 0x10}}) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) (async) fcntl$getownex(r5, 0x10, &(0x7f0000000000)) 9m5.948549305s ago: executing program 0 (id=1985): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffffa5}, &(0x7f0000000000)=0x24) 9m5.675097601s ago: executing program 0 (id=1990): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001383000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m5.674846731s ago: executing program 40 (id=1990): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500001383000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7m52.816608483s ago: executing program 2 (id=2609): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1000000, &(0x7f0000000180)={[{@inlinecrypt}, {@init_itable}]}, 0xfe, 0x57b, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_ethernet(0x60, &(0x7f0000000100)=ANY=[], 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x21, 0xfffffffe, 0x5, 0x81, 0x1689, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r5, 0x112, 0xa, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0xaa9d, 0x0}, 0xfffffffffffffde6) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x17, 0x2e, &(0x7f0000001000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@cb_func={0x18, 0x8, 0x4, 0x0, 0x2}, @map_val={0x18, 0xa, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @exit, @jmp={0x5, 0x1, 0x0, 0x7, 0x5, 0x1, 0xfffffffffffffffc}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2a}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x26, &(0x7f0000000440)=""/38, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xb, 0x0, 0x8}, 0x10, r9, r1, 0x5, &(0x7f0000000680)=[r0, r3, r0], &(0x7f0000000ec0)=[{0x0, 0x1, 0xe, 0x2}, {0x1, 0x5, 0xe, 0xc}, {0x0, 0x4, 0xa, 0x7}, {0x1, 0x1, 0xe, 0x7}, {0x5, 0x4, 0xe, 0x9}], 0x10, 0x1}, 0x94) setregid(r8, 0x0) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000001280)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2}}, {@nouid32}, {@resgid={'resgid', 0x3d, r8}}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}], [{@fsname={'fsname', 0x3d, '*$.}-#'}}, {@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@euid_lt={'euid<', r7}}, {@fsmagic={'fsmagic', 0x3d, 0x401}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(0xffffffffffffffff, 0x0, 0x86) socket(0xa, 0x2, 0x0) r11 = open(&(0x7f0000000540)='.\x00', 0x690800, 0x50) getdents(r11, 0x0, 0x0) fchdir(r10) unlinkat(r10, &(0x7f0000000100)='./file0\x00', 0x5f35c7b815345421) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_subtree(r12, &(0x7f0000000040), 0x2, 0x0) sendmsg$inet_sctp(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000040)=' ', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xeca, 0x8208, 0x401, 0x7f}}, @authinfo={0x18, 0x84, 0x6, {0xf04}}], 0x38, 0x80}, 0x0) 7m51.884419533s ago: executing program 2 (id=2620): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001300), 0xffffffffffffffff) getsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x4000000) capset(0x0, &(0x7f0000000e00)={0x0, 0x4, 0x4, 0x0, 0x80000, 0xffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x74}, 0x1, 0x0, 0x0, 0x40084}, 0x40005) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000801}, 0x4008010) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001000010025bd70080000000000000000", @ANYRES32=0x0, @ANYBLOB="380904000300"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 7m50.872847555s ago: executing program 2 (id=2639): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="000000ffffffb000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7m50.762858297s ago: executing program 2 (id=2640): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="18050000000004002a0a6f75c58712d80000f081c4098e5d11c791f69e572588a2f87b59e7c1c7a4874b89458c9df707316e00974258ce71bdc0eb5cd55c3c2b6883ef065502734c0845ff541617c0162ed30ceca2e49a2a2bf861d396140107b906407b8fb7944f93e59581dbdeae91d2ba3989440abfb31d5cf1c5ba09f03281f98a44905d1edeffcb9e80b5f52061be279a005639fd22f6a77f4f153c68de23acdd863501f5721cb79035972e161d4370dafe037b834fd4cc3f9bb0675966bc293b399f7e982702e298"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x102) (async) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x102) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) r3 = socket$igmp(0x2, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x22020600) (async) unshare(0x22020600) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x33f0, 0x20, 0x0, 0x399, 0x0, r4}) (async) r5 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x33f0, 0x20, 0x0, 0x399, 0x0, r4}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x23, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x55, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) io_uring_enter(r5, 0x8ae, 0x6931, 0x17, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000170a01080000000100000000020000020073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x101342, 0x105) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) connect$packet(r7, &(0x7f0000000600)={0x11, 0x0, r8, 0x1, 0x7, 0x6, @random="f2e6974fcdb6"}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) (async) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) 7m49.623271952s ago: executing program 2 (id=2648): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) syz_io_uring_setup(0x5841, &(0x7f00000000c0)={0x0, 0xabab, 0x1000, 0x2, 0x2e4}, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000280)) r4 = creat(&(0x7f0000000080)='./file1\x00', 0x1) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000000)={0x20052f9, 0xfffffff8, 0x100802, 0x2, 0x8}) 7m49.154167533s ago: executing program 2 (id=2651): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20008800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m49.147867143s ago: executing program 41 (id=2651): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$NL80211_CMD_TDLS_OPER(r0, 0x0, 0x20008800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 7m19.855890754s ago: executing program 1 (id=2852): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[], 0x38}}, 0x0) 7m19.600329769s ago: executing program 1 (id=2855): r0 = getpid() r1 = eventfd(0x2) lseek(r1, 0x200000000004, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000764000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x29f438107ec15a23, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x0, &(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0), {0x41}, &(0x7f0000000580)=""/12, 0xc, &(0x7f00000005c0)=""/237, &(0x7f00000006c0)=[0x0, 0x0, r0, r0, r0], 0x5}, 0x58) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000006b00)={0xffffffffffffffff, 0xffffffffffffffff}) wait4(r2, &(0x7f00000001c0), 0x2, &(0x7f0000000380)) setsockopt$sock_attach_bpf(r4, 0x1, 0x10, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_opts(r5, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB=';\x00\b\x00\x00\x00\x00\x00'], 0x8) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) sendto$inet6(r5, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c) listen(r5, 0x100101) accept4(r5, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000200)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7a, 0xffffffd4, 0x0, 0x0, 0x20}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x473, &(0x7f0000000280)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff60}, 0x48) syz_pidfd_open(r0, 0x0) 7m18.570502702s ago: executing program 1 (id=2861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffdd0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0xfffffffffffffdd0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) (async) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r2, 0x80045520, &(0x7f0000002a40)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@dev={0xfe, 0x80, '\x00', 0x33}}, 0x14) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x4, @perf_bp={0x0, 0x1}, 0x10eccc, 0x1224, 0x101, 0x4, 0x8, 0x200, 0x4, 0x0, 0x0, 0x0, 0x2000001030000002}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa) getgid() open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) setuid(0xee00) (async) setuid(0xee00) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1210090, &(0x7f0000000600)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '/'}}]}, 0x3, 0x595, &(0x7f0000000640)="$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") (async) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1210090, &(0x7f0000000600)={[], [{@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, '/'}}]}, 0x3, 0x595, &(0x7f0000000640)="$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") llistxattr(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) (async) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) connect$phonet_pipe(r3, 0x0, 0x0) (async) connect$phonet_pipe(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010703ffdf00fcffdfff26000000ac8858eb275da0217cfcfa87547b7c4d5e0d8d5eb9d149c8f4de56d3b026b414c806b1c4122f297cf180f020d563d3b690f66b909eb3d31dddb4afd49982f0cec3c94f6eb9d7a5531ffc5f4ec87c041660228f"], 0x14}, 0x1, 0x0, 0x0, 0x24044051}, 0x4000000) 7m17.76023969s ago: executing program 1 (id=2869): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) set_mempolicy(0x8000, 0x0, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000580)=""/286, 0x11e, 0x100000000000001) r4 = syz_clone(0x42000000, &(0x7f00000006c0)="d6868a202d5b9a7e2915f8e8188bc749c0dcf8e068d126167c4ddfda7adcaf31aa96725b6dc454fe214976a931f7c89323023c006d7a405306192af7432428f7208b7aa4fe12148971e378b052d1eb30517222a20ffb7009be907a3d9cd8876a15daf0490dcc88ea5303afc24ccce4ea23f23eb40d47394251a7e773fe3e994f3cc067276999098adb5c3ce6f964ef9b9b8be69a23c9cdc5c8183eee77da36cf0ce5fe", 0xa3, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000900)="9fd8f065ceb592284e2eefd287fd971bb12f7b532a88abec9db437ee2003ed6ab079537baca884a4b29f2ed5d8566aadb9a6be64dc334b35a78f29ff38aa44f95d03717d77ff170f6a8346c345df7d8eea0d6da079e4cb22a9e83bb78f71c42850f18b063e63f736ddf2f791e090021f81735dd9b0d41ab9101c89ef940f1bce6b189eb45153971895f19bf05529efc69b07ba8b41c91c79b886ce78d6c219fc2c88e306e452f7bf295ccf1b83d02a5885bfda32b2149c65066d9627593ac3bc130bdbb00d881b57c4c190d28b5b29ecf9e690aec43b421dee7190501e47d569924ed0e0f12b3e5203") perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x2e, 0x1, 0x5b, 0x2, 0x0, 0x7, 0x13444, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x3}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x80000002}, r4, 0x5, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000003}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r9, 0x1}, {r8, 0x22d4}, {r7, 0x18f3}], 0x3, 0xff) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, 0x0, &(0x7f0000000100)) ioctl$RTC_ALM_READ(r6, 0x80247008, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000380), &(0x7f0000000400)='%ps \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000240)={0x2, r0, 'id0\x00'}) recvfrom$inet_nvme(r10, &(0x7f00000002c0)=""/51, 0x33, 0x10103, &(0x7f0000000300)=@sco={0x1f, @fixed}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYBLOB="e4d2ece828", @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0x91, &(0x7f0000000100)=""/145, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 7m17.010899176s ago: executing program 1 (id=2876): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x7800, 0x7800, 0x3, 0x2, {{0x16, 0x4, 0x0, 0x8, 0x58, 0x64, 0x0, 0x80, 0x4, 0x0, @multicast1, @empty, {[@timestamp_prespec={0x44, 0x34, 0xa3, 0x3, 0x4, [{@dev={0xac, 0x14, 0x14, 0x19}, 0xaf9}, {@multicast1, 0x9}, {@remote, 0x3}, {@local, 0x200}, {@empty, 0xa}, {@rand_addr=0x64010101, 0x3}]}, @lsrr={0x83, 0xf, 0xaf, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @dev={0xac, 0x14, 0x14, 0x38}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newtclass={0x4d4, 0x28, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r0, {0x4, 0x7}, {0x4, 0xa}, {0x6, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x4f, 0x1}}, @TCA_RATE={0x6, 0x5, {0x2, 0x9}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_htb={{0x8}, {0x474, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_PARMS={0x30, 0x1, {{0xe8, 0x0, 0x5, 0x9, 0x102, 0x6}, {0x9, 0x2, 0x0, 0x401, 0x7, 0xffffffff}, 0x0, 0x8, 0x3ff, 0x7, 0xb}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2, 0x7, 0x3, 0x17, 0x10, 0x0, 0x9d25, 0x8, 0x8, 0x2, 0x4, 0x0, 0xd, 0x80000000, 0x5, 0x1, 0x0, 0x5, 0x40, 0x8, 0x3, 0x3, 0x3, 0x8, 0xc, 0x1, 0x7, 0x0, 0x0, 0x5, 0x2, 0x9, 0x6, 0x5, 0x4, 0x4b8, 0x1000, 0x400, 0x1, 0x5, 0x5548, 0xd1, 0x3, 0xffffead7, 0x4, 0x488, 0x0, 0x4, 0x7fffffff, 0x9, 0x1f2, 0xfffffff9, 0xfffffffd, 0x1, 0x240, 0x2, 0x7, 0x1, 0x9, 0x5, 0x4ca1, 0x2, 0x9, 0x1ff, 0x1, 0x3ff, 0xffff, 0x2, 0x667, 0x100000, 0x513, 0x3, 0x3, 0x4, 0x3ff, 0x7, 0x5, 0x9, 0x6, 0x6, 0x4, 0x7, 0x1ff, 0x7, 0xffff0000, 0x0, 0x3, 0x0, 0x4, 0x5, 0x2, 0x1a285a9f, 0x0, 0x4, 0x9, 0x40, 0x6, 0x81, 0x1ff, 0x200, 0x7, 0x7, 0x7fff, 0x4, 0x8, 0xffffffc0, 0x4, 0x54, 0x7, 0x32, 0x7ff, 0x8, 0xa05c, 0xfff, 0x3, 0x1, 0x2, 0x380, 0x8000, 0x1d2bcd33, 0x9, 0x0, 0x7f1, 0xdd53, 0x9, 0x4d3, 0x9, 0x8116, 0x9, 0x9, 0x7, 0xfa, 0x3, 0x200, 0x8, 0x9, 0x5, 0x9, 0x7f, 0x9, 0x5, 0x5, 0x88, 0x5, 0xf8, 0x9, 0x7, 0x7fffffff, 0x5, 0xfffffffd, 0x6, 0x3, 0x8, 0xae, 0x1, 0x5, 0x9, 0x81, 0x0, 0xff, 0x0, 0x8, 0x6, 0xff, 0xf8000000, 0x4, 0x4d11, 0x8e07, 0x401, 0xe065, 0x4, 0xff, 0xfff, 0xfffffff9, 0x5, 0xffffffff, 0x2, 0x10, 0x0, 0x9, 0x40, 0x9, 0x9, 0x3, 0x0, 0x80000000, 0x400, 0xc, 0x9, 0x4e41, 0xfffffffa, 0x40, 0xc, 0x7fffffff, 0xffff, 0xfffffffb, 0x0, 0xffffffff, 0x401, 0x200, 0x777, 0x3, 0x10000, 0x1, 0x2, 0x3, 0x5, 0x7e37, 0x7, 0xff, 0x7, 0x10001, 0x0, 0x100, 0x890, 0xfffffffb, 0x93, 0x80000000, 0x400, 0x0, 0x0, 0x2, 0x6, 0x3, 0xfffffffb, 0x8, 0x7, 0x0, 0x13, 0x2, 0x49, 0xf0a, 0x5240, 0x2, 0x401, 0x3, 0x0, 0x397, 0x3, 0xffff, 0x3, 0x3, 0x0, 0x6, 0x7, 0xffffff8e, 0x5, 0xfffffff8, 0xfffffffc, 0x2, 0xc, 0x5, 0xfffffff9, 0x0, 0x1, 0x2]}, @TCA_HTB_PARMS={0x30, 0x1, {{0x7, 0x1, 0x7f, 0xfff9, 0x1ff, 0x4}, {0x4, 0x1, 0x4, 0xff, 0x3, 0x8d0}, 0x2, 0x2, 0x1, 0x1, 0x401}}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x7}}, @TCA_RATE={0x6, 0x5, {0x57, 0xfd}}]}, 0x4d4}}, 0x80) (async) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000200)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000240)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r4, 0x0, 0x48a, &(0x7f0000000100)={0x0, 0x3, 0x1}, 0xc) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x567b3e9c5790b88}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) 7m16.103752696s ago: executing program 1 (id=2880): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000ffffc9", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa00000000"], 0xfc}}, 0x0) 7m16.041839657s ago: executing program 42 (id=2880): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000ffffc9", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa00000000"], 0xfc}}, 0x0) 6m32.219887376s ago: executing program 8 (id=3212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa000000000000000000fdffffff00000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f00000000000000000080000000000000000000000000000000000000000000000000000000010000000000000000000000003210000008"], 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 6m31.741062737s ago: executing program 8 (id=3214): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000009c0)={0x4}) epoll_pwait2(r5, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) 6m22.826353582s ago: executing program 8 (id=3264): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000001a000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (fail_nth: 2) 6m21.298885035s ago: executing program 8 (id=3276): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) set_mempolicy(0x8000, 0x0, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getrandom(&(0x7f0000000580)=""/286, 0x11e, 0x100000000000001) r4 = syz_clone(0x42000000, &(0x7f00000006c0)="d6868a202d5b9a7e2915f8e8188bc749c0dcf8e068d126167c4ddfda7adcaf31aa96725b6dc454fe214976a931f7c89323023c006d7a405306192af7432428f7208b7aa4fe12148971e378b052d1eb30517222a20ffb7009be907a3d9cd8876a15daf0490dcc88ea5303afc24ccce4ea23f23eb40d47394251a7e773fe3e994f3cc067276999098adb5c3ce6f964ef9b9b8be69a23c9cdc5c8183eee77da36cf0ce5fe", 0xa3, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000900)="9fd8f065ceb592284e2eefd287fd971bb12f7b532a88abec9db437ee2003ed6ab079537baca884a4b29f2ed5d8566aadb9a6be64dc334b35a78f29ff38aa44f95d03717d77ff170f6a8346c345df7d8eea0d6da079e4cb22a9e83bb78f71c42850f18b063e63f736ddf2f791e090021f81735dd9b0d41ab9101c89ef940f1bce6b189eb45153971895f19bf05529efc69b07ba8b41c91c79b886ce78d6c219fc2c88e306e452f7bf295ccf1b83d02a5885bfda32b2149c65066d9627593ac3bc130bdbb00d881b57c4c190d28b5b29ecf9e690aec43b421dee7190501e47d569924ed0e0f12b3e5203") perf_event_open(&(0x7f0000000a00)={0x0, 0x80, 0x2e, 0x1, 0x5b, 0x2, 0x0, 0x7, 0x13444, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x3}, 0x10ecc8, 0x1224, 0x99c5, 0x8, 0x8, 0x20009, 0x0, 0x0, 0x0, 0x0, 0x80000002}, r4, 0x5, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000003}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/rt_acct\x00') r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r8 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0) poll(&(0x7f0000000180)=[{r9, 0x1}, {r8, 0x22d4}, {r7, 0x18f3}], 0x3, 0xff) getsockopt$bt_sco_SCO_CONNINFO(r7, 0x11, 0x2, 0x0, &(0x7f0000000100)) ioctl$RTC_ALM_READ(r6, 0x80247008, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r1}, &(0x7f0000000380), &(0x7f0000000400)='%ps \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SNDRV_TIMER_IOCTL_CREATE(r2, 0xc02054a5, &(0x7f0000000240)={0x2, r0, 'id0\x00'}) recvfrom$inet_nvme(r10, &(0x7f00000002c0)=""/51, 0x33, 0x10103, &(0x7f0000000300)=@sco={0x1f, @fixed}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYBLOB="e4d2ece828", @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x4, 0x91, &(0x7f0000000100)=""/145, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 6m20.319441667s ago: executing program 8 (id=3281): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="94010000100031082bbd700800000000ac1414aa000000000000000000000000ac1414bb0000000000000000000000000000ecdf000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 6m19.942949565s ago: executing program 8 (id=3282): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) close(r8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="9e"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)={0x20000001}) openat(0xffffffffffffff9c, 0x0, 0x115042, 0xc2) get_robust_list(r0, &(0x7f0000000640)=0x0, &(0x7f0000000680)) 6m19.936303085s ago: executing program 43 (id=3282): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f00000015c0)="$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") r5 = epoll_create(0x3ff) r6 = epoll_create1(0x80000) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sysvipc/shm\x00', 0x0, 0x0) close(r8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008000000", @ANYRES32, @ANYBLOB="9e"], 0x2c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x3c}}, 0x4000010) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000000)={0x20000001}) openat(0xffffffffffffff9c, 0x0, 0x115042, 0xc2) get_robust_list(r0, &(0x7f0000000640)=0x0, &(0x7f0000000680)) 4m48.418722128s ago: executing program 9 (id=4021): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x24}}, 0x20000050) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2d8, 0x208, 0xfeffffff, 0xf0, 0xf0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xe, 0x5]}}, @common=@ah={{0x30}, {[0x1abd, 0x5]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4=@loopback, @icmp_id=0x67, @gre_key=0x1}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @port=0x4e24, @gre_key=0x7}}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv6=@local, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x80000000, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_DPORT={0x6, 0x1d, 0x4e23}]}, 0x24}}, 0x20000050) (async) socket(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r2, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000580)="b9fe030768045c8c989a14f088a8657986dd", 0x0, 0x764, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) (async) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2d8, 0x208, 0xfeffffff, 0xf0, 0xf0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xfffc}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ah={{0x30}, {[0xe, 0x5]}}, @common=@ah={{0x30}, {[0x1abd, 0x5]}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@dev={0xfe, 0x80, '\x00', 0x27}, @ipv4=@loopback, @icmp_id=0x67, @gre_key=0x1}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1, @port=0x4e24, @gre_key=0x7}}}}, {{@uncond, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv6=@local, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async) 4m48.046902386s ago: executing program 9 (id=4022): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') openat$cgroup_ro(r2, &(0x7f00000009c0)='blkio.bfq.sectors\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00000000bbdb9a5262cc17923dff475dbbbbbbbbbbaaaaaaaaaabb08004525001c0065000001329078ac14142d00"], 0x2e) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r4 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x53) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x2) close(r4) accept(r5, 0x0, 0x0) r7 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r7, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x132}) socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b031407e0ff640f0200475412f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000270000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000385000/0x2000)=nil, 0x0}, 0x68) 4m47.242631584s ago: executing program 9 (id=4025): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") (async, rerun: 32) r0 = creat(&(0x7f0000000240)='./file1\x00', 0x0) (async, rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) (async) io_setup(0x200, &(0x7f0000000140)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) (async) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000140)={[{@errors_remount}, {@debug}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@errors_continue}, {@jqfmt_vfsv1}, {@grpid}]}, 0x2, 0x472, &(0x7f0000000540)="$eJzs3M9vFFUcAPDvzLZFfrbiTxC1SoyNP1paUDl40WjiAaOJHvBmbQshFGpoTYQQqcbgxcSQ6Fk9mvgXePNi1JOJV70bEqJcQE81MztTdpfutoVlt7CfTzLsezNv9r1v59ebebME0LOGs3+SiG0R8UdEDFaz9QWGqx9XL5+d+vfy2akklpbe+jvJy125fHaqLFqut7XIjKQR6adJUUm9+dNnjk/Ozs6cKvJjCyfeH5s/febZYycmj84cnTk5cfDggf3jLzw/8Vxb4sziurL7o7k9u15758LrU4cvvPfL91l7txXLa+NosKnhc82Gs8D/Wcotz0yrH0+sO4KNbXtNOunrYkNYl0pEZJurPz/+B6MS1zbeYLz6SVcbB9xS2bWpxYVtcQm4gyXR7RYA3VFe6LP733LqUNdjQ7j0UvUGKIv7ajFVl/SVt+r5vdH2W1T/cEQcXvzv62yK1s8hAADa4vOprw7FMyv1/9K4v6bcjmIMZSgi7o6InRFxTzEocl9EXvaBiHhw9SrT2kzj0ND1/Z/04g0HtwZZ/+/FYmyrvv+33MyhSpHbnsffnxw5Njuzr/ibjET/piw/3qKOH1/5/Ytmy2r7f9mU1V/2BYt2XOxreEA3PbkwmXdK2+DSxxG7+1aKP1keCUgiYldE7F7fV+8oE8ee+m5Ps0Krx99CG8aZlr6NeLK6/RejIf5S0np8cuyumJ3ZN1buFdf79bfzbzar/6bib4Ns+2+p3/8biwwlteO18+uv4/yfnzW9p7nR/X8geTtfd6CY9+HkwsKp8YiB5FCer5s/cW3dMl+Wz+If2bvy8b+zWCeL/6GIyHbihyPikYh4tGj7YxHxeETsbRH/zy83X1Yf/+Zt3dj+0w3nv835kuX9v2H7rz9ROf7TDyvX/s27a9v+B/LUSDEnP/+tYq0NvMk/HwAAANwW0vwd+CQdXU6n6eho9R3+e2NLOjs3v/D0kbkPTk5X35Ufiv60fNI1WPM8dDxZLL6xmp8onhWXy/cXz42/rGzO86NTc7PTXY4det3WJsd/5q9Kt1sH3HIrjaNNDHShIUDHNR7/aX323BudbAzQUU3fo9nS2XYAnbfKe3Rpp9oBdJ7/rwV610rH/7mGvLEAuDO5/kPvcvxD7+oLJwHoVQ596Emr/Ui+cpO//Ze47RLJ2gpH2v2mboxEf0S05QsHNkQ4RaLbZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+D8AAP//sYTqKA==") 4m47.015091239s ago: executing program 9 (id=4027): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/126, 0x7e}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000480)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}, {@nombcache}, {}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") r1 = open(0x0, 0x4827e, 0x115) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x84900, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={&(0x7f0000000040), 0xf}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x1, &(0x7f0000000340)=[0x0]) read$msr(r4, &(0x7f00000002c0)=""/43, 0x2b) r5 = syz_clone(0xd3962000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r5, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x13, 0xfffffffd, 0x4}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x163) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[], 0x454680) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x1c0102, 0x0) open$dir(0x0, 0x800, 0x1) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x4044090) accept4$unix(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000440)={'gretap0\x00', &(0x7f0000000380)=@ethtool_regs={0x4, 0x2, 0x7e, "fedcdb2f193140a1215c130cc0c463e4fd2e38e7496e18b5a17c9e481d242281aef086e453cb958457bdd2720769eaf74e01a3e455580093df83ae9256bc6f5eac3d1624a0d5fa6e05b736e0f76a0e68653275682867eaedeeebb3a216a2eaec6c44fe44e3ab72d900f1d9697ecd7fdbe9d545c1bc351f30fe630bcf3e2a"}}) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0xc000) fallocate(r1, 0x0, 0x0, 0x8800000) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, 0x0, 0x42, 0x40) 4m46.4792145s ago: executing program 9 (id=4037): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'dummy0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000021c0), 0x181000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x40016b042, 0x2a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="5338a3848b25e258a25f", 0xa}], 0x1}}], 0x1, 0x20008000) shutdown(0xffffffffffffffff, 0x1) 4m40.234285087s ago: executing program 9 (id=4067): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 4m40.218867397s ago: executing program 44 (id=4067): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) 8.65186151s ago: executing program 6 (id=6637): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0xc0, 0x9}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002600)=@delchain={0x144, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x118, 0x2, [@TCA_BPF_ACT={0x114, 0x1, [@m_xt={0x80, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0x55, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x90, 0x8, 0x0, 0x0, {{0x8}, {0x4}, {0x65, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x1000, 0x8001, 0x8000, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a000007080002400000000209"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040008) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r6, 0x891d, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) 6.767764662s ago: executing program 6 (id=6648): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x82, {0x0, 0x0, 0x0, r7, {0x4, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x4, 0x3, 0x5}, 0x79}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000480)="6cc796340a65162224133003112f4a29e8c42c8dbe9e1fef4c0f4483a77b4f790f8798f6933112046011fb7a88ebbed4dbabd6012b609c5a2f98fb36793026fc06de8a", &(0x7f0000000500)=@buf="b5489389c274e9011ba1bfee384e37b658f982648eea7498c514aeb87583112755415b04473d932a84fd5b3b3f44c58f6b8fc17aaef1b38ef32f92c58317cb6acc287095c23f1751229a301026af7fd34543dd540721ab6419ab9787979041ca725d33c2f6eac03228837da6d54ab8199b79d26c1f4795fff12dbcbe12b6f97fd14ff041a860028a38f9ab9e98f7eda4dbe775cec43c08f3cd4b2c2c19a01b1532a2cd3b54d69e191e94ef53b9e2e727e03070619639cd27b65dd75509c8825fb78f48244e4fc834d4a213b6543ffbb6812e12b74b1c97e72b9714ab156b7e1b0865774efb16af97", 0x1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0xa84053c42c89434b, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r7, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff84125ce882cbf400930bf4533f00429c65112a09", 0x27}, {&(0x7f00000022c0)="ffc9ace87aade116", 0xa888}], 0x2}, 0x8000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x503, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x175}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000002}, 0x20008080) 6.740096922s ago: executing program 7 (id=6649): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000002340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000008400000007000000ac1414bb000000003000000000000000840000000100000081ffff7f1680000004000000ff000000ffffff7f0400000005000000e1a35ab2f011b4cc7e", @ANYRES32=0x0], 0x48, 0x40010}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0400000044000000040000000000000006"], 0x50) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket(0x10, 0x3, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x80000000000000a, 0x2, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000024c0)={0x18, 0x18, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x4, 0x6}]}, 0x18}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, r6, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186}, 0x94) 6.636300784s ago: executing program 7 (id=6651): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x90) open_tree(0xffffffffffffffff, 0x0, 0x81801) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x63, 0x0, 0x8}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x470bd2a, 0x25dfd402, {0x0, 0x0, 0x0, r4, 0x6e494, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_VLAN_TUNNEL={0x5, 0x1d, 0x10}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x4c}}, 0x200088c2) 6.443904209s ago: executing program 7 (id=6653): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000030000000000000009000000850000002e000000850000001100000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x0, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f00002c4000/0x1000)=nil, 0x1000, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r2, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x10, "2a161d2d71db37f20a8f1597f02515fc"}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41100}, 0x94) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @remote}, &(0x7f00000000c0)=0xc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000006800010000000000fddbdf250a00004300000000060007000300000008000500", @ANYRES32, @ANYBLOB="18000880"], 0x40}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) bind$xdp(r3, &(0x7f0000000140)={0x2c, 0x8, r4, 0x9, r5}, 0x10) 6.307109502s ago: executing program 6 (id=6654): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000500007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 6.235230324s ago: executing program 6 (id=6656): r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x84) lsm_get_self_attr(0x69, &(0x7f0000000040)={0x0, 0x0, 0x8f, 0x6f, ""/111}, &(0x7f0000000100)=0x8f, 0x1) syz_emit_ethernet(0xaa, &(0x7f00000006c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x9c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x11, 0x2, @broadcast, @remote, {[@cipso={0x86, 0x2d, 0x3, [{0x6, 0x3, "9f"}, {0x1, 0x5, "d5943b"}, {0x6, 0x7, "67bc95862b"}, {0x5, 0x7, "e294fbdb23"}, {0x1, 0x2}, {0x0, 0xf, "13bb873c90dab0f8d645ea6751"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x1f}}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@private}, {@local}, {@private=0xa0100fe}, {@dev}, {@local, 0x1}]}]}}}}}}}, 0x0) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f00000001c0)={0x200f}) socket$inet6_tcp(0xa, 0x1, 0x0) 6.133990816s ago: executing program 7 (id=6660): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a947f009b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084660914fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="648a6282c6e91b973836904a4a88affa0c371dd1b9c133c5e594714579d6bb3addfd43e78272aef64427ce5467d6994320cf139092452c7944ddab49e459f7e0c73f890e9e2463bd3390e20b1e472bd2aedb47094547a767a098a94a402e6aba65c0ef07eaa87f8663c763d9bb491243eb129eec434e5603956c8333a6ecdf4d3a601b9c8d3d63e3a4a57b38033e2b004f6c3e45f1645c3b7ca0d5ba5eea059b5aa4f0f80ac66904076cc60e47e1afc7d81ad937dee5efc0580e38d96cf0f53808f37d5a8811b07165e8b9aabceac06e4fa7f7668b8832877783a727a1fa8b972bfaeb232cf3e9b500965820f4adf64f1e5eddd65f5734fb43644347e98af7eb6abe95dcb6ed1acc22c8abdd5ea116242d5b7b2ecff3d9c635bce6a377112b4adbd75b71fcc8a6e3693c82ed7fd11ad63683cc89f0a3", 0xffffff1d}, {&(0x7f00000007c0)="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", 0xde6}], 0x4}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)="d353", 0x2}], 0x1}}], 0x2, 0x4044805) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060128750000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x103301) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000004dc0)=0x1000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x39, 0x0) ftruncate(r4, 0x4a8e) 6.080151947s ago: executing program 6 (id=6661): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x27fffff, 0x4002011, r0, 0xe639d000) fallocate(r0, 0x0, 0x0, 0x8800000) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc051}, 0x4000) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_macvtap\x00', @local}) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 5.641335386s ago: executing program 5 (id=6668): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x1, 0x36b, &(0x7f0000000a00)="$eJzs3U1vG1UXAODTvM1H85I6C4QECHFVNrCxkvAHGqFWQkQChRoVFkhTMgEr0zjyWEGuEHTHlt9RsWSHhPgDWcCeHbtsWHZRdVDsuPloCIvUHgrPI0X3xPce+4zHM7qb0dm//d3drc2yuZn1Yup6iqmImHoYsTiIhi4djlODeCaOux9vNW7/9tqHH3/y3ura2o31lG6u3np7JaV09fWfvvzq+2s/9/7/0Q9Xf5yNvcVP9/9Y+X3vpb2X9x/f+qJdpnaZtju9lKU7nU4vu1PkaaNdbjVT+qDIszJP7e0y756Y3yw6Ozv9lG1vLMzvdPOyTNl2P23l/dTrpF63n7LPs/Z2ajabaWE++DutB+vr2eownjtn3fVJFcQYdLur2cE1PPvUTOtBLQUBALW66P5/5pnu/6fD/n+Sju//+bc62P/PHF6/J9n/AwAAAAAAAAAAAADA8+BhVTWqqmqMxmr0kPDh/zWXx5g9df5P/dVdH+N17MG9uYji293Wbms4DudXN6MdReSxFI14dHBbGBnGN99du7GUBhZj4e43g/xrv0S0/ncyfzkasXh2/vIwPz3Jj4NxOuaP569EI148O3/lzPyZePONY/nNaMSvn0UnitgY3N6O8r9eTumd99dO5c8O1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw39BMI6/GsO/9biviSuwe9u9vHi1YPNkff5j/pL/+UjTi0dn9+ZfO7M9/OV65XO+xAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBI2b+3lRVF3p1UMOr5P3hlZhT8ddal4fL7p6auxARrLop86lm94eOqqsZV6txkT+VFgumI885gdfgrufhnvRAR56yZjYj6v41/YlDXHQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADqc9T0u+5KAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqFPZv7eVFUXeHWNQ9zECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8T/4MAAD//yeQEY0=") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000009c0)={0x4}) epoll_pwait2(r5, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) 5.120048348s ago: executing program 7 (id=6670): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000009c0)={0x4}) epoll_pwait2(r5, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) 4.874342233s ago: executing program 3 (id=6671): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000500)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") (fail_nth: 1) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000009c0)={0x4}) epoll_pwait2(r5, &(0x7f00000021c0)=[{}], 0x1, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8000}}, './file0\x00'}) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x4) 2.950979845s ago: executing program 5 (id=6672): sched_setscheduler(0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0x10000fff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000a00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000940)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@jqfmt_vfsv1}, {@grpid}, {@noauto_da_alloc}, {@abort}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x495, &(0x7f0000000e40)="$eJzs3M9vFFUcAPDvzO6WgmIr4g8QpIpG4o+Wlh9y8KLRhIMmJnrAeKptIZVCDa2JEKLVAx4NiXfjf2E86cWoF0286t2QEMMF1Mua2Zltl2W33dIfS9vPJ5n2zczrvvedmTf75r3tBrBlDWQ/koj7I+KPiOjLV2/PMJD/unXj8tg/Ny6PJVGtvv13Ust388blsXrW+t/dl69Uq8X6thblXnkvYnRqauJCsT40e+7DoZmLl16cPDd6ZuLMxPmREyeOHtnfc3zk2KrEmcV1c+8n0/v2nHz36ptjp66+/3NSjjzuaIpjtQzkR7elZ1a7sC7b2ZCuHdh5B35dSLe6EuimUkRkp6tSa/99UYrt8/v64vXPm/P3rncFgTVTrVari9yV56rAJpbE0nl6izsFsJkUjwC159/6so7dj667/kr+AJTFfatY8j3lSPPEgUrT8+1qGoiIU3P/fp0tsUbjEAAAjb7P+j8vtOr/pfFInujJfjxQzKH0R8SDEbErIh6KiN0R8XBELe+jEfHYMstvniG5s/+TXrvr4DqQ9f9eLua2bu//pfUs/aVibWct/kpyenJq4nBxTA5FZdvpyWRieJEyfnjt9y/b7Wvs/2VLVn69L1jU49r2plH38dHZ0RUF3eD6ZxF7yxG3KtEUfxL1aZwkIvZExN67LGPyuXLbfUvHv4j2L9ux6jcRz+bnfy6a4q9L2s5PDr90fOTYUG9MTRweql8Vd/rltytvNW0q1RMrin8VZOd/R8vrfz7+/qQ3YubipbO1+dqZ5Zdx5c8v2j7TdHL9lxcGqE/uLK7/nuSd2oaeYsfHo7OzF4YjepI37tw+svBq9fV6/iz+Qwdbt/9dsXAkHo+IfRGxPyKeyB4Ki7o/GRFPRcTBReL/6dWnP1h+/OszV5rFP77U+Y/G87/8ROnsj98tHX92j2t3/o/WUoeKLZ3c/zqt4EqOHQAAAGwUae0z8Ek6mJSLdJoODuaf4d8dO9Kp6ZnZ509Pf3R+PP+sfH9U0vpIV1/DeOhwMTbc3/Da/Q37jxTjxl+VttfWB8emp8a7GDeQt/Na+5+/F+TtP/NXqdu1A9ZcPo+WdrsaQBeswjw6sEFp/7A1JYu2/8q61gVYf97/Yetq1f4/bZt78Ns1rQywrrz/w9bVQfufy3+17xUAG5P3f9i6tH/Yktr+b3zadld2u1jBtwGsTeK/4vsM75X6bP5EpPdENTZcIoll/lW54y+zWEai2pe3/2zLttbNHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFP4PwAA//+dU9wM") symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101341, 0xaf) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101042, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x7f}, 0x20) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000280)='./file0/file0\x00', 0x2000775) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000001c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r4, 0x800, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x2004c000) openat$dir(0xffffffffffffff9c, &(0x7f0000002240)='./file0\x00', 0x189800, 0x0) 1.286875992s ago: executing program 7 (id=6673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="fc0000001900e1f6ddedabc4ac5c000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000004000000000100000006000000000000000000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c000000020000000a0101020000000000000000000000000600000004"], 0xfc}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) 963.971708ms ago: executing program 3 (id=6674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="00000000000000007b080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 878.718831ms ago: executing program 3 (id=6675): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x20) r2 = accept4$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev}, &(0x7f0000000280)=0x10, 0x800) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x10, 0x80000001, 0xf036, 0x7ff, 0xffff]}, &(0x7f00000007c0)=0x54) sendfile(r1, r1, 0x0, 0xb) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000002c0)={'ip_vti0\x00', &(0x7f00000003c0)=@ethtool_per_queue_op={0x4b, 0x1d, [0x8, 0x0, 0x365, 0x10, 0x7f, 0x7, 0xae6, 0x1, 0x13830efe, 0x80000000, 0xc9, 0x6, 0x1, 0x5, 0x237c, 0x6, 0x7fff, 0xdf8, 0x4, 0x8, 0xb, 0x80, 0x4, 0x5, 0xffff, 0x80000001, 0x9, 0x101, 0x4, 0xfb, 0x1, 0x0, 0x9, 0x9, 0xf, 0x400, 0x3, 0x4, 0x4, 0x81000000, 0x0, 0x121, 0x6, 0x6, 0x3ff, 0x3, 0x4, 0x8001, 0xff, 0xffff8001, 0x0, 0x5, 0x1, 0x7, 0x6, 0x100, 0x4, 0x6, 0x8, 0x2, 0x1, 0x5, 0x6, 0x7, 0x10, 0x8, 0x6, 0x9, 0x7, 0xf909, 0x5, 0x0, 0x8, 0x8001, 0x9, 0x9, 0x5, 0x6, 0x8, 0xff, 0x7, 0x28, 0x3, 0x6, 0xd32, 0x2, 0x3, 0x3, 0xb29, 0xec, 0x400, 0x8, 0x2, 0xa, 0x90000, 0x6, 0x0, 0x1cd, 0xc01, 0xff, 0xc, 0x0, 0x6, 0x5, 0x7, 0x10001, 0x949, 0x5, 0x81, 0x5, 0xffffadb5, 0x7, 0x8, 0x0, 0x800, 0x5, 0x3, 0x9, 0x5, 0x1, 0xffffffff, 0x6, 0x5, 0x38000, 0x1, 0x7e0, 0x6, 0x2]}}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000800), 0x4eaa}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x2, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_MPATH(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)={0x28, r6, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}}, 0x240000c4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f0000000600)={0x184, r6, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_IE={0x160, 0x2a, [@mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mic={0x8c, 0x18, {0x314, "dd8dcd7c97f9", @long="b40f08ecfc6774869749415dbd2b338c"}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @gcr_ga={0xbd, 0x6}, @cf={0x4, 0x6, {0x2, 0xff, 0x7ff, 0x8e}}, @perr={0x84, 0x11d, {0x5, 0x13, [{{0x0, 0x1}, @device_b, 0xfffffe00, @value=@device_b, 0x1b}, {{}, @device_b, 0x3, @void, 0x12}, {{}, @device_b, 0x5, @void, 0x30}, {{0x0, 0x1}, @device_b, 0x1000, @value=@device_b, 0x15}, {{0x0, 0x1}, @device_b, 0xf0, @value=@broadcast, 0x1c}, {{}, @broadcast, 0x3ffc00, @void, 0x3a}, {{}, @device_b, 0x4}, {{0x0, 0x1}, @broadcast, 0x8001, @value=@broadcast, 0x3a}, {{}, @device_b, 0x6, @void, 0x25}, {{}, @device_b, 0x80000001, @void, 0x34}, {{}, @device_a, 0x0, @void, 0x16}, {{}, @device_a, 0x9, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x40, @value=@broadcast, 0x2d}, {{}, @device_b, 0x200, @void, 0x5}, {{}, @device_a, 0x8, @void, 0x1a}, {{0x0, 0x1}, @broadcast, 0x1, @value=@broadcast, 0x30}, {{}, @device_a, 0x80000000, @void, 0x38}, {{}, @device_a, 0x0, @void, 0xc}, {{}, @device_b, 0x7, @void, 0xf}]}}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x20008080}, 0x4000080) 775.570153ms ago: executing program 6 (id=6676): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x1c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x1}, 0x200, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r1 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 703.790405ms ago: executing program 5 (id=6677): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/notes', 0x800, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) dup(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000c00000002000000ffff000005"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffff904, r2}, 0x38) io_setup(0x3, &(0x7f0000000400)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, &(0x7f00000000c0)=0x62, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, &(0x7f00000004c0)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x8, 0x0, 0x0}}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRESOCT=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0x46) 663.335586ms ago: executing program 3 (id=6679): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000180055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 601.550857ms ago: executing program 3 (id=6681): perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x28180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x8}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7ffd}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket(0x2d, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r1, 0x29, 0x1a, 0x0, 0x4) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3b4e}, 0x100048, 0x0, 0x7, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffbfffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4000, &(0x7f0000000140)=0x7fff, 0x2000006) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRESDEC=r0, @ANYRES16], 0x48) recvmsg$unix(0xffffffffffffffff, 0x0, 0x60) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x402, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./bus\x00', 0x41, &(0x7f0000000380)={[{@lazytime}, {@noblock_validity}, {@bh}, {@nodelalloc}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x300a}) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) socket$inet(0x2, 0x3, 0x7) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8a) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x2, 0x7, 0x9, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x1, 0x3b12, 0x0, 0x400}}) dup(0xffffffffffffffff) close(0x3) 529.667558ms ago: executing program 3 (id=6685): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9006054136b14f62, &(0x7f0000000040)=0x5, 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0xa, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) clock_gettime(0x4, &(0x7f0000000400)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000090}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000200)=0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[@ANYBLOB='c *:* mw'], 0xa) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000440)={{0x5, 0x78}, {0xb1, 0x8}, 0x8, 0x3, 0x5}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x110) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x800714, &(0x7f00000004c0)={[{@user_xattr}], [{@obj_type={'obj_type', 0x3d, 'ext2\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_user={'obj_user', 0x3d, 'user_xattr'}}, {@uid_eq={'uid', 0x3d, r3}}, {@appraise_type}, {@dont_measure}, {@permit_directio}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$eJzs3M1rXFUfAODfnXz0K23y9u3b923fVqNVLH4kTfphFy5UFAQVBF3UZUzSWjttpInQlqBRpK4L7sWl4NKVOzeiLsQ/QMGlFIoGoakgRO5XOklm0nx22szzwGTOuffce86595zJmXvm3gBaVm/6J4noioifI6I7j85P0Ju/zUxPDt+anhxOYnb29d+TLN3N6cnhMmm53Y4icrgSUfk4iWeTxfmOX75ybqhaHb1YxPsnzr/bP375ylNnzw+dGT0zemHw5MljRweePjF4fN52dXa1yLY6y9J63dz//tiBfS+9ee3V4VPX3vr+y3Rfew/m62vrcUe3FpXi5XrJetOj9sdsZuG6R5ed2f1hZ004aW9iQViRtohIT1dH1v+7oy1un7zuePGjphYO2FDp/6YtjVdPzQKbWBLNLgHQHOU/+vT7b/mKv+/S4OMecOO5iM4iPDM9OTwzdx2gPSrF8o4NzL83Ik5N/fVZ+oqVXocAAFiFbGzz5ILxX6YSe7P3fK5jVzGH0hMR/4qI3RHx74jYExH/icjS/jci/pdvPNu9zPx7F8QXj38q1+uWeZ2k479nasZ+MzX1L9562orYzqz+Hcnps9XRI8UxORwdW9L4wBJ5fPNCZ8N1teO/9JXmX44FiwJcb88v0M3tZGRoYmi9DsKNDyP2t9erfzI3E5C2gH0RsX9lu95VBs4+/sWBRonuXP8lrMM80+znEY/l538qFtS/lDSYn0zb+InB4/1bozp6pL9sFYv98NPV1xrlv6b6r4P0/G+f3/4XpOj+M8nnazuiWh29OL7yPK7+8knD7zQraP9z0vbfmbyRzVn/+Ha+7NLQxMTFgYjO5JUsXnSWrZEuH7y97aUiXqZP63/4UP3+v7vYJq3//yMibcQHI3Y9EBEPFmV/KCIejohDS9T/u+cfeWeJ+ieRRFPP/0jdz7+59t+T1M7XryLQdu7brxvN2y/v/B+LqeyzNpd9/t3Bcgu4xsMHAAAA94VKRHRFUunLw71dUan09eW/4d8T2yvVsfGJJ06PvXdhJL9HoCc6KuWVru6a66EDyVSxxzw+WFwrLtcfLa4bf9q2LYv3DY9VR5pcd2h1O+b3/yj7f+q3tmaXDthwjefRlrg1ANgUFvb/SpPKAdx9y/kdje8CsDnV6f/1nqEBbEKe1wKtq17//2BBfNH43wgBNoXF/f/XOo+sAzYj439oXfo/tC79H1rSWu7rX32gvFlgycRlEeum2brsO/xbJVA+HmYj89oWt5dEJQt0xT1Q99UEupeTOCK+WnNebetQ5rTH3N3jU/PAIQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPvYPwEAAP//O47fqw==") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x103402, 0x49) io_setup(0x20fe, &(0x7f00000001c0)=0x0) io_submit(r5, 0x1, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0xa0, 0x1, 0x0, r4, &(0x7f00000002c0)="308b74de33fde981bdb63537ab07bf8070a3348de6b0cce0d66d85dd83ed5af46165c22fa3729f44552ae97d5596be767576984263e84155922480884a276ec38180d05bbe449b22726df15b8501eb3089d2a19a20d946e2884db122b9b456e9227adc3bf6dde97eb8a6a63fc4fc4805fceecbd46c17bff04bb9d4aae40049bf602da0c4f9d6449daa1358497cb7c1df1e556481713f312cd43e3e861603b8069eab9b6576b53c494ef557acc618512ef6", 0xb1, 0x600}]) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x15) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240), 0x4000095, 0xfffe) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1008205, &(0x7f0000000000), 0x1, 0x631, &(0x7f0000000c40)="$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") sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="381000000314010023bd70fdfedbdf250900020073797a3100000000080041007278f8ff1400333c015c81d63e7bc9006772653000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20000060}, 0xd4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x44900, 0x0) 458.72194ms ago: executing program 5 (id=6687): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x4) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000200)=0x100000001) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x8000, 0x0, 0x400000000000005, 0x2) unshare(0xc040480) madvise(&(0x7f00003ee000/0x2000)=nil, 0x2000, 0xc) socket(0x2a, 0xa, 0x0) mmap(&(0x7f00005c0000/0x4000)=nil, 0x4000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00004063b85c00000002", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, 0x0, 0xfebc) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f00000000c0)="01", 0x400000}]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000080000000000006d2536d8425d1dacfffcffffff"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r5 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) ptrace(0x4206, r5) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$P9_RLERROR(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="170000000702000e002f73656c060000002f6c6f616400"], 0x17) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x18010, &(0x7f0000000400)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c00003d30303030303030303030302630303030303037373737372c6e6f646e79bd6f74732c6572726f72733d72656d6f756e742d726f2c736c652c6e6f646f74732c666d61736b5a30303030303030303030303030303030303030303030332c6e66733d7374616c655f72772c646f733178666c6f70fffffffffffffe0164656275672c6e6f646f74732c6e6f646f74732c00c17f00000000001e00"/184], 0x1, 0x24f, &(0x7f0000000880)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) 215.111505ms ago: executing program 4 (id=6689): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000080)={r2, r0}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 214.652705ms ago: executing program 4 (id=6690): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x10008, 0xc, 0x80000000, 0x11}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async, rerun: 64) r2 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) getsockname$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x20) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xff, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) (async, rerun: 32) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030000000000000004920800024000000001"], 0xfea1}}, 0x800) (async) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x7fffffffffffffff, 0x2}) (async) sendmsg$nl_route_sched(r3, 0x0, 0x20000000) (async) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x4, {0xa, 0x4e20, 0x7, @loopback, 0x8}}}, 0x32) (async) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) sendfile(r6, r5, 0x0, 0x7) (async) r7 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r7, 0x0, 0x0) (async) keyctl$link(0x8, r7, r7) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x890) 201.921876ms ago: executing program 4 (id=6691): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) 186.143636ms ago: executing program 4 (id=6692): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x1) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000ac0)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x2, @broadcast}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000001f40), &(0x7f0000001f80)=0x8) read$usbmon(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 158.870346ms ago: executing program 4 (id=6693): ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8000, 0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x9}, 0x501a, 0x0, 0x0, 0x6, 0xfff, 0x8001, 0x6fff, 0x0, 0x0, 0x0, 0x10000002}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) close(r0) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x10060) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000200055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 79.041928ms ago: executing program 4 (id=6694): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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") sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060128750000000000000007000000140007800800114000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x2000000, 0x0, 0x20000810}, 0x20004000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x103301) ioctl$USBDEVFS_RELEASE_PORT(r2, 0x80045519, &(0x7f0000004dc0)=0x1000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) futex(&(0x7f0000000280), 0x80, 0x0, &(0x7f0000000300), 0x0, 0x2) msgrcv(0x0, 0x0, 0x0, 0x3, 0x3000) msgsnd(0x0, &(0x7f0000000280)=ANY=[], 0x39, 0x0) ftruncate(r3, 0x4a8e) 24.417499ms ago: executing program 5 (id=6695): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001700007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000a000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 5 (id=6696): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = epoll_create(0x3ff) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000001}) openat(0xffffffffffffff9c, 0x0, 0x105042, 0xc2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c010000160001000000000000000000ffffffff000000000000000000000000e00000020000000000000000000000000000000000000000000000003c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000006c000000ac1414aa0000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000007e00000000000000000400000000000000000000000000000000000000000000000000000000000000ff0f000000000000000000800000000000000000000000000000000000000000000000000000000100000000000000000000000032100000080022"], 0x12c}, 0x1, 0x0, 0x0, 0x804}, 0x0) 0s ago: executing program 3 (id=6697): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x800}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10c002, 0xac5d, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000002c0), 0x2}, 0x10c002, 0xac5d, 0x0, 0x8, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x20000000000002bf, &(0x7f00000008c0)=ANY=[@ANYBLOB="18020000070000000000000000800000850000007500000095000000000000000b17d886009c4513852b6658cb050a77372abe6b2dd58c2373360e2bc88a7e17dce7e3d15e443e2f29cacd839bb08123de0db675f9f00dd17742aa2a0f49b0356c89434299bc9f73a002225f32804d796873a2ec78534104fdc30c6394301bc04b99bc5b705247a0b0b0ae8324a38356d5555000b86c339865aab0ba259f1d2721cfed10e295bd19ad6f6636c1b24c2ede3c05b75cac7066e108ed0a30d8428fc360a6d2499e0f446cc4ce94cc66ece3e7238d5badffd5f9f09114ff02d40000000000000000"], 0x0, 0x7}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x35, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) (async) socketpair(0x2, 0x3, 0x5, &(0x7f0000000240)) close(0xffffffffffffffff) (async) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x73) r3 = getpid() syz_open_procfs$namespace(r3, &(0x7f00000001c0)='ns/ipc\x00') bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000415a1943bffc2a3e62f1fae91be396c83c48d4f9348b408dc44b7688639fe03409be9686ce30addfcb0dbe331793fbb2c31a3ac17f3a669c967b5ca27e35e61e70903fae02d49ecc7c6d09074d3e9725021d775184ddbaa625fae35531d66363e5118ede935d37ed1fe478de", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000007f0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r6, &(0x7f0000000500), 0x0}, 0x20) r7 = socket$kcm(0xa, 0x2, 0x0) close(r7) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0xffff, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r7, 0x0, 0x4, 0x0, 0x0) r9 = socket$kcm(0x2b, 0x1, 0x0) close(r9) socket$kcm(0xa, 0x5, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): llbacks suppressed [ 798.275326][T26309] loop5: lost filesystem error report for type 5 error -117 [ 798.283208][T26309] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #16: comm syz.5.5836: corrupted inode contents [ 798.308488][T26309] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 798.309448][T26309] EXT4-fs error (device loop5): ext4_truncate:4691: inode #16: comm syz.5.5836: mark_inode_dirty error [ 798.335211][T26309] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 798.355666][T26309] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 798.378716][T26309] loop5: lost filesystem error report for type 5 error -117 [ 798.383057][T26309] EXT4-fs (loop5): 1 truncate cleaned up [ 798.414098][T26309] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.434318][T26309] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.555643][T14596] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 798.580516][T14596] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:30: Failed to release dquot type 1 [ 798.675258][T26325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26325 comm=syz.3.5843 [ 798.732609][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.748412][T26336] netlink: 'syz.6.5845': attribute type 1 has an invalid length. [ 798.781567][T26336] 8021q: adding VLAN 0 to HW filter on device bond5 [ 798.795907][T26340] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5848'. [ 798.807975][T26343] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26343 comm=syz.5.5847 [ 798.823529][T26336] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 799.554497][T26357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5852'. [ 799.582678][T26357] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 799.617460][T26368] netlink: 43 bytes leftover after parsing attributes in process `syz.7.5856'. [ 799.947203][T26400] netlink: 43 bytes leftover after parsing attributes in process `syz.3.5867'. [ 800.810972][T26422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5873'. [ 801.117162][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 801.126397][T26455] netlink: 'syz.3.5885': attribute type 11 has an invalid length. [ 801.138164][T26455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5885'. [ 801.142350][ T30] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.155548][T26457] FAULT_INJECTION: forcing a failure. [ 801.155548][T26457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.155582][T26457] CPU: 0 UID: 0 PID: 26457 Comm: syz.4.5884 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 801.155632][T26457] Tainted: [W]=WARN [ 801.155641][T26457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 801.155657][T26457] Call Trace: [ 801.155664][T26457] [ 801.155719][T26457] __dump_stack+0x1d/0x30 [ 801.155743][T26457] dump_stack_lvl+0x95/0xd0 [ 801.155781][T26457] dump_stack+0x15/0x1b [ 801.155863][T26457] should_fail_ex+0x25e/0x270 [ 801.155897][T26457] should_fail+0xb/0x20 [ 801.155924][T26457] should_fail_usercopy+0x1a/0x20 [ 801.155958][T26457] _copy_to_user+0x20/0xa0 [ 801.156085][T26457] simple_read_from_buffer+0xb5/0x130 [ 801.156189][T26457] proc_fail_nth_read+0x10e/0x150 [ 801.156290][T26457] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 801.156363][T26457] vfs_read+0x18e/0x7c0 [ 801.156421][T26457] ? __rcu_read_unlock+0x4e/0x70 [ 801.156499][T26457] ? __fget_files+0x184/0x1c0 [ 801.156583][T26457] ? mutex_lock+0x57/0x90 [ 801.156722][T26457] ksys_read+0xdc/0x1a0 [ 801.156782][T26457] __x64_sys_read+0x40/0x50 [ 801.156872][T26457] x64_sys_call+0x2886/0x3020 [ 801.157015][T26457] do_syscall_64+0x136/0x3c0 [ 801.157076][T26457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.157206][T26457] RIP: 0033:0x7f3de7d7e6ce [ 801.157249][T26457] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 801.157302][T26457] RSP: 002b:00007f3de6816fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 801.157382][T26457] RAX: ffffffffffffffda RBX: 00007f3de68176c0 RCX: 00007f3de7d7e6ce [ 801.157475][T26457] RDX: 000000000000000f RSI: 00007f3de68170a0 RDI: 0000000000000004 [ 801.157533][T26457] RBP: 00007f3de6817090 R08: 0000000000000000 R09: 0000000000000000 [ 801.157635][T26457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 801.157738][T26457] R13: 00007f3de8046038 R14: 00007f3de8045fa0 R15: 00007ffed28bab48 [ 801.157804][T26457] [ 801.206134][T26455] netlink: 'syz.3.5885': attribute type 11 has an invalid length. [ 801.414784][T26458] loop5: detected capacity change from 0 to 8192 [ 801.421566][T26458] vfat: Unknown parameter '' [ 801.453582][T26463] netlink: 'syz.4.5886': attribute type 1 has an invalid length. [ 801.532969][ T30] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.542467][T26461] 8021q: VLANs not supported on ip6gre0 [ 801.571596][ T3545] tipc: Subscription rejected, illegal request [ 801.578105][T26466] netlink: 'syz.4.5888': attribute type 1 has an invalid length. [ 801.611573][T26458] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 801.660423][T26458] bond1 (unregistering): Released all slaves [ 801.691900][ T30] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.711026][T21433] kernel write not supported for file bpf-prog (pid: 21433 comm: kworker/0:13) [ 801.723668][T26480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5891'. [ 801.739319][ T30] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.772442][T26480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5891'. [ 801.881343][T26484] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5893'. [ 801.942170][T26497] netlink: 'syz.6.5898': attribute type 1 has an invalid length. [ 802.111613][ T28] audit: type=1326 audit(2000000538.431:25851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26507 comm="syz.5.5902" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6940f6de99 code=0x0 [ 802.376167][T26506] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 802.390075][T26506] bond3 (unregistering): Released all slaves [ 803.244666][T26527] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5907'. [ 803.302804][T26530] loop5: detected capacity change from 0 to 512 [ 803.339306][T26530] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 803.366392][T26530] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 803.389797][T26530] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.5907: Corrupt directory, running e2fsck is recommended [ 803.414805][T26530] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 803.439502][T26530] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.5907: corrupted in-inode xattr: invalid ea_ino [ 803.466482][T26530] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 803.466711][T26530] EXT4-fs (loop5): Remounting filesystem read-only [ 803.475883][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 803.475903][ C0] EXT4-fs (loop5): initial error at time 2000000539: ext4_iget_extra_inode:5180: inode 15 [ 803.475933][ C0] EXT4-fs (loop5): last error at time 2000000539: ext4_iget_extra_inode:5180: inode 15 [ 803.528087][T26530] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.530911][T26552] IPVS: set_ctl: invalid protocol: 111 0.0.0.0:20001 [ 803.729972][T26561] netlink: 'syz.3.5916': attribute type 1 has an invalid length. [ 804.940128][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 805.616250][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.415957][T26595] netlink: 'syz.5.5927': attribute type 1 has an invalid length. [ 806.580157][T26601] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5929'. [ 806.623828][T26604] loop5: detected capacity change from 0 to 256 [ 806.687079][T26601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26601 comm=syz.3.5929 [ 806.732806][T26601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 806.747514][T26601] 8021q: adding VLAN 0 to HW filter on device team0 [ 806.857719][T26614] netlink: 'syz.3.5934': attribute type 1 has an invalid length. [ 806.875675][T26614] bond3: entered promiscuous mode [ 806.881147][T26614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 806.924572][T26614] 8021q: adding VLAN 0 to HW filter on device bond3 [ 806.932815][T26614] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 806.945538][T26614] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 806.957686][T26614] bond3: (slave ip6gre1): making interface the new active one [ 806.966319][T26614] ip6gre1: entered promiscuous mode [ 806.973669][T26614] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 807.101408][T26631] bond6 (unregistering): Released all slaves [ 807.240245][T26651] netlink: 'syz.6.5947': attribute type 1 has an invalid length. [ 807.416708][T26656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5950'. [ 807.426769][T26656] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5950'. [ 807.453973][ T28] audit: type=1400 audit(2000000543.444:25852): avc: denied { name_connect } for pid=26655 comm="syz.6.5950" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 807.605772][T26671] loop5: detected capacity change from 0 to 128 [ 807.620081][T26671] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 807.660373][T26671] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 807.686931][ T30] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 807.740009][T26678] netlink: 463 bytes leftover after parsing attributes in process `syz.5.5959'. [ 807.777881][T26683] netlink: 'syz.6.5960': attribute type 1 has an invalid length. [ 807.875375][T26689] netlink: 44 bytes leftover after parsing attributes in process `syz.6.5962'. [ 807.979281][T26697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5966'. [ 808.072911][T26711] netlink: 'syz.3.5971': attribute type 1 has an invalid length. [ 808.103070][T26708] loop5: detected capacity change from 0 to 164 [ 808.152936][T26708] rock: directory entry would overflow storage [ 808.168280][T26708] rock: sig=0x5252, size=5, remaining=3 [ 808.179847][T26712] veth3: entered promiscuous mode [ 808.194899][ T28] audit: type=1326 audit(2000000544.137:25853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.219529][T26712] veth3: entered allmulticast mode [ 808.231500][ T28] audit: type=1326 audit(2000000544.137:25854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.257124][ T28] audit: type=1326 audit(2000000544.137:25855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.287912][T26708] netlink: 'syz.5.5970': attribute type 30 has an invalid length. [ 808.298422][ T28] audit: type=1326 audit(2000000544.137:25856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.324088][ T28] audit: type=1326 audit(2000000544.137:25857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.350301][ T28] audit: type=1326 audit(2000000544.137:25858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.376573][ T28] audit: type=1326 audit(2000000544.137:25859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.402416][ T28] audit: type=1326 audit(2000000544.137:25860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.428184][ T28] audit: type=1326 audit(2000000544.137:25861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26715 comm="syz.3.5973" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57b76de99 code=0x7ffc0000 [ 808.741149][T26738] loop5: detected capacity change from 0 to 1024 [ 808.765924][T26738] EXT4-fs: Ignoring removed nobh option [ 808.785000][T26732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5978'. [ 808.785142][T26738] EXT4-fs: Ignoring removed mblk_io_submit option [ 808.809554][T26732] team1: entered promiscuous mode [ 808.812217][T26738] EXT4-fs: Ignoring removed bh option [ 808.820511][T26732] team1: entered allmulticast mode [ 808.825759][T26732] 8021q: adding VLAN 0 to HW filter on device team1 [ 808.858544][T26747] netlink: 'syz.3.5984': attribute type 1 has an invalid length. [ 808.897837][T26745] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5983'. [ 808.912675][T26745] loop7: detected capacity change from 0 to 1024 [ 808.928224][T26752] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.5985'. [ 808.938199][T26738] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 808.968800][T26745] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 808.980754][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.017962][T26759] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5987'. [ 809.198068][ T7506] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.217910][ T7506] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.238028][T26778] netlink: 'syz.4.5995': attribute type 1 has an invalid length. [ 809.265488][ T7506] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.285763][ T7506] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.342853][T26789] loop5: detected capacity change from 0 to 128 [ 809.360221][T26789] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 809.421609][T26789] ext4 filesystem being mounted at /113/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 809.447064][T26789] EXT4-fs warning (device loop5): __ext4_ioctl:1564: Setting inode version is not supported with metadata_csum enabled. [ 809.462910][T26799] loop7: detected capacity change from 0 to 2048 [ 809.487869][T26803] netlink: 'syz.3.6004': attribute type 1 has an invalid length. [ 809.500852][T26803] dummy0: Caught tx_queue_len zero misconfig [ 809.651695][T26799] loop7: unable to read partition table [ 809.659422][T26799] loop7: partition table beyond EOD, truncated [ 809.666383][T26799] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 809.675452][T15559] syz_tun (unregistering): left allmulticast mode [ 809.731864][ T2980] loop7: unable to read partition table [ 809.742391][ T2980] loop7: partition table beyond EOD, truncated [ 809.803968][T26818] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode active-backup(1) [ 809.815185][T26818] bond6 (unregistering): Released all slaves [ 809.966592][T26810] bridge0: port 1(bridge_slave_0) entered blocking state [ 809.974032][T26810] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.981198][T26810] bridge_slave_0: entered allmulticast mode [ 809.983027][T26836] netlink: 'syz.7.6011': attribute type 1 has an invalid length. [ 809.988787][T26810] bridge_slave_0: entered promiscuous mode [ 810.001538][T26810] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.008914][T26810] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.017247][T26810] bridge_slave_1: entered allmulticast mode [ 810.023833][T26810] bridge_slave_1: entered promiscuous mode [ 810.043984][T26810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.054507][T26810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.075209][T26810] team0: Port device team_slave_0 added [ 810.083090][T26810] team0: Port device team_slave_1 added [ 810.099501][T26810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 810.106501][T26810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.133135][T26810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 810.149616][T26810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 810.156876][T26810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 810.183497][T26810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.234795][T26810] hsr_slave_0: entered promiscuous mode [ 810.248288][T26810] hsr_slave_1: entered promiscuous mode [ 810.266694][T26810] debugfs: 'hsr0' already exists in 'hsr' [ 810.273020][T26810] Cannot create hsr debugfs directory [ 810.304937][T24559] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 810.524534][ T7506] bridge_slave_1: left allmulticast mode [ 810.531755][ T7506] bridge_slave_1: left promiscuous mode [ 810.561466][ T7506] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.598590][ T7506] bridge_slave_0: left allmulticast mode [ 810.615321][ T7506] bridge_slave_0: left promiscuous mode [ 810.629109][ T7506] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.670246][ T7506] bond3 (unregistering): (slave ip6gre1): Releasing backup interface [ 810.688173][ T7506] ip6gre1 (unregistering): left promiscuous mode [ 810.721065][ T7506] gretap0 (unregistering): left promiscuous mode [ 810.782879][ T7506] bond0 (unregistering): left promiscuous mode [ 810.794476][ T7506] bond_slave_1: left promiscuous mode [ 810.805805][ T7506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.833280][ T7506] bond0 (unregistering): Released all slaves [ 810.851233][ T7506] bond1 (unregistering): Released all slaves [ 810.860863][ T7506] bond2 (unregistering): Released all slaves [ 810.873261][ T7506] bond3 (unregistering): Released all slaves [ 811.298673][T26909] loop5: detected capacity change from 0 to 512 [ 811.307255][T26909] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 811.534983][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 811.683637][ T7506] tipc: Left network mode [ 811.769731][T26913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26913 comm=syz.6.6030 [ 812.672553][T26936] __nla_validate_parse: 5 callbacks suppressed [ 812.672569][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6033'. [ 812.693009][T26936] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6033'. [ 812.714546][T26936] netlink: 340 bytes leftover after parsing attributes in process `syz.7.6033'. [ 812.912009][T26947] sctp: [Deprecated]: syz.5.6037 (pid 26947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 812.912009][T26947] Use struct sctp_sack_info instead [ 813.050182][ T7506] hsr_slave_0: left promiscuous mode [ 813.059107][ T7506] hsr_slave_1: left promiscuous mode [ 813.065586][ T7506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.073842][ T7506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.192319][ T7506] team0 (unregistering): Port device team_slave_1 removed [ 813.461650][T26965] netlink: 'syz.6.6043': attribute type 8 has an invalid length. [ 813.463434][T26982] netlink: 'syz.4.6047': attribute type 1 has an invalid length. [ 813.475324][T26810] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 813.513657][T26984] loop7: detected capacity change from 0 to 512 [ 813.521982][T26810] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.538899][T26984] /dev/loop7: Can't open blockdev [ 813.543841][T26987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26987 comm=syz.5.6049 [ 813.582423][T26810] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 813.732927][T27008] futex_wake_op: syz.6.6051 tries to shift op by 144; fix this program [ 813.769414][T27008] netlink: 'syz.6.6051': attribute type 1 has an invalid length. [ 813.777286][T27008] netlink: 131740 bytes leftover after parsing attributes in process `syz.6.6051'. [ 813.813183][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 813.813208][ T28] audit: type=1400 audit(2000000549.403:26000): avc: denied { write } for pid=26991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.903835][ T28] audit: type=1400 audit(2000000549.487:26001): avc: denied { write } for pid=27012 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.669875][T26810] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 814.685453][T26810] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 814.725407][T26810] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 814.735977][T26810] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 814.753827][T26810] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 814.802040][ T7506] IPVS: stop unused estimator thread 0... [ 814.849003][T26810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 814.861123][T26810] 8021q: adding VLAN 0 to HW filter on device team0 [ 814.927658][T26810] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 814.955440][T26810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 814.970528][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.977643][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 814.986364][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.993520][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 815.063883][ T28] audit: type=1326 audit(2000000550.572:26002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9dccde99 code=0x7ffc0000 [ 815.105603][ T28] audit: type=1326 audit(2000000550.572:26003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9dccde99 code=0x7ffc0000 [ 815.140449][ T28] audit: type=1326 audit(2000000550.572:26004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9dccde99 code=0x7ffc0000 [ 815.176733][ T28] audit: type=1326 audit(2000000550.591:26005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9c9dccde99 code=0x7ffc0000 [ 815.202618][ T28] audit: type=1326 audit(2000000550.638:26006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c9dccde99 code=0x7ffc0000 [ 815.249114][ T28] audit: type=1326 audit(2000000550.638:26007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c9dccdc02 code=0x7ffc0000 [ 815.300175][ T28] audit: type=1326 audit(2000000550.638:26008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f9c9dccdc97 code=0x7ffc0000 [ 815.376662][ T28] audit: type=1326 audit(2000000550.638:26009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27056 comm="syz.6.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9c9dc8ab91 code=0x7ffc0000 [ 815.417025][T26810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 815.505679][T26810] veth0_vlan: entered promiscuous mode [ 815.514224][T26810] veth1_vlan: entered promiscuous mode [ 815.531784][T26810] veth0_macvtap: entered promiscuous mode [ 815.540027][T26810] veth1_macvtap: entered promiscuous mode [ 815.552075][T26810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 815.564935][T26810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 815.576359][T14608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.588661][T14608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.604393][T14608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.617319][T14608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.683202][T27081] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6068'. [ 815.693536][T27081] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6068'. [ 815.784927][T27103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6075'. [ 815.823816][T27106] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6074'. [ 815.988514][T27117] netlink: 4372 bytes leftover after parsing attributes in process `syz.5.6080'. [ 816.019098][T27117] netlink: 'syz.5.6080': attribute type 1 has an invalid length. [ 816.034686][T27127] loop7: detected capacity change from 0 to 512 [ 816.053881][T27127] EXT4-fs: Ignoring removed mblk_io_submit option [ 816.071396][T27127] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 816.091666][T27127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 816.099942][T27127] System zones: 1-12 [ 816.104019][T27127] EXT4-fs (loop7): orphan cleanup on readonly fs [ 816.112968][T27127] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6082: bg 0: block 361: padding at end of block bitmap is not set [ 816.127617][T27127] loop7: lost filesystem error report for type 5 error -117 [ 816.129106][T27127] EXT4-fs (loop7): Remounting filesystem read-only [ 816.136463][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 816.136488][ C0] EXT4-fs (loop7): initial error at time 2000000551: ext4_validate_block_bitmap:441 [ 816.136539][ C0] EXT4-fs (loop7): last error at time 2000000551: ext4_validate_block_bitmap:441 [ 816.168473][T27127] EXT4-fs (loop7): 1 truncate cleaned up [ 816.174710][T27127] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 816.193972][T27127] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.6082: error -EUCLEAN reading directory block [ 816.208058][T27127] EXT4-fs warning (device loop7): dx_probe:791: inode #2: lblock 0: comm syz.7.6082: error -EUCLEAN reading directory block [ 816.239284][T17964] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 816.250108][T27132] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6085'. [ 816.701084][T27150] Non-string source [ 816.717607][T27157] netlink: 'syz.3.6095': attribute type 1 has an invalid length. [ 816.906011][T27180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27180 comm=syz.6.6105 [ 817.702119][T27187] tc_dump_action: action bad kind [ 817.853913][T27202] netlink: 'syz.3.6107': attribute type 4 has an invalid length. [ 817.920381][T27202] netlink: 'syz.3.6107': attribute type 4 has an invalid length. [ 817.991716][T27207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27207 comm=syz.3.6107 [ 818.005675][T27205] xt_hashlimit: size too large, truncated to 1048576 [ 818.219244][T27221] __nla_validate_parse: 4 callbacks suppressed [ 818.219263][T27221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6109'. [ 818.235309][T27221] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6109'. [ 818.346707][T27227] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6118'. [ 818.372300][T27229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27229 comm=syz.7.6119 [ 818.724334][T27235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6121'. [ 819.302313][T27243] loop7: detected capacity change from 0 to 128 [ 819.348264][T27243] EXT4-fs: error -4 creating inode table initialization thread [ 819.355919][T27243] EXT4-fs (loop7): mount failed [ 819.359827][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 819.359881][ T28] audit: type=1326 audit(2000000554.576:26233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 820.388288][ T28] audit: type=1326 audit(2000000554.576:26234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 820.654088][ T28] audit: type=1326 audit(2000000554.576:26235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.150662][ T28] audit: type=1326 audit(2000000554.576:26236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.179337][ T28] audit: type=1326 audit(2000000554.576:26237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.229938][ T28] audit: type=1326 audit(2000000554.576:26238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.278975][ T28] audit: type=1326 audit(2000000554.576:26239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.332524][ T28] audit: type=1326 audit(2000000554.576:26240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.379684][T27271] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6130'. [ 822.438023][ T28] audit: type=1326 audit(2000000554.576:26241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.464502][ T28] audit: type=1326 audit(2000000554.576:26242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27245 comm="syz.3.6126" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 822.546928][T27274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 822.561837][T27274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 822.603988][T27276] netlink: 'syz.4.6131': attribute type 4 has an invalid length. [ 822.612745][T27276] netlink: 1 bytes leftover after parsing attributes in process `syz.4.6131'. [ 822.649826][T27276] netlink: 'syz.4.6131': attribute type 4 has an invalid length. [ 822.653938][T27278] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6132'. [ 822.669640][T27276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27276 comm=syz.4.6131 [ 822.683809][T27278] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 822.690408][T27278] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 822.698141][T27278] vhci_hcd vhci_hcd.0: Device attached [ 822.705700][T27278] sctp: [Deprecated]: syz.7.6132 (pid 27278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 822.705700][T27278] Use struct sctp_sack_info instead [ 823.005977][T21433] usb 16-1: SetAddress Request (2) to port 0 [ 823.012034][T21433] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 823.268116][T27279] vhci_hcd: connection reset by peer [ 823.273988][ T12] vhci_hcd vhci_hcd.7: stop threads [ 823.287609][ T12] vhci_hcd vhci_hcd.7: release socket [ 823.296517][T27283] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6133'. [ 823.311603][ T12] vhci_hcd vhci_hcd.7: disconnect device [ 823.320437][T27285] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6134'. [ 823.580137][T27290] tmpfs: Bad value for 'size' [ 823.744563][T27293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6137'. [ 823.753548][T27293] netlink: 'syz.4.6137': attribute type 30 has an invalid length. [ 823.765790][T27293] vxlan0: entered promiscuous mode [ 823.771086][T27293] vxlan0: entered allmulticast mode [ 823.778038][T14608] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.787006][T14608] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.796194][T14608] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 823.812812][T14608] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 824.117565][T27304] loop7: detected capacity change from 0 to 128 [ 824.978531][T27317] FAULT_INJECTION: forcing a failure. [ 824.978531][T27317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.019678][T27317] CPU: 1 UID: 0 PID: 27317 Comm: syz.7.6145 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 825.019710][T27317] Tainted: [W]=WARN [ 825.019717][T27317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 825.019730][T27317] Call Trace: [ 825.019736][T27317] [ 825.019742][T27317] __dump_stack+0x1d/0x30 [ 825.019826][T27317] dump_stack_lvl+0x95/0xd0 [ 825.019850][T27317] dump_stack+0x15/0x1b [ 825.019868][T27317] should_fail_ex+0x25e/0x270 [ 825.019898][T27317] ? __pfx_ppp_ioctl+0x10/0x10 [ 825.019965][T27317] should_fail+0xb/0x20 [ 825.019989][T27317] should_fail_usercopy+0x1a/0x20 [ 825.020088][T27317] _copy_from_user+0x1c/0xb0 [ 825.020113][T27317] ppp_ioctl+0x682/0x1230 [ 825.020141][T27317] ? __pfx_ppp_ioctl+0x10/0x10 [ 825.020172][T27317] __se_sys_ioctl+0xce/0x140 [ 825.020200][T27317] __x64_sys_ioctl+0x43/0x50 [ 825.020284][T27317] x64_sys_call+0x1563/0x3020 [ 825.020324][T27317] do_syscall_64+0x136/0x3c0 [ 825.020351][T27317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.020371][T27317] RIP: 0033:0x7efdd1b3de99 [ 825.020386][T27317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.020404][T27317] RSP: 002b:00007efdd0597028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 825.020497][T27317] RAX: ffffffffffffffda RBX: 00007efdd1dc5fa0 RCX: 00007efdd1b3de99 [ 825.020514][T27317] RDX: 0000200000000180 RSI: 000000004010744d RDI: 0000000000000003 [ 825.020601][T27317] RBP: 00007efdd0597090 R08: 0000000000000000 R09: 0000000000000000 [ 825.020617][T27317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.020633][T27317] R13: 00007efdd1dc6038 R14: 00007efdd1dc5fa0 R15: 00007ffde612fef8 [ 825.020655][T27317] [ 825.415531][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6150'. [ 825.653979][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 825.653996][ T28] audit: type=1326 audit(2000000560.469:26369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27270 comm="syz.5.6130" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940f6de99 code=0x7fc00000 [ 826.017980][T27366] netlink: 'syz.6.6162': attribute type 4 has an invalid length. [ 826.029586][T27366] netlink: 'syz.6.6162': attribute type 4 has an invalid length. [ 826.055272][T27366] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27366 comm=syz.6.6162 [ 826.064607][T27363] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.6164'. [ 826.104714][T27369] loop5: detected capacity change from 0 to 512 [ 826.159376][T27369] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.6166: corrupted in-inode xattr: e_value size too large [ 826.173589][T27369] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 826.175118][T27369] EXT4-fs (loop5): Remounting filesystem read-only [ 826.184306][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 826.184327][ C0] EXT4-fs (loop5): initial error at time 2000000560: ext4_iget_extra_inode:5180: inode 15 [ 826.184360][ C0] EXT4-fs (loop5): last error at time 2000000560: ext4_iget_extra_inode:5180: inode 15 [ 826.219132][T27369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.232135][T27369] EXT4-fs (loop5): shut down requested (2) [ 826.239013][ T28] audit: type=1400 audit(2000000561.030:26370): avc: denied { write } for pid=27367 comm="syz.5.6166" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.266336][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.278964][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.289615][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.302037][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.312096][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.327448][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.337214][T27369] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6166'. [ 826.359909][T27383] 9p: Bad value for 'rfdno' [ 826.380633][T27369] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.387905][T27369] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.431478][T27369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.441453][T27369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.509843][ T30] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.519544][ T30] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.535685][ T30] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.545865][ T30] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.594974][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.979582][T27407] syzkaller0: entered promiscuous mode [ 826.985663][T27407] syzkaller0: entered allmulticast mode [ 826.998017][T27407] netlink: 'syz.7.6181': attribute type 142 has an invalid length. [ 827.742308][T27422] netlink: 'syz.6.6187': attribute type 1 has an invalid length. [ 827.864847][T27430] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 827.993457][ T28] audit: type=1400 audit(2000000819.666:26371): avc: denied { bind } for pid=27436 comm="syz.3.6193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 828.072554][ T28] audit: type=1400 audit(2000000819.666:26372): avc: denied { listen } for pid=27436 comm="syz.3.6193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 828.125802][ T30] bond0: (slave netdevsim2): Releasing backup interface [ 828.156756][T27448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27448 comm=syz.6.6197 [ 828.173325][T27450] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 828.424816][T21433] usb 16-1: device descriptor read/8, error -110 [ 828.517388][ T28] audit: type=1400 audit(2000000820.153:26373): avc: denied { create } for pid=27455 comm="syz.4.6199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=smc_socket permissive=1 [ 828.537589][ T28] audit: type=1400 audit(2000000820.153:26374): avc: denied { create } for pid=27455 comm="syz.4.6199" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_tcpdiag_socket permissive=1 [ 828.619020][T21433] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 828.639148][T21433] usb 16-1: enqueue for inactive port 0 [ 828.644823][T21433] usb 16-1: enqueue for inactive port 0 [ 828.653331][T21433] usb 16-1: enqueue for inactive port 0 [ 828.662171][ T28] audit: type=1400 audit(2000000820.274:26375): avc: denied { create } for pid=27463 comm="syz.4.6201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 828.902306][T27457] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.909567][T27457] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.916837][T27457] bridge_slave_0: entered allmulticast mode [ 828.923405][T27457] bridge_slave_0: entered promiscuous mode [ 828.930164][T27457] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.937326][T27457] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.944560][T27457] bridge_slave_1: entered allmulticast mode [ 828.951763][T27457] bridge_slave_1: entered promiscuous mode [ 828.970644][T27457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 828.981323][T27457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.001521][T27457] team0: Port device team_slave_0 added [ 829.017108][T27457] team0: Port device team_slave_1 added [ 829.039106][T27457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.046282][T27457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.072933][T27457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.084437][T27457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.091514][T27457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.117576][T27457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.145621][T27457] hsr_slave_0: entered promiscuous mode [ 829.152318][T27457] hsr_slave_1: entered promiscuous mode [ 829.158445][T27457] debugfs: 'hsr0' already exists in 'hsr' [ 829.164210][T27457] Cannot create hsr debugfs directory [ 829.201950][T27483] __nla_validate_parse: 137 callbacks suppressed [ 829.201968][T27483] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6203'. [ 829.323225][ T28] audit: type=1400 audit(2000000820.892:26376): avc: denied { map } for pid=27487 comm="syz.4.6205" path="socket:[88320]" dev="sockfs" ino=88320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.392132][ T28] audit: type=1400 audit(2000000820.892:26377): avc: denied { read } for pid=27487 comm="syz.4.6205" path="socket:[88320]" dev="sockfs" ino=88320 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 829.445898][T27502] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6211'. [ 829.677647][ T30] bridge_slave_1: left allmulticast mode [ 829.683368][ T30] bridge_slave_1: left promiscuous mode [ 829.689173][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.697573][ T30] bridge_slave_0: left allmulticast mode [ 829.703244][ T30] bridge_slave_0: left promiscuous mode [ 829.709031][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.868534][T21433] usb usb16-port1: attempt power cycle [ 829.975001][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 829.991430][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 830.013822][T27513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27513 comm=syz.5.6213 [ 830.031548][ T30] bond0 (unregistering): Released all slaves [ 830.042540][ T30] bond1 (unregistering): Released all slaves [ 830.069775][ T30] bond2 (unregistering): Released all slaves [ 830.117028][T27516] netlink: 'syz.4.6212': attribute type 4 has an invalid length. [ 830.138227][ T30] bond3 (unregistering): Released all slaves [ 830.238649][T27519] netlink: 'syz.4.6212': attribute type 4 has an invalid length. [ 830.307781][T27509] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27509 comm=syz.4.6212 [ 830.550044][ T28] audit: type=1400 audit(2000000822.052:26378): avc: denied { write } for pid=27506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.128315][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 831.187796][ T30] IPVS: stopping backup sync thread 20109 ... [ 831.316945][T27546] UHID_CREATE from different security context by process 1152 (syz.4.6221), this is not allowed. [ 831.435837][T27558] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27558 comm=syz.3.6226 [ 831.486520][T27561] netlink: 72 bytes leftover after parsing attributes in process `syz.6.6223'. [ 831.553793][T27564] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6227'. [ 831.585611][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 831.585630][ T28] audit: type=1400 audit(2000000823.024:26380): avc: denied { lock } for pid=27553 comm="syz.4.6225" path="socket:[87927]" dev="sockfs" ino=87927 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 831.830611][ T28] audit: type=1400 audit(2000000823.202:26381): avc: denied { write } for pid=27541 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.854453][ T28] audit: type=1400 audit(2000000823.202:26382): avc: denied { write } for pid=27577 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 831.864295][T21433] usb usb16-port1: unable to enumerate USB device [ 831.955987][T27581] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6229'. [ 831.965255][T27581] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6229'. [ 832.448015][ T30] hsr_slave_0: left promiscuous mode [ 832.454661][ T30] hsr_slave_1: left promiscuous mode [ 832.468582][T27594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6233'. [ 832.497261][ T30] team0 (unregistering): Port device team_slave_1 removed [ 832.507332][ T30] team0 (unregistering): Port device team_slave_0 removed [ 832.557989][T27598] netlink: 'syz.5.6234': attribute type 1 has an invalid length. [ 832.598468][T27598] 8021q: adding VLAN 0 to HW filter on device bond2 [ 832.679570][T27598] loop5: detected capacity change from 0 to 8192 [ 832.721150][ T30] IPVS: stop unused estimator thread 0... [ 832.744610][ T28] audit: type=1400 audit(2000000824.110:26383): avc: denied { write } for pid=27604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.798905][ T28] audit: type=1400 audit(2000000824.166:26384): avc: denied { write } for pid=27619 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 832.827681][T27621] FAULT_INJECTION: forcing a failure. [ 832.827681][T27621] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 832.854888][T27621] CPU: 1 UID: 0 PID: 27621 Comm: syz.5.6236 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 832.855050][T27621] Tainted: [W]=WARN [ 832.855058][T27621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 832.855073][T27621] Call Trace: [ 832.855138][T27621] [ 832.855148][T27621] __dump_stack+0x1d/0x30 [ 832.855175][T27621] dump_stack_lvl+0x95/0xd0 [ 832.855216][T27621] dump_stack+0x15/0x1b [ 832.855234][T27621] should_fail_ex+0x25e/0x270 [ 832.855329][T27621] should_fail+0xb/0x20 [ 832.855430][T27621] should_fail_usercopy+0x1a/0x20 [ 832.855461][T27621] _copy_from_user+0x1c/0xb0 [ 832.855480][T27621] ___sys_sendmsg+0xc1/0x1e0 [ 832.855573][T27621] __x64_sys_sendmsg+0xd4/0x160 [ 832.855618][T27621] x64_sys_call+0x194c/0x3020 [ 832.855650][T27621] do_syscall_64+0x136/0x3c0 [ 832.855679][T27621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.855708][T27621] RIP: 0033:0x7f6940f6de99 [ 832.855723][T27621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.855741][T27621] RSP: 002b:00007f693f9c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.855760][T27621] RAX: ffffffffffffffda RBX: 00007f69411f5fa0 RCX: 00007f6940f6de99 [ 832.855775][T27621] RDX: 0000000000000802 RSI: 00002000000003c0 RDI: 0000000000000029 [ 832.855787][T27621] RBP: 00007f693f9c7090 R08: 0000000000000000 R09: 0000000000000000 [ 832.855815][T27621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 832.855831][T27621] R13: 00007f69411f6038 R14: 00007f69411f5fa0 R15: 00007fff6c406be8 [ 832.855856][T27621] [ 833.054315][T27629] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6238'. [ 833.066131][T27629] loop5: detected capacity change from 0 to 512 [ 833.077370][T27629] EXT4-fs: Invalid want_extra_isize 4 [ 833.087420][T27629] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=27629 comm=syz.5.6238 [ 833.100368][ T28] audit: type=1400 audit(2000000824.437:26385): avc: denied { associate } for pid=27627 comm="syz.5.6238" name="163" dev="tmpfs" ino=875 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 833.177892][ T28] audit: type=1400 audit(2000000824.437:26386): avc: denied { write } for pid=27627 comm="syz.5.6238" name="163" dev="tmpfs" ino=875 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 833.210509][ T28] audit: type=1400 audit(2000000824.437:26387): avc: denied { associate } for pid=27627 comm="syz.5.6238" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 833.281177][ T28] audit: type=1400 audit(2000000824.615:26388): avc: denied { write } for pid=27624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.286757][T27457] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 833.331378][ T28] audit: type=1400 audit(2000000824.633:26389): avc: denied { write } for pid=27644 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 833.347914][T27646] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.6241'. [ 833.376697][T27457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.390192][T27457] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 833.399200][T27457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.404422][T27650] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6242'. [ 833.430492][T27457] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 833.445856][T27457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.454674][T27457] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 833.467448][T27457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.510396][T27457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.523529][T27457] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.533151][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.540250][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.561617][T14596] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.568742][T14596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.655477][ T279] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 833.664494][ T279] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 833.676378][ T279] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 833.692916][ T279] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 833.716472][ T279] hid-generic 0000:0000:0000.0007: item fetching failed at offset 10/16 [ 833.734841][ T279] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 833.834817][T27457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.006065][T27457] veth0_vlan: entered promiscuous mode [ 834.013772][T27457] veth1_vlan: entered promiscuous mode [ 834.032320][T27457] veth0_macvtap: entered promiscuous mode [ 834.043720][T27457] veth1_macvtap: entered promiscuous mode [ 834.077278][T27457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.089081][T27712] loop5: detected capacity change from 0 to 512 [ 834.096957][T27457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.109785][ T3545] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.117639][T27712] EXT4-fs: Ignoring removed bh option [ 834.122190][ T7519] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.127240][T27712] EXT4-fs: Ignoring removed mblk_io_submit option [ 834.142320][T27712] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 834.152672][ T7519] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.156571][T27712] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 834.173080][T27712] EXT4-fs (loop5): orphan cleanup on readonly fs [ 834.186428][ T7519] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.187154][T27712] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.6256: Failed to acquire dquot type 1 [ 834.206941][T27712] loop5: lost filesystem error report for type 5 error -5 [ 834.208245][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 834.222228][ C1] EXT4-fs (loop5): last error at time 2000000825: ext4_acquire_dquot:7041 [ 834.240125][T27712] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6256: Invalid block bitmap block 0 in block_group 0 [ 834.257205][T27712] loop5: lost filesystem error report for type 5 error -117 [ 834.259503][T27712] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6256: Invalid block bitmap block 0 in block_group 0 [ 834.283265][T27712] loop5: lost filesystem error report for type 5 error -117 [ 834.291700][T27712] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6256: Invalid block bitmap block 0 in block_group 0 [ 834.319353][T27712] loop5: lost filesystem error report for type 5 error -117 [ 834.321405][T27712] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.6256: Failed to acquire dquot type 1 [ 834.341771][T27712] loop5: lost filesystem error report for type 5 error -28 [ 834.345011][T27712] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.6256: Failed to acquire dquot type 1 [ 834.364972][T27712] loop5: lost filesystem error report for type 5 error -28 [ 834.369099][T27712] EXT4-fs (loop5): 1 orphan inode deleted [ 834.384451][T27712] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 834.407610][T27712] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.6256: deleted inode referenced: 12 [ 834.431257][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 834.608249][T27734] netlink: 'syz.5.6263': attribute type 1 has an invalid length. [ 835.668484][T27757] loop7: detected capacity change from 0 to 1024 [ 835.719576][T27757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 836.953396][T27771] __nla_validate_parse: 3 callbacks suppressed [ 836.953411][T27771] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6271'. [ 836.982510][T27773] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6274'. [ 837.119492][T27771] netlink: 4560 bytes leftover after parsing attributes in process `syz.4.6271'. [ 838.158339][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.363550][T27785] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6278'. [ 839.296738][T27812] netlink: 25 bytes leftover after parsing attributes in process `syz.5.6287'. [ 839.329031][T27812] netlink: 'syz.5.6287': attribute type 4 has an invalid length. [ 839.339067][T27812] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=27812 comm=syz.5.6287 [ 839.356511][T27814] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.6288'. [ 839.359377][T27816] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6289'. [ 839.365709][T27814] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.6288'. [ 839.407242][T27820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6291'. [ 839.463383][T27822] program syz.4.6292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 839.626328][T27834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6295'. [ 840.601347][T27842] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27842 comm=syz.6.6293 [ 841.782702][T27873] bond0: ARP target 0.0.0.2 is already present [ 841.789029][T27873] bond0: option arp_ip_target: invalid value (33554432) [ 841.812257][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 841.812273][ T28] audit: type=1326 audit(2000000832.594:26411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27874 comm="syz.5.6308" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6940f6de99 code=0x0 [ 843.510793][ T28] audit: type=1400 audit(2000000834.174:26412): avc: denied { view } for pid=27918 comm="syz.7.6322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 844.749656][T27924] __nla_validate_parse: 7 callbacks suppressed [ 844.749676][T27924] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6321'. [ 845.158072][T27934] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=27934 comm=syz.5.6321 [ 845.596747][ T28] audit: type=1326 audit(2000000836.129:26413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 845.648100][ T28] audit: type=1326 audit(2000000836.129:26414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 846.182248][T14596] bridge_slave_1: left promiscuous mode [ 846.248223][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.346044][T14596] bridge_slave_0: left allmulticast mode [ 846.411305][T14596] bridge_slave_0: left promiscuous mode [ 846.452630][T27955] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6328'. [ 846.476918][T27951] loop5: detected capacity change from 0 to 512 [ 846.485684][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.689939][ T28] audit: type=1326 audit(2000000836.129:26415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 846.715633][ T28] audit: type=1326 audit(2000000836.158:26416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 846.759842][T27951] EXT4-fs (loop5): 1 orphan inode deleted [ 846.766749][T27951] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 846.836946][T14596] bond1 (unregistering): (slave vti0): Releasing backup interface [ 846.886981][T14596] vti0 (unregistering): left promiscuous mode [ 846.980102][T21431] IPVS: starting estimator thread 0... [ 847.080103][T27971] IPVS: using max 2592 ests per chain, 129600 per kthread [ 847.098096][T14596] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.138194][T27953] audit: audit_backlog=65 > audit_backlog_limit=64 [ 847.166914][T14596] bond_slave_1: left promiscuous mode [ 847.173037][T14596] bond0 (unregistering): Released all slaves [ 847.182637][T14596] bond1 (unregistering): Released all slaves [ 847.199594][T27953] audit: audit_lost=51 audit_rate_limit=0 audit_backlog_limit=64 [ 847.207352][T27953] audit: backlog limit exceeded [ 847.236889][T14596] bond2 (unregistering): Released all slaves [ 847.274528][T14596] bond3 (unregistering): Released all slaves [ 847.342188][T14596] bond4 (unregistering): Released all slaves [ 847.394678][T27974] audit: audit_backlog=65 > audit_backlog_limit=64 [ 847.413979][T14596] bond5 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 847.439734][T27974] audit: audit_lost=52 audit_rate_limit=0 audit_backlog_limit=64 [ 847.466737][T14596] bond5 (unregistering): Released all slaves [ 847.490508][T27974] audit: backlog limit exceeded [ 847.759304][ T28] audit: type=1326 audit(2000000836.158:26417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 847.772806][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 847.803370][ T28] audit: type=1326 audit(2000000836.158:26418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 847.879099][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 848.028359][ T28] audit: type=1326 audit(2000000836.158:26419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 848.054105][ T28] audit: type=1326 audit(2000000836.158:26420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 848.081221][ T28] audit: type=1326 audit(2000000836.158:26421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 848.132545][ T28] audit: type=1326 audit(2000000836.158:26422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 848.182377][ T28] audit: type=1326 audit(2000000836.167:26423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27939 comm="syz.7.6325" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e2997de99 code=0x7ffc0000 [ 848.643341][T28002] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6334'. [ 850.343938][T28011] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6337'. [ 851.135127][T28009] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6336'. [ 851.297486][T28000] loop5: detected capacity change from 0 to 512 [ 851.364446][T28000] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 851.377517][T28000] EXT4-fs error (device loop5): ext4_get_branch:178: inode #13: block 1024: comm syz.5.6333: invalid block [ 851.389370][T28000] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 851.392209][T28000] EXT4-fs (loop5): 1 truncate cleaned up [ 851.401514][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 851.401547][ C1] EXT4-fs (loop5): initial error at time 2000000841: ext4_get_branch:178: inode 13: block 1024 [ 851.401739][ C1] EXT4-fs (loop5): last error at time 2000000841: ext4_get_branch:178: inode 13: block 1024 [ 851.628459][T28000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 851.754245][T14596] hsr_slave_0: left promiscuous mode [ 851.776910][T14596] hsr_slave_1: left promiscuous mode [ 851.792679][T28027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6338'. [ 851.805403][T14596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.830407][T14596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.020160][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.039168][T28036] loop7: detected capacity change from 0 to 1024 [ 852.070415][T28039] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.6342'. [ 852.094147][T28036] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6340'. [ 852.134608][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 852.145125][T28035] netlink: 'syz.4.6339': attribute type 4 has an invalid length. [ 852.155036][T28035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28035 comm=syz.4.6339 [ 852.256089][T27921] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.263307][T27921] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.270764][T27921] bridge_slave_0: entered allmulticast mode [ 852.277514][T27921] bridge_slave_0: entered promiscuous mode [ 852.284643][T27921] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.291814][T27921] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.299410][T27921] bridge_slave_1: entered allmulticast mode [ 852.305993][T27921] bridge_slave_1: entered promiscuous mode [ 852.324122][T27921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.334728][T27921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.365343][T27921] team0: Port device team_slave_0 added [ 852.484117][T27921] team0: Port device team_slave_1 added [ 852.501280][T27921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.509824][T27921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.536144][T27921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.548151][T27921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.555394][T27921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.581811][T27921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.612738][ T3019] 8021q: adding VLAN 0 to HW filter on device eth7 [ 852.622180][T27921] hsr_slave_0: entered promiscuous mode [ 852.627807][T28060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6344'. [ 852.628761][T27921] hsr_slave_1: entered promiscuous mode [ 852.668880][T28079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6348'. [ 852.705450][T28083] netlink: 'syz.7.6349': attribute type 1 has an invalid length. [ 852.750612][T28083] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6349'. [ 852.917260][ T28] kauditd_printk_skb: 171 callbacks suppressed [ 852.917278][ T28] audit: type=1400 audit(2000000842.892:26595): avc: denied { write } for pid=28086 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.956988][ T28] audit: type=1400 audit(2000000842.911:26596): avc: denied { write } for pid=28101 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 852.979628][ T28] audit: type=1400 audit(2000000843.014:26597): avc: denied { write } for pid=28103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 853.233888][T28119] loop7: detected capacity change from 0 to 512 [ 854.000148][T14596] IPVS: stop unused estimator thread 0... [ 855.091300][ T28] audit: type=1400 audit(2000000844.024:26598): avc: denied { write } for pid=28123 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.621697][ T28] audit: type=1400 audit(2000000845.455:26599): avc: denied { write } for pid=28131 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.697249][ T28] audit: type=1400 audit(2000000845.502:26600): avc: denied { write } for pid=28143 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.905513][ T28] audit: type=1400 audit(2000000845.773:26601): avc: denied { write } for pid=28145 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.978690][ T28] audit: type=1400 audit(2000000845.839:26602): avc: denied { write } for pid=28156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.012239][T28119] EXT4-fs: error -4 creating inode table initialization thread [ 856.021573][T28119] EXT4-fs (loop7): mount failed [ 856.111298][ T28] audit: type=1400 audit(2000000845.961:26603): avc: denied { write } for pid=28158 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.243812][ T28] audit: type=1400 audit(2000000846.091:26604): avc: denied { write } for pid=28169 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.294152][T28174] netlink: 'syz.4.6356': attribute type 1 has an invalid length. [ 856.355816][T28178] loop5: detected capacity change from 0 to 2048 [ 856.367158][T28174] 8021q: adding VLAN 0 to HW filter on device bond3 [ 856.403252][T28178] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a840c029, mo2=0003] [ 856.415973][T28178] System zones: 0-7 [ 856.429169][T28178] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 856.453222][T28191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6359'. [ 856.499551][T28178] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.6355: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 856.517573][T28178] EXT4-fs (loop5): Remounting filesystem read-only [ 856.525795][T28181] bond3: (slave veth5): Enslaving as an active interface with a down link [ 856.589552][T28174] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 856.604202][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 856.624547][T28174] bond3: (slave batadv1): making interface the new active one [ 856.646438][T28174] batadv1: entered promiscuous mode [ 856.656098][T28174] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 856.707747][T28192] bond3 (unregistering): (slave veth5): Releasing active interface [ 856.742789][T28192] bond3 (unregistering): (slave batadv1): Releasing active interface [ 856.759663][T28192] bond3 (unregistering): Released all slaves [ 856.789506][T27921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 856.798666][T27921] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.806893][T27921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 856.811112][T28212] netlink: 'syz.7.6362': attribute type 4 has an invalid length. [ 856.824696][T27921] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.832496][T27921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 856.841284][T27921] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.877234][T28225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28225 comm=syz.7.6362 [ 856.890209][T27921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 856.900166][T27921] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.964777][T27921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.983558][T27921] 8021q: adding VLAN 0 to HW filter on device team0 [ 856.996918][T14608] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.004003][T14608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.017520][ T3545] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.024667][ T3545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.070014][T27921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 857.188789][T28252] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6367'. [ 857.284951][T28271] netlink: 'syz.3.6368': attribute type 7 has an invalid length. [ 857.309272][T27921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 857.794414][T27921] veth0_vlan: entered promiscuous mode [ 857.830823][T27921] veth1_vlan: entered promiscuous mode [ 858.020822][T28325] loop7: detected capacity change from 0 to 512 [ 858.046638][T28325] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 858.056683][T28325] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.6370: invalid block [ 858.068329][T28325] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 858.069665][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 858.085486][ C1] EXT4-fs (loop7): initial error at time 2000000847: ext4_get_branch:178: inode 13: block 1024 [ 858.096380][ C1] EXT4-fs (loop7): last error at time 2000000847: ext4_get_branch:178: inode 13: block 1024 [ 858.108237][T28325] EXT4-fs (loop7): 1 truncate cleaned up [ 858.124464][T28325] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 858.287204][T27921] veth0_macvtap: entered promiscuous mode [ 858.353833][T27921] veth1_macvtap: entered promiscuous mode [ 858.445749][T27921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.550763][T27921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 858.797399][ T7506] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.806263][ T7506] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.828850][ T7506] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.891537][T14596] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 858.920701][T28344] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6318'. [ 858.938820][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 858.938906][ T28] audit: type=1400 audit(2000000848.617:26615): avc: denied { write } for pid=28303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.075725][ T28] audit: type=1326 audit(2000000848.683:26616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.115601][T28353] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6377'. [ 859.177017][ T28] audit: type=1326 audit(2000000848.683:26617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.258961][T28359] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6378'. [ 859.282334][ T28] audit: type=1326 audit(2000000848.683:26618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.388944][ T28] audit: type=1326 audit(2000000848.683:26619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.494592][ T28] audit: type=1326 audit(2000000848.683:26620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.571678][ T28] audit: type=1326 audit(2000000848.683:26621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.597438][ T28] audit: type=1326 audit(2000000848.683:26622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.623641][ T28] audit: type=1326 audit(2000000848.683:26623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.690792][ T28] audit: type=1326 audit(2000000848.683:26624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28347 comm="syz.3.6376" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 859.693195][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 859.776643][T28388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6384'. [ 859.877690][T28399] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6387'. [ 860.044702][T28404] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.109789][T28420] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.6389'. [ 860.175374][T28425] loop5: detected capacity change from 0 to 128 [ 860.192207][T28425] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 860.204682][T28425] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 860.318090][T24559] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 860.357110][T28444] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6395'. [ 860.421881][T28444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 861.666743][T28470] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.6403'. [ 861.853982][T28473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6404'. [ 862.131482][T28487] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6407'. [ 862.777965][T28520] netlink: 'syz.5.6417': attribute type 3 has an invalid length. [ 862.793341][T28520] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 862.829950][T28520] sctp: [Deprecated]: syz.5.6417 (pid 28520) Use of int in maxseg socket option. [ 862.829950][T28520] Use struct sctp_assoc_value instead [ 862.849325][T28522] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6418'. [ 862.897990][T28520] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6417'. [ 862.948427][T28534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6421'. [ 863.118844][T28547] netlink: 'syz.5.6425': attribute type 4 has an invalid length. [ 863.128481][T28547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28547 comm=syz.5.6425 [ 863.302402][T28550] loop7: detected capacity change from 0 to 512 [ 863.312810][T28550] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 863.342317][T28550] EXT4-fs (loop7): orphan cleanup on readonly fs [ 863.361542][T28550] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 863.369998][T28550] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 863.380134][T28556] veth0: entered promiscuous mode [ 863.385686][T28556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6428'. [ 863.395641][T28550] EXT4-fs (loop7): 1 truncate cleaned up [ 863.401786][T28550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 863.404575][T28556] veth0 (unregistering): left promiscuous mode [ 863.438419][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.500946][T28560] program syz.7.6431 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 863.530184][T21431] IPVS: starting estimator thread 0... [ 863.552283][T28567] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6434'. [ 863.555605][T28564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6433'. [ 863.650527][T28565] IPVS: using max 2448 ests per chain, 122400 per kthread [ 863.685601][T28580] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6438'. [ 863.881164][T28591] loop7: detected capacity change from 0 to 256 [ 863.889462][T28591] vfat: Unknown parameter '' [ 864.010997][T28591] random: crng reseeded on system resumption [ 864.085417][T28608] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.6446'. [ 864.161734][T28611] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 864.293423][ T28] kauditd_printk_skb: 369 callbacks suppressed [ 864.293529][ T28] audit: type=1326 audit(2000000853.621:26994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940f6de99 code=0x7ffc0000 [ 864.360640][ T28] audit: type=1326 audit(2000000853.621:26995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6940f6dc02 code=0x7ffc0000 [ 864.406944][ T28] audit: type=1326 audit(2000000853.621:26996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6940f6dc97 code=0x7ffc0000 [ 864.451978][ T28] audit: type=1326 audit(2000000853.621:26997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6940f2ab91 code=0x7ffc0000 [ 864.509714][ T28] audit: type=1326 audit(2000000853.621:26998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6940f6ec89 code=0x7ffc0000 [ 864.571943][ T28] audit: type=1326 audit(2000000853.621:26999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6940f2abfb code=0x7ffc0000 [ 864.717797][ T28] audit: type=1326 audit(2000000853.621:27000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940f6de99 code=0x7ffc0000 [ 864.743898][ T28] audit: type=1326 audit(2000000853.621:27001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6940f6de99 code=0x7ffc0000 [ 864.817798][ T28] audit: type=1326 audit(2000000853.621:27002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6940f2a2ec code=0x7ffc0000 [ 864.855561][ T28] audit: type=1326 audit(2000000853.621:27003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28605 comm="syz.5.6445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6940f2a34e code=0x7ffc0000 [ 865.104584][T28675] netlink: 'syz.4.6466': attribute type 2 has an invalid length. [ 865.170773][T28672] 9p: Could not find request transport: v˙˙˙˙˙˙˙che=fscache [ 865.193347][T28680] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=37 sclass=netlink_audit_socket pid=28680 comm=syz.3.6470 [ 865.288114][T28682] SELinux: syz.4.6471 (28682) wrote to user. This is no longer supported. [ 865.502062][T28688] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 865.549987][T28690] netlink: 'syz.3.6474': attribute type 3 has an invalid length. [ 865.564437][T28690] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 865.592895][T28690] sctp: [Deprecated]: syz.3.6474 (pid 28690) Use of int in maxseg socket option. [ 865.592895][T28690] Use struct sctp_assoc_value instead [ 866.275089][T28705] loop7: detected capacity change from 0 to 1024 [ 866.292461][T28705] EXT4-fs: dax option not supported [ 866.832113][T28720] loop7: detected capacity change from 0 to 512 [ 866.850382][T28720] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 866.927057][T28720] EXT4-fs (loop7): 1 truncate cleaned up [ 866.933127][T28720] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 866.946755][T28720] EXT4-fs error (device loop7): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.7.6484: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 866.968724][T28720] EXT4-fs error (device loop7) in ext4_delete_entry:2744: Corrupt filesystem [ 866.978082][T28720] EXT4-fs warning (device loop7): ext4_rename_delete:3739: inode #2: comm syz.7.6484: Deleting old file: nlink 4, error=-117 [ 867.367401][T28730] netlink: 'syz.3.6486': attribute type 4 has an invalid length. [ 867.409918][T28730] netlink: 'syz.3.6486': attribute type 4 has an invalid length. [ 867.442299][T28730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28730 comm=syz.3.6486 [ 867.580310][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.656801][T28736] __nla_validate_parse: 6 callbacks suppressed [ 867.656865][T28736] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6489'. [ 868.440585][T28744] loop5: detected capacity change from 0 to 512 [ 868.507265][T28744] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 868.520968][T28744] EXT4-fs (loop5): 1 truncate cleaned up [ 868.537476][T28744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.507605][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 869.614855][T28766] loop7: detected capacity change from 0 to 512 [ 869.657477][T28766] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 869.667144][T28766] EXT4-fs error (device loop7): ext4_get_branch:178: inode #13: block 1024: comm syz.7.6496: invalid block [ 869.680080][T28766] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 869.682454][T28766] EXT4-fs (loop7): 1 truncate cleaned up [ 869.691850][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 869.691892][ C1] EXT4-fs (loop7): initial error at time 2000000858: ext4_get_branch:178: inode 13: block 1024 [ 869.692021][ C1] EXT4-fs (loop7): last error at time 2000000858: ext4_get_branch:178: inode 13: block 1024 [ 869.734783][T28766] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 870.344982][T28776] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6497'. [ 870.738091][T28782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=28782 comm=syz.5.6501 [ 870.883679][T28788] loop5: detected capacity change from 0 to 512 [ 871.219598][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 871.261546][T28797] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.6504'. [ 871.568150][T28806] can0: slcan on ptm0. [ 871.856876][T28807] can0 (unregistered): slcan off ptm0. [ 871.922171][T28814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6510'. [ 871.958433][T28814] syz_tun: refused to change device tx_queue_len [ 873.264091][T28819] loop5: detected capacity change from 0 to 8192 [ 873.291422][T28825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6512'. [ 874.064859][T28819] vfat: Unknown parameter '' [ 874.599656][T28823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6511'. [ 874.986434][T28827] netlink: 'syz.3.6512': attribute type 3 has an invalid length. [ 875.001296][T28831] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6514'. [ 875.216127][ T28] kauditd_printk_skb: 82 callbacks suppressed [ 875.216144][ T28] audit: type=1400 audit(2000000863.836:27086): avc: denied { create } for pid=28835 comm="syz.6.6516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 875.245174][T28837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6517'. [ 875.476838][T28844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 875.713437][T28855] FAULT_INJECTION: forcing a failure. [ 875.713437][T28855] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.760571][T28857] geneve2: entered promiscuous mode [ 875.771027][T28855] CPU: 1 UID: 0 PID: 28855 Comm: syz.4.6521 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 875.771065][T28855] Tainted: [W]=WARN [ 875.771074][T28855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 875.771089][T28855] Call Trace: [ 875.771098][T28855] [ 875.771107][T28855] __dump_stack+0x1d/0x30 [ 875.771171][T28855] dump_stack_lvl+0x95/0xd0 [ 875.771198][T28855] dump_stack+0x15/0x1b [ 875.771235][T28855] should_fail_ex+0x25e/0x270 [ 875.771281][T28855] should_fail+0xb/0x20 [ 875.771339][T28855] should_fail_usercopy+0x1a/0x20 [ 875.771382][T28855] _copy_from_user+0x1c/0xb0 [ 875.771487][T28855] __se_sys_select+0x7a/0x260 [ 875.771524][T28855] __x64_sys_select+0x67/0x80 [ 875.771591][T28855] x64_sys_call+0x29e6/0x3020 [ 875.771619][T28855] do_syscall_64+0x136/0x3c0 [ 875.771647][T28855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.771721][T28855] RIP: 0033:0x7f3de7dbde99 [ 875.771777][T28855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.771803][T28855] RSP: 002b:00007f3de6817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 875.771831][T28855] RAX: ffffffffffffffda RBX: 00007f3de8045fa0 RCX: 00007f3de7dbde99 [ 875.771851][T28855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002a [ 875.771891][T28855] RBP: 00007f3de6817090 R08: 0000200000000440 R09: 0000000000000000 [ 875.771910][T28855] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 875.771961][T28855] R13: 00007f3de8046038 R14: 00007f3de8045fa0 R15: 00007ffed28bab48 [ 875.772108][T28855] [ 875.940335][T28857] geneve2: entered allmulticast mode [ 875.986567][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.027135][T14608] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.063973][T14608] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.208622][T14608] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 876.266016][T28862] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6523'. [ 876.410252][T28867] netlink: 'syz.3.6526': attribute type 7 has an invalid length. [ 876.453357][T28869] veth1_to_batadv: entered allmulticast mode [ 876.746189][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 877.830061][T28883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6531'. [ 877.842904][T28881] loop7: detected capacity change from 0 to 512 [ 877.893841][T28879] netlink: 6024 bytes leftover after parsing attributes in process `syz.7.6530'. [ 877.939254][ T28] audit: type=1400 audit(2000000866.380:27087): avc: denied { setattr } for pid=28878 comm="syz.7.6530" path="/proc/212/task" dev="proc" ino=92952 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 877.965831][T28879] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 877.973083][T28879] IPv6: NLM_F_CREATE should be set when creating new route [ 878.074093][T28886] loop5: detected capacity change from 0 to 2048 [ 878.127353][T28886] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 878.168655][T28891] netlink: 2384 bytes leftover after parsing attributes in process `syz.7.6533'. [ 878.189174][T28886] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.231719][ T28] audit: type=1400 audit(2000000866.652:27088): avc: denied { write } for pid=28885 comm="syz.5.6532" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 878.347698][ T28] audit: type=1400 audit(2000000866.736:27089): avc: denied { write } for pid=28885 comm="syz.5.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 878.457157][T28896] loop7: detected capacity change from 0 to 1024 [ 878.508730][T28896] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 878.547083][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 878.581078][T28896] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 878.630937][T28900] netlink: 'syz.5.6536': attribute type 1 has an invalid length. [ 878.719570][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 878.795233][T28913] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6542'. [ 879.117005][T28933] loop5: detected capacity change from 0 to 1024 [ 879.155913][T28933] EXT4-fs: Ignoring removed bh option [ 879.172632][T28933] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 879.207857][T28933] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 879.228329][ T28] audit: type=1400 audit(2000000867.559:27090): avc: denied { write } for pid=28921 comm="syz.5.6544" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 879.305068][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 879.360350][T28954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 879.369571][T28954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.550799][T28965] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6557'. [ 879.994173][ T28] audit: type=1326 audit(2000000868.307:27091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 880.051888][ T28] audit: type=1326 audit(2000000868.335:27092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 880.251760][ T28] audit: type=1326 audit(2000000868.335:27093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 880.288045][ T28] audit: type=1326 audit(2000000868.335:27094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 880.387338][ T28] audit: type=1326 audit(2000000868.335:27095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f20e0f0de99 code=0x7ffc0000 [ 880.439586][T28999] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6567'. [ 880.462881][T28999] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6567'. [ 880.563368][ T28] kauditd_printk_skb: 149 callbacks suppressed [ 880.563459][ T28] audit: type=1326 audit(2000000868.840:27245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e0ece6ce code=0x7ffc0000 [ 880.663943][T29011] loop5: detected capacity change from 0 to 128 [ 880.673692][T29006] xt_CT: No such helper "syz1" [ 880.707883][ T28] audit: type=1326 audit(2000000868.878:27246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e0ece6ce code=0x7ffc0000 [ 880.823764][ T28] audit: type=1326 audit(2000000868.878:27247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e0ece6ce code=0x7ffc0000 [ 880.849358][ T28] audit: type=1326 audit(2000000868.878:27248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e0ece6ce code=0x7ffc0000 [ 880.874922][ T28] audit: type=1326 audit(2000000868.878:27249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28986 comm="syz.4.6563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de7dbde99 code=0x7ffc0000 [ 880.900594][ T28] audit: type=1326 audit(2000000868.878:27251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28982 comm="syz.3.6562" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f20e0ece6ce code=0x7ffc0000 [ 881.028545][T29025] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6575'. [ 881.068758][ T28] audit: type=1326 audit(2000000868.878:27250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28986 comm="syz.4.6563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3de7dbde99 code=0x7ffc0000 [ 881.101592][ T28] audit: type=1326 audit(2000000868.878:27252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28986 comm="syz.4.6563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f3de7d7a2ec code=0x7ffc0000 [ 881.162292][ T28] audit: type=1326 audit(2000000868.878:27253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28986 comm="syz.4.6563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f3de7d7a34e code=0x7ffc0000 [ 881.224616][ T28] audit: type=1326 audit(2000000868.878:27254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28986 comm="syz.4.6563" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3de7dbdb2b code=0x7ffc0000 [ 881.887412][T29060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6587'. [ 881.925434][T29029] syz.3.6577 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 881.936572][T29029] CPU: 1 UID: 0 PID: 29029 Comm: syz.3.6577 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 881.936670][T29029] Tainted: [W]=WARN [ 881.936679][T29029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.936693][T29029] Call Trace: [ 881.936701][T29029] [ 881.936709][T29029] __dump_stack+0x1d/0x30 [ 881.936736][T29029] dump_stack_lvl+0x95/0xd0 [ 881.936836][T29029] dump_stack+0x15/0x1b [ 881.936853][T29029] dump_header+0x80/0x240 [ 881.936877][T29029] oom_kill_process+0x295/0x350 [ 881.936973][T29029] out_of_memory+0x981/0xbc0 [ 881.937012][T29029] try_charge_memcg+0x621/0xa00 [ 881.937063][T29029] charge_memcg+0x6d/0x120 [ 881.937098][T29029] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 881.937207][T29029] swap_cache_alloc_folio+0x47b/0x5e0 [ 881.937252][T29029] swap_cluster_readahead+0x2b1/0x460 [ 881.937328][T29029] swapin_readahead+0xd8/0x8a0 [ 881.937360][T29029] ? _raw_spin_unlock+0x9/0x30 [ 881.937387][T29029] ? swap_put_entries_cluster+0x49c/0x4c0 [ 881.937492][T29029] ? __rcu_read_unlock+0x4e/0x70 [ 881.937521][T29029] ? swap_cache_get_folio+0x1f7/0x200 [ 881.937554][T29029] do_swap_page+0x2a2/0x1ec0 [ 881.937606][T29029] ? __css_rstat_updated+0xbb/0x280 [ 881.937635][T29029] ? __rcu_read_lock+0x36/0x50 [ 881.937679][T29029] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 881.937744][T29029] handle_mm_fault+0xb3c/0x2da0 [ 881.937791][T29029] do_user_addr_fault+0x634/0x1060 [ 881.937827][T29029] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 881.937902][T29029] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 881.937947][T29029] ? trace_page_fault_user+0x1f/0xa0 [ 881.937981][T29029] exc_page_fault+0x62/0xa0 [ 881.938024][T29029] asm_exc_page_fault+0x26/0x30 [ 881.938046][T29029] RIP: 0033:0x7f20e0ec8fc3 [ 881.938061][T29029] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d ee 86 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 881.938118][T29029] RSP: 002b:00007ffd3ce30b70 EFLAGS: 00010246 [ 881.938137][T29029] RAX: 0000000000000000 RBX: 000055555c8a3500 RCX: 0000000000000000 [ 881.938151][T29029] RDX: 00007ffd3ce30bb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 881.938166][T29029] RBP: 00007f20e1197da0 R08: 0000000000000000 R09: 0000000000000000 [ 881.938218][T29029] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000cf1c8 [ 881.938250][T29029] R13: 00007f20e119609c R14: 00000000000cef4b R15: 00007f20e1196090 [ 881.938274][T29029] [ 881.938353][T29029] memory: usage 307200kB, limit 307200kB, failcnt 2569 [ 882.348354][T29029] memory+swap: usage 180328kB, limit 9007199254740988kB, failcnt 0 [ 882.388908][T29029] kmem: usage 182512kB, limit 9007199254740988kB, failcnt 0 [ 882.437419][T29029] Memory cgroup stats for /syz3: [ 882.437689][T29029] cache 385024 [ 882.528469][T29029] rss 0 [ 882.534780][T29029] shmem 0 [ 882.540564][T29029] mapped_file 8192 [ 882.548457][T29029] dirty 0 [ 882.570647][T29029] writeback 4096 [ 882.703182][T29029] workingset_refault_anon 4366 [ 882.835773][T29029] workingset_refault_file 8183 [ 882.999839][T29096] netlink: 2384 bytes leftover after parsing attributes in process `syz.6.6597'. [ 883.010940][T29029] swap 385024 [ 883.024908][T29029] swapcached 31846400 [ 883.489700][T29029] pgpgin 782545 [ 883.727993][T29098] loop7: detected capacity change from 0 to 128 [ 883.734863][T29098] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 883.883126][T29098] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 884.047310][T29029] pgpgout 782449 [ 884.075251][T29029] pgfault 853270 [ 884.079023][T29029] pgmajfault 716 [ 884.160202][T29029] inactive_anon 4096 [ 884.190961][T29029] active_anon 0 [ 884.194503][T29029] inactive_file 286720 [ 884.196847][T14606] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 884.198995][T29029] active_file 98304 [ 884.211635][T29029] unevictable 0 [ 884.215176][T29029] hierarchical_memory_limit 314572800 [ 884.220580][T29029] hierarchical_memsw_limit 9223372036854771712 [ 884.226751][T29029] total_cache 385024 [ 884.230834][T29029] total_rss 0 [ 884.235668][T29029] total_shmem 0 [ 884.239158][T29029] total_mapped_file 8192 [ 884.243426][T29029] total_dirty 0 [ 884.246905][T29029] total_writeback 4096 [ 884.250991][T29029] total_workingset_refault_anon 4366 [ 884.256302][T29029] total_workingset_refault_file 8183 [ 884.261791][T29029] total_swap 385024 [ 884.265801][T29029] total_swapcached 31846400 [ 884.270305][T29029] total_pgpgin 782545 [ 884.274311][T29029] total_pgpgout 782449 [ 884.278391][T29029] total_pgfault 853270 [ 884.282476][T29029] total_pgmajfault 716 [ 884.286780][T29029] total_inactive_anon 4096 [ 884.295850][T29029] total_active_anon 0 [ 884.299867][T29029] total_inactive_file 286720 [ 884.304503][T29029] total_active_file 98304 [ 884.308865][T29029] total_unevictable 0 [ 884.312997][T29029] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.6577,pid=29029,uid=0 [ 884.327745][T29029] Memory cgroup out of memory: Killed process 29029 (syz.3.6577) total-vm:94320kB, anon-rss:1244kB, file-rss:22372kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 884.600328][T29125] netlink: 4560 bytes leftover after parsing attributes in process `syz.7.6609'. [ 884.867776][T29141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6615'. [ 884.890525][T29143] FAULT_INJECTION: forcing a failure. [ 884.890525][T29143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.903771][T29143] CPU: 0 UID: 0 PID: 29143 Comm: syz.3.6616 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 884.903845][T29143] Tainted: [W]=WARN [ 884.903852][T29143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.903864][T29143] Call Trace: [ 884.903870][T29143] [ 884.903878][T29143] __dump_stack+0x1d/0x30 [ 884.903906][T29143] dump_stack_lvl+0x95/0xd0 [ 884.903992][T29143] dump_stack+0x15/0x1b [ 884.904008][T29143] should_fail_ex+0x25e/0x270 [ 884.904052][T29143] should_fail+0xb/0x20 [ 884.904073][T29143] should_fail_usercopy+0x1a/0x20 [ 884.904107][T29143] _copy_from_user+0x1c/0xb0 [ 884.904124][T29143] ____sys_sendmsg+0x1c1/0x580 [ 884.904154][T29143] ___sys_sendmsg+0x195/0x1e0 [ 884.904193][T29143] __x64_sys_sendmsg+0xd4/0x160 [ 884.904238][T29143] x64_sys_call+0x194c/0x3020 [ 884.904327][T29143] do_syscall_64+0x136/0x3c0 [ 884.904347][T29143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.904365][T29143] RIP: 0033:0x7f20e0f0de99 [ 884.904378][T29143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.904394][T29143] RSP: 002b:00007f20df967028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.904470][T29143] RAX: ffffffffffffffda RBX: 00007f20e1195fa0 RCX: 00007f20e0f0de99 [ 884.904506][T29143] RDX: 0000000000000804 RSI: 0000200000000080 RDI: 0000000000000003 [ 884.904518][T29143] RBP: 00007f20df967090 R08: 0000000000000000 R09: 0000000000000000 [ 884.904529][T29143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.904540][T29143] R13: 00007f20e1196038 R14: 00007f20e1195fa0 R15: 00007ffd3ce30a78 [ 884.904560][T29143] [ 885.539473][T29147] loop7: detected capacity change from 0 to 512 [ 886.154746][T29147] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 886.172670][T29147] EXT4-fs (loop7): 1 truncate cleaned up [ 886.185163][T29147] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 886.489946][T29158] Process accounting resumed [ 886.576198][T29175] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6627'. [ 887.131882][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 887.198757][T29203] loop7: detected capacity change from 0 to 512 [ 887.337040][T29207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 887.402794][T29207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 887.493033][T29209] loop5: detected capacity change from 0 to 1024 [ 887.894177][T29213] netlink: 4560 bytes leftover after parsing attributes in process `syz.3.6641'. [ 888.220107][T29209] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 888.246164][T29203] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 888.281107][T29209] ext4 filesystem being mounted at /242/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.295205][T29203] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 888.346786][T29203] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6638'. [ 888.413369][T29204] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6638'. [ 888.451820][T29203] ip6gre1: entered promiscuous mode [ 888.462571][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 888.480434][T29204] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.6638: iget: bad i_size value: 2533274857506816 [ 888.534560][T29203] ip6gre1: entered allmulticast mode [ 888.573550][T29226] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.6638: iget: bad i_size value: 2533274857506816 [ 888.646337][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 888.921501][T29235] syzkaller0: entered promiscuous mode [ 888.929121][T29235] syzkaller0: entered allmulticast mode [ 888.940695][T29235] netlink: 'syz.6.6648': attribute type 18 has an invalid length. [ 888.953887][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 888.997101][T29235] netlink: 'syz.6.6648': attribute type 18 has an invalid length. [ 889.005031][T14607] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.018709][T14607] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.033371][T29235] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6648'. [ 889.043890][T14607] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.062235][T14607] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 889.091126][T29246] vxcan3: entered promiscuous mode [ 889.191927][T29251] syzkaller0: entered promiscuous mode [ 889.197479][T29251] syzkaller0: entered allmulticast mode [ 889.305492][T29253] bridge0: port 3(team0) entered blocking state [ 889.315764][T29253] bridge0: port 3(team0) entered disabled state [ 889.323178][T29253] team0: entered allmulticast mode [ 889.334001][T29253] team_slave_0: entered allmulticast mode [ 889.346704][T29253] team_slave_1: entered allmulticast mode [ 889.367234][T29253] team0: entered promiscuous mode [ 889.373378][T29253] team_slave_0: entered promiscuous mode [ 889.379384][T29253] team_slave_1: entered promiscuous mode [ 889.385778][T29253] bridge0: port 3(team0) entered blocking state [ 889.392235][T29253] bridge0: port 3(team0) entered forwarding state [ 889.517680][T29265] loop5: detected capacity change from 0 to 764 [ 889.525824][T29265] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 889.722933][T29273] loop7: detected capacity change from 0 to 8192 [ 889.737491][ T28] kauditd_printk_skb: 536 callbacks suppressed [ 889.737506][ T28] audit: type=1400 audit(2000000877.427:27791): avc: denied { lock } for pid=29279 comm="syz.5.6664" path="socket:[93820]" dev="sockfs" ino=93820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 889.762814][T29273] vfat: Unknown parameter '' [ 889.849614][T29285] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.6665'. [ 889.914130][T29290] netlink: 4560 bytes leftover after parsing attributes in process `syz.5.6666'. [ 890.283896][T29298] loop5: detected capacity change from 0 to 512 [ 890.292022][T29298] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 890.529036][ T28] audit: type=1400 audit(2000000878.129:27792): avc: denied { write } for pid=29297 comm="syz.3.6669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 890.647783][ T28] audit: type=1400 audit(2000000878.129:27793): avc: denied { setopt } for pid=29297 comm="syz.3.6669" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 890.669592][ T28] audit: type=1400 audit(2000000878.148:27794): avc: denied { ioctl } for pid=29297 comm="syz.3.6669" path="socket:[94716]" dev="sockfs" ino=94716 ioctlcmd=0x582d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 892.030240][T29307] loop7: detected capacity change from 0 to 512 [ 892.401888][T29310] FAULT_INJECTION: forcing a failure. [ 892.401888][T29310] name failslab, interval 1, probability 0, space 0, times 0 [ 892.414875][T29310] CPU: 1 UID: 0 PID: 29310 Comm: syz.3.6671 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 892.414907][T29310] Tainted: [W]=WARN [ 892.414913][T29310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 892.414953][T29310] Call Trace: [ 892.414962][T29310] [ 892.414988][T29310] __dump_stack+0x1d/0x30 [ 892.415014][T29310] dump_stack_lvl+0x95/0xd0 [ 892.415062][T29310] dump_stack+0x15/0x1b [ 892.415084][T29310] should_fail_ex+0x25e/0x270 [ 892.415190][T29310] ? __se_sys_memfd_create+0x1df/0x3b0 [ 892.415221][T29310] should_failslab+0x8c/0xb0 [ 892.415247][T29310] __kmalloc_cache_noprof+0x7b/0x3d0 [ 892.415277][T29310] ? __se_sys_memfd_create+0x1df/0x3b0 [ 892.415320][T29310] __se_sys_memfd_create+0x1df/0x3b0 [ 892.415364][T29310] __x64_sys_memfd_create+0x31/0x40 [ 892.415399][T29310] x64_sys_call+0x1f22/0x3020 [ 892.415443][T29310] do_syscall_64+0x136/0x3c0 [ 892.415471][T29310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.415497][T29310] RIP: 0033:0x7f20e0f0de99 [ 892.415512][T29310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.415601][T29310] RSP: 002b:00007f20df924e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 892.415624][T29310] RAX: ffffffffffffffda RBX: 0000000000000466 RCX: 00007f20e0f0de99 [ 892.415637][T29310] RDX: 00007f20df924ee0 RSI: 0000000000000000 RDI: 00007f20e0fa408f [ 892.415649][T29310] RBP: 0000200000000ac0 R08: 00000000ffffffff R09: 0000000000000000 [ 892.415661][T29310] R10: 0000000000000001 R11: 0000000000000202 R12: 00002000000000c0 [ 892.415716][T29310] R13: 00007f20df924ee0 R14: 00007f20df924ea0 R15: 0000200000000500 [ 892.415735][T29310] [ 894.151032][T29307] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 894.304868][T29307] EXT4-fs (loop7): 1 truncate cleaned up [ 894.314384][T29307] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 894.388271][T27457] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 894.648972][T29315] loop5: detected capacity change from 0 to 512 [ 894.672575][T29315] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.6672: corrupted in-inode xattr: e_value size too large [ 894.708970][T29315] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 894.717057][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 894.732671][ C1] EXT4-fs (loop5): initial error at time 2000000882: ext4_iget_extra_inode:5180: inode 15 [ 894.742695][ C1] EXT4-fs (loop5): last error at time 2000000882: ext4_iget_extra_inode:5180: inode 15 [ 894.754146][T29315] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.6672: couldn't read orphan inode 15 (err -117) [ 894.768419][T29315] loop5: lost filesystem error report for type 5 error -117 [ 894.770385][T29315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 894.801905][ T28] audit: type=1400 audit(2000000882.151:27795): avc: denied { write } for pid=29313 comm="syz.5.6672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.839845][T29315] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #12: comm syz.5.6672: corrupted in-inode xattr: bad e_name length [ 894.856207][ T28] audit: type=1400 audit(2000000882.179:27796): avc: denied { write } for pid=29313 comm="syz.5.6672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.880848][T29315] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #12: comm syz.5.6672: corrupted in-inode xattr: bad e_name length [ 894.883681][T29325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6675'. [ 894.914398][ T28] audit: type=1400 audit(2000000882.179:27797): avc: denied { write } for pid=29313 comm="syz.5.6672" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 894.976934][T24559] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 895.156717][ T28] audit: type=1400 audit(2000000882.469:27798): avc: denied { getopt } for pid=29349 comm="syz.3.6685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 895.157507][T29350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6685'. [ 895.196842][T29352] FAULT_INJECTION: forcing a failure. [ 895.196842][T29352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.209907][T29352] CPU: 0 UID: 0 PID: 29352 Comm: syz.4.6686 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 895.210011][T29352] Tainted: [W]=WARN [ 895.210018][T29352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.210039][T29352] Call Trace: [ 895.210047][T29352] [ 895.210071][T29352] __dump_stack+0x1d/0x30 [ 895.210098][T29352] dump_stack_lvl+0x95/0xd0 [ 895.210188][T29352] dump_stack+0x15/0x1b [ 895.210211][T29352] should_fail_ex+0x25e/0x270 [ 895.210248][T29352] should_fail+0xb/0x20 [ 895.210273][T29352] should_fail_usercopy+0x1a/0x20 [ 895.210340][T29352] _copy_from_user+0x1c/0xb0 [ 895.210360][T29352] __sys_bpf+0x1e2/0xc30 [ 895.210396][T29352] ? get_pid_task+0x92/0xc0 [ 895.210501][T29352] ? vfs_write+0x800/0x990 [ 895.210526][T29352] __x64_sys_bpf+0x69/0x80 [ 895.210552][T29352] x64_sys_call+0x10cb/0x3020 [ 895.210644][T29352] do_syscall_64+0x136/0x3c0 [ 895.210729][T29352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.210755][T29352] RIP: 0033:0x7f3de7dbde99 [ 895.210773][T29352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.210791][T29352] RSP: 002b:00007f3de6817028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 895.210869][T29352] RAX: ffffffffffffffda RBX: 00007f3de8045fa0 RCX: 00007f3de7dbde99 [ 895.210882][T29352] RDX: 0000000000000090 RSI: 00002000000004c0 RDI: 0000000000000005 [ 895.210893][T29352] RBP: 00007f3de6817090 R08: 0000000000000000 R09: 0000000000000000 [ 895.210905][T29352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 895.210916][T29352] R13: 00007f3de8046038 R14: 00007f3de8045fa0 R15: 00007ffed28bab48 [ 895.210934][T29352] [ 895.522179][ T28] audit: type=1400 audit(2000000882.825:27799): avc: denied { load_policy } for pid=29353 comm="syz.5.6687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 895.619360][T29355] loop5: detected capacity change from 0 to 512 [ 895.626478][T29355] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 895.709154][T29380] netlink: 'syz.3.6697': attribute type 10 has an invalid length. [ 895.709254][T29379] ================================================================== [ 895.725117][T29379] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 895.731729][T29379] [ 895.734089][T29379] write to 0xffffffff86c6c918 of 8 bytes by task 29380 on cpu 0: [ 895.741860][T29379] data_alloc+0x308/0x380 [ 895.746209][T29379] prb_reserve+0x8e3/0xaf0 [ 895.750642][T29379] vprintk_store+0x54a/0x910 [ 895.755256][T29379] vprintk_emit+0x1a4/0x600 [ 895.759798][T29379] vprintk_default+0x26/0x30 [ 895.764410][T29379] vprintk+0x1d/0x30 [ 895.768332][T29379] _printk+0x79/0xa0 [ 895.772235][T29379] __nla_validate_parse+0x127b/0x1d70 [ 895.777643][T29379] __nla_parse+0x40/0x60 [ 895.781917][T29379] rtnl_dellink+0xe5/0x630 [ 895.786368][T29379] rtnetlink_rcv_msg+0x64b/0x720 [ 895.791331][T29379] netlink_rcv_skb+0x11e/0x220 [ 895.796129][T29379] rtnetlink_rcv+0x1c/0x30 [ 895.800577][T29379] netlink_unicast+0x5a7/0x680 [ 895.805372][T29379] netlink_sendmsg+0x5be/0x6f0 [ 895.810155][T29379] ____sys_sendmsg+0x532/0x580 [ 895.814949][T29379] ___sys_sendmsg+0x195/0x1e0 [ 895.819647][T29379] __x64_sys_sendmsg+0xd4/0x160 [ 895.824525][T29379] x64_sys_call+0x194c/0x3020 [ 895.829228][T29379] do_syscall_64+0x136/0x3c0 [ 895.833832][T29379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.839737][T29379] [ 895.842066][T29379] read to 0xffffffff86c6c918 of 8 bytes by task 29379 on cpu 1: [ 895.849700][T29379] prb_reserve+0x21a/0xaf0 [ 895.854131][T29379] vprintk_store+0x54a/0x910 [ 895.858741][T29379] vprintk_emit+0x1a4/0x600 [ 895.863259][T29379] vprintk_default+0x26/0x30 [ 895.867863][T29379] vprintk+0x1d/0x30 [ 895.871780][T29379] _printk+0x79/0xa0 [ 895.875685][T29379] __nla_validate_parse+0x127b/0x1d70 [ 895.881080][T29379] __nla_parse+0x40/0x60 [ 895.885344][T29379] rtnl_dellink+0xe5/0x630 [ 895.889768][T29379] rtnetlink_rcv_msg+0x64b/0x720 [ 895.894718][T29379] netlink_rcv_skb+0x11e/0x220 [ 895.899523][T29379] rtnetlink_rcv+0x1c/0x30 [ 895.903971][T29379] netlink_unicast+0x5a7/0x680 [ 895.908756][T29379] netlink_sendmsg+0x5be/0x6f0 [ 895.913533][T29379] ____sys_sendmsg+0x532/0x580 [ 895.918326][T29379] ___sys_sendmsg+0x195/0x1e0 [ 895.923032][T29379] __x64_sys_sendmsg+0xd4/0x160 [ 895.927909][T29379] x64_sys_call+0x194c/0x3020 [ 895.932599][T29379] do_syscall_64+0x136/0x3c0 [ 895.937197][T29379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.943102][T29379] [ 895.945437][T29379] value changed: 0x00000000000811e8 -> 0x000000000012c3a8 [ 895.952552][T29379] [ 895.954894][T29379] Reported by Kernel Concurrency Sanitizer on: [ 895.961063][T29379] CPU: 1 UID: 0 PID: 29379 Comm: syz.3.6697 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 895.972017][T29379] Tainted: [W]=WARN [ 895.975822][T29379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.985888][T29379] ================================================================== [ 895.709108][T29379] netlink: 'syz.3.6697': attribute type 10 has an invalid length. [ 895.999690][T29383] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6696'. [ 896.030774][T29380] veth0_macvtap: left promiscuous mode