last executing test programs: 7m57.009120791s ago: executing program 1 (id=49): pipe2(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = socket$kcm(0x29, 0x5, 0x0) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xc, r4, &(0x7f0000000080)='E', 0x1, 0x8000}]) fcntl$setpipe(r1, 0x407, 0x10005) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x61, 0x1, 0x9, 0x9, 0x81, 0x7, 0xbe, 0x3, 0x8, 0x31, 0x44, 0x40, 0x2, 0x3}, 0xe) 7m56.876895796s ago: executing program 1 (id=50): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x1, &(0x7f00000001c0)=[{0x4, 0x0, 0x0, 0x7ffefffe}]}) brk(0x81) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x220101, &(0x7f0000000080)={@_ha_fsid={[0x9, 0xff]}, {0x2a, 0x0, 0x149, 0x1}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0x3}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)='\a', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0x8c, 0x140044, 0xe, 0x2, 0x2, 0x2, 0x0, 0x0, 0x6, 0x21}) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r5, 0x0, 0x1, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r2, 0x40a85321, &(0x7f0000000680)={{0x40}, 'port0\x00', 0x100, 0x160457, 0x2000005, 0x4, 0x6, 0x3, 0xb597, 0x0, 0x1}) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r8, 0x29, 0x39, &(0x7f0000000880)=ANY=[@ANYBLOB="570700851cdda381"], 0x8) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'veth0_macvtap\x00', 0x0}) sendto$packet(r2, &(0x7f0000000480)="d947ba15843069d62c1bdfb85db55772e0b1e97987aead51588492cf55adf68f5b5b7f5a68d21f43cfff914e33cd5b29f565774cda5a1fad2f3238afb4734db4b8b67baa45db5950935a549b18a992100bf7a2e85bb831c606cc03846e4361b5ed5a70f110a0b0a1963a118b9648b65492bf7157c396d3dade7b6879200435ff031685bf1639799e304b3dcb67dc", 0x8e, 0x40040, &(0x7f0000000640)={0x11, 0x4, r9, 0x1, 0x51, 0x6, @local}, 0x14) r10 = eventfd(0x8001) fcntl$lock(r10, 0x7, &(0x7f0000000180)={0x1, 0x1, 0x6, 0x0, r7}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000140)={r6, 0x1, r0, 0x4, 0x80000}) 7m56.557171475s ago: executing program 1 (id=53): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x6, 0x9, 0x20000000, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x4, 0x5, {0x2, 0xe}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x65, 0x8, 0x8, 0xe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2, @perf_bp={0x0}, 0x0, 0x800000, 0x81, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000140)={0x3c, 0x0, &(0x7f0000000000)=[@register_looper, @register_looper, @acquire, @increfs_done={0x40106308, 0x2}, @request_death={0x400c630e, 0x3}, @release], 0x4b, 0x0, &(0x7f00000000c0)="79a9256f058f13e28c3ac7662e17040780dff07a573b25fc2642bcdfa61d1d23ab7cb4f9a921da1e35f46c8848f1c7613018a07ce0433f17240a6d79b8c9c587fe7ed9867893789ac30f56"}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000001010102000000000000000002000000100002800c"], 0x24}}, 0x4048000) r3 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000015000504e1ff4319918e00352d"], 0x2c}}, 0x60040050) 7m56.355252681s ago: executing program 1 (id=55): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r0 = open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0xa8, 0x8005, 0x0, 0x1, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9, 0x8]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="00012cbd7000ffdbdf250c00000008000400010000004800018008000500030000000800050003000000060002002e0000000700ffffffffffffffff0300fe880000000000000000000000000001060001000a00028006000f0007000000080003000000000005000d00000000005800060000800000"], 0x88}, 0x1, 0x0, 0x0, 0x800}, 0x40) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x20, 0x0, 0x44) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r4, &(0x7f0000000080)="8acd", 0x2, 0x4881, &(0x7f00000000c0)={0xa, 0x4e21, 0x7, @private2, 0x2}, 0x1c) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r5, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x3, @media='eth\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 7m55.43792089s ago: executing program 1 (id=57): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r2, &(0x7f0000000880)={0x28, 0x0, 0x2711, @host}, 0x10) syz_emit_ethernet(0x8e, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800580601fe8000000000000000000000000000aafe8000000000000000000000000000aa00004001cee5964e013a7275bf4dcba60d3315120c132af59279b01e64b8c660a0875df24220cf49ef72838b3aa0648cbd28c66a293b3e88d26f43a3a0d0e53101b2bf67e6a1a082663ccfb136cf77b2997deae33e8eee2560f08a0427c4a88c5d3fe8eb932c7d3fded3ec48223591dc519bdbd850b1139e1f2577dc6662c198342b0704047224bd499b5577c79a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="604200009078000022020402080a00000000000000011e0c85d00000000000000006020405001312ba885a106943a3de301004248cc1150213125de3ddccb400"/76], 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x18, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff95"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0xfffffffffffffff8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xd, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18080000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045090100002000009500000000000000850000000c000000bf9800000000000056090000000000008500000084000000b70000000000000095000000000000006a9f121c1e1b1c712f5d32f5a7bfb6f0787817032d44b0c29972918fa8bd6d113245231e1b9cddea98bbc324e1c5242c775b717ac52b2e4a63eaf17c588e754e649664ef46eafe5f8271985168f477bd5cba5679fa9d31acab0ed63d3468705c14cc8c45393022235d12eb1f8e17e7"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @sock_ops=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETA(r9, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x2133, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0, 0x19}, 0x100, 0x8000000, 0x0, 0x2, 0xfff, 0xa001, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 7m54.851506028s ago: executing program 1 (id=60): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_rr_get_interval(0x0, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@delchain={0x24, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0x3}, {0xfff2, 0x10}, {0xc, 0xd}}}, 0x24}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x40000004, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2f}, {0xfffffffffffffffd, 0x10000000000, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 7m54.824732698s ago: executing program 32 (id=60): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sched_rr_get_interval(0x0, 0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x1d144, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) socket$kcm(0x1e, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x28, 0x1, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=@delchain={0x24, 0x2e, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0x5, 0x3}, {0xfff2, 0x10}, {0xc, 0xd}}}, 0x24}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r6, 0x21, 0x0, 0x0) waitid$P_PIDFD(0x3, r6, 0x0, 0x40000004, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@empty, 0x4e22, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x2f}, {0xfffffffffffffffd, 0x10000000000, 0x6, 0x0, 0x5, 0x80000000, 0x0, 0x7fffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, 0x20000000000000}}, {{@in=@empty, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010102, 0x350a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) 5m26.755518308s ago: executing program 4 (id=998): r0 = socket$can_raw(0x1d, 0x3, 0x1) unshare(0x400) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f00000001c0)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNAPSHOT_ATOMIC_RESTORE(r1, 0x3304) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="01072cbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000008500000097000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) 5m26.618968022s ago: executing program 4 (id=1001): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x31, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc1}) listen(r0, 0x5) r1 = socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8000008, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00010004000000010004000000000000000000", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x50) connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x26}, 0x4e1e, 0x3, 'sed\x00', 0x21, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 5m26.504324306s ago: executing program 4 (id=1003): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4028800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000000840)="a6", 0x1, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @loopback={0xffffffffffff0000}, 0x8}, 0x1c) 5m26.317682412s ago: executing program 4 (id=1005): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000060000000000006bb55a2a630bf7c045f94cd977", 0xfffff, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f7ff1f000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 5m26.119557968s ago: executing program 4 (id=1008): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x20) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000380)=0x7, 0x4) (async, rerun: 32) bind$can_raw(0xffffffffffffffff, &(0x7f0000000040), 0x10) (rerun: 32) r2 = socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000880000000000000000009500000d00000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast1, @in=@local, 0x4e62, 0x0, 0x0, 0x532, 0xa, 0x80, 0x100}, {0xffffffffffffffff, 0x4, 0xfffffffffffffffc, 0x5000007ffffffb, 0x0, 0x9, 0x0, 0x3ff7}, {0x7fffffffffffffff, 0x400, 0x100000000c, 0xd}, 0x0, 0x6e6bbf, 0x1, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x800, 0x32}, 0xa, @in6=@mcast2, 0x3501, 0x4, 0x2, 0x0, 0x0, 0x2, 0x1}}, 0xe8) (async) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) (async, rerun: 32) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x1d, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000940)={&(0x7f00000009c0)={0x404, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x93}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffaa}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xdd}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xd}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffc0}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ca9}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x4}]}, @TIPC_NLA_NET={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc0000000}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xcc}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xba66}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x98, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x15}}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast1}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'veth1_to_hsr\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb8a0}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pimreg1\x00'}}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffff1b5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x32}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff3270}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6500}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf3c6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}]}]}]}, 0x404}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) fstat(r0, &(0x7f0000002300)) (rerun: 64) 5m26.088733469s ago: executing program 4 (id=1011): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f00000000c0)="63ea1d44e95f988d1e468e74a1d1841b559c4c8ac25c801651ffa0d4dd638bfbb82cd68a2cd89d1252f3b605583c5a4c4a9fcd", 0x33}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="b5187f61881079edde0ed3724e0af2ef556fd1c0f4633e6569d3821f12ade5583d44664119b19e181bdc56569954da1550864bafb3ae472323824f479a55e03a9bba4b0c8713c279dff1604a695950931d758c4b2d354d7a7177ab4783a0c469412c9983594f8ee6aca2eb7c92cd95d95b268229", 0x74}], 0x4, 0x0, 0x0, 0x7400}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) getpgrp(0x0) 5m10.818509461s ago: executing program 33 (id=1011): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000401296a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}, {&(0x7f00000000c0)="63ea1d44e95f988d1e468e74a1d1841b559c4c8ac25c801651ffa0d4dd638bfbb82cd68a2cd89d1252f3b605583c5a4c4a9fcd", 0x33}, {&(0x7f0000000280)="84e126b7cb4fb7a455bf60568a17f34d9a2f269382b1cb8430cc7ae88f4e00c8dc49620fa540cabadfc5ca9d346e62da8a8c1f9c933476dd2f903e664306eab6e8eb1a70e10557f20a2b0cf5ebb5768e7384c739e51e35cd501fe3c9cbd6022ea014211056e4a623a1ebab93cba08e25f3d9503d6249b16fb1f822fb5de4b9e9d302157416e78d22cf139d52efc440776a05c5448a70bd147cad9fd09cb868674e9f16ba32a62f7928728ea309b1ea09460bed373c8cc5ebdd46aa0cbd6bef996c4265ee9ef189ae8b305ad6b0d16361d10bbac31bdf5387afb6b5ffd3d87025fbe36ca016a261e815f6acb649c8c079cccdc42098d001a764ec2a3d306600a21626e36d3bc155823f2846e7ab851be3b97bec75ac6b42c159a96aa9873a755f4cb1e0eed1f182b31f9f48232a40fe941342ccf1c12abbc83d4bd854b1d4dcdce89206a3fcc67f23d43df833fdeff45a86b3e58bdec1ee1685941a1aa64cb47b2537c1f455b9e1b77e7eeb2f3cc55a102827beea7ebd30634830bec8d1bf80a91c113f95bb6efe69227d115c03f759f03a824ab52f005efc1b1d40894eb0afb9004b5163ca0b5407892a5f20d89304ddb8034fee5a3f3183e7337fdb0c3130fbdc9efb5db6527ec1942d4f89da1011485a4a0df33a7b4f01457348f248d99e57fab65da0609cd1568c85ba0a82eed34f5e61d687e3ef32d9a336578720c45ac331ddf1ee01187d88c7693b9a668ac665373d81b1a1f4c3e105a4f38ac2888202e7712c57787eab6ef4bd9488ed71990eec6bf86f6372c306cf743b94aded9d7faa64426cc59e8d47c4f577afdfdeac79ef3a86bca95502d9701fdcc650b3e4793cac6ab1db956643d5e5eba5329a9a4faa4cca44a5213e1284f9677a7e3c8d36598b37632a4977102913cdf236339a0b363cadd3ca314b2ef960e45463edae42dc54f32cbb87f3682827122b3ec53e223dc8853682ffd8a5276df42af7dac2a5f2d913a6d30162d36e93c74b7b9b5723d42cdb5da667c22fbab628ad6e94f9e54b6fbf23dbc79d1e15e2c538b68851095dbffbe7101eb04d032b5556c3eb5522ef741c092d13685b4b31d961390bcda0ce1e152e7bc6045bce7175f806562433a89c2b20a22ba34f125f7ba45b26e9540ea2354836cb065a25a9bc67605e9795f1580b0e11c45bd8fd7b2a845d6e666a4c6f85da3cc746f133ef32a815df80c2a0d2a7c27efed74201b706884b6b979df42822171c1d56c0ed408e72e0a7f9e6008b3a9b3627d45eb1cc1c91bb7cd0a179267cf88de512b55c01687fc71210829e3ce0a9994a55206bf293e244584835f6c1e0d1eeaa9d78fd4342b978f3406459ffbcdaf063b75724139c30ef51ebeacdb0c392630364aa032c5c990afc45743514c297cca4d1e4adcb132ba4c78434689625ee2339c4b83b566c14e966425154ae22c5f265263a77624c2deac7c80d253e6377485f96508fca0de6936906aa3fc97bcb81f98899881efb4f09189f7e7db590669bf12ce8c25b51c47dfa7ee30b6b4396e4072192dfdfb43f5634adf6f7c7dfeffe449efe0f55034b49b83197473d5d86f3ba4f0d5b6e8a9832db44b800218449b742e0dce6f542c910ce6e7e0f207f9a96c88b4b7e81c87ce47ab6e552f9fa9d0ef92da4d2ed61ca7e58fb7b06bb9242961b2dd6aad3b0475d748cffbd25f989fe9b23c64048b8e39628d184e26173bb6754ed735ee8e874531242ebb0244361fc2e753b508b8e1b6d7d8745760413eedcdb148ebed01f93cda5087cb0e2e78cc918d3ca4492207619530a61885bc2e17617a2ede04e82abd927888019d9e5a4c5cb0b4ea76c8d4307ac6dbae739e53678ab3204e456158982ea8cdbd71a2722334329434fb1cb69e303fdeaee3cd96b2e381042cb8893084dce03dba3065354b4955425be3436772aab579d6a13d00d02679fe92fe9b63c571759ffb65c6cd94df7151d7fd06790ef560fed542c4126745a91f23c62999ef0fa227c214568b5669c22b1f53be929da7b10a73e5d070c6269d22b20fd72bf39e4c248ea8b96cf09dc0d60c6dd7cc626de372cd165e77787d6dd257d47d0034f2dc6c5ac04788fd8be14dbb4ec5bc81c4cf94377ebc07988d18c27086d1c49973d1e016bf2fda1d4ee90708f264fe7a6dd28a6b8918c80d61e383ebdd87464ce61890023692db08c138f9f302308fa9f1a8ce27fd5b4d5087c222f61449c7c94f2973a6baacc483add56353141f02085c85ec1ef99b1f3c60427d70f63dd703068376580142bfda5f2f14c99389d7c6e8f20578ac6cc45b9dbcfcc880a62203ff2b97ddcce8a196c99b82eb33dd049a55dc198c93128edd3d6909e3c7a1f71a88ed58ca2e592dd18a143544d8d2617986ede2de864db4dbd882e0290a97a3f5d8871076f1d4d06500067e1802349bb786b7c0a864812898959ea68cf5076aea26b96374e56ae9eba67b3c41ac010e1d1beacd6e62b9f0e586409935c7d693f42d2324b3c7189ce73b6755f156a389ba193b924bdfd3493bc01c53b44406dad5b33dce5cbb21a8b1cfae4798675bc0a8c9fe56b61962494057987ed8818975c0de1063d06c337b0047eb872baef5f0afa1c370d3f7f99a8244f6b140551d4bdc68d440fa4d6267a0b99cf6c692fd9f6c43bcac0c143f6a11447e0d29b1be376a4f71039316f6a9111c5297739154e69ccadada0b6c10503c49e9d9c85c9c65234323898b3f0535b31fc1ae04f07e30374a678c4c97c50c11629e40edde19674e59b4981343bb890e212aded37c621a4ebb525dc1b402b4f6df0e997ca365fa0d2d16a3266f22160809f766a3837e06505b158eb64907d22f84c5aef27b45e00dcf33bcd1b4ee105ab7b15fece46a643bb527a70a9447eeb3745e2955d872a718064dba4b053cc3e70c9628b18c007948b9260ae4ab32aa262fa1f62c057780c3853659270da26fd521a543bdae3e0b3a806257d28c63cc08291a6c1e0d738f748191da3003c206d97b5bffa3a55387b9aee34fda03157fd9944d88c44de94a8574d3bed29eff482b5a3e710f5a315839131d9900fe545730e33f48abcd592e35c64e7184b830a40e01ad4cfde75ea4c1a93f3283265e41a6058d429432c78146cac0cf9d9f579f6b407757d477a5d040405f3d4470081726bb2de35f899e76197a53201aba65997e9251f9dd49a8005fe946934648ee0f536113eb2e558a889f3db3efbd0f76d96c43ba0a87d4ecbf76fba212332f79b9e8eda7da6a7488604cb2d5ae98ef64aceec9f2662b9a743a2dcfc6e61ecc2dd56975b3132db8e6fa90022caae05f952e40a15be3a23d0384acae4294bbe10e97e615cadb1b843232386db5261efb194af77f7f1bb2b1872da8a013ddaa034d0dd6f5cf1043ba80294ae77d3ffafbbbd73f77ebd5e0200e920483db89c844e83f9fc3c916f298cff2264976ee05346964af1c6a6ae7a1ce08cff94712797e42b2e8f4b2fd921b232b0da5ea298ff58e0efb430c53e591d223c50376dcd3dcf968e3d94d910982bf102fb143f2443b29292379529174b4602b40e4445e9c2b0a91e3687c2a4679bedb537372d1c24b7ea11f150f18dbac95b1d306b9f087821b883bfa84a7d8913c2b192b93c565eea877eb03bc7b46dc9ec71b9f10a7529b946b8bfd637f19918471573472fd5540e225df60ec56a69bcf4745b590e2f3f821c4b306505e6ef81d1143e05b2449a9f1694fa775a7bf85e87de75004bfba56d9dccf4598d4f425589f33f65a5ed2e6d7340a7d2e70ac4433d8e270e261eb3d95e1f6d17e17db57b0d2174adcf2877aa4bd61451776b530940a829891597a6900718dc97888686b31328a51d377163b852c2e44f466a2f5a2dcd9e0e5c43c9565579348cbd0a1cedc57a898b2497bc31524c3225a4ceb3adae8233d5a54f0a8926a0c62b20e6eddd2a5f18f65d916cccf089380a56a01951e707482a5f5f8108d24b6ac67a34ba32dec8ca3c6578fdf1176c8b352591f8e718c6b7858d8456df5df3308f71bf4d542a8317ebf2b51c82502fdede730c8c1a1d46aadd7b93643403596e34c1aac21246e74f9a54df26ac18e086d10d8235bb7840cf6028e43b353ea46e771d02c47e63530cd0e9d9f2f03c896c1bbb46f685f865f0adc792b00bc40a9cd904c39833ec3db1f2bd2b1705be68352c52044eeec5d7059df98d386029ac32c10330af762dc7837beb04493b407e10ce52b39ef98d9d29e3f8d8a63396c21fd553811232eedc44710e0bff86ca4df8f1eabf0b050e0eb74128a9e5402b4e88c395cd5bb3d0121aa2b5f996a0d317676cda9a02ce6a2af4891df57698fb80d468e478534b02c266eac25fb762f8867b2f04d351dc6e2eff370aa248947f55006445bdbce9ea14dbf7aad037e87194885aa7bd06500938c85cd5b566c6a087b6a082dba879cf547dd7f9a04b4e45f5aa60c27b741e2f7652efa3cc01de30d789d14f9796f76c0bfa0cb686cfc3b4eedf352c8bcbb1f01c441645129338a8fb5fa40c555e3e9b6bad1f831ba0d269bb1961436e7f8ca84896c021fcad3450efcd3a134186200304ddb8e2932d4ef423248d3dfb8e3655a3c7ce779071e60835d79d1d950928eccc03ced1274619743e9506df18c44fc016eb6b90c2e55da53864d96fa03b182782bc876aa05431173f9f002fe9d79c5bfa9c2f395b899db9b0afeff3604d15f610472cfb81aec95adfcf1ad213d28119a0d1c32e8cb60ddb2c13393920c01757f7ba24cfc6d49ae0b17ba533f96b6a6c1de98046b4595d8937c0a940959b30b0212e26ee4182574fd9910d419c2d9081177fdd367ba91d99afbb24947cae52e6f9b2b868a0be184abb0cae63477faebe249187900d662cb7e47d51f579e0f535070837cc6295e46886d9d3b0986f7c84464828b2e74fa42cd8efda0c0680c674f8e3eb9f47a9c515d7c1dbbc48fcff61d364059d1dc96bf2639b428f027af1896273b1a86981ad70755093e4131b018edc7acb6081320a24101799ca784cb18d7208a896a8c7a4c5da64b6debd8f00f02d1fb515a3007ede4a01a330de5f0563de7587348297c91bca7e02a29159dbb31ff34004a1b5458b79b4229ce545c05d5e12e0cf2d12805ad41efef94526cf260f39e2cdb507ffe9697510738fac3c7d86bf9f79dc552d74f0a49a434363055aa4aa4c1b64d97dd72442758594e82f52e802423ceedda2a415dfbff8e6591d80e631bc5ab0353e6e4b20526b203169c3991b3b58c7f6d8c1403e250efbcae92efd64ddec3328366b1e275caf58123ed1021d42c9fe35949ad638b1568024b03cc7e886b7a126da9d9ea910735240690a5bdf1a8c6de17d59d299c7cd5ab36b0ecd79b9c43ca229a9d0195de94352b76d3bfcfee601549cc53d725b084a05f4fa23332aa544dc1794931578f864dd9205cde5014842f2f5a202d73f9ebf15b5a82aadec18a669a0fff2679b98acb946a8b7eec5684bbb29832080943b613506d748c9a2a2b48ab8b8bead8d9e345d4d51e296a48222e61f3f8869a4f94a2b08361ab6f9fb03790fdd24df97fb91595916a2d1a5cdca2d345da63f1488571601cf23ab30cef2fbb9ceb74e18e0b9feb0153a0b01832e4b16f0e9f0544bd78b9d87ac1a62efb2247f1081e97ebaa92b7a0a5d23531f6f8a780ffc2c69f8dce8935650df53be721bcf4455facd2e04d20baaee7f502776b97196aa4c0c58f301fe8e9be27027f39a9861d7248e41ad50e8721605461b59200ab083a4c9f658bfd6fdb664afe535", 0x1000}, {&(0x7f0000001280)="b5187f61881079edde0ed3724e0af2ef556fd1c0f4633e6569d3821f12ade5583d44664119b19e181bdc56569954da1550864bafb3ae472323824f479a55e03a9bba4b0c8713c279dff1604a695950931d758c4b2d354d7a7177ab4783a0c469412c9983594f8ee6aca2eb7c92cd95d95b268229", 0x74}], 0x4, 0x0, 0x0, 0x7400}, 0x0) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) writev(r4, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) getpgrp(0x0) 4m47.784223818s ago: executing program 0 (id=1161): socket$inet_tcp(0x2, 0x1, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) fsopen(0x0, 0x1) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/238, 0xee}], 0x1}, 0xffffffff}], 0x1, 0x40000100, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 4m46.881832106s ago: executing program 0 (id=1171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe64}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_ext={0x1c, 0x7, &(0x7f00000009c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xad7, 0x0, 0x0, 0x40f00, 0x3a, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c672, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r5, &(0x7f0000002500)={&(0x7f00000000c0)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, &(0x7f0000002480)=[{&(0x7f0000000100)="687ec5a1650d8ae26a4efcb70286e93e97210db9952b6ddd447a66755d8cf74fcf0d61c6b4a5", 0x26}, {&(0x7f0000001480)="a4918c890e9eef4f6a94efc6ceef9f15fed617ad9aa2dc787734479719361a9ce6416c6a136c3e0aef2c059a29f376d14e6165b5a21d0aebddc0411ba5971a312f78c546f0b698980df78b964b6d22205d6d9f5f326f8f3f847f7f65d399ab8572d0758e622ecf61c01d9a3554dd9fc5a6672e32ea24776e440ea08b778946528ede9ba1a60b2585214a078c3c6ef98fd56c7ee5d93eb48a1b708bc1dd8b931d67cee92f8e4c96ef5af0bcfbf17e99b45bc8724959bf488b349d4071f2bcbf9ec4f4ec2c2f4ec76d85da767f173cb5d8b73b60b4667529c1fa1d6e053236132d9229608dcd3f2d3aadced29e65bc5d116f91965bd353a5775681bc0a21058c759170323558d5c65dd3eec53e8d7600ecfc5836679850400ede7682cf7959a09233fca61bc4b9e703e61b83606b02939f11ead88c07b6e5a506cdf6224167d9f9723044e645c6bf3864ef1a806fb4c388f48eedaf6a0a9c701367cbf5d67a1ad528d60b1d4525b8ebea15c8987ec22f42be20d0744fc3d4f7e08e0285679dbce0dfbc8d762152c9680c7a75a807834da015a964bced0da0b9906ebc991f582a60b769485d2f1ab062fe68ed5a8f0d9731c726602148e4e393bee2164963fbadf4710774886aa6078fdd2265bf0ccd06042483e64db6494404805de9a6aa963c18aa55e197b0fb1a19b723fb170994f00d0974d56b3d72eb321ed17b740d732b1730308e003d0fa96dc5534344a9ad18e27c76689685ee28648cfdcfb0efdc05c87a42fc9299414dd22c3638a44841321376b91acac2eb2266c8878090ea4e6de29cc8ed5f76454d06b3c062218f1fac5460e78ed1dd9495cc992aa4c027bc3667198018fc4d59590604032d99e5759018ab4083a6bf229e302032ade2cf995f16842a8ae3e08dcec323e6282c79dd6e0b42447230942b3ea6284d961a4022b47d19daef547285a5aeb01c040806417988ce57c97bcdbe5a34e17ecdc1f33b9309023cb4c24f1846a3b058176a2602c1535ba03a5eace1154b9e7eaedc49521f94e2c0248c59dbcf654f88e92515a3261285283bbad66486368942e5d8a29db158dbf3a364b7d3624622dbcc6df2a72787e0a37ae7c0859ade0a06c43500684cdcd768a397e54c5cad3f027de7eca4b5bc03dbf66207c30347f09b3c6adb5b6fc53dd647e809f025cf349b25e64d485fdc733324c1b21bbda3876fcb84271b943dc5921de6a7a3f269bb5e69313627a932c050e8b04c8e68377d87d2a6f38608c314525b475fa725844ba39219e4633970015cb79299c532d5911908699452d6e13b862bb7f75364a29643cd05ce03aaa80c078a595e0ef6b9157b12db822016a25ed9750ea085a9454aaa174c83227d512ad2b10386240f2631b3de7e07e3e3a010e9165bb1764a21c61326b65f96f3353d467c119af99560d40b21087e3f03de7ccd856ad586c7859e779c74e539ce787e3c14ec499b662028382430689f9b998e552be48ec71578016fc6d002066c715fbdb65ae12a50dd0a28a8277d29bd5f12e472a75e22dcba6aebb246fecc6979391342845af52243a0af0f33597860900d023362d05c8983f6cbb374323ffe10b42d29a2d5cf087e678a0f580e3cef2474bde382f29961946eb52c1be826997f7d2f1c1e32810dee0ccc347d675145d639eebc2ed8e7cbe695f43b978940a636c9ca57094c8c20fdcd3a03f4c2056bc4292403d7b3b815fbbc4215f7511238c2e2e17f35303eb5c977f78ce6e5e338017cb4b5919055e7330c5ae0575b76ee26e58219aa87f01d726f5c2e66d814140d102d9bee973fa8457cd913274af8c7d2354549522830bba8036c3890af7843d0b533ff64048f3e167940a34b332af3f739c9b4d8c6a413b3f6af4c0f23229a4f31844a0f36b190a065f44ebecaa33c43884d9f490ce55966fd50c354e3b024456cdd77f957bd3c441e6d1d01da81ff403387eaf4e86b3a9389bb00b4dc7e1cd67857c50eee317c4780e471fcfdc3f9f3ff6b1fea45f6e1512faa20077757ebd756c417260e5851428931b281c5c72eb9095eaf6f4a958b5356607862b31d7e6bc9e7b0ffad3ef6db5c366c3a1c6b372c1411d550661bf092828fe9097d5ad54d143e29dedd55c3016c0911714a1f53395e34474f57c32a784d14c474a932582aac113a10feeb92b3b53c62fd6983bd21149a87fafd8df9bdc18eb59648609a26abab54ead8d17506531bb8bcb22dca6da36737858813b670ca57beab2f17cb03e05024664e10c6d9c61c66aba61658d896ae96e509cb1164ab87fdccfdce81b8110db775cfd36bf7dd9ac4a98eb229a38181c9c194bedd657d439e85a0761b8d965f6c78bcfde33b03508b03ba49ef7b942eb1a6383f0e876f290bee25bb220bd872127e0d22b04c3de2f01fd3e0d125ea9848721c309bf1f298650bf926583bbb3dc080cbd318821e0ad4aaa2b22d3299f38985ceb5bc5e666c8e7a760c8face9f794c8e9c8b05e48aeaad12f17d9527d315d5c60eb43cfcda08778c38ff58c281a62203623aabf6c88ac4db5506921f4041a869d1ee95fedb8312402d547e74618723ab21289b500d78606a881237c072be085288e9becfde0019d9feb2f462259f8c7db7047c2cbaaaf1a211d3db085f9fbac566b823536f5823ec0bb236806319d2d24b1108e3ebfaf47c4c5a0b7fd5a60dfa68b7c6e64162a7422d182dfd680e5cd50d3d557a5208ed1b0946d55574a37321dcfb1daeb4f60ae2655982100df3ee758c9df747cbde7d69262feaa5977bb1e646688ae9c0137d4cff8253d026291a02f5875b95f0f9a408cf8668bc3a531a9eb0567a23d1fbeb128be88a68a5e0278b74bfc3d42d8688c3d6fff8f1709e2d9becb1ae00969b622291bee301695586cb4b12dcd017f224c40f148feead88aacb6c2760020e5eb5f6a34bb3308a503c7c494fa46955af24e8f39015bf91c68d956a3a50b44e9e003617ecf37bb310abddaec8f08f60f514bbdf3258d7b69a8508b05e994d78f1f594d7a48e9c1c00af997e81f387299f2ecc27ddc38038d2c9abb1d6ed21df356f7a85feb4c62524439b11b91cf8a1cd3dda1ec3f26460d066ee106449faf63cbbde87b974ea57bb08643e3a978f651fb06c57e2e2fcf96c447b3692d8bfb7a8ae5a4131a0fb810ed8bf2cf5e664861aac586f99ba7becc23265e0dbdf3fcfd953ab6a886fdeb301eeda7cf406bf3c92378fb183a1cd53c043bb8c6d26b664ec78e47607bd8012a87f0fb6f1757c2fa888a03fb40d9c85f08749d4fa31f65668b1b72982d043bab585580cf44950af58f8e1298675426922bd17c81f261b224d4695b1fe5eb538de452a10601eeb9efbb101b3bd14c69188d6aa91ebc5da97d8715dbb27f4ea8dd8adf7336c5551d84ddd5a9b69b3deedc46a81781480df1a3bdf4c20965235175c8dfad44d36fa9a3fafe78ccdcf37843d76dc84d088eaf8cba73c9d033617f3fd5e1de28c90f4a5e7deddb252b1d48a02807f2c618e06d7990bcc2e9e734606dc4e8f8c4f86c4baac24fab45ca186919f093166e3ec27d72d5cc9709d87227a49a74f9336563138bcf45cf24fdde4723633cbd58aa2cba537749ce94393afb13245c04983a4f294e2459f0450ad44fbc48eb57841db458f9ce58822938433b5aff38cd1209032effa61814d924f0aa6d54445be77181b4c8a7b84d9a3ef1b3290be21c78be35391bb111d95baefdf43566a31ebbe60a576f12e52b096be8e2c185421cd6ebbddccbcac80624b16a26328a40a1ea36e63b08e4480965eaa4e2f2a30b3c12c7de67e3f24d2ec4645e3fb94e1e82524f18588aa75b7d470497258301b2595855ff9e01d77766ef5eaecb288f61e6c7bda19f69b7ca67240feddd5399bfef12ff8a795f66523a9e21ebc28d077f066796155fa1a26bae97922d6aad53a1afa73dc8df515077b9d62f1e7f2e127b7a3ed214c6df49b8c06673a25af8aaa61f67d0a07db65a3dc8fdc309d1bf5ad7c6322336c9b333c96d0b55c3e53d483abab5eb661503bf54511ed0f70f5f805e468b050600c33a5dc09bd70f21c95afc149c53654ad741a2d187b7132eb764c3a8efe4258300aaf8725433af277c2662133513a904dff915e06ce23347ea362292bff5512467e73d603328ec157f880b0fe57f41dbca97f6e071ba11360dc3208d2f737a023b4d4d6d14afb8eb240cf02484410907149ac2974e946db0b2edaad115b5fe7c2516b32ae63d068c55080397ac1dda257c3f61810361feca23fbb140381ff02e3754295b9fc173608a6cb5c4d9d640b95aa01a378a8a0b70421a1befb836ed5499c41947ed38af5d550ff0a4444d1d7344cd24deec83bb4382ff9c6d37473d1a0e721c26b031247695a8539bbf9e6fe08c03df0f3823beddd5d15ea9f87868d9eacf565e2990f89ba9d37a91abee1992d0080982bd791f3384051854bec80db8c22110360bc2b3275214685be33f0e73a75a9b3e7d29836c70687de731e96ba3d3377c3e19af1e8e472303359cc22451cb7ffc178424d2596ac3e3f28167340a8283e4911f626d3a42f0e0994b64ac95b34d26a81b11a4ee52c72aab0b8f98791af9c6cc0236772f35f50a80bcd392ca47ed1dd7db5063391696a9eece9258e309c549c66ca844f06d2f37c3081686d4218582edc0fd012cafa8ef0814f12fcb60b61e623b22b08e71f4747344b7d4ef2c102b08a69b03d7edb6f6b861e5ed872b0f3549eed9610edc41efae6cc2c19d8161acbb489bf4b17e14afba32d4fe1183f7b176a1658e6c30778105e6c157ba2961892d8d471026ad254eb864c0b5f9db88c870f55fd317dd2b2480255f46c412ffe90df91493738129db9a7f1908c2a771c7a693400ec0b5ab2333d297fe6e6228889a0e10bf7d0ea5698e3aa2c3e88b294098ee94469cb466d78046e6b10c4c25556c493390259e0598d07d71e8ad40acbf7bdbcb392014b4db60beb59477732fda32ae367e61655787c9760ef7fab1854e5100c866e2c221a58f6e0f6e237a00a5ba807ddf51b48dbc67368218c2216ef2969d79e825399fcd73491ef94465234d6cf7a8d2627c1cc58a284334fa05df3a1245ad2759dff04ea3d53c0b69c68d9139aaeca385098e8227ce5cf1f8f1aabd4b7dbbfc7e1e34d98891728d59b19e2f3c01acd6d0874b66393bd415f17f43a976653ca565359eca93068134fac70066b4f3b1a356177a985cc8637a54372f269a3f1d8b281cd4c59a39eefa95c58680ffca521de39213541cab3b71e93eb986b22a07ab69518937157c543593f095abfd110dc7caa1cdbb9548549f732d5c5c602efc5ae33907617b0f8ce49007dbeb3ca45e38a989919c0c492a5867afef6df3e2cdc4c585688c238c9a5fc379ae9cd376d322d0a6a61427f6a21af1a75f91c51ceeb72141952608cbe318cc1047170da841673aed644bd902e197133d2cef50a36ed80858869c825dba0e7ce723b71662a9e63eef89de1c352d1f142f0f53fde1eedc11b441518b3d5530127d73987e497ee8ac270d3ced7ac03dee0fcf006a5eb13b48c4fbbeaaf10fc34102aa4b4f126814921c2c562c79f3096009fd49558e55bf80980729041e8900fbb6e4ea6e3533cf0a3dcb8ff76e37ff7d8d77fc226458bf4d5a13183bdd03f59a4bc8e613fa3a2d598f9f419cd6324e101cb905a15de525a5f5c54de0f58e18b273176a5575c270dc0c15a1e194184e8b01ce827e7db21fed55acc46ea44899bb8f38897c03a24bd36beef6c7c65082ebecba468a67bc6f", 0x1000}], 0x2, &(0x7f00000024c0)="5a0da8ae6617fccbdaf9ad135627da65a479b4905879d0c2f3d9e2627cefc8c40a8e96590a43", 0x26, 0x804}, 0x2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) (async) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r4, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x26}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) 4m46.715290982s ago: executing program 0 (id=1173): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000068f000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000690000/0x4000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xffffffffffffffd7) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xcca1, 0xd003, 0x2, 0xc1}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r1, &(0x7f00000002c0)='E', 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000380)='./file0\x00') 4m46.636146334s ago: executing program 0 (id=1176): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT], 0x25, 0x359, &(0x7f0000000bc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) futex(&(0x7f0000004000)=0xfffff000, 0x5, 0x0, 0x0, &(0x7f0000004000)=0x2, 0xa3020000) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000180)={0x2, 0x0, [{0xdc0c, 0xff, 0x3, [0xd9, 0xda08, 0x6, 0x0, 0x5, 0x800, 0x4]}, {0x5, 0x6, 0x2, [0x1, 0x2, 0xd, 0x2000000, 0xf, 0x400, 0x9, 0xb]}]}) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x70, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0xbe}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 4m46.299292445s ago: executing program 0 (id=1182): r0 = socket(0x1, 0x80802, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500da0f91bc0c637b421af8ff00000000bfa100000000000007010000f8ffffb70300000000000085000000c80000009500"/88], &(0x7f0000000300)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x0, 0x6, 0x6, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) syz_read_part_table(0x630, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_buf(r3, 0x1, 0x3b, 0x0, &(0x7f00000002c0)) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000140)=""/246, 0xf6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002480)=@deltfilter={0xbe4, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0xa, 0xa}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x5}}, @filter_kind_options=@f_cgroup={{0xb}, {0xbac, 0x2, [@TCA_CGROUP_POLICE={0x4b8, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x6e, 0x4, 0x7ff, 0x2, 0x7, {0xdf, 0x2, 0x6, 0x6, 0x1, 0x1000}, {0x4, 0x2, 0x81, 0x4, 0x7, 0x10}, 0xee, 0x7ff, 0x7f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x69}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8000000000000001}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x6, 0x1, 0x0, 0x5, 0x7, 0xffff, 0xa, 0x2, 0x2, 0x1, 0x10, 0x7fff, 0xff, 0x80, 0x0, 0x6, 0x1, 0x7ff, 0x0, 0x1, 0xfffffffe, 0x9bd, 0x7f, 0xcff1, 0x200, 0xf7, 0xfffffff8, 0x100, 0x3, 0xff, 0xfffffff7, 0x80, 0x4, 0x3, 0x1, 0x7, 0x8, 0x72e, 0x3, 0x6, 0x7, 0x7, 0x73, 0xfffffffc, 0x5, 0x10001, 0x2, 0xfffffffc, 0x24, 0x0, 0x3ff, 0x7, 0x80, 0x1000, 0x5, 0x38a, 0xfffff177, 0xba9, 0xb9, 0x2c, 0x5, 0x5, 0x4, 0xda, 0x4, 0x5, 0x7, 0x8, 0x200, 0x10002, 0x2, 0xfffffffa, 0x6, 0x7, 0x6, 0xffff7e8d, 0x0, 0x4, 0x3, 0x1, 0x8, 0xffff, 0x3, 0xcb, 0x8, 0x1, 0x5, 0x9b, 0x8, 0xfffffffd, 0x401, 0x8, 0x2, 0x7fffffff, 0x1, 0x400, 0x5, 0x4, 0x5, 0x80, 0x6, 0x0, 0x8, 0x5, 0x1, 0x0, 0x7f, 0x1, 0x3, 0x0, 0xfc, 0x80, 0x703800, 0x5, 0x2000, 0x45, 0xc6b, 0x9, 0x9, 0x3, 0x0, 0x200, 0x7, 0x0, 0x0, 0x4, 0x7, 0x3, 0x1, 0xd, 0x1, 0x4, 0x1c98, 0x1, 0x403870e5, 0x9, 0xfffff645, 0x200, 0x6, 0xa, 0x4, 0x4, 0x8, 0x3de5221d, 0x1, 0x8000000, 0x0, 0x7, 0x0, 0xa2b4, 0x8, 0x2, 0x5, 0x6, 0x6, 0xb9bc, 0x200, 0x4a9d926, 0xf3c, 0x7, 0x2, 0x7, 0xff, 0x5, 0x4, 0x3, 0x5, 0x5, 0x2, 0x7, 0x6, 0xf58, 0xdb50, 0x88c0, 0x8, 0xdde, 0xfffffff7, 0x7, 0x8, 0x8, 0x8, 0x6, 0x1000, 0x4, 0xb6, 0x5, 0x9, 0x3, 0x2, 0x8000, 0x8, 0xf46, 0x4, 0x4, 0x1, 0x3, 0x81, 0x9, 0x101, 0x5, 0x5, 0x1000, 0x3ff, 0x4, 0x5, 0x2, 0x9f5, 0xfffffff8, 0x8, 0x2, 0x3, 0x9, 0xb, 0x10001, 0x7, 0x8, 0x3, 0x8, 0xc, 0x2, 0xf4, 0x7, 0x2764, 0x8, 0xffff5267, 0x3c9, 0x39, 0xc, 0x2, 0x4, 0x7, 0x1, 0x0, 0x9, 0x3, 0x5, 0x2, 0x3c, 0x8, 0x6, 0x7, 0x2, 0xf, 0xfffffffa, 0x4, 0x2, 0x6, 0x1, 0x4, 0x6, 0x5, 0xa4, 0x7, 0x81, 0x7fffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4000, 0x2, 0x0, 0x5, 0x9, {0xd, 0x1, 0x7fbb, 0x2, 0x8, 0x8}, {0x4, 0x1, 0x4, 0x9, 0xb, 0xfffffffb}, 0x0, 0x101, 0x7c7c}}]}, @TCA_CGROUP_ACT={0x520, 0x1, [@m_sample={0xbc, 0x12, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xf}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xf, 0x80000000, 0x10000000, 0x10001, 0x5}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x95f4}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x1, 0x1, 0x7, 0x800, 0x9}}]}, {0x40, 0x6, "54fb577abadbda8f631b9a8aeb5e778cb8b77ec974b72633e6b5e1a3b5ceb787a12c9ef52bdfb8a9b1a04f8673c2dbd5eadf371a01dc369411596f68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_skbedit={0xa8, 0x1b, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x3, 0x20000000, 0x3, 0x7fff}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xc, 0x7, 0x1, 0x471, 0x4}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffffff}]}, {0x29, 0x6, "faa2c087eb38c91baac7331434c654e3d0f3ce91202bc6c57709213c704f08bb66a38373e5"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbmod={0xe8, 0xf, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0xf7, 0x8, 0x2, 0xb2}, 0x4}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff8}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x69, 0x6, "335977ec9f7ca1a1764dd7c1e6444ec756948fe50a69c0a8ba64e0134af33aa47212e775ca5ec0eff0a55649736225ebb046f6e4f3488bc9927622372445e5df233935c39fc4108159d0e4bc2d306ead4c54391ad50bc16b678b6d9f066bd5d54df1290dc0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0xa0, 0x7, 0x0, 0x0, {{0x8}, {0x68, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_TYPE={0x6, 0x5, 0x5}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_TYPE={0x6, 0x5, 0x8}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @link_local}, @TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @TCA_IFE_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, @TCA_IFE_SMAC={0xa}]}, {0x14, 0x6, "86ce15128b9406878d257a31b07f732d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_xt={0xc4, 0x10, 0x0, 0x0, {{0x7}, {0x58, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x41, 0x6, {0x4, 'raw\x00', 0x4, 0x2a, "740e6d116cbdc574aff0f0703ef114da6426c4e4af9b8b"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x45, 0x6, "5643834d06016d383f0c7cb11493b87dd8fe564c16bbc99a0d45473c51ed3c8e625299847203e13226bf1e60e2ac8d84894f7c67048427dd9d0af5292affa6afc0"}, {0xc}, {0xc, 0x8, {0x6, 0x3}}}}, @m_pedit={0x54, 0xe, 0x0, 0x0, {{0xa}, {0x4}, {0x25, 0x6, "28ace1833db255a2a818317af963af247292f7dd1c0f71ee5fa46230b5a53d5c2c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x118, 0x11, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xef0}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x401, 0x2, 0x10000000, 0x3, 0x5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xbd, 0x6, "ac285f78ae1248ad7d55e853e1ba935dcc5e4e45253d77e7c5dde615c47d5ece7a541c738a3115687175e142d263866c3b082373bffbe56bbda1b7868b7da3b362a633daefdc847cab8aec3a823d93304152bec0bc29d4b05d181667aa0af7cb852ceaa133aadbd91cdf69f90d4a1264e3eab895c884749c710b0c1a4443435706b4653cbb45a5ca36a3cb3e0a7a2121a1a904abc9840e1adc8448b5bdd71334ec71d77564f89845af28c292e4f8d05dda166ff6832e9a2392"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_CGROUP_ACT={0x1d0, 0x1, [@m_csum={0x58, 0x19, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8001, 0x0, 0x57, 0xbd}, 0x70}}]}, {0xd, 0x6, "0c2b96677a26c9eafa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x6}}}}, @m_simple={0x174, 0x5, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x3ff, 0x6, 0x5, 0x4}}, @TCA_DEF_DATA={0x7, 0x3, '^@\x00'}, @TCA_DEF_DATA={0x1d, 0x3, 'system.posix_acl_default\x00'}, @TCA_DEF_DATA={0x8, 0x3, 'raw\x00'}, @TCA_DEF_DATA={0x9, 0x3, '\xaa\xaa\xaa\xaa\xaa'}]}, {0xf1, 0x6, "bf1582fa88c8246aff67b87f65287d441fb6c233a0972525b0d10a4dd22ad2a498d485a6270bc494870d253c1b58b06f1da06375b024f849347aaa991c6a8cb1bb2134c3e96dc7896952ec76c02aacc4091ebae64c5ceb04b7d4011c8457cdcf8f845840523ea10b615815ea0ab0d8ed2eead2d091b28ccd0b4f6a1060d2b3287703f2186643b255d648ef5d8427d5a660e8267e5d5012753b3818a91d09763a019ab9ef4c1f38f91b943424b4c9d2782d81414b1c940274dbb9908f394c18335712b8920f261951709d9cbc59d8adb01dfeeab9c225270d818c2e4ec4a608f79bddf3e70e3af047eb53173e85"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xbe4}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x101, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x24e}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) connect$unix(r0, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 4m45.866928378s ago: executing program 0 (id=1184): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006a0001"], 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006a0001"], 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000004c00128008000100677470004000028008000700ac1414311400080020010000000000000000000000000001080004000000000005000500010000000800030003"], 0x74}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 4m45.81501556s ago: executing program 34 (id=1184): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xd) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2097, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006a0001"], 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000006a0001"], 0x14}, 0x1, 0x0, 0x0, 0x4040804}, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="7400000010000104050000000300000000000000", @ANYRES32=0x0, @ANYBLOB="03050000000000004c00128008000100677470004000028008000700ac1414311400080020010000000000000000000000000001080004000000000005000500010000000800030003"], 0x74}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) 1m58.498084731s ago: executing program 5 (id=2326): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfe103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x4, 0x8}, 0x2000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000001800000003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) syz_clone(0x40101100, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.359569555s ago: executing program 5 (id=2329): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x8, 0xfc2bd, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa, 0x100}, 0x204, 0x2, 0x43a1bd78, 0x7, 0x9, 0x3ff, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000300)=0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, r1, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a04f1a, &(0x7f00000003c0), 0x82, 0x4a8, &(0x7f0000001c40)="$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") perf_event_open(0x0, 0x0, 0xfffffffffffffffc, r0, 0x1) r2 = gettid() setpgid(r2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000200), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000440)='FROZEN\x00', 0x42) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000400)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000300)=r5, 0x12) write$cgroup_freezer_state(r4, &(0x7f0000000080)='THAWED\x00', 0x7) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r7, 0x112, 0xa, &(0x7f0000000080)=0x3, 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) write$tun(r8, &(0x7f0000000100)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xb, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001900010900f6ff0020000000021800040002fd0100"/36], 0x24}, 0x1, 0x0, 0x0, 0x7758ee6d8e3bbd7e}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r11 = socket(0x40000000015, 0x5, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x7, &(0x7f0000000240)=r8, 0x1) syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[], 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0x8f20, 0x80, @mcast1, 0xa}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18bc07cc0effffff000000000000008079123800000000009500"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x24}, 0x94) 1m54.128609569s ago: executing program 5 (id=2337): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000240)={[{@barrier}, {@barrier_val={'barrier', 0x3d, 0x2142aa44}}, {@noquota}, {@noquota}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x5a8, &(0x7f0000000880)="$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") r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) socket$netlink(0x10, 0x3, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r2, r1, &(0x7f0000002700)=0x23, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x55, 0x4) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={r3, @rand_addr=0x64010101, @remote}, 0xc) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r6, 0x80047213, &(0x7f0000000300)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80000}, 0x40) 1m53.316859314s ago: executing program 5 (id=2343): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x100, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) mlock(&(0x7f0000859000/0x4000)=nil, 0x4000) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x5e, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r3, &(0x7f0000000000), 0x0, 0x3ed, 0x100, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r6, r6, 0x0, 0xe3aa6ea) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x500, 0x0, 0x54, 0xa}, 0x9c) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1800, 0x0) 1m51.077639335s ago: executing program 5 (id=2353): socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = timerfd_create(0x8, 0x80000) r1 = epoll_create1(0x80000) close_range(r0, r1, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[], 0x0, 0xce, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) shutdown(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x10000000000}, 0x0, 0x0, 0x0, 0x2, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) mlock2(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newtaction={0xb0, 0x30, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x9c, 0x1, [@m_skbedit={0x68, 0xe, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0x4, 0x4, 0x8be6, 0x5}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x7, 0x2, 0x7, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x30, 0x2, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffffff8d}, 0x48) close(0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$rds(0x15, 0x5, 0x0) socket$inet6(0xa, 0x3, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="0600150007007ed74f396e08653a0100", @ANYRES32=r6], 0x38}}, 0x10) 1m50.550195262s ago: executing program 5 (id=2364): socketpair(0x1a, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x6, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x0, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x8, "e2e2f097e1cd5755e9d1b654e08d5ec634e49955b3286c1b05aafeb91a91"}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xfca0, 0x0, 0x2000003, 0x22e}) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd26, 0x80000000, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008084}, 0x48800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x10}}]}, 0x3, 0x440, &(0x7f0000000280)="$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") 1m50.488330753s ago: executing program 35 (id=2364): socketpair(0x1a, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0xd0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x6, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x0, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4, 0x8, "e2e2f097e1cd5755e9d1b654e08d5ec634e49955b3286c1b05aafeb91a91"}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) io_uring_setup(0x1a8, &(0x7f00000000c0)={0x0, 0xfca0, 0x0, 0x2000003, 0x22e}) recvmsg$unix(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x0, 0x70bd26, 0x80000000, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008084}, 0x48800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x80000e, &(0x7f0000000780)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@data_err_abort}, {@sb={'sb', 0x3d, 0x10}}]}, 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=") 5.887852465s ago: executing program 6 (id=3362): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {0x0, 0x2}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x8, 0x5, 0x3, 0x6, 0x3a9, 0xfffffbff, 0xffffff56, 0xffff}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x8, 0x2, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfe}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xffffffff}]}, 0x2c}}, 0x20008000) 5.543397285s ago: executing program 6 (id=3369): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10081, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x102260, 0x10000, 0x0, 0x6, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.391892161s ago: executing program 6 (id=3373): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0x7fefffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x12, 0x0, "94713ce1a61212bb07a2d70004000000000000071f0d1aadd97b9640d9a0cd7ba71a5e9aecf8960d7669bcd7588bc45b4064028eb3faff5fb125736e00"}, 0x5d) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000004"], 0x64}, 0x1, 0x0, 0x0, 0x44800}, 0x0) (fail_nth: 2) 5.288207873s ago: executing program 6 (id=3377): r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0xa8, 0x7ffffffe, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000040), 0x3, 0x5eb, &(0x7f0000000c00)="$eJzs3ctvFEcaAPCvxw9sjNYDWu0ue1gsrVYg7WJjAysU5QDXCFnkoVxyiYMNIRiwsKPEJBJGIpdIUS5RFCmnHEL+iwSFK6fklEMuOUVIKIk4RspEPdNtPHaPX9jTiP79pGG6q6Zd1djfVHVNVU8AlTWS/lOLOBgRc0nEcLK0nNcbWeZI63WPfnv/fPpIotF4+Zckkiwtf32SPQ9lBw9ExHffJnGgZ22584s3Lk/Nzs5cz/bHFq7Mjc0v3jh66crUxZmLM1cn/j9x6uSJk6fGj23rvG4WpJ29/dY7wx9Ovvbl578n41/9OJnE6Xghe+HK89gpIzHS/D9J1mYNndrpwkrSk/2dNBqNRp6W9JZbJzYv//31RcTfYzh64vEvbzg+eLHUygG7qpG03ruBKkrEP1RU3g/Ir+1XXwfXSumVAN3w8ExrAGBt/Pe2xgZjoDk2sPdREiuHdZKI2N7IXLt9EXH/3uTtC/cmb8cujcMBxZZuRcQ/iuI/acZ/PQai3oz/Wlv8p/2Cc9lzmv7SNstfPVQs/qF7WvE/sG78R4f4fz19vtmK4Te2WX798eabg23xP7jdUwIAAAAAAIDKunsmIv5X9Pl/bXn+TxTM/xmKiNM7UP7Iqv21n//XHuxAMUCBh2cini+c/1vLZ//We1YsYa1HX3Lh0uzMsYj4S0Qcib496f74OmUc/ejAZ53yRrL5f/kjLf9+Nhcwq8eD3j3tx0xPLUw9wSkDmYe3Iv5ZOP83WW7/k4L2P31nmNtkGQf+c+dcp7yN4x/YLY0vIg4Xtv+P71qRrH9/jrFmf2As7xWs9a/3Pv66U/nbjX+3mIAnl7b/e9eP/3qy8n4981sv4/hib6NT3nb7//3JK827CvVnae9OLSxcH4/oT872pKlt6RNbrzM8i/J4yOMljf8j/15//K+o/z8YEUurfnbya/ua4tzf/hj6qVN99P+hPGn8T2+p/d/6xsSd+jedyt9c+3+i2dYfyVKM/0HLp3mY9renF4Rjb1FWt+sLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM+CWkTsi6Q2urxdq42ORgxFxF9jb2322vzCfy9ce/vqdJrX/P7/Wv5Nv8Ot/ST//v/6iv2JVfvHI2J/RHzSM9jcHz1/bXa67JMHAAAAAAAAAAAAAAAAAACAp8RQh/X/qZ97yq4dsOt6y64AUJqC+P++jHoA3af9h+oS/1Bd4h+qS/xDdYl/qC7xD9Ul/qG6xD8AAAAAADxT9h+6+0MSEUvPDTYfqf4sr6/UmgG7rVZ2BYDSuMUPVJepP1BdrvGBZIP8gY4HbXTkeubOP8HBAAAAAAAAAAAAAFA5hw9a/w9VZf0/VJf1/1Bd+fr/QyXXA+g+1/hAbLCSv3D9/4ZHAQAAAAAAAAAAAAA7aX7xxuWp2dmZ6zZefTqq0c2NRqNxM/0reFrqs/MbSTZDvSuF5lPhu3+m/Zs5wXyt3+Z+cnnvSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLs/AwAA//+JjCTl") r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e6ffffffffffffff00000000000000000040000000000000000000"], 0x48) socket(0x1, 0x2, 0x1) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x6, 0x511, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb228, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10006, 0x20da, 0x5, 0xa, 0x20005, 0x24, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c00038008000140000000000800024000000004180003801400010070696d3672656731000000000000000048000000160a01010600000000000000010000000900020073797a31000000000900010073797a30000000001c000380"], 0xe8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000100010605000000000000000000030000040500010007040040174f01138c97ef385d168145b7"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000011) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r0, 0x0, 0x1f3) unlinkat(r6, &(0x7f0000000100)='./bus\x00', 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r6, 0x54a2) 5.012377272s ago: executing program 6 (id=3381): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x40, 0x3, 0x200000}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) write$selinux_context(0xffffffffffffffff, &(0x7f00000001c0)='system_u:object_r:inetd_log_t:s0\x00', 0x21) syz_open_dev$tty1(0xc, 0x4, 0x1) 3.605588977s ago: executing program 6 (id=3401): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x81, 0x1, 0x1, 0x0, 0x6, 0xd64152a7ac027908, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0x1018c0, 0x0, 0x9, 0x3, 0x400007, 0x5, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000940)="09c411c3dc21c88d95ba343a2fb842c0a3edb7312e72e0cbfa5c831b5acc436109a3348cbed7b40f73cddbce3148e3aa02b0e352f2eb62aaa20e7437b2750c5d8672ce27c2d631efeda0ef8efe916493887a03912279722bf4a445e1b8df2e94b197af92c6fcf5ecbb3e2bed098b06f5a49aa2451440ed64ca865300f9761eeb3f", 0x81}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x9, 0x20}, 0xc) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) socket(0x1f, 0xad543f10002de00c, 0x1) sendmmsg$inet(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="e4e3b566ca4f987be34b31b7e0fb1e2f9a6241679f7e9896ed63b769f0f92845b69889cdf89719118770ed5422538739b8a498e2409c", 0x36}, {0x0}], 0x2}}], 0x1, 0x0) r7 = dup2(r6, r6) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000008000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) io_uring_setup(0x16610, &(0x7f00000000c0)={0x0, 0x2de8, 0x200, 0xfffffffe, 0x201, 0x0, r7}) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=r3], 0xfe33) 3.605460937s ago: executing program 36 (id=3401): perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x81, 0x1, 0x1, 0x0, 0x6, 0xd64152a7ac027908, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_bp={0x0, 0x1}, 0x1018c0, 0x0, 0x9, 0x3, 0x400007, 0x5, 0x0, 0x0, 0x6, 0x0, 0x7}, 0x0, 0x9, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000940)="09c411c3dc21c88d95ba343a2fb842c0a3edb7312e72e0cbfa5c831b5acc436109a3348cbed7b40f73cddbce3148e3aa02b0e352f2eb62aaa20e7437b2750c5d8672ce27c2d631efeda0ef8efe916493887a03912279722bf4a445e1b8df2e94b197af92c6fcf5ecbb3e2bed098b06f5a49aa2451440ed64ca865300f9761eeb3f", 0x81}], 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r4, 0x9, 0x20}, 0xc) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000280)=0x655e, 0x4) socket(0x1f, 0xad543f10002de00c, 0x1) sendmmsg$inet(r6, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000002c0)="e4e3b566ca4f987be34b31b7e0fb1e2f9a6241679f7e9896ed63b769f0f92845b69889cdf89719118770ed5422538739b8a498e2409c", 0x36}, {0x0}], 0x2}}], 0x1, 0x0) r7 = dup2(r6, r6) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000180)="0000000000000002ff69000000000008000000c000000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e07000000000000002c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) io_uring_setup(0x16610, &(0x7f00000000c0)={0x0, 0x2de8, 0x200, 0xfffffffe, 0x201, 0x0, r7}) write$cgroup_subtree(r7, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32=r3], 0xfe33) 3.289879057s ago: executing program 2 (id=3410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x10, 0x6, 0x4}, &(0x7f00000003c0)=0x18) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={r5, @in={{0x2, 0x4e24, @loopback}}, 0x5, 0x90, 0x6, 0x8, 0x9, 0x9, 0x85}, 0x9c) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="9db625bd70fcfd39e394e125c7d409c000ffdbdf25010a570b1e8b25dc12e589305a07a424c0bac855d7c9806e14c19e7d3bcc0d3bc8ffff7fff3eff4c37"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) unshare(0x22020600) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x159) fcntl$setflags(r7, 0x2, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LIST_PHY(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x95}, 0x40000) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x23, 0x6, 0x0, 0x0, 0x0, 0x63e3, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x110010, 0x0, 0xfffffffd, 0x6, 0x3, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x6ae7}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r10, &(0x7f00000000c0)={0x1d, r11}, 0x10) sendmsg$can_bcm(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r9}, &(0x7f0000000080), &(0x7f0000000240)=r12}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="b9ff03076804268c989e14f088a8", 0x0, 0x40500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x2}}, 0x10) r13 = socket$inet(0xa, 0x801, 0x84) connect$inet(r13, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) 3.285996117s ago: executing program 3 (id=3411): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000300)='1', 0x1}, {0x0}], 0x2) 3.232538458s ago: executing program 7 (id=3412): socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000380)=0x3, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) unshare(0xa000080) r0 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) bind$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fedbdf25010000000000000007410000004c00180000034d62726f6164636173742d6c696e6b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003f80a5448396bc9197eafdefbfb7de68d861c99503be40b6c581"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44044) 3.232197148s ago: executing program 3 (id=3413): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, &(0x7f0000000100)="d5c0", 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$selinux_validatetrans(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='system_u:ob'], 0x5e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000380)=[0xc], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) (async) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x40, r5, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x801}, 0x4000) (async) fchdir(r3) (async) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) creat(&(0x7f0000000880)='./file0\x00', 0x1) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x4, 0x2}, 0x10) (async) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0x401, 0x3ff, 0x1000, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x2498}], 0x1, 0x0, 0x0, 0x0) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x40044591, 0x0) (async) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300), 0x380002, &(0x7f0000000580)={'trans=xen,', {[{@aname={'aname', 0x3d, '/'}}, {@posixacl}, {@version_L}], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@measure}]}}) 3.228051558s ago: executing program 7 (id=3414): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x13) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x200000, &(0x7f0000001140)={[{@test_dummy_encryption}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nogrpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x2}}, {@test_dummy_encryption}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="15094a294fc717411a2e05261616db989b8a324ae924738145f48cc1a11145f76a25f87ec34e66c8956f5418a5a69b254e7c56d62d2e4783ffd604e402c9048d7bee423d69d5c84d2bf4b73e792b194f6efbc58d652af51393d656a0ffec16102184630422a6ccf970c895597807f635c51ad177d7cd0f3cad5dac6d2b9002ca4a17628c5b47413d86db793d295bf9385bddab0d4073077105fbbf1b5dc20d7b130da8daa67e7c", 0xa7}, {&(0x7f0000000500)="1aefce97", 0x4}, {&(0x7f0000000540)="3979dca153563d89f3986e362e775727d19ec77396b456b5ab780005e1c807711c42d1ccd0d845", 0x27}, {0x0}], 0x4) unshare(0x28020500) unshare(0x66020480) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x2, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f00000003c0)) close(0x4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.310734758s ago: executing program 3 (id=3420): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040), 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}}, 0x24}}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x9}], 0x40002e9, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) dup(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r6, @ANYBLOB="0100000000000000000017000000500006804c00040067636d286165732900000000000000000000000000000000000000000000000024000000"], 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r8, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 2.261719339s ago: executing program 2 (id=3421): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10081, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x102260, 0x10000, 0x0, 0x6, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.180488382s ago: executing program 2 (id=3422): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000300)='1', 0x1}, {0x0}], 0x2) 2.151449163s ago: executing program 3 (id=3423): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {0x0, 0x2}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x8, 0x5, 0x3, 0x6, 0x3a9, 0xfffffbff, 0xffffff56, 0xffff}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = gettid() rt_sigqueueinfo(r3, 0x2c, &(0x7f0000000200)={0x14, 0x2, 0x7}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0xfffffffffffffffc, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/address_bits', 0x2000, 0x104) fcntl$setsig(r7, 0xa, 0x29) fcntl$getflags(r7, 0xb) io_setup(0x482, &(0x7f0000000600)) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) munlockall() 2.151047263s ago: executing program 2 (id=3424): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56141, 0x4001, 0xfffffdf9, {0x0, 0x0, 0x0, r1, {}, {0xe}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xba, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040089c6f1109d6847000008e3ffff64", @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x48) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f000000c640)={0x0, 0x0, &(0x7f000000c600)={&(0x7f00000001c0)=@ipv6_deladdrlabel={0x38, 0x49, 0x300, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0x3f, 0x0, r5, 0xfffeffff}, [@IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40841}, 0x40080c0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x3, 0x242, &(0x7f0000000300)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r7 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fallocate(r7, 0x0, 0x0, 0x1000f4) sendfile(r7, r7, 0x0, 0x800000a1e) 1.724318916s ago: executing program 7 (id=3427): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x10081, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x102260, 0x10000, 0x0, 0x6, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x50) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r1, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r2, r0}, 0x34) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060500000000010000000000000000050005000a000000050004000000000005000100070000000900020073797a310000000016000300686173683a6e65742c706f72742c6e6574"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.611652929s ago: executing program 3 (id=3429): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x444, &(0x7f00000008c0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909210000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32], 0xfe, 0x678, &(0x7f0000000a80)="$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") 1.570517641s ago: executing program 8 (id=3430): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c001400000000", 0x2b}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x55, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) listen(0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, 0x0, 0x44014) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000300)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x60, 0x30, 0x829, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80000}, 0x40) 1.569771791s ago: executing program 2 (id=3431): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwIF6kCCIWxD/Au8fiH6B/RUELRUrQg5fIbGbbbZLNJunWbJ3PB6Z9b2ayb96++b79zs4uG0BhjWT/lCJejoivk4iDbdsGI984srLf0sNrk9mSxPLyJ38mkeTrWvsn+f/788pLEfHLFxHHS2vbrS8szlSq1XQur482Zi+P1hcWT1ycrUyn0+ml8YmJU29NjL/7zts96+vr5/7+7uO7H5z66ujStz/dP3Q7iTNxIN/W3o+ncKO9MhIj+XMyFGdW7TjWg8b6SbLTB8C2DORxPhTZHHAwBvKoB/7/rkfEMlBQifiHgmrlAa1r+x5dBz83Hry/cgG0tv+DK++NxJ7mtdG+peSJK6Psene4B+1nbfz8x53b2RJd3oe43oP2AFpu3IyIk4ODa+e/JJ//tu9k883jja1uo2ivP7CT7mb5zxvr5T+lR/lPrJP/7F8ndreje/yX7vegmY6y/O+9dfPfR1PX8EBee6GZ8w0lFy5W05MR8WJEHIuh3Vl9o/s5p5buLXfa1p7/ZUvWfisXzI/j/uDuJ/9mqtKoPE2f2z24GfHK4/w3iTXz/55mrrt6/LPn41xW+PXLrm0cSe+82mlb9/63630GvPxjxGvrjv/jO1rJxvcnR5vnw2jrrFjrr1tHfuvU/tb633vZ+O/buP/DSfv92vrW2/hhzz9pp23bPf93JZ82y7vydVcrjcbcWMSu5KO168cf/22r3to/6/+xoxvPf+ud/3sj4rNN9v/W4Vsdd+2H8Z/a0vhvvXDvw8+/79T+5sb/zWbpWL5mM/PfZg/waZ47AAAAAAAA6DeliDgQSan8qFwqlcsrn+84HPtK1Vq9cfxCbf7SVDS/KzscQ6XWne6DbZ+HGMs/D9uqj6+qT0TEoYj4ZmBvs16erFWndrrzAAAAAAAAAAAAAAAAAAAA0Cf2d/j+f+b3gZ0+OuCZ85PfUFxd478Xv/QE9CWv/1Bc4h+KS/xDcYl/KC7xD8Ul/qG4xD8Ul/gHAAAAAAAAAAAAAAAAAAAAAAAAAACAnjp39my2LC89vDaZ1aeuLMzP1K6cmErrM+XZ+cnyZG3ucnm6VpuupuXJ2my3x6vWapfHxmP+6mgjrTdG6wuL52dr85ca5y/OVqbT8+nQf9IrAAAAAAAAAAAAAAAAAAAAeL7UFxZnKtVqOqfQsXA6+uIwtl1Iuo3y6fxk2NIjR14Y3PkOKjyDwg5PTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQ5t8AAAD//8nLNLM=") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r1, 0x3fffffffc00) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x8000700}]}}]}, 0x48}}, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x1, 0x0, 0x6, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) preadv(0xffffffffffffffff, &(0x7f0000001480)=[{&(0x7f0000000400)=""/71, 0x47}], 0x1, 0x5, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="020500030e00000000000000ffdbdf2505000600000000000a004e220000000920010000000000000000000000000000178000000000000002000100000004d5000104010000000005000500320000000a"], 0x70}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8041}, 0x4000052) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700840000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.529697092s ago: executing program 8 (id=3432): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x7, 0x0, 0x11, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000ff1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff00}, 0x94) mkdir(&(0x7f0000000040)='./file0\x00', 0xd8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) 1.406451826s ago: executing program 8 (id=3433): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000300)='1', 0x1}, {0x0}], 0x2) 1.381210276s ago: executing program 8 (id=3434): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) unshare(0x28000600) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x0, 0xfc, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0xbcb1, 0x80, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x100, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file1\x00'}, 0x6e) listen(r3, 0x58b) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000ce717ef616769d791687fb1533ff907004e507cfe245d98d19b2666cbc4b549000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004001}, 0x840) 1.163633084s ago: executing program 7 (id=3435): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000002c0)=@usbdevfs_driver={0x1000, 0x7fffffff, &(0x7f0000000180)}) 1.079592746s ago: executing program 7 (id=3436): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobh}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x11}}, {@bh}, {@init_itable}]}, 0xfc, 0x57d, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x13) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000680)='./file1\x00', 0x200000, &(0x7f0000001140)={[{@test_dummy_encryption}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodiscard}, {@nogrpid}, {@nodiscard}, {@stripe={'stripe', 0x3d, 0x2}}, {@test_dummy_encryption}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x835, 0x2) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) writev(r0, &(0x7f0000000640)=[{&(0x7f0000000280)="15094a294fc717411a2e05261616db989b8a324ae924738145f48cc1a11145f76a25f87ec34e66c8956f5418a5a69b254e7c56d62d2e4783ffd604e402c9048d7bee423d69d5c84d2bf4b73e792b194f6efbc58d652af51393d656a0ffec16102184630422a6ccf970c895597807f635c51ad177d7cd0f3cad5dac6d2b9002ca4a17628c5b47413d86db793d295bf9385bddab0d4073077105fbbf1b5dc20d7b130da8daa67e7c", 0xa7}, {&(0x7f0000000500)="1aefce97", 0x4}, {&(0x7f0000000540)="3979dca153563d89f3986e362e775727d19ec77396b456b5ab780005e1c807711c42d1ccd0d845", 0x27}, {0x0}], 0x4) unshare(0x28020500) unshare(0x66020480) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x2, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x2284, &(0x7f00000003c0)) close(0x4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000100)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e25, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 679.098679ms ago: executing program 3 (id=3437): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x444, &(0x7f00000008c0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909210000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESHEX, @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRES16, @ANYRES32, @ANYRES32], 0xfe, 0x678, &(0x7f0000000a80)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f0000000280)='./file0\x00'}, 0x18) 663.06379ms ago: executing program 7 (id=3438): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x5}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x6, 0x1, &(0x7f0000000200)=@raw=[@exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x6c, &(0x7f00000002c0)=""/108, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x90}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x60, 0x10, 0x1, 0x70bd2a, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {0x0, 0xffff}, {0x0, 0x2}, {0xe, 0xf}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xc, 0x8, 0x5, 0x3, 0x6, 0x3a9, 0xfffffbff, 0xffffff56, 0xffff}}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000002c0)) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = gettid() rt_sigqueueinfo(r3, 0x2c, &(0x7f0000000200)={0x14, 0x2, 0x7}) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, 0xfffffffffffffffc, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/kernel/address_bits', 0x2000, 0x104) fcntl$setsig(r7, 0xa, 0x29) fcntl$getflags(r7, 0xb) io_setup(0x482, &(0x7f0000000600)) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlock(&(0x7f0000623000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f00001a8000/0x1000)=nil, 0x1000, 0x10) munlockall() 586.055232ms ago: executing program 2 (id=3439): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x111, 0x4b4, 0x190, 0x700, 0x2d8, 0x278, 0x278, 0x2d8, 0x278, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {}, {}, 0x88, 0x0, 0x0, 0x6d}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @common=@unspec=@connmark={{0x30}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'geneve1\x00', 'erspan0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x7, 0xc, &(0x7f0000001380)=ANY=[@ANYBLOB="04359061f7ed4069a757afbe014d4195f0f97a4baed2e75002a7e7520667598d1edfa49694c8fc06b90ae171bd5749f82534daf4c187c0f1e77b39", @ANYBLOB, @ANYRES32, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x2001195, 0x0) r3 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r7}) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x22, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r5, 0x0) 585.767062ms ago: executing program 9 (id=3402): inotify_init() r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) ioperm(0x2, 0x7ff, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) preadv(r2, &(0x7f00000013c0), 0x0, 0x80000000, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000400)) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='rxrpc_s\x00', 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x5, [{0x0, 0x2}, {0x1f, 0x6}, {0x6, 0x7ff}, {0x77f8, 0x200}, {0x4, 0xb99d}]}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="b5e729bd7000fbdbb50f040000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) 463.627296ms ago: executing program 8 (id=3440): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000400)=0x2, 0x4) bind$can_raw(r0, &(0x7f0000000480), 0x10) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2800fffffff2) 410.562487ms ago: executing program 9 (id=3441): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x8311}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x440, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x121a02, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000120003474cbb65e1c3e4ffff07000d0001000000070000002500000004003d000c001400000000", 0x2b}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) socket(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40001}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040)=0x55, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) listen(0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, 0x0, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r5, 0x0, 0x44014) ioctl$FAT_IOCTL_GET_VOLUME_ID(r5, 0x80047213, &(0x7f0000000300)) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x60, 0x30, 0x829, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x80000}, 0x40) 182.590565ms ago: executing program 8 (id=3442): inotify_init() r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) ioperm(0x2, 0x7ff, 0x8) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r1, 0x7) wait4(r1, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x1) preadv(r2, &(0x7f00000013c0), 0x0, 0x80000000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000001c0), 0x140000, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000100)='rxrpc_s\x00', 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_hsr\x00', &(0x7f0000000200)=@ethtool_sfeatures={0x3b, 0x5, [{0x0, 0x2}, {0x1f, 0x6}, {0x6, 0x7ff}, {0x77f8, 0x200}, {0x4, 0xb99d}]}}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="b5e729bd7000fbdbb50f040000000c0001800800030001"], 0x20}, 0x1, 0x0, 0x0, 0x20004810}, 0x2000c800) 157.708875ms ago: executing program 9 (id=3443): unshare(0x40400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c20000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 0s ago: executing program 9 (id=3444): ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syslog(0x3, &(0x7f0000000200)=""/90, 0x5a) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f0000000140)={0x1, 0x2, 0x3, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev2(r2, &(0x7f0000000000), 0x0, 0x3ed, 0x100, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f0000000100), 0x3, 0x454, &(0x7f0000000280)="$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") kernel console output (not intermixed with test programs): g+0x10/0x10 [ 473.350010][T13382] inet_sendmsg+0xc5/0xd0 [ 473.350048][T13382] __sys_sendto+0x3db/0x490 [ 473.350155][T13382] __x64_sys_sendto+0x76/0x90 [ 473.350184][T13382] x64_sys_call+0x2d35/0x3020 [ 473.350248][T13382] do_syscall_64+0x12c/0x3b0 [ 473.350352][T13382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.350381][T13382] RIP: 0033:0x7f278647ce59 [ 473.350398][T13382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.350461][T13382] RSP: 002b:00007f2784eae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 473.350482][T13382] RAX: ffffffffffffffda RBX: 00007f27866f6090 RCX: 00007f278647ce59 [ 473.350495][T13382] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 473.350518][T13382] RBP: 00007f2784eae090 R08: 0000200000000000 R09: 000000000000001c [ 473.350537][T13382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.350554][T13382] R13: 00007f27866f6128 R14: 00007f27866f6090 R15: 00007ffc7741b258 [ 473.350580][T13382] [ 473.350771][ T28] audit: type=1400 audit(1779944326.262:6435): avc: denied { getopt } for pid=13363 comm="syz.7.2856" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 473.582274][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.594412][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.639009][T13387] ip6erspan0: entered allmulticast mode [ 473.659235][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.660500][ T28] audit: type=1400 audit(1779944326.262:6436): avc: denied { write } for pid=13363 comm="syz.7.2856" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.681419][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.703742][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.713072][T13379] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2859'. [ 473.847756][T13384] lo speed is unknown, defaulting to 1000 [ 473.929635][T13413] EXT4-fs: quotafile must be on filesystem root [ 473.967728][T13415] random: crng reseeded on system resumption [ 474.163977][T13384] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.180828][T13384] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.215662][T13384] bridge_slave_0: entered allmulticast mode [ 474.222474][T13384] bridge_slave_0: entered promiscuous mode [ 474.230076][T13384] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.232465][T13396] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.246545][T13384] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.264228][T13384] bridge_slave_1: entered allmulticast mode [ 474.276266][T13384] bridge_slave_1: entered promiscuous mode [ 474.278341][T13396] 9p: Bad value for 'rfdno' [ 474.309064][ T6292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.324539][ T6292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.335194][ T6292] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.370451][T13384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.399279][T13384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.414976][ T6292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.430794][ T6292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.451870][ T6292] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.493641][T13384] team0: Port device team_slave_0 added [ 474.500648][T13384] team0: Port device team_slave_1 added [ 474.518942][T13384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.526535][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.552944][T13384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.564856][T13384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.571974][T13384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.681818][T13384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 474.719409][ T6292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.730880][ T6292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.757477][ T6292] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.803860][T13384] hsr_slave_0: entered promiscuous mode [ 474.814758][T13384] hsr_slave_1: entered promiscuous mode [ 474.820822][T13384] debugfs: 'hsr0' already exists in 'hsr' [ 474.827904][T13384] Cannot create hsr debugfs directory [ 474.845435][ T6292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 474.859425][ T6292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.872223][T13443] EXT4-fs: Ignoring removed bh option [ 474.890868][T13443] EXT4-fs: Ignoring removed mblk_io_submit option [ 474.905306][T13444] ext3: Unknown parameter 'dont_appraise' [ 474.921018][ T6292] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 474.932638][T13443] EXT4-fs: Ignoring removed bh option [ 474.976633][T13443] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 475.000531][T13444] vfat: Unknown parameter '0000000000000000000518446744073709551615' [ 475.047980][ T28] audit: type=1400 audit(1779944327.972:6437): avc: denied { write } for pid=13440 comm="syz.7.2875" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.177015][ T6292] bridge_slave_1: left allmulticast mode [ 475.185265][ T6292] bridge_slave_1: left promiscuous mode [ 475.193325][ T6292] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.202699][ T6292] bridge_slave_0: left allmulticast mode [ 475.208671][ T6292] bridge_slave_0: left promiscuous mode [ 475.214616][ T6292] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.286732][T13463] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 475.293293][T13463] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 475.319117][T13460] set_capacity_and_notify: 9 callbacks suppressed [ 475.319135][T13460] loop7: detected capacity change from 0 to 1024 [ 475.332400][T13463] vhci_hcd vhci_hcd.0: Device attached [ 475.351014][T13463] vhci_hcd vhci_hcd.0: port 0 already used [ 475.369151][T13460] EXT4-fs: Ignoring removed nomblk_io_submit option [ 475.457200][ T6292] bond0 (unregistering): (slave geneve3): Releasing active interface [ 475.466249][ T28] audit: type=1400 audit(1779944328.402:6438): avc: denied { write } for pid=13456 comm="syz.7.2880" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 475.498285][ T6292] bond2 (unregistering): (slave geneve2): Releasing active interface [ 475.509454][ T28] audit: type=1400 audit(1779944328.442:6439): avc: denied { getopt } for pid=13456 comm="syz.7.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 475.624566][ T4202] usb 14-1: SetAddress Request (2) to port 0 [ 475.630619][ T4202] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 476.017124][T13464] vhci_hcd: connection reset by peer [ 476.024911][ T49] vhci_hcd vhci_hcd.6: stop threads [ 476.030917][ T49] vhci_hcd vhci_hcd.6: release socket [ 476.036861][ T49] vhci_hcd vhci_hcd.6: disconnect device [ 476.108149][T13478] loop7: detected capacity change from 0 to 512 [ 476.222483][T13479] syz.7.2885: attempt to access beyond end of device [ 476.222483][T13479] loop7: rw=0, sector=464, nr_sectors = 128 limit=512 [ 476.247439][ T6292] team0: Port device bond1 removed [ 476.253906][ T6292] bond1 (unregistering): Released all slaves [ 476.263383][ T6292] bond2 (unregistering): Released all slaves [ 476.273034][ T6292] bond0 (unregistering): Released all slaves [ 476.284498][ T6292] bond3 (unregistering): Released all slaves [ 476.298168][ T6292] bond4 (unregistering): Released all slaves [ 476.355377][ T6292] tipc: Disabling bearer [ 476.365329][ T6292] tipc: Left network mode [ 476.402760][ T6292] hsr_slave_0: left promiscuous mode [ 476.410150][ T6292] hsr_slave_1: left promiscuous mode [ 476.418114][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 476.433871][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.452174][ T6292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.460135][ T6292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.470893][ T53] kworker/u8:4: attempt to access beyond end of device [ 476.470893][ T53] loop7: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 476.510591][ T6292] veth1_macvtap: left promiscuous mode [ 476.519761][ T6292] veth0_macvtap: left promiscuous mode [ 476.525447][ T6292] veth1_vlan: left promiscuous mode [ 476.530801][ T6292] veth0_vlan: left promiscuous mode [ 476.540531][ T28] audit: type=1400 audit(1779944329.472:6440): avc: denied { write } for pid=13486 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.607725][ T28] audit: type=1400 audit(1779944329.532:6441): avc: denied { write } for pid=13500 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.647752][ T28] audit: type=1400 audit(1779944329.562:6442): avc: denied { mount } for pid=13501 comm="syz.6.2888" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 476.670448][ T28] audit: type=1400 audit(1779944329.562:6443): avc: denied { mounton } for pid=13501 comm="syz.6.2888" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 476.707323][ T28] audit: type=1400 audit(1779944329.642:6444): avc: denied { unmount } for pid=7234 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 476.802818][ T6292] team0 (unregistering): Port device team_slave_1 removed [ 476.813174][ T6292] team0 (unregistering): Port device team_slave_0 removed [ 476.847788][ T6292] team0 (unregistering): Port device dummy0 removed [ 476.871074][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 477.069505][ T28] audit: type=1400 audit(1779944330.002:6445): avc: denied { write } for pid=13514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.135488][ T28] audit: type=1400 audit(1779944330.052:6446): avc: denied { write } for pid=13528 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.236629][T13384] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 477.265416][T13384] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.284032][ T6292] IPVS: stop unused estimator thread 0... [ 477.293766][T13384] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 477.331196][T13384] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.350331][T13384] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 477.364286][T13533] loop8: detected capacity change from 0 to 1024 [ 477.375664][T13384] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.387840][T13533] EXT4-fs: test_dummy_encryption option not supported [ 477.410772][T13546] loop7: detected capacity change from 0 to 764 [ 477.421268][T13384] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 477.434787][T13546] iso9660: Unknown parameter 'TPROXY' [ 477.457626][ T28] audit: type=1400 audit(1779944330.362:6447): avc: denied { write } for pid=13532 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.489037][T13384] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.521348][ T28] audit: type=1400 audit(1779944330.392:6448): avc: denied { write } for pid=13550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.561229][T13533] lo speed is unknown, defaulting to 1000 [ 477.695629][ T28] audit: type=1400 audit(1779944330.632:6449): avc: denied { write } for pid=13559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.736878][T13569] loop2: detected capacity change from 0 to 1024 [ 477.747884][T13566] loop6: detected capacity change from 0 to 1024 [ 477.757339][T13569] EXT4-fs: Ignoring removed nobh option [ 477.770161][T13566] EXT4-fs: Ignoring removed nobh option [ 477.779000][T13569] EXT4-fs: Ignoring removed bh option [ 477.794702][T13566] EXT4-fs: Ignoring removed bh option [ 477.812324][T13566] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 477.833799][T13569] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 477.867344][T13566] EXT4-fs mount: 70 callbacks suppressed [ 477.868630][T13566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.899924][T13384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.916384][T13384] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.926052][T13569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 477.948270][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.955387][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.983314][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.990444][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.998320][T13588] random: crng reseeded on system resumption [ 478.001553][T13590] loop7: detected capacity change from 0 to 164 [ 478.031850][T13590] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 478.055489][T13590] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 478.101973][T13384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 478.128988][T13593] random: crng reseeded on system resumption [ 478.187729][T13566] lo speed is unknown, defaulting to 1000 [ 478.225276][T13569] lo speed is unknown, defaulting to 1000 [ 478.407113][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.421229][T13384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.436003][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.711940][T13384] veth0_vlan: entered promiscuous mode [ 478.720157][T13384] veth1_vlan: entered promiscuous mode [ 478.747297][T13384] veth0_macvtap: entered promiscuous mode [ 478.757510][T13384] veth1_macvtap: entered promiscuous mode [ 478.820043][T13621] __nla_validate_parse: 62 callbacks suppressed [ 478.820075][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.838136][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.847792][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.857406][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.866978][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.876061][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 478.908543][T13384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.919315][T13384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.003476][T11125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.056528][T11125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.119343][T11125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.185952][T11125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.361935][T13628] loop6: detected capacity change from 0 to 512 [ 479.385945][T13628] EXT4-fs: Ignoring removed orlov option [ 479.397593][T13628] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.483385][T13628] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2907: corrupted in-inode xattr: e_value size too large [ 479.504802][T13628] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.506212][T13628] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2907: couldn't read orphan inode 15 (err -117) [ 479.515471][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 479.515494][ C0] EXT4-fs (loop6): initial error at time 1779944332: ext4_iget_extra_inode:5128: inode 15 [ 479.515528][ C0] EXT4-fs (loop6): last error at time 1779944332: ext4_iget_extra_inode:5128: inode 15 [ 479.566935][T13628] loop6: lost filesystem error report for type 5 error -117 [ 479.568735][T13628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.590299][T13633] loop7: detected capacity change from 0 to 256 [ 479.616731][T13633] vfat: Unknown parameter 'q‰VÕ#ãeHž' [ 479.624110][T13624] 9p: Bad value for 'rfdno' [ 479.652808][T13628] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2907: corrupted in-inode xattr: e_value size too large [ 479.715075][T13631] loop2: detected capacity change from 0 to 1024 [ 479.744256][T13628] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.2907: corrupted in-inode xattr: e_value size too large [ 479.792054][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.926051][T13631] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 479.939990][T13631] ext4 filesystem being mounted at /571/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 480.974127][T13671] set_capacity_and_notify: 1 callbacks suppressed [ 480.974157][T13671] loop8: detected capacity change from 0 to 164 [ 481.041304][T13671] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 481.052425][T13671] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 481.083115][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 481.174250][ T4202] usb 14-1: device descriptor read/8, error -110 [ 481.285103][ T4202] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 481.307023][ T4202] usb 14-1: enqueue for inactive port 0 [ 482.027680][T13702] random: crng reseeded on system resumption [ 482.033086][ T4202] usb 14-1: enqueue for inactive port 0 [ 482.039617][ T4202] usb 14-1: enqueue for inactive port 0 [ 482.052540][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 482.052558][ T28] audit: type=1326 audit(1779944334.982:6462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.092710][T13705] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2921'. [ 482.116009][ T28] audit: type=1326 audit(1779944335.022:6463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.147516][T13704] loop8: detected capacity change from 0 to 2048 [ 482.154781][ T28] audit: type=1326 audit(1779944335.022:6464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.180881][ T28] audit: type=1326 audit(1779944335.022:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.207491][ T28] audit: type=1326 audit(1779944335.022:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.233398][ T28] audit: type=1326 audit(1779944335.022:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.235928][T13714] loop6: detected capacity change from 0 to 512 [ 482.266643][ T28] audit: type=1326 audit(1779944335.022:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.266687][ T28] audit: type=1326 audit(1779944335.022:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.266732][ T28] audit: type=1326 audit(1779944335.022:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.266843][ T28] audit: type=1326 audit(1779944335.022:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13703 comm="syz.8.2921" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 482.272645][T13704] ext4: Unknown parameter './file1' [ 482.412806][T13714] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 482.458334][T13716] loop8: detected capacity change from 0 to 128 [ 482.493117][T13714] EXT4-fs (loop6): 1 truncate cleaned up [ 482.602719][T13714] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.794002][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2927'. [ 482.806110][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2927'. [ 482.815802][T13723] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2927'. [ 483.264068][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.395724][ T4202] usb usb14-port1: attempt power cycle [ 483.461293][T13732] loop6: detected capacity change from 0 to 164 [ 483.495178][T13732] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 483.504606][T13732] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 485.248006][T13760] loop6: detected capacity change from 0 to 1024 [ 485.271639][T13760] EXT4-fs: Ignoring removed bh option [ 485.364899][ T4202] usb usb14-port1: unable to enumerate USB device [ 485.377042][T13760] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 485.396790][T13760] EXT4-fs (loop6): orphan cleanup on readonly fs [ 485.416927][T13760] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.2942: Bad quota inum: 4294934528, type: 0 [ 485.440963][T13760] loop6: lost filesystem error report for type 5 error -117 [ 485.441151][T13760] EXT4-fs (loop6): Remounting filesystem read-only [ 485.448540][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 485.448564][ C1] EXT4-fs (loop6): initial error at time 1779944338: ext4_quota_enable:7221 [ 485.448594][ C1] EXT4-fs (loop6): last error at time 1779944338: ext4_quota_enable:7221 [ 485.480495][T13765] __nla_validate_parse: 2 callbacks suppressed [ 485.480513][T13765] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2943'. [ 485.559641][T13760] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 485.596768][T13760] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 485.626844][T13760] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 485.669192][T13770] FAULT_INJECTION: forcing a failure. [ 485.669192][T13770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.683782][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2942'. [ 485.693222][T13770] CPU: 0 UID: 0 PID: 13770 Comm: syz.7.2944 Not tainted syzkaller #0 PREEMPT(lazy) [ 485.693248][T13770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.693261][T13770] Call Trace: [ 485.693269][T13770] [ 485.693289][T13770] __dump_stack+0x1d/0x30 [ 485.693319][T13770] dump_stack_lvl+0x95/0xd0 [ 485.693345][T13770] dump_stack+0x15/0x1b [ 485.693442][T13770] should_fail_ex+0x263/0x280 [ 485.693486][T13770] should_fail+0xb/0x20 [ 485.693507][T13770] should_fail_usercopy+0x1a/0x20 [ 485.693555][T13770] _copy_from_user+0x1c/0xb0 [ 485.693582][T13770] map_update_elem+0x3fa/0x6d0 [ 485.693611][T13770] __sys_bpf+0x5e1/0x7e0 [ 485.693698][T13770] __x64_sys_bpf+0x41/0x50 [ 485.693735][T13770] x64_sys_call+0x10cb/0x3020 [ 485.693760][T13770] do_syscall_64+0x12c/0x3b0 [ 485.693799][T13770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.693859][T13770] RIP: 0033:0x7fd3e9edce59 [ 485.693881][T13770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.693904][T13770] RSP: 002b:00007fd3e892f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 485.693930][T13770] RAX: ffffffffffffffda RBX: 00007fd3ea155fa0 RCX: 00007fd3e9edce59 [ 485.693948][T13770] RDX: 0000000000000020 RSI: 0000200000000a80 RDI: 0000000000000002 [ 485.693965][T13770] RBP: 00007fd3e892f090 R08: 0000000000000000 R09: 0000000000000000 [ 485.693982][T13770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.694075][T13770] R13: 00007fd3ea156038 R14: 00007fd3ea155fa0 R15: 00007fffa6ef92e8 [ 485.694099][T13770] [ 485.935795][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.088972][T13783] random: crng reseeded on system resumption [ 486.095691][T13774] loop7: detected capacity change from 0 to 1024 [ 486.246618][T13774] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 486.263357][T13784] loop6: detected capacity change from 0 to 512 [ 486.265997][T13774] ext4 filesystem being mounted at /319/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 486.270452][T13784] EXT4-fs: Ignoring removed nobh option [ 486.292997][T13784] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 486.302762][T13784] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #13: comm syz.6.2949: inode has both inline data and extents flags [ 486.316029][T13784] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 486.320152][T13784] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2949: couldn't read orphan inode 13 (err -117) [ 486.329431][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 486.329454][ C0] EXT4-fs (loop6): initial error at time 1779944339: ext4_orphan_get:1397: inode 13 [ 486.329488][ C0] EXT4-fs (loop6): last error at time 1779944339: ext4_orphan_get:1397: inode 13 [ 486.366520][T13784] loop6: lost filesystem error report for type 5 error -117 [ 486.367701][T13784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.522480][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 486.956003][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.086600][T13813] netlink: 'syz.8.2961': attribute type 3 has an invalid length. [ 487.114606][T13813] netlink: 'syz.8.2961': attribute type 1 has an invalid length. [ 487.125199][T13813] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2961'. [ 487.226069][T13811] netlink: 'syz.6.2960': attribute type 49 has an invalid length. [ 487.431501][T13817] loop6: detected capacity change from 0 to 164 [ 487.438953][T13817] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 487.460393][T13817] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 487.505360][T13819] loop7: detected capacity change from 0 to 1024 [ 487.617878][T13819] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.902599][T13827] loop8: detected capacity change from 0 to 512 [ 487.921314][T13829] netlink: 'syz.3.2967': attribute type 3 has an invalid length. [ 487.931242][T13829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2967'. [ 487.940545][T13827] EXT4-fs: Ignoring removed oldalloc option [ 487.947240][T13819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=13819 comm=syz.7.2963 [ 487.960021][T13827] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 488.003234][T13827] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.019125][T13827] ext4 filesystem being mounted at /120/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.065907][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.160843][T13840] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2969'. [ 488.190468][T13840] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2969'. [ 488.200926][T13840] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2969'. [ 488.210146][T13840] bridge_slave_1: entered allmulticast mode [ 488.275962][T13843] siw: device registration error -23 [ 488.344153][T13849] SELinux: failed to load policy [ 488.399782][T13852] loop7: detected capacity change from 0 to 1024 [ 488.408192][T13852] EXT4-fs: Ignoring removed bh option [ 488.422109][T13852] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 488.468974][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.553694][T13852] EXT4-fs (loop7): orphan cleanup on readonly fs [ 488.590433][T13852] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.2978: Bad quota inum: 4294934528, type: 0 [ 488.614832][T13852] loop7: lost filesystem error report for type 5 error -117 [ 488.618599][T13852] EXT4-fs (loop7): Remounting filesystem read-only [ 488.626256][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 488.626279][ C0] EXT4-fs (loop7): initial error at time 1779944341: ext4_quota_enable:7221 [ 488.626303][ C0] EXT4-fs (loop7): last error at time 1779944341: ext4_quota_enable:7221 [ 488.658175][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 488.668323][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 488.677972][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2979'. [ 488.811077][T13865] 9p: Bad value for 'rfdno' [ 488.976680][T13852] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 489.115255][T13852] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 489.122506][T13852] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.164122][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.216719][ T28] kauditd_printk_skb: 216 callbacks suppressed [ 489.216735][ T28] audit: type=1400 audit(1779944342.152:6688): avc: denied { write } for pid=13873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.237771][T13881] loop7: detected capacity change from 0 to 8192 [ 489.261509][T13881] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 489.304364][ T28] audit: type=1400 audit(1779944342.232:6689): avc: denied { write } for pid=13887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.355686][T13891] netlink: 'syz.7.2985': attribute type 3 has an invalid length. [ 489.379109][T13895] loop6: detected capacity change from 0 to 512 [ 489.385986][T13893] random: crng reseeded on system resumption [ 489.402596][T13895] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 489.453956][T13895] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.2986: bad orphan inode 15 [ 489.477975][T13895] loop6: lost filesystem error report for type 5 error -117 [ 489.478100][T13895] EXT4-fs (loop6): Remounting filesystem read-only [ 489.492398][T13895] ext4_test_bit(bit=14, block=4) = 1 [ 489.497734][T13895] is_bad_inode(inode)=0 [ 489.501914][T13895] NEXT_ORPHAN(inode)=1792 [ 489.506258][T13895] max_ino=32 [ 489.509479][T13895] i_nlink=0 [ 489.513301][T13895] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.546082][ T28] audit: type=1400 audit(1779944342.472:6690): avc: denied { write } for pid=13889 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.580145][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.622704][ T28] audit: type=1400 audit(1779944342.552:6691): avc: denied { write } for pid=13910 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.647791][T13912] syzkaller1: entered promiscuous mode [ 489.654965][T13914] loop6: detected capacity change from 0 to 512 [ 489.655739][T13912] syzkaller1: entered allmulticast mode [ 489.720124][T13914] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 489.762847][T13914] EXT4-fs (loop6): 1 truncate cleaned up [ 489.780370][T13914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 489.814355][ T28] audit: type=1400 audit(1779944342.742:6692): avc: denied { write } for pid=13913 comm="syz.6.2989" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 489.888590][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.036893][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.102106][T13935] loop7: detected capacity change from 0 to 1024 [ 490.148032][T13931] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 490.161362][T13925] bridge_slave_0 (unregistering): left allmulticast mode [ 490.223926][T13935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.237000][T13925] bridge_slave_0 (unregistering): left promiscuous mode [ 490.247973][T13935] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 490.263358][T13925] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.405851][T13918] EXT4-fs error (device loop7): ext4_iget_extra_inode:5128: inode #15: comm syz.7.2991: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 490.586640][T13943] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 490.632203][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.718130][T13944] __nla_validate_parse: 8 callbacks suppressed [ 490.718153][T13944] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2999'. [ 490.870316][T13954] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 490.896055][T13954] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 491.239241][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3009'. [ 491.600193][T13984] set_capacity_and_notify: 2 callbacks suppressed [ 491.600214][T13984] loop6: detected capacity change from 0 to 128 [ 491.619453][T13984] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.644846][T13984] ext4 filesystem being mounted at /428/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 491.679463][ T28] audit: type=1400 audit(1779944344.612:6693): avc: denied { write } for pid=13983 comm="syz.6.3013" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 491.706391][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3013'. [ 491.718676][T13984] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3013'. [ 491.735972][ T28] audit: type=1400 audit(1779944344.662:6694): avc: denied { getopt } for pid=13983 comm="syz.6.3013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 491.770529][T13988] loop2: detected capacity change from 0 to 1024 [ 491.777989][T13988] EXT4-fs: Ignoring removed bh option [ 491.788487][T13988] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 491.799899][T13988] EXT4-fs (loop2): orphan cleanup on readonly fs [ 491.802952][ T7234] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.834154][T13988] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.3014: Bad quota inum: 4294934528, type: 0 [ 491.846197][T13988] loop2: lost filesystem error report for type 5 error -117 [ 491.846313][T13988] EXT4-fs (loop2): Remounting filesystem read-only [ 491.860199][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 491.860215][ C1] EXT4-fs (loop2): initial error at time 1779944344: ext4_quota_enable:7221 [ 491.860235][ C1] EXT4-fs (loop2): last error at time 1779944344: ext4_quota_enable:7221 [ 491.885816][T13988] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 491.902352][T13988] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 491.910627][T13988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.935131][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3014'. [ 491.970679][T13991] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.988517][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.056191][T14002] x_tables: ip_tables: ah match: only valid for protocol 51 [ 492.097563][T14003] loop2: detected capacity change from 0 to 1024 [ 492.136901][T14003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 492.151556][T14003] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.170068][ T28] audit: type=1400 audit(1779944345.102:6695): avc: denied { write } for pid=14001 comm="syz.2.3020" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 492.194373][T14002] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.3020: lblock 3 mapped to illegal pblock 3 (length 3) [ 492.208716][T14009] loop6: detected capacity change from 0 to 1024 [ 492.227970][T14002] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 492.243282][T14002] EXT4-fs (loop2): This should not happen!! Data will be lost [ 492.243282][T14002] [ 492.284632][ T6292] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:14: lblock 8 mapped to illegal pblock 8 (length 8) [ 492.299749][ T6292] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 492.312956][ T6292] EXT4-fs (loop2): This should not happen!! Data will be lost [ 492.312956][ T6292] [ 492.323385][ T3302] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 492.330118][T14009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 492.340627][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 492.346625][T14009] ext4 filesystem being mounted at /431/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 492.370729][T14009] 9p: Bad value for 'rfdno' [ 492.400766][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 492.669187][T14050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3034'. [ 492.678230][T14050] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3034'. [ 492.898381][T14050] batadv1: entered promiscuous mode [ 492.904472][T14050] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 492.983069][T14059] nft_compat: unsupported protocol 0 [ 493.034069][T14063] loop7: detected capacity change from 0 to 1024 [ 493.044296][T14065] loop8: detected capacity change from 0 to 128 [ 493.068049][T14063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.082996][T14070] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3043'. [ 493.114188][T14075] netlink: 'syz.6.3045': attribute type 12 has an invalid length. [ 494.381222][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.394517][T14087] loop2: detected capacity change from 0 to 512 [ 494.431858][T14087] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c198, mo2=0002] [ 494.442522][T14087] System zones: 1-12 [ 494.460876][T14095] loop8: detected capacity change from 0 to 164 [ 494.503241][T14087] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.3050: corrupted in-inode xattr: e_value size too large [ 494.528571][T14095] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 494.548210][T14095] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 494.581875][T14087] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 494.584052][T14087] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.3050: couldn't read orphan inode 15 (err -117) [ 494.593406][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 494.593442][ C0] EXT4-fs (loop2): initial error at time 1779944347: ext4_iget_extra_inode:5128: inode 15 [ 494.593509][ C0] EXT4-fs (loop2): last error at time 1779944347: ext4_iget_extra_inode:5128: inode 15 [ 494.636246][T14087] loop2: lost filesystem error report for type 5 error -117 [ 494.639216][T14087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 494.664846][T14103] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3055'. [ 494.710734][T14106] loop7: detected capacity change from 0 to 1024 [ 494.720220][ T28] audit: type=1400 audit(1779944347.652:6696): avc: denied { write } for pid=14086 comm="syz.2.3050" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 494.769899][T14106] EXT4-fs (loop7): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 494.799256][T14106] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 2: comm syz.7.3056: lblock 2 mapped to illegal pblock 2 (length 1) [ 494.828646][T14106] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 494.829043][T14106] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 494.838230][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 494.838270][ C0] EXT4-fs (loop7): initial error at time 1779944347: ext4_map_blocks:791: inode 3: block 2 [ 494.838391][ C0] EXT4-fs (loop7): last error at time 1779944347: ext4_map_blocks:791: inode 3: block 2 [ 494.892515][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.913633][T14106] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 48: comm syz.7.3056: lblock 0 mapped to illegal pblock 48 (length 1) [ 494.957809][T14106] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 494.959866][T14106] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 494.978370][T14106] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3056: Failed to acquire dquot type 0 [ 494.989902][T14106] loop7: lost filesystem error report for type 5 error -117 [ 494.993242][T14106] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 495.022013][T14106] loop7: lost filesystem error report for type 5 error -117 [ 495.023435][T14106] EXT4-fs error (device loop7): ext4_evict_inode:267: inode #11: comm syz.7.3056: mark_inode_dirty error [ 495.046528][ T28] audit: type=1400 audit(1779944347.952:6697): avc: denied { unlink } for pid=7234 comm="syz-executor" name="file0" dev="tmpfs" ino=2392 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 495.088391][T14106] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 495.088790][T14106] EXT4-fs warning (device loop7): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 495.117314][ T28] audit: type=1400 audit(1779944347.952:6698): avc: denied { read write } for pid=7234 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.141779][T14106] EXT4-fs (loop7): 1 orphan inode deleted [ 495.148665][T14106] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.162646][ T28] audit: type=1400 audit(1779944347.952:6699): avc: denied { open } for pid=7234 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.198397][ T28] audit: type=1400 audit(1779944347.952:6700): avc: denied { ioctl } for pid=7234 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 495.277633][ T28] audit: type=1400 audit(1779944347.952:6701): avc: denied { recv } for pid=3284 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.108 dest=44130 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 495.293603][ T49] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 495.307222][ T28] audit: type=1400 audit(1779944348.032:6702): avc: denied { read } for pid=14118 comm="syz.6.3062" dev="nsfs" ino=4026532385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 495.341442][ T49] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 495.372978][ T49] EXT4-fs error (device loop7): ext4_release_dquot:7070: comm kworker/u8:3: Failed to release dquot type 0 [ 495.406552][T14121] loop6: detected capacity change from 0 to 512 [ 495.498425][T14119] syz.6.3062: attempt to access beyond end of device [ 495.498425][T14119] loop6: rw=0, sector=464, nr_sectors = 128 limit=512 [ 495.525731][T14115] lo speed is unknown, defaulting to 1000 [ 495.533688][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.550646][ T7795] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 495.577338][ T7795] loop7: lost filesystem error report for type 5 error -117 [ 495.577515][ T7795] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 495.603845][T11135] kworker/u8:29: attempt to access beyond end of device [ 495.603845][T11135] loop6: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 495.626126][ T7795] loop7: lost filesystem error report for type 5 error -117 [ 495.627188][ T7795] EXT4-fs error (device loop7): ext4_quota_off:7318: inode #3: comm syz-executor: mark_inode_dirty error [ 495.649010][ T7795] loop7: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 495.689827][T14133] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3066'. [ 495.767173][T14132] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 495.809648][T14132] EXT4-fs (loop7): 1 truncate cleaned up [ 495.818977][T14132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.876706][T14132] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 496.240003][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 496.466799][T14159] syz.7.3073: attempt to access beyond end of device [ 496.466799][T14159] loop7: rw=0, sector=464, nr_sectors = 128 limit=512 [ 496.502168][ T6292] kworker/u8:14: attempt to access beyond end of device [ 496.502168][ T6292] loop7: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 496.546841][T14165] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3078'. [ 496.597071][T14167] SELinux: failed to load policy [ 496.670989][ T6292] Bluetooth: hci0: Frame reassembly failed (-84) [ 496.960806][T14139] kexec: Could not allocate control_code_buffer [ 496.982987][T14178] netlink: 'syz.6.3081': attribute type 1 has an invalid length. [ 496.997593][T14178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 497.058333][T14181] set_capacity_and_notify: 2 callbacks suppressed [ 497.058353][T14181] loop2: detected capacity change from 0 to 2048 [ 497.116946][T14181] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.195010][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.234229][T14195] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3089'. [ 497.270591][T14197] loop6: detected capacity change from 0 to 512 [ 497.286567][T14197] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 497.296873][T14197] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 497.352962][T14197] loop6: detected capacity change from 0 to 128 [ 497.521482][T14205] loop6: detected capacity change from 0 to 512 [ 497.549975][T14205] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 497.598011][T14205] EXT4-fs (loop6): 1 truncate cleaned up [ 497.646383][T14205] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 497.725957][T14205] EXT4-fs error (device loop6): ext4_generic_delete_entry:2673: inode #2: block 13: comm syz.6.3090: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 497.752947][T14209] netlink: 'syz.7.3091': attribute type 4 has an invalid length. [ 497.847463][T14205] EXT4-fs (loop6): Remounting filesystem read-only [ 497.883875][T14205] EXT4-fs warning (device loop6): ext4_rename_delete:3739: inode #2: comm syz.6.3090: Deleting old file: nlink 4, error=-117 [ 497.943658][T14197] lo speed is unknown, defaulting to 1000 [ 498.142615][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.200696][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 498.217142][T14227] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3097'. [ 498.226424][T14227] syzkaller1: entered allmulticast mode [ 498.281981][T14228] loop6: detected capacity change from 0 to 164 [ 498.298093][T14228] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 498.365390][T14232] syz.3.3099 (14232): /proc/14231/oom_adj is deprecated, please use /proc/14231/oom_score_adj instead. [ 498.488485][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3100'. [ 498.688608][T14248] random: crng reseeded on system resumption [ 498.703565][T14246] loop2: detected capacity change from 0 to 1024 [ 498.712507][T14246] EXT4-fs: Ignoring removed nobh option [ 498.718588][T14246] EXT4-fs: Ignoring removed bh option [ 498.726989][T14246] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 498.754489][ T3547] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 498.808572][T14246] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.887718][T14246] lo speed is unknown, defaulting to 1000 [ 498.975975][T14256] tipc: Enabling of bearer rejected, failed to enable media [ 499.074233][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 499.503125][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 499.515878][T14265] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3111'. [ 499.555351][T14263] tipc: Started in network mode [ 499.561791][T14266] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3110'. [ 499.584618][T14263] tipc: Node identity 7f000001, cluster identity 4711 [ 499.655039][T14263] tipc: Enabled bearer , priority 10 [ 499.685790][T14263] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3109'. [ 499.748153][T14273] netlink: 'syz.3.3113': attribute type 1 has an invalid length. [ 500.177117][ T28] kauditd_printk_skb: 227 callbacks suppressed [ 500.177132][ T28] audit: type=1400 audit(1779944353.062:6930): avc: denied { mounton } for pid=14285 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 500.319685][ T28] audit: type=1400 audit(1779944353.072:6931): avc: denied { create } for pid=14284 comm="syz.8.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 500.398474][T14295] netlink: 'syz.3.3120': attribute type 5 has an invalid length. [ 500.464497][ T28] audit: type=1400 audit(1779944353.072:6932): avc: denied { write } for pid=14284 comm="syz.8.3117" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 500.491835][T14295] : entered allmulticast mode [ 500.523345][T14295] bridge0: entered allmulticast mode [ 500.541172][T14302] netlink: 'syz.6.3122': attribute type 1 has an invalid length. [ 500.549175][T14295] bridge0: entered promiscuous mode [ 500.562464][ T28] audit: type=1400 audit(1779944353.072:6933): avc: denied { name_bind } for pid=14284 comm="syz.8.3117" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 500.615976][T14302] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.646972][ T28] audit: type=1400 audit(1779944353.072:6934): avc: denied { node_bind } for pid=14284 comm="syz.8.3117" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 500.679012][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.718273][ T3369] tipc: Node number set to 2130706433 [ 500.726773][ T28] audit: type=1400 audit(1779944353.252:6935): avc: denied { sys_module } for pid=14285 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 500.752824][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.784973][T14285] lo speed is unknown, defaulting to 1000 [ 500.822986][ T28] audit: type=1400 audit(1779944353.742:6936): avc: denied { mount } for pid=14313 comm="syz.7.3125" name="/" dev="configfs" ino=2028 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 500.877112][ T28] audit: type=1400 audit(1779944353.812:6937): avc: denied { write } for pid=14319 comm="syz.8.3126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 500.923745][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.983718][T14324] loop6: detected capacity change from 0 to 1024 [ 500.996585][T14328] loop7: detected capacity change from 0 to 128 [ 501.031583][T14324] EXT4-fs: Ignoring removed nobh option [ 501.066790][T14324] EXT4-fs: Ignoring removed bh option [ 501.073684][T14328] FAT-fs (loop7): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 501.083327][T14324] EXT4-fs (loop6): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 501.188060][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.210653][T14324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 501.249981][ T28] audit: type=1400 audit(1779944354.182:6938): avc: denied { write } for pid=14323 comm="syz.6.3127" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 501.286522][T14285] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.308015][T14285] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.324707][T14285] bridge_slave_0: entered allmulticast mode [ 501.348942][T14285] bridge_slave_0: entered promiscuous mode [ 501.369511][T14285] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.394569][T14285] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.403508][T14285] bridge_slave_1: entered allmulticast mode [ 501.429431][T14285] bridge_slave_1: entered promiscuous mode [ 501.470353][ T53] bridge_slave_1: left promiscuous mode [ 501.477020][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.532994][T14354] netlink: 'syz.3.3134': attribute type 1 has an invalid length. [ 501.544830][ T28] audit: type=1400 audit(1779944354.412:6939): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 501.568814][T14350] xt_hashlimit: size too large, truncated to 1048576 [ 501.634844][T14351] loop8: detected capacity change from 0 to 512 [ 501.658771][T14359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3133'. [ 501.689554][ T53] bond1 (unregistering): (slave geneve2): Releasing active interface [ 501.705987][ T53] geneve2 (unregistering): left allmulticast mode [ 501.730609][T14355] syz.8.3132: attempt to access beyond end of device [ 501.730609][T14355] loop8: rw=0, sector=464, nr_sectors = 128 limit=512 [ 502.319682][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.342550][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.382594][ T53] bond0 (unregistering): Released all slaves [ 502.402086][ T53] bond1 (unregistering): Released all slaves [ 502.573979][ T6292] kworker/u8:14: attempt to access beyond end of device [ 502.573979][ T6292] loop8: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 502.613107][T14324] lo speed is unknown, defaulting to 1000 [ 502.623874][T14285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.634660][T14285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.659530][ T53] hsr_slave_0: left promiscuous mode [ 502.665527][ T53] hsr_slave_1: left promiscuous mode [ 502.671104][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.678481][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.688257][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.696064][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.718097][ T53] veth1_macvtap: left promiscuous mode [ 502.724540][ T53] veth0_macvtap: left promiscuous mode [ 502.730105][ T53] veth1_vlan: left promiscuous mode [ 502.735400][ T53] veth0_vlan: left promiscuous mode [ 502.801250][ T53] team0 (unregistering): Port device team_slave_1 removed [ 502.811341][ T53] team0 (unregistering): Port device team_slave_0 removed [ 502.923924][ T3369] lo speed is unknown, defaulting to 1000 [ 502.929752][ T3369] infiniband syz2: ib_query_port failed (-19) [ 502.950246][T14285] team0: Port device team_slave_0 added [ 502.961061][T14285] team0: Port device team_slave_1 added [ 502.985325][T14285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.992414][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.020413][T14285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.032014][T14285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.039130][T14285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.074763][T14285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.110942][T14285] hsr_slave_0: entered promiscuous mode [ 503.120001][T14285] hsr_slave_1: entered promiscuous mode [ 503.173390][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 503.359740][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.396952][T14427] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3146'. [ 503.409051][ T53] IPVS: stop unused estimator thread 0... [ 503.436636][T14429] netlink: 'syz.6.3147': attribute type 1 has an invalid length. [ 503.478604][T14431] loop6: detected capacity change from 0 to 1024 [ 503.485044][T14423] loop7: detected capacity change from 0 to 764 [ 503.504187][T14431] EXT4-fs: Ignoring removed bh option [ 503.533365][T14431] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 503.549260][T14431] EXT4-fs (loop6): orphan cleanup on readonly fs [ 503.555876][T14431] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.3148: Bad quota inum: 4294934528, type: 0 [ 503.567725][T14431] loop6: lost filesystem error report for type 5 error -117 [ 503.572393][T14431] EXT4-fs (loop6): Remounting filesystem read-only [ 503.584354][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 503.592814][ C1] EXT4-fs (loop6): initial error at time 1779944356: ext4_quota_enable:7221 [ 503.601551][ C1] EXT4-fs (loop6): last error at time 1779944356: ext4_quota_enable:7221 [ 503.613010][T14431] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 503.628803][T14431] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 503.636070][T14431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 503.651398][T14431] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3148'. [ 503.782573][T14285] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 503.802213][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 503.809296][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 503.822567][T14285] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 503.837292][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 503.860283][T14285] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 503.873328][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.899331][T14285] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 503.933697][T14285] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.995629][T14285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.022606][T14285] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.080403][ T6292] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.087544][ T6292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.153415][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.160625][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.175759][T14469] loop6: detected capacity change from 0 to 128 [ 504.283643][T14469] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 504.297539][T14469] ext4 filesystem being mounted at /463/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 504.672526][T14497] tipc: Invalid UDP bearer configuration [ 504.672543][T14497] tipc: Enabling of bearer rejected, failed to enable media [ 504.735885][T14499] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3154'. [ 504.921874][T14497] loop7: detected capacity change from 0 to 8192 [ 505.041180][T14491] syz.8.3155 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 505.119374][T14497] loop7: p1 < > p2 p4 < p5 > [ 505.131784][T14285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.154829][T14497] loop7: partition table partially beyond EOD, truncated [ 505.257648][T14497] loop7: p1 start 134217728 is beyond EOD, truncated [ 505.287073][T14511] netlink: 'syz.3.3157': attribute type 1 has an invalid length. [ 505.317670][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 505.317725][ T28] audit: type=1400 audit(1779944358.252:6983): avc: denied { create } for pid=14487 comm="syz.7.3154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 505.370839][T14497] loop7: p2 size 591360 extends beyond EOD, truncated [ 505.430021][ T28] audit: type=1400 audit(1779944358.302:6984): avc: denied { ioctl } for pid=14487 comm="syz.7.3154" path="socket:[45698]" dev="sockfs" ino=45698 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 505.484248][T14285] veth0_vlan: entered promiscuous mode [ 505.522457][T14491] CPU: 0 UID: 0 PID: 14491 Comm: syz.8.3155 Not tainted syzkaller #0 PREEMPT(lazy) [ 505.522498][T14491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.522516][T14491] Call Trace: [ 505.522522][T14491] [ 505.522531][T14491] __dump_stack+0x1d/0x30 [ 505.522564][T14491] dump_stack_lvl+0x95/0xd0 [ 505.522688][T14491] dump_stack+0x15/0x1b [ 505.522707][T14491] dump_header+0x80/0x240 [ 505.522728][T14491] oom_kill_process+0x295/0x350 [ 505.522788][T14491] out_of_memory+0x97d/0xb80 [ 505.522905][T14491] try_charge_memcg+0x62f/0xa10 [ 505.522940][T14491] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 505.522964][T14491] __alloc_frozen_pages_noprof+0x18a/0x350 [ 505.523028][T14491] alloc_pages_mpol+0xb3/0x260 [ 505.523061][T14491] alloc_pages_noprof+0x8f/0x140 [ 505.523124][T14491] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 505.523169][T14491] __kvmalloc_node_noprof+0x3d4/0x640 [ 505.523256][T14491] ? futex_hash_allocate+0x190/0x9a0 [ 505.523288][T14491] ? futex_hash_allocate+0x190/0x9a0 [ 505.523320][T14491] futex_hash_allocate+0x190/0x9a0 [ 505.523397][T14491] ? cap_task_prctl+0x13f/0x6b0 [ 505.523426][T14491] futex_hash_prctl+0xd8/0xf0 [ 505.523517][T14491] __se_sys_prctl+0x4f4/0x1400 [ 505.523547][T14491] __x64_sys_prctl+0x67/0x80 [ 505.523570][T14491] x64_sys_call+0x2533/0x3020 [ 505.523673][T14491] do_syscall_64+0x12c/0x3b0 [ 505.523764][T14491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.523791][T14491] RIP: 0033:0x7f278647ce59 [ 505.523809][T14491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.523833][T14491] RSP: 002b:00007f2784ecf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 505.523871][T14491] RAX: ffffffffffffffda RBX: 00007f27866f5fa0 RCX: 00007f278647ce59 [ 505.523889][T14491] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 505.523902][T14491] RBP: 00007f2786512d6f R08: 0000000000000000 R09: 0000000000000000 [ 505.523914][T14491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.523927][T14491] R13: 00007f27866f6038 R14: 00007f27866f5fa0 R15: 00007ffc7741b258 [ 505.523946][T14491] [ 505.755423][T14491] memory: usage 178960kB, limit 307200kB, failcnt 59 [ 505.780162][T14497] loop7: p5 size 591360 extends beyond EOD, truncated [ 505.790465][T14491] memory+swap: usage 179992kB, limit 9007199254740988kB, failcnt 0 [ 505.810636][T14491] kmem: usage 172856kB, limit 9007199254740988kB, failcnt 0 [ 505.819092][T14491] Memory cgroup stats for /syz8: [ 505.819422][T14491] cache 3874816 [ 505.823755][T14285] veth1_vlan: entered promiscuous mode [ 505.824457][T14491] rss 3985408 [ 505.824468][T14491] shmem 0 [ 505.839812][T14491] mapped_file 0 [ 505.843440][T14491] dirty 0 [ 505.846550][T14491] writeback 0 [ 505.849874][T14491] workingset_refault_anon 0 [ 505.854496][T14491] workingset_refault_file 0 [ 505.859039][T14491] swap 0 [ 505.861916][T14491] swapcached 335872 [ 505.865862][T14491] pgpgin 123431 [ 505.869395][T14491] pgpgout 121458 [ 505.872990][T14491] pgfault 67733 [ 505.876531][T14491] pgmajfault 946 [ 505.880119][T14491] inactive_anon 327680 [ 505.884260][T14491] active_anon 0 [ 505.887812][T14491] inactive_file 4096 [ 505.891734][T14491] active_file 0 [ 505.895256][T14491] unevictable 7741440 [ 505.899273][T14491] hierarchical_memory_limit 314572800 [ 505.904779][T14491] hierarchical_memsw_limit 9223372036854771712 [ 505.910973][T14491] total_cache 3874816 [ 505.915089][T14491] total_rss 3985408 [ 505.918948][T14491] total_shmem 0 [ 505.922444][T14491] total_mapped_file 0 [ 505.926487][T14491] total_dirty 0 [ 505.929973][T14491] total_writeback 0 [ 505.933805][T14491] total_workingset_refault_anon 0 [ 505.938882][T14491] total_workingset_refault_file 0 [ 505.943947][T14491] total_swap 0 [ 505.947850][T14491] total_swapcached 335872 [ 505.952213][T14491] total_pgpgin 123431 [ 505.959961][T14285] veth0_macvtap: entered promiscuous mode [ 505.967559][ T7234] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.980369][T14285] veth1_macvtap: entered promiscuous mode [ 506.055480][T14285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.071351][T14491] total_pgpgout 121458 [ 506.099931][T14285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.123224][T14491] total_pgfault 67733 [ 506.131073][T11127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.154366][T14491] total_pgmajfault 946 [ 506.162753][T11127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.175022][T14491] total_inactive_anon 327680 [ 506.200118][T14491] total_active_anon 0 [ 506.224788][T14491] total_inactive_file 4096 [ 506.233594][T11127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.245825][T14491] total_active_file 0 [ 506.255894][T14491] total_unevictable 7741440 [ 506.269234][T14491] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3155,pid=14490,uid=0 [ 506.331194][T14527] loop6: detected capacity change from 0 to 764 [ 506.339163][ T28] audit: type=1400 audit(1779944359.252:6985): avc: denied { create } for pid=14522 comm="syz.6.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 506.440380][T14527] Symlink component flag not implemented [ 506.446101][T14527] Symlink component flag not implemented [ 506.454583][ T28] audit: type=1400 audit(1779944359.372:6986): avc: denied { setopt } for pid=14522 comm="syz.6.3159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 506.573076][T14491] Memory cgroup out of memory: Killed process 14491 (syz.8.3155) total-vm:94300kB, anon-rss:6612kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 506.699658][T14532] SELinux: failed to load policy [ 506.970048][T14537] loop8: detected capacity change from 0 to 256 [ 507.031822][T14537] FAT-fs (loop8): IO charset cp1250 not found [ 507.053049][T14539] loop7: detected capacity change from 0 to 1024 [ 507.060875][ T28] audit: type=1400 audit(1779944359.982:6987): avc: denied { bind } for pid=14536 comm="syz.8.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.082237][T14537] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3164'. [ 507.116157][ T28] audit: type=1400 audit(1779944359.982:6988): avc: denied { setopt } for pid=14536 comm="syz.8.3164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 507.138605][T11127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.186634][T14539] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 507.239189][T14543] loop8: detected capacity change from 0 to 2048 [ 507.256751][T14539] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.277290][T14543] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.302826][ T28] audit: type=1400 audit(1779944360.202:6989): avc: denied { mounton } for pid=14285 comm="syz-executor" path="/root/syzkaller.B1YeOI/syz-tmp" dev="sda1" ino=2058 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 507.410319][ T28] audit: type=1400 audit(1779944360.202:6990): avc: denied { mount } for pid=14285 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.466480][T14537] netlink: 56537 bytes leftover after parsing attributes in process `syz.8.3164'. [ 507.497516][T14552] loop2: detected capacity change from 0 to 512 [ 507.555277][ T28] audit: type=1400 audit(1779944360.222:6991): avc: denied { mount } for pid=14285 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 507.589840][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.602494][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 507.617085][T14552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 507.636606][ T28] audit: type=1400 audit(1779944360.222:6992): avc: denied { mounton } for pid=14285 comm="syz-executor" path="/root/syzkaller.B1YeOI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 507.671057][T14552] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 507.862922][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.982538][T14569] loop7: detected capacity change from 0 to 1024 [ 508.021663][T14569] EXT4-fs: Ignoring removed bh option [ 508.037741][T14569] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (3163!=35945) [ 508.056358][T14569] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 508.077532][T14569] EXT4-fs error (device loop7): __ext4_get_inode_loc:4885: comm syz.7.3174: Invalid inode table block 0 in block_group 0 [ 508.091505][T14569] loop7: lost filesystem error report for type 5 error -117 [ 508.093616][T14569] EXT4-fs (loop7): Remounting filesystem read-only [ 508.100951][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 508.100984][ C1] EXT4-fs (loop7): initial error at time 1779944361: __ext4_get_inode_loc:4885 [ 508.101007][ C1] EXT4-fs (loop7): last error at time 1779944361: __ext4_get_inode_loc:4885 [ 508.131686][T14569] EXT4-fs (loop7): get root inode failed [ 508.137379][T14569] EXT4-fs (loop7): mount failed [ 508.246180][T14575] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 508.271055][T14575] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 508.361296][T14586] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 508.387185][T14586] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 508.404051][T14586] EXT4-fs (loop2): orphan cleanup on readonly fs [ 508.414831][T14586] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.3177: Allocating blocks 41-42 which overlap fs metadata [ 508.428519][T14586] loop2: lost filesystem error report for type 5 error -117 [ 508.431929][T14589] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3180'. [ 508.438483][T14586] EXT4-fs (loop2): Remounting filesystem read-only [ 508.455713][T14586] EXT4-fs (loop2): 1 truncate cleaned up [ 508.468977][T14591] netlink: 'syz.3.3181': attribute type 1 has an invalid length. [ 508.476951][T14586] EXT4-fs (loop2): pa ffff888108515e00: logic 1, phys. 41, len 23 [ 508.487410][T14586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 508.512360][T14585] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 508.524999][T14585] ext4 filesystem being mounted at /371/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 508.561541][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 508.628775][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.641423][T14598] set_capacity_and_notify: 3 callbacks suppressed [ 508.641478][T14598] loop7: detected capacity change from 0 to 1024 [ 508.689452][T14598] EXT4-fs: Ignoring removed nobh option [ 508.695194][T14598] EXT4-fs: Ignoring removed bh option [ 508.701217][T14598] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 508.767537][T14598] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.791233][T14607] loop8: detected capacity change from 0 to 512 [ 508.803806][T14607] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 508.832050][T14607] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.3186: bad orphan inode 15 [ 508.845822][T14607] loop8: lost filesystem error report for type 5 error -117 [ 508.848236][T14607] EXT4-fs (loop8): Remounting filesystem read-only [ 508.855724][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 508.855744][ C0] EXT4-fs (loop8): initial error at time 1779944361: ext4_orphan_get:1423 [ 508.855774][ C0] EXT4-fs (loop8): last error at time 1779944361: ext4_orphan_get:1423 [ 508.885879][T14607] ext4_test_bit(bit=14, block=4) = 1 [ 508.904772][T14607] is_bad_inode(inode)=0 [ 508.911980][T14607] NEXT_ORPHAN(inode)=1792 [ 508.975287][T14607] max_ino=32 [ 508.996315][T14607] i_nlink=0 [ 509.020465][T14607] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 509.160080][T14613] loop2: detected capacity change from 0 to 512 [ 509.221185][T14613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3188'. [ 509.279996][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.039860][T14620] loop8: detected capacity change from 0 to 512 [ 510.405051][T14622] syz.8.3189: attempt to access beyond end of device [ 510.405051][T14622] loop8: rw=0, sector=464, nr_sectors = 128 limit=512 [ 510.583708][T14619] loop2: detected capacity change from 0 to 8192 [ 510.957336][T14624] lo speed is unknown, defaulting to 1000 [ 510.963219][T14624] lo speed is unknown, defaulting to 1000 [ 510.972981][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 510.973017][ T28] audit: type=1400 audit(1779944363.882:7013): avc: denied { bind } for pid=14623 comm="syz.2.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.031532][ T28] audit: type=1400 audit(1779944363.882:7014): avc: denied { connect } for pid=14623 comm="syz.2.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 511.058240][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.072537][T11121] kworker/u8:22: attempt to access beyond end of device [ 511.072537][T11121] loop8: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 511.092188][ T28] audit: type=1400 audit(1779944364.022:7015): avc: denied { setopt } for pid=14623 comm="syz.2.3191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 511.123098][T14624] lo speed is unknown, defaulting to 1000 [ 511.138897][T14624] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 511.195152][T14624] lo speed is unknown, defaulting to 1000 [ 511.203131][T14630] SELinux: failed to load policy [ 511.226230][T14624] lo speed is unknown, defaulting to 1000 [ 511.233032][T14624] lo speed is unknown, defaulting to 1000 [ 511.248354][T14624] lo speed is unknown, defaulting to 1000 [ 511.261519][T14624] lo speed is unknown, defaulting to 1000 [ 511.280967][T14624] lo speed is unknown, defaulting to 1000 [ 511.287737][T14624] lo speed is unknown, defaulting to 1000 [ 511.295334][T14624] lo speed is unknown, defaulting to 1000 [ 511.303514][ T28] audit: type=1326 audit(1779944364.232:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.380151][ T28] audit: type=1326 audit(1779944364.262:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.415194][ T28] audit: type=1326 audit(1779944364.262:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.444032][ T28] audit: type=1326 audit(1779944364.262:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.504156][T14645] loop2: detected capacity change from 0 to 512 [ 511.510574][ T28] audit: type=1326 audit(1779944364.262:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.548840][T14645] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 511.559055][ T28] audit: type=1326 audit(1779944364.262:7022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.589238][ T28] audit: type=1326 audit(1779944364.262:7023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14633 comm="syz.7.3192" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3e9edce59 code=0x7ffc0000 [ 511.637387][T14634] loop7: detected capacity change from 0 to 512 [ 511.647928][T14634] EXT4-fs: Invalid want_extra_isize 1 [ 511.711414][T14645] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.3199: bad orphan inode 15 [ 511.734843][T14651] netlink: 'syz.6.3200': attribute type 1 has an invalid length. [ 511.744577][T14645] loop2: lost filesystem error report for type 5 error -117 [ 511.744699][T14645] EXT4-fs (loop2): Remounting filesystem read-only [ 511.758573][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 511.758595][ C0] EXT4-fs (loop2): initial error at time 1779944364: ext4_orphan_get:1423 [ 511.758621][ C0] EXT4-fs (loop2): last error at time 1779944364: ext4_orphan_get:1423 [ 511.787821][T14645] ext4_test_bit(bit=14, block=4) = 1 [ 511.794017][T14645] is_bad_inode(inode)=0 [ 511.800119][T14645] NEXT_ORPHAN(inode)=1792 [ 511.808850][T14645] max_ino=32 [ 511.817990][T14645] i_nlink=0 [ 511.836480][T14645] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.923775][T14656] loop7: detected capacity change from 0 to 1024 [ 511.945107][T14656] EXT4-fs: Ignoring removed nobh option [ 511.953121][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.960431][T14656] EXT4-fs: Ignoring removed bh option [ 511.988359][T14656] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 512.040451][T14666] loop2: detected capacity change from 0 to 1024 [ 512.067859][T14667] SELinux: failed to load policy [ 512.069750][T14656] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 512.096443][T14666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 512.108668][T14666] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 512.148140][T14656] lo speed is unknown, defaulting to 1000 [ 512.310747][T14678] netlink: 'syz.3.3210': attribute type 8 has an invalid length. [ 512.318590][T14678] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3210'. [ 512.335478][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 512.356183][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 512.407965][T14681] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 512.417765][T14678] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.425016][T14678] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.447790][T14692] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3211'. [ 512.468673][T14681] block device autoloading is deprecated and will be removed. [ 512.472158][T14692] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3211'. [ 512.491383][T14674] netlink: 72 bytes leftover after parsing attributes in process `syz.8.3209'. [ 512.506280][T14696] loop2: detected capacity change from 0 to 128 [ 512.538921][T14694] xt_hashlimit: size too large, truncated to 1048576 [ 512.551636][T14692] netlink: 'syz.6.3211': attribute type 5 has an invalid length. [ 512.566835][T14696] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 512.631571][T14692] netlink: 43 bytes leftover after parsing attributes in process `syz.6.3211'. [ 512.657289][T14696] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.032777][T14721] SELinux: failed to load policy [ 513.164606][T14734] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 513.186620][T14734] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3227: bad orphan inode 15 [ 513.220989][T14734] loop7: lost filesystem error report for type 5 error -117 [ 513.221102][T14734] EXT4-fs (loop7): Remounting filesystem read-only [ 513.228569][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 513.228584][ C0] EXT4-fs (loop7): initial error at time 1779944366: ext4_orphan_get:1423 [ 513.228603][ C0] EXT4-fs (loop7): last error at time 1779944366: ext4_orphan_get:1423 [ 513.276865][T14734] ext4_test_bit(bit=14, block=4) = 1 [ 513.276879][T14734] is_bad_inode(inode)=0 [ 513.276886][T14734] NEXT_ORPHAN(inode)=1792 [ 513.276892][T14734] max_ino=32 [ 513.276898][T14734] i_nlink=0 [ 513.277390][T14734] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.333812][T14285] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 513.335485][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.426684][T14740] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.475523][T14747] syzkaller0: entered promiscuous mode [ 513.475604][T14747] syzkaller0: entered allmulticast mode [ 513.553248][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.651771][T14752] SELinux: failed to load policy [ 513.751465][T14763] set_capacity_and_notify: 2 callbacks suppressed [ 513.751494][T14763] loop8: detected capacity change from 0 to 1024 [ 513.822186][T14763] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 513.839204][T14763] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.938652][T14785] loop7: detected capacity change from 0 to 1024 [ 513.949710][T14785] EXT4-fs: Ignoring removed bh option [ 513.969033][T14785] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 513.987897][T14785] EXT4-fs (loop7): orphan cleanup on readonly fs [ 513.994763][T14785] EXT4-fs error (device loop7): ext4_quota_enable:7221: comm syz.7.3242: Bad quota inum: 4294934528, type: 0 [ 514.008314][T14785] loop7: lost filesystem error report for type 5 error -117 [ 514.008456][T14785] EXT4-fs (loop7): Remounting filesystem read-only [ 514.015793][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 514.015816][ C1] EXT4-fs (loop7): initial error at time 1779944366: ext4_quota_enable:7221 [ 514.015858][ C1] EXT4-fs (loop7): last error at time 1779944366: ext4_quota_enable:7221 [ 514.072537][T14785] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 514.103504][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 514.110311][T14785] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 514.129286][T14785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 514.160385][T14785] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3242'. [ 514.186922][T14790] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(13) [ 514.193563][T14790] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 514.207456][T14790] vhci_hcd vhci_hcd.0: Device attached [ 514.252450][T14795] vhci_hcd: connection closed [ 514.253976][T11127] vhci_hcd vhci_hcd.6: stop threads [ 514.271842][T11127] vhci_hcd vhci_hcd.6: release socket [ 514.315882][T11127] vhci_hcd vhci_hcd.6: disconnect device [ 514.324081][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.399015][T14809] SELinux: failed to load policy [ 514.532571][T14821] batman_adv: batadv0: Adding interface: macsec2 [ 514.547937][T14821] batman_adv: batadv0: The MTU of interface macsec2 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.594736][T14821] batman_adv: batadv0: Interface activated: macsec2 [ 515.093910][T14847] SELinux: failed to load policy [ 515.338964][T14857] loop6: detected capacity change from 0 to 1024 [ 515.359495][T14850] lo speed is unknown, defaulting to 1000 [ 515.413314][T14857] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 515.425352][T14857] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 515.449122][ T7234] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 515.659547][T14872] loop6: detected capacity change from 0 to 512 [ 515.868104][T14872] syz.6.3272: attempt to access beyond end of device [ 515.868104][T14872] loop6: rw=0, sector=464, nr_sectors = 128 limit=512 [ 515.987132][ T53] kworker/u8:4: attempt to access beyond end of device [ 515.987132][ T53] loop6: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 516.462125][T14891] loop8: detected capacity change from 0 to 512 [ 516.504129][T14891] EXT4-fs (loop8): unsupported inode size: 0 [ 516.533558][T14891] EXT4-fs (loop8): blocksize: 1024 [ 516.764596][T14897] loop7: detected capacity change from 0 to 1024 [ 516.897966][T14898] tmpfs: Bad value for 'mpol' [ 516.915035][T14904] sg_write: data in/out 26332/5 bytes for SCSI command 0xf8-- guessing data in; [ 516.915035][T14904] program syz.8.3284 not setting count and/or reply_len properly [ 516.969826][T14897] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 517.017828][T14897] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.133056][ T28] kauditd_printk_skb: 164 callbacks suppressed [ 517.133074][ T28] audit: type=1400 audit(1779944370.062:7187): avc: denied { bind } for pid=14906 comm="syz.8.3285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 517.343338][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 517.409893][T14913] siw: device registration error -23 [ 517.446951][ T28] audit: type=1400 audit(1779944370.382:7188): avc: denied { listen } for pid=14915 comm="syz.7.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 517.493211][ T28] audit: type=1400 audit(1779944370.382:7189): avc: denied { setopt } for pid=14915 comm="syz.7.3287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 517.530084][T14920] loop2: detected capacity change from 0 to 164 [ 517.539767][ T28] audit: type=1400 audit(1779944370.412:7190): avc: denied { ioctl } for pid=14915 comm="syz.7.3287" path="socket:[46609]" dev="sockfs" ino=46609 ioctlcmd=0x9411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 517.602572][T14920] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 517.640608][T14928] loop7: detected capacity change from 0 to 512 [ 517.677373][T14928] EXT4-fs (loop7): 1 truncate cleaned up [ 517.685908][ T28] audit: type=1326 audit(1779944370.622:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 517.714637][T14928] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 517.749814][T14931] sit0: entered allmulticast mode [ 517.787820][ T28] audit: type=1326 audit(1779944370.622:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 517.811042][T14928] netlink: 'syz.7.3294': attribute type 15 has an invalid length. [ 517.821160][T14928] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3294'. [ 517.830635][ T28] audit: type=1326 audit(1779944370.642:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 517.867837][ T28] audit: type=1326 audit(1779944370.642:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 517.893647][ T28] audit: type=1326 audit(1779944370.642:7195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 517.942628][ T28] audit: type=1326 audit(1779944370.662:7196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14929 comm="syz.6.3295" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f24557ace59 code=0x7ffc0000 [ 518.022337][T14936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3292'. [ 518.060671][T14931] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3295'. [ 518.099724][T14938] random: crng reseeded on system resumption [ 518.194592][T14932] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 518.222330][T14940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14940 comm=syz.6.3295 [ 518.409713][T14928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=14928 comm=syz.7.3294 [ 518.853081][T14940] sit0: entered promiscuous mode [ 518.862774][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.159420][T14955] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3300'. [ 519.212929][T14947] loop2: detected capacity change from 0 to 1024 [ 519.460063][T14960] loop6: detected capacity change from 0 to 512 [ 519.473240][T14947] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 519.485384][T14947] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.512046][T14970] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3304'. [ 519.578312][T14973] syz.6.3301: attempt to access beyond end of device [ 519.578312][T14973] loop6: rw=0, sector=464, nr_sectors = 128 limit=512 [ 519.666039][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3305'. [ 519.678139][ T6287] kworker/u8:12: attempt to access beyond end of device [ 519.678139][ T6287] loop6: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 519.732977][T14978] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3307'. [ 519.746094][ T6287] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.754845][ T6287] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.763615][ T6287] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.786503][T11109] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 519.837447][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 520.231017][T15001] loop6: detected capacity change from 0 to 512 [ 520.231477][T14985] SELinux: failed to load policy [ 520.271317][T15001] syz.6.3317: attempt to access beyond end of device [ 520.271317][T15001] loop6: rw=0, sector=464, nr_sectors = 128 limit=512 [ 520.351572][T11109] kworker/u8:17: attempt to access beyond end of device [ 520.351572][T11109] loop6: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 520.435856][T15012] random: crng reseeded on system resumption [ 520.910684][T15027] SELinux: failed to load policy [ 522.159862][ T28] kauditd_printk_skb: 223 callbacks suppressed [ 522.159879][ T28] audit: type=1400 audit(1779944375.092:7420): avc: denied { mounton } for pid=15049 comm="syz.3.3333" path="/106/file0" dev="tmpfs" ino=582 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 522.563407][T15065] SELinux: failed to load policy [ 522.878223][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3342'. [ 522.878965][ T28] audit: type=1400 audit(1779944375.812:7421): avc: denied { ioctl } for pid=15074 comm="syz.2.3342" path="socket:[46908]" dev="sockfs" ino=46908 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 522.989833][T15075] loop2: detected capacity change from 0 to 164 [ 523.120301][T15075] Unsupported NM flag settings (240) [ 523.365775][T15093] netlink: 'syz.7.3349': attribute type 15 has an invalid length. [ 523.380968][T15093] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3349'. [ 523.409886][T15093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15093 comm=syz.7.3349 [ 523.503982][T15102] loop2: detected capacity change from 0 to 512 [ 523.520514][T15102] EXT4-fs (loop2): 1 truncate cleaned up [ 523.530079][T15102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 523.563858][T15102] netlink: 'syz.2.3353': attribute type 15 has an invalid length. [ 523.573591][T15102] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3353'. [ 523.583469][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3355'. [ 523.706461][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.758737][T15115] FAULT_INJECTION: forcing a failure. [ 523.758737][T15115] name failslab, interval 1, probability 0, space 0, times 0 [ 523.774255][T15115] CPU: 1 UID: 0 PID: 15115 Comm: syz.2.3358 Not tainted syzkaller #0 PREEMPT(lazy) [ 523.774289][T15115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 523.774360][T15115] Call Trace: [ 523.774367][T15115] [ 523.774375][T15115] __dump_stack+0x1d/0x30 [ 523.774399][T15115] dump_stack_lvl+0x95/0xd0 [ 523.774425][T15115] dump_stack+0x15/0x1b [ 523.774450][T15115] should_fail_ex+0x263/0x280 [ 523.774495][T15115] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 523.774527][T15115] should_failslab+0x8c/0xb0 [ 523.774569][T15115] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 523.774638][T15115] ? debugfs_alloc_inode+0x34/0x40 [ 523.774674][T15115] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 523.774713][T15115] debugfs_alloc_inode+0x34/0x40 [ 523.774769][T15115] alloc_inode+0x40/0x170 [ 523.774819][T15115] new_inode+0x1d/0xe0 [ 523.774871][T15115] __debugfs_create_file+0x97/0x2b0 [ 523.774908][T15115] debugfs_create_file_full+0x3f/0x60 [ 523.774946][T15115] blk_trace_setup_prepare+0x201/0x300 [ 523.774977][T15115] blk_trace_setup+0x261/0x3f0 [ 523.775068][T15115] ? __pfx_blkdev_ioctl+0x10/0x10 [ 523.775105][T15115] blk_trace_ioctl+0x215/0x710 [ 523.775134][T15115] ? tick_program_event+0x79/0xc0 [ 523.775243][T15115] ? _raw_spin_unlock+0x9/0x30 [ 523.775267][T15115] ? __hrtimer_rearm_deferred+0x58d/0x670 [ 523.775325][T15115] ? irqentry_exit+0x55c/0x5d0 [ 523.775411][T15115] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 523.775444][T15115] ? __pfx_blkdev_ioctl+0x10/0x10 [ 523.775490][T15115] ? __pfx_blkdev_ioctl+0x10/0x10 [ 523.775531][T15115] ? __pfx_blkdev_ioctl+0x10/0x10 [ 523.775628][T15115] blkdev_ioctl+0x2ac/0x460 [ 523.775667][T15115] ? __pfx_blkdev_ioctl+0x10/0x10 [ 523.775738][T15115] __se_sys_ioctl+0xce/0x140 [ 523.775777][T15115] __x64_sys_ioctl+0x43/0x50 [ 523.775814][T15115] x64_sys_call+0x1563/0x3020 [ 523.775845][T15115] do_syscall_64+0x12c/0x3b0 [ 523.775948][T15115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.776021][T15115] RIP: 0033:0x7f983cf8ce59 [ 523.776041][T15115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.776066][T15115] RSP: 002b:00007f983b9e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.776090][T15115] RAX: ffffffffffffffda RBX: 00007f983d205fa0 RCX: 00007f983cf8ce59 [ 523.776108][T15115] RDX: 0000200000000000 RSI: 00000000c0481273 RDI: 0000000000000004 [ 523.776181][T15115] RBP: 00007f983b9e7090 R08: 0000000000000000 R09: 0000000000000000 [ 523.776252][T15115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.776269][T15115] R13: 00007f983d206038 R14: 00007f983d205fa0 R15: 00007ffe767ab748 [ 523.776294][T15115] [ 524.055627][T15115] debugfs: out of free dentries, can not create file 'dropped' [ 524.109807][T15125] netlink: 'syz.6.3362': attribute type 15 has an invalid length. [ 524.126065][T15128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3364'. [ 524.172847][T15109] loop7: detected capacity change from 0 to 512 [ 524.184516][T15125] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3362'. [ 524.219296][T15132] netlink: 108 bytes leftover after parsing attributes in process `syz.8.3365'. [ 524.241314][T15135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=15135 comm=syz.6.3362 [ 524.281804][T15134] SELinux: failed to load policy [ 524.291519][T15109] syz.7.3356: attempt to access beyond end of device [ 524.291519][T15109] loop7: rw=0, sector=464, nr_sectors = 128 limit=512 [ 524.304961][ T28] audit: type=1326 audit(1779944377.222:7422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 524.305042][ T28] audit: type=1326 audit(1779944377.222:7423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 524.305079][ T28] audit: type=1326 audit(1779944377.222:7424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f278647ce59 code=0x7ffc0000 [ 524.305199][ T28] audit: type=1326 audit(1779944377.222:7425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f278647cbc2 code=0x7ffc0000 [ 524.305235][ T28] audit: type=1326 audit(1779944377.222:7426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f278647cc57 code=0x7ffc0000 [ 524.305308][ T28] audit: type=1326 audit(1779944377.222:7427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f2786439b51 code=0x7ffc0000 [ 524.305380][ T28] audit: type=1326 audit(1779944377.222:7428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f278647dc49 code=0x7ffc0000 [ 524.305479][ T28] audit: type=1326 audit(1779944377.222:7429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15131 comm="syz.8.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f27864392ac code=0x7ffc0000 [ 524.686488][T15163] loop6: detected capacity change from 0 to 1024 [ 524.705589][T15157] lo speed is unknown, defaulting to 1000 [ 524.727948][T15163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.744686][T15163] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3377'. [ 524.805291][T15163] lo speed is unknown, defaulting to 1000 [ 524.886541][ T6287] kworker/u8:12: attempt to access beyond end of device [ 524.886541][ T6287] loop7: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 524.912044][T15161] lo speed is unknown, defaulting to 1000 [ 524.940146][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 524.969479][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 524.991756][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.002624][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.013484][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.024404][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.040149][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.078270][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.104148][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.124763][ T7234] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - no `..' [ 525.354664][ T8217] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.502231][ T8217] syz_tun (unregistering): left allmulticast mode [ 525.512394][T15193] loop7: detected capacity change from 0 to 512 [ 525.530216][T15193] EXT4-fs: inline encryption not supported [ 525.616931][T15193] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.3388: bad orphan inode 15 [ 525.632277][T15193] loop7: lost filesystem error report for type 5 error -117 [ 525.635086][T15193] ext4_test_bit(bit=14, block=5) = 0 [ 525.648618][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 525.648825][ C1] EXT4-fs (loop7): initial error at time 1779944378: ext4_orphan_get:1423 [ 525.649017][ C1] EXT4-fs (loop7): last error at time 1779944378: ext4_orphan_get:1423 [ 525.693206][T15193] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.064363][T15193] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.433144][T15228] loop8: detected capacity change from 0 to 256 [ 526.445470][T15213] lo speed is unknown, defaulting to 1000 [ 526.451884][T15228] vfat: Unknown parameter '00000000000000000000007' [ 526.509890][T15228] netlink: 136 bytes leftover after parsing attributes in process `syz.8.3403'. [ 526.636774][T15231] lo speed is unknown, defaulting to 1000 [ 526.795360][T15267] loop7: detected capacity change from 0 to 1024 [ 526.805366][T15267] EXT4-fs: Ignoring removed nobh option [ 526.805498][T15267] EXT4-fs: Ignoring removed bh option [ 526.827193][T15267] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 526.910733][T15267] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.912893][T15231] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.968024][T15231] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.985100][T15281] loop8: detected capacity change from 0 to 512 [ 526.993245][T15231] bridge_slave_0: entered allmulticast mode [ 527.008700][T15231] bridge_slave_0: entered promiscuous mode [ 527.025084][T15281] EXT4-fs (loop8): unsupported inode size: 0 [ 527.047108][T15231] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.066281][T15231] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.073558][T15281] EXT4-fs (loop8): blocksize: 1024 [ 527.079921][T15231] bridge_slave_1: entered allmulticast mode [ 527.149664][T15231] bridge_slave_1: entered promiscuous mode [ 527.201017][T15289] loop8: detected capacity change from 0 to 1024 [ 527.213875][T15289] EXT4-fs: Ignoring removed bh option [ 527.227898][T15231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.238894][T15289] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 527.251113][T15231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.264047][T15289] EXT4-fs (loop8): orphan cleanup on readonly fs [ 527.273445][T15289] EXT4-fs error (device loop8): ext4_quota_enable:7221: comm syz.8.3418: Bad quota inum: 4294934528, type: 0 [ 527.293491][T15231] team0: Port device team_slave_0 added [ 527.299200][T15289] loop8: lost filesystem error report for type 5 error -117 [ 527.299354][T15289] EXT4-fs (loop8): Remounting filesystem read-only [ 527.314321][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 527.320790][ C1] EXT4-fs (loop8): initial error at time 1779944380: ext4_quota_enable:7221 [ 527.329511][ C1] EXT4-fs (loop8): last error at time 1779944380: ext4_quota_enable:7221 [ 527.338065][T15289] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-117, ino=4294934528). Please run e2fsck to fix. [ 527.339019][T15231] team0: Port device team_slave_1 added [ 527.353480][T15289] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 527.366152][T15289] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.394020][T15289] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3418'. [ 527.403539][T15267] lo speed is unknown, defaulting to 1000 [ 527.435292][T15231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.442630][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.470330][T15231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.482077][T15231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.489236][T15231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.515376][T15231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.573938][T15231] hsr_slave_0: entered promiscuous mode [ 527.580221][T15231] hsr_slave_1: entered promiscuous mode [ 527.586496][T15231] debugfs: 'hsr0' already exists in 'hsr' [ 527.596675][T15231] Cannot create hsr debugfs directory [ 527.603401][T11751] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.622543][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 527.622569][ T28] audit: type=1400 audit(1779944380.542:7558): avc: denied { create } for pid=15297 comm="syz.3.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.649478][ T28] audit: type=1400 audit(1779944380.542:7559): avc: denied { connect } for pid=15297 comm="syz.3.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.669522][ T28] audit: type=1400 audit(1779944380.542:7560): avc: denied { read } for pid=15297 comm="syz.3.3420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.711771][T15298] tipc: Started in network mode [ 527.719699][ T28] audit: type=1400 audit(1779944380.642:7561): avc: denied { write } for pid=15297 comm="syz.3.3420" path="socket:[49453]" dev="sockfs" ino=49453 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 527.737728][T15298] tipc: Node identity 7f000001, cluster identity 4711 [ 527.750817][T15298] tipc: Enabled bearer , priority 10 [ 527.776427][T15298] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 527.785000][T15298] tipc: Enabled bearer , priority 10 [ 527.841831][T15309] netlink: 'syz.3.3423': attribute type 15 has an invalid length. [ 527.864455][T15313] loop8: detected capacity change from 0 to 256 [ 527.917757][T15231] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 527.926613][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.942670][T15231] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 527.965518][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.973739][T15309] __nla_validate_parse: 2 callbacks suppressed [ 527.973766][T15309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3423'. [ 527.990132][T15231] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 527.999950][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 528.039417][T15231] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.052338][T15318] xt_l2tp: v2 tid > 0xffff: 327812 [ 528.066626][T15312] loop2: detected capacity change from 0 to 512 [ 528.080920][T15318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3426'. [ 528.081007][T15231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.219982][T15316] syz.2.3424: attempt to access beyond end of device [ 528.219982][T15316] loop2: rw=0, sector=464, nr_sectors = 128 limit=512 [ 528.248645][T15231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.257594][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.264269][T15231] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.280437][T11133] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.287625][T11133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.327597][T11133] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.334734][T11133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.414095][ T49] kworker/u8:3: attempt to access beyond end of device [ 528.414095][ T49] loop2: rw=1, sector=592, nr_sectors = 1796 limit=512 [ 528.414191][T15231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 528.414215][T15231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 528.493226][T15340] loop2: detected capacity change from 0 to 1024 [ 528.506583][T15340] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 528.537726][T15340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.551744][ T28] audit: type=1400 audit(1779944381.482:7562): avc: denied { write } for pid=15339 comm="syz.2.3431" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 528.623010][ T28] audit: type=1400 audit(1779944381.482:7563): avc: denied { write } for pid=15339 comm="syz.2.3431" name="memory.events.local" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 528.824814][T15231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.883861][T11476] tipc: Node number set to 2130706433 [ 528.943913][T15364] loop7: detected capacity change from 0 to 1024 [ 528.956286][T15364] EXT4-fs: Ignoring removed nobh option [ 528.963161][T15364] EXT4-fs: Ignoring removed bh option [ 528.974876][T15364] EXT4-fs (loop7): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 529.013107][T15364] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.030322][ T28] audit: type=1400 audit(1779944381.962:7564): avc: denied { write } for pid=15363 comm="syz.7.3436" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.110800][T15231] veth0_vlan: entered promiscuous mode [ 529.119719][T15231] veth1_vlan: entered promiscuous mode [ 529.147680][T15231] veth0_macvtap: entered promiscuous mode [ 529.165262][T15364] lo speed is unknown, defaulting to 1000 [ 529.171807][T15231] veth1_macvtap: entered promiscuous mode [ 529.182680][T15231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.202416][T15231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.236907][T11133] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.245819][T11133] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.269294][T15348] Set syz1 is full, maxelem 65536 reached [ 529.275603][T11133] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.285887][T11133] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.324744][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.346177][T14285] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.404793][T15384] EXT4-fs (loop7): 1 truncate cleaned up [ 529.413738][T15384] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.440597][T15384] netlink: 'syz.7.3438': attribute type 15 has an invalid length. [ 529.448686][T15384] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3438'. [ 529.660573][T15388] syz.2.3439 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 529.674784][T15388] CPU: 0 UID: 0 PID: 15388 Comm: syz.2.3439 Not tainted syzkaller #0 PREEMPT(lazy) [ 529.674814][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.674828][T15388] Call Trace: [ 529.674835][T15388] [ 529.674844][T15388] __dump_stack+0x1d/0x30 [ 529.674890][T15388] dump_stack_lvl+0x95/0xd0 [ 529.674997][T15388] dump_stack+0x15/0x1b [ 529.675024][T15388] dump_header+0x80/0x240 [ 529.675060][T15388] oom_kill_process+0x295/0x350 [ 529.675156][T15388] out_of_memory+0x97d/0xb80 [ 529.675187][T15388] try_charge_memcg+0x62f/0xa10 [ 529.675325][T15388] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 529.675357][T15388] __alloc_frozen_pages_noprof+0x18a/0x350 [ 529.675389][T15388] alloc_pages_mpol+0xb3/0x260 [ 529.675431][T15388] alloc_pages_noprof+0x8f/0x140 [ 529.675482][T15388] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 529.675641][T15388] __kvmalloc_node_noprof+0x3d4/0x640 [ 529.675686][T15388] ? futex_hash_allocate+0x190/0x9a0 [ 529.675720][T15388] ? futex_hash_allocate+0x190/0x9a0 [ 529.675762][T15388] futex_hash_allocate+0x190/0x9a0 [ 529.675802][T15388] ? __schedule+0x951/0xd40 [ 529.675907][T15388] ? cap_task_prctl+0x13f/0x6b0 [ 529.675938][T15388] futex_hash_prctl+0xd8/0xf0 [ 529.675972][T15388] __se_sys_prctl+0x4f4/0x1400 [ 529.676037][T15388] __x64_sys_prctl+0x67/0x80 [ 529.676068][T15388] x64_sys_call+0x2533/0x3020 [ 529.676104][T15388] do_syscall_64+0x12c/0x3b0 [ 529.676167][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.676188][T15388] RIP: 0033:0x7f983cf8ce59 [ 529.676231][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.676254][T15388] RSP: 002b:00007f983b9e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 529.676279][T15388] RAX: ffffffffffffffda RBX: 00007f983d205fa0 RCX: 00007f983cf8ce59 [ 529.676349][T15388] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 529.676365][T15388] RBP: 00007f983d022d6f R08: 0000000000000000 R09: 0000000000000000 [ 529.676378][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.676392][T15388] R13: 00007f983d206038 R14: 00007f983d205fa0 R15: 00007ffe767ab748 [ 529.676418][T15388] [ 529.676427][T15388] memory: usage 307200kB, limit 307200kB, failcnt 144 [ 529.964415][T15388] memory+swap: usage 273056kB, limit 9007199254740988kB, failcnt 0 [ 529.972383][T15388] kmem: usage 272692kB, limit 9007199254740988kB, failcnt 0 [ 529.979954][T15388] Memory cgroup stats for /syz2: [ 529.980057][ T2971] ================================================================== [ 529.980570][T15388] cache 4096 [ 529.985061][ T2971] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 529.985115][ T2971] [ 530.005644][ T2971] write to 0xffffffff86c6e018 of 8 bytes by task 15388 on cpu 0: [ 530.013381][ T2971] data_alloc+0x310/0x390 [ 530.017751][ T2971] prb_reserve+0x8d6/0xad0 [ 530.022205][ T2971] vprintk_store+0x54a/0x910 [ 530.026815][ T2971] vprintk_emit+0x1a4/0x600 [ 530.031346][ T2971] vprintk_default+0x26/0x30 [ 530.035958][ T2971] vprintk+0x1d/0x30 [ 530.039901][ T2971] _printk+0x79/0xa0 [ 530.043805][ T2971] mem_cgroup_print_oom_meminfo+0xe8/0x260 [ 530.049641][ T2971] dump_header+0xa2/0x240 [ 530.054003][ T2971] oom_kill_process+0x295/0x350 [ 530.058886][ T2971] out_of_memory+0x97d/0xb80 [ 530.063509][ T2971] try_charge_memcg+0x62f/0xa10 [ 530.068385][ T2971] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 530.073979][ T2971] __alloc_frozen_pages_noprof+0x18a/0x350 [ 530.079811][ T2971] alloc_pages_mpol+0xb3/0x260 [ 530.084606][ T2971] alloc_pages_noprof+0x8f/0x140 [ 530.089583][ T2971] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 530.095509][ T2971] __kvmalloc_node_noprof+0x3d4/0x640 [ 530.100908][ T2971] futex_hash_allocate+0x190/0x9a0 [ 530.106077][ T2971] futex_hash_prctl+0xd8/0xf0 [ 530.110800][ T2971] __se_sys_prctl+0x4f4/0x1400 [ 530.115605][ T2971] __x64_sys_prctl+0x67/0x80 [ 530.120222][ T2971] x64_sys_call+0x2533/0x3020 [ 530.124926][ T2971] do_syscall_64+0x12c/0x3b0 [ 530.129545][ T2971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.135456][ T2971] [ 530.137793][ T2971] read to 0xffffffff86c6e018 of 16 bytes by task 2971 on cpu 1: [ 530.145438][ T2971] _prb_read_valid+0x1b6/0x950 [ 530.150248][ T2971] prb_read_valid+0x3c/0x60 [ 530.154802][ T2971] syslog_print+0x164/0x560 [ 530.159324][ T2971] do_syslog+0x52b/0x7f0 [ 530.163590][ T2971] __x64_sys_syslog+0x41/0x50 [ 530.168293][ T2971] x64_sys_call+0x2b9e/0x3020 [ 530.173004][ T2971] do_syscall_64+0x12c/0x3b0 [ 530.177627][ T2971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.183542][ T2971] [ 530.185880][ T2971] Reported by Kernel Concurrency Sanitizer on: [ 530.192039][ T2971] CPU: 1 UID: 0 PID: 2971 Comm: klogd Not tainted syzkaller #0 PREEMPT(lazy) [ 530.200899][ T2971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.210962][ T2971] ================================================================== [ 530.239687][T15388] rss 4096 [ 530.245187][T15388] shmem 0 [ 530.251901][T15388] mapped_file 4096 [ 530.355279][T15388] dirty 0 [ 530.358453][T15388] writeback 0 [ 530.363218][T15388] workingset_refault_anon 2879 [ 530.368112][T15388] workingset_refault_file 80 [ 530.372881][T15388] swap 180224 [ 530.387582][T15388] swapcached 26386432 [ 530.391602][T15388] pgpgin 537064 [ 530.395109][T15388] pgpgout 537061 [ 530.398664][T15388] pgfault 408494 [ 530.402225][T15388] pgmajfault 339 [ 530.405824][T15388] inactive_anon 0 [ 530.409470][T15388] active_anon 8192 [ 530.413211][T15388] inactive_file 0 [ 530.416892][T15388] active_file 4096 [ 530.420623][T15388] unevictable 0 [ 530.424132][T15388] hierarchical_memory_limit 314572800 [ 530.429555][T15388] hierarchical_memsw_limit 9223372036854771712 [ 530.435816][T15388] total_cache 4096 [ 530.446415][T15388] total_rss 4096 [ 530.449998][T15388] total_shmem 0 [ 530.456276][T15388] total_mapped_file 4096 [ 530.460560][T15388] total_dirty 0 [ 530.464032][T15388] total_writeback 0 [ 530.468076][T15388] total_workingset_refault_anon 2879 [ 530.473434][T15388] total_workingset_refault_file 80 [ 530.478759][T15388] total_swap 180224 [ 530.482588][T15388] total_swapcached 26386432 [ 530.488256][T15388] total_pgpgin 537064 [ 530.498992][ T7795] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.657956][T15407] set_capacity_and_notify: 1 callbacks suppressed [ 530.657978][T15407] loop9: detected capacity change from 0 to 512 [ 530.683896][T15407] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 530.736741][T15388] total_pgpgout 537061 [ 530.740847][T15388] total_pgfault 408494 [ 530.750506][T15388] total_pgmajfault 339 [ 530.760013][T15388] total_inactive_anon 0 [ 530.765413][T15388] total_active_anon 8192 [ 530.769742][T15388] total_inactive_file 0 [ 530.773987][T15388] total_active_file 4096 [ 530.778865][T15388] total_unevictable 0 [ 530.782945][T15388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3439,pid=15387,uid=0 [ 530.798361][T15388] Memory cgroup out of memory: Killed process 15387 (syz.2.3439) total-vm:94168kB, anon-rss:1240kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 530.838188][T15407] EXT4-fs (loop9): 1 truncate cleaned up [ 530.844267][T15407] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.848264][T15231] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.