last executing test programs: 15m26.511646898s ago: executing program 32 (id=3885): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x4000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$pokeuser(0x6, r3, 0x388, 0x41d9fda7) r4 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000440)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug}, {@block_validity}, {@errors_remount}, {@debug}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") fsetxattr(r4, &(0x7f0000000580)=@random={'trusted.', 'max_batch_time'}, &(0x7f0000000080)=':\x00', 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @loopback, @dev}, &(0x7f0000000040)=0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x44, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x3, 0x20}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000200)={r8, 0x4a00d46a}, &(0x7f0000000300)=0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r7, &(0x7f0000000000), 0x0}, 0x20) r9 = socket(0x1e, 0x1, 0x0) connect$tipc(r9, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r9, &(0x7f0000000340), 0x2000011a) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=r10, @ANYRES16=r11, @ANYBLOB="01002cbd7001fe3a00251200000018000180140002006272696467655f736c6176655f310000080007000000000008000871da6d488c5892"], 0x3c}, 0x1, 0x0, 0x0, 0x86}, 0x40040) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r9, @ANYRES16=r11, @ANYBLOB="000826bd7000fcdbdf25160000000500030000000000050004000000000005000300000000000500020000000000050003000000000005000300010000000500040000000000"], 0x4c}}, 0x11) 14m15.912741061s ago: executing program 33 (id=4356): bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x5}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) io_uring_setup(0x4663, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$vcsn(0x0, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2400000006902e7d42668c47120de4393a500e3aa674f2f45465c6debd9426f7faf8559b9878bca4fd12e0a526b0b7793341f38627cb7a06eaf38b599f53c14bb0daa2d1839e4b54eb0fcc6983c972d259430f5de22a010fa5fd83202a9aafd07685a99b93a5ad82a14c0aeca19799f9f7a0f1661ed8c02b37fba148a55d814b21f5189a8effa8441a032100a6b0999fe63e7091b8cd4bbcdd32f2d35807afda501a9238665e65cdd594a1518cc572db6037da052428e999c6", @ANYRES16=0x0, @ANYBLOB="010029bd7000ffffffff390000000c009900020000007500000004000d80"], 0x24}, 0x1, 0x0, 0x0, 0x8040000}, 0x44844) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xfd44) (async, rerun: 32) getrlimit(0x1, 0x0) (rerun: 32) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) (async) r6 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="0180c200000eaaaaaaaaaaaa08004500001c0000000000029078ac1414bbe0002a8f3200020f009078008000081f378ad6a8acdf48f53d8b5593e52790b379d2fa50e4a411f66e1118fbbca7e08f194af6de49a399a28042d4338d1ac3af3ab2f5911e13890adbd13addcf5deddbb1c3d017d613f2c3f79ce0e47296d48af306b1ecbc48995d482545f088fc03d3c2e00178094fd44dea19ed701a1dcbb01baa"], 0x0) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) (async) sched_setaffinity(0x0, 0x0, 0x0) (async, rerun: 64) r7 = socket$inet6(0xa, 0x80001, 0x0) (rerun: 64) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) 10m8.511059211s ago: executing program 34 (id=5703): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0xffffffff, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xd}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, r1, 0x0, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="444c966b8f312fa5fe06a163e7a16166f2a3fc3a3a0ad004d9f24cf3ffd665dda62c4726ebe6767557722b1ff600000000000025dc6e1eaf7fba09d9a7839cad8ad7647fabdade72916edce0c9bac6fc5c99bfaa22494fcbea7e6e7379c745861122c405dc4d9ab19bd7f22999f73a1fea4a5862efda9090eff36a31ad9f7f00b02c5b5b20d9f7ba673f9066083fb986cc2aace4332663373bf23523cf935aa4bf8f785fadcedf6332fd605a21f753ff3bfa29196e8cad1c586d", @ANYRES32, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x32, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xe, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x360, 0x1}, 0x6431df94ce5aed4a, 0xffff, 0x3, 0x3, 0xc599, 0x20000006, 0x8001, 0x0, 0x800}, 0x0, 0x0, r4, 0x3) 8m21.42164588s ago: executing program 35 (id=6284): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xa1, &(0x7f00000002c0)={0x9a, 0x8, 0x5, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 8m18.406293062s ago: executing program 36 (id=6299): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x800, 0x5) socket$kcm(0x11, 0x2, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000480)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00\x00x', 0x14, 0x0, 0x0, @local, @local, {[@routing={0x84}], "223427d5c9a46b9fa1417217"}}}}}, 0x0) 7m46.023186577s ago: executing program 37 (id=6479): r0 = socket$inet6(0xa, 0x800, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f000000b180), 0xa0140, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x48001) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") quotactl$Q_QUOTAOFF(0xffffffff80000301, 0x0, 0xffffffffffffffff, 0x8cffffff00000000) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYRES16], 0x1c) socket$netlink(0x10, 0x3, 0x0) process_vm_readv(0x0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/121, 0x79}], 0x1, &(0x7f0000000500), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x200000000000000) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={0xffffffffffffffff, &(0x7f0000000200), &(0x7f00000004c0)=""/216}, 0x20) 7m8.288552661s ago: executing program 38 (id=6737): perf_event_open(&(0x7f0000000000)={0x1, 0xd4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x490283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x4a45}, 0x7606, 0x4, 0x0, 0x2, 0x6, 0x2, 0x8001, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x200000, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000626000/0x4000)=nil, 0x4000, 0x1) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 6m46.942777177s ago: executing program 39 (id=6884): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x5, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x6e1d, @multicast1}}}, 0x108) prctl$PR_SET_SPECULATION_CTRL(0x48, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000280)={0x8, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @loopback}}}, 0x108) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000480)=@gcm_256={{0x304}, "b9c5ec18837993a6", "94dd7adf162b79d63db3cda2b4b7c3f2779d7b777112824651d28000", "6ebc780b", "3f23b1802d00cd92"}, 0x38) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x170}, 0x4080) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000000)='./file0\x00') mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x1, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x4) ioprio_set$uid(0x3, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0xb) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='v7\x00', 0x10, 0x0) 5m0.837526954s ago: executing program 6 (id=7744): r0 = io_uring_setup(0x115a, &(0x7f0000000440)={0x0, 0x8274, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000000), 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, 0x0, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5m0.376147088s ago: executing program 6 (id=7747): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xa1, &(0x7f00000002c0)={0x9a, 0x8, 0x5, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 4m47.47844566s ago: executing program 6 (id=7789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 4m47.402313394s ago: executing program 6 (id=7790): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) fcntl$setsig(r0, 0x404, 0x21) r1 = syz_io_uring_setup(0x3616, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1, &(0x7f0000000080)={[{@noblock_validity}, {@auto_da_alloc}, {@bh}, {}, {@abort}, {@errors_remount}]}, 0x47, 0x605, &(0x7f00000001c0)="$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") timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x7, 0x10, 0xa, 0x5, {{0x13, 0x4, 0x3, 0x25, 0x4c, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @dev={0xac, 0x14, 0x14, 0x3a}, {[@timestamp={0x44, 0x10, 0x76, 0x0, 0x7, [0x7ff, 0x0, 0xbb2]}, @timestamp={0x44, 0x24, 0xc4, 0x0, 0x1, [0x80000001, 0x0, 0x3, 0x2, 0x10000, 0x5, 0x8, 0x10000]}, @ra={0x94, 0x4}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b80)=ANY=[@ANYBLOB="6000000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000400000002c0012800c0001006d6163766c616e001c00028008000900ffffffff08000100010000000800030000000000140035006d6163766c616e30"], 0x60}}, 0x8000) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000008c0)={@private=0xa010102, @multicast2, r5}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) io_uring_enter(r7, 0x1, 0x21, 0x1, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r9 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xe81, &(0x7f0000000500)=0x1) mincore(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x0) r10 = syz_pidfd_open(r9, 0x0) waitid$P_PIDFD(0x3, r10, 0x0, 0xa000000c, 0x0) io_submit(r8, 0x0, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r10, 0x0}]) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000040), 0x1) timerfd_create(0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x45, 0x2, 0x8}}]}, 0x40}}, 0x0) 4m47.243800123s ago: executing program 6 (id=7793): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x840, 0x0, 0x1, 0x1}, 0x20) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @multicast2}}, 0x4, 0x2b46, 0x53, 0x1, 0x2, 0x9, 0x9}, &(0x7f0000000280)=0x9c) 4m47.022342215s ago: executing program 6 (id=7796): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r0}}, 0x30) 4m46.985601856s ago: executing program 40 (id=7796): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @empty, 0x3}, r0}}, 0x30) 3m49.470839819s ago: executing program 2 (id=8393): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="140000002d000b35f8ffffffffffffff0424ff0f", 0x14}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) r4 = eventfd(0xff) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000780)={{r2}, "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"}) io_submit(r3, 0x2, &(0x7f0000000740)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x0, r2, 0x0, 0x0, 0x3000000000000000}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0xfff8, r1, 0x0, 0x0, 0x800, 0x0, 0x1, r2}]) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, &(0x7f0000000340)) getsockopt$WPAN_WANTACK(r5, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x4) 3m48.88333568s ago: executing program 2 (id=8397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) fcntl$notify(r3, 0x402, 0x80000023) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000008) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x21) close_range(r2, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61158800000000006113500000000000bfa000000000000007000000ee0016055e03010000000000160500000000000069163e0000000000bf07000000000000260507000fff07206706000007000000150600001be60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000050000000400000002"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000e3000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ffffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df12c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) open$dir(&(0x7f0000000100)='.\x00', 0x18100, 0x0) (async) fcntl$notify(r3, 0x402, 0x80000023) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) (async) fcntl$notify(r4, 0x402, 0x40000008) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async) fcntl$notify(r5, 0x402, 0x21) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x11, 0x200000000000002, 0x300) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$inet(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000c40)='\\\x00\x00\x00', 0x4}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x541b, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1e, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) 3m48.634484354s ago: executing program 2 (id=8399): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10002, 0x100000001, 0x401, 0x1, 0x3, 0x0, 0x4}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x12, r0, 0x0) mlock2(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0x0) syz_io_uring_setup(0x48ba, 0x0, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendto$inet6(r1, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) close(r1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r4, &(0x7f0000000080), &(0x7f0000000040)=@tcp6=r2}, 0x20) sendto$inet6(r2, &(0x7f0000000200)="9000", 0xc3ff, 0x844, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xdb, 0x550, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0xb, 0x20007, 0xb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$TCSETS(r5, 0x40045431, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xff) 3m48.189041348s ago: executing program 2 (id=8405): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100), 0x10) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) mmap(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0x49c7000) (async) mmap(&(0x7f0000bde000/0x4000)=nil, 0x4000, 0x1000000, 0x13, r3, 0x49c7000) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg1\x00', {0x3}, 0x1be6}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'pim6reg1\x00', {0x3}, 0x1be6}) pipe(&(0x7f0000000500)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x8, 0x2, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket(0x10, 0x80002, 0x0) syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8=0x0], 0x3, 0x257, &(0x7f0000000300)="$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") syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r4, 0x21, 0x0, 0x0) (async) pidfd_send_signal(r4, 0x21, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x80000) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=r6, @ANYBLOB="04"], 0xc4}}, 0x20004804) sendfile(r2, r0, &(0x7f0000000040)=0xc, 0xd1) 3m48.004066868s ago: executing program 2 (id=8409): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) lseek(r4, 0x103, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x9, 0x4) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x5, 0x1) syz_emit_ethernet(0x20a, &(0x7f00000003c0)={@local, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @tcp={{0x17, 0x4, 0x2, 0x1e, 0x1f4, 0x65, 0x0, 0x4, 0x6, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x45, 0xffffffffffffffff, [{0x2, 0xc, "f5eebc93e0abf76df457"}, {0x7, 0x12, "7b37265a899ef2714b10663faa3a6022"}, {0x1, 0x5, "d75711"}, {0x2, 0x2}, {0x2, 0x4, "8d0d"}, {0x5, 0xe, "e83e362bd73edee2398bcd05"}, {0x7, 0x8, "e52a876abeef"}]}]}}, {{0x4e23, 0x4e24, r9, r10, 0x1, 0x0, 0x36, 0x8, 0x5, 0x0, 0x6, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x2, 0x8, 0x8]}, @mptcp=@remove_addr={0x1e, 0xa8, 0x0, 0x0, "ca28c5ecfb063cf67001cec5251261256d50fed9f52dd989f0f92ef624227291b67985556d7a3319fe17d24fb44f8be624aae8d6605d1b30d70ef666b2b14e4ba6e44796b84c9660596d7c82a60029efcbffcc5706aaa6ee65d162bea84725a60166b2798fa172e5286fc8b3034c8a47a7cfe20b9a90e7f94b24b784bbf11dbc337e179c5b20cca9231e5cce32296c472af87cf119e875258f00883251f5e097221bf6a084"}, @sack_perm={0x4, 0x2}]}}, {"1cfcc721b1356262640532b203bc0070c532d66c981d6533b7823de9e3e22e8f72939d41ba1d3c26b6d5008cf0f5b15a90c7924ea04f1a0cb43942cd5c1a3e2cb7eb3f8a79a237377aeb8ad49091b696b55c564902ae46b8fed345049754207b6148aacbf6def072323ea6dfd97e8cc08c26835ff6054f6e0d4d3d83509f69cd31a639ca2a46789112bbb94ef111b3c51e10839c4c8d39ebfc5c28aabf82b3fbc4f47d531acf3cd8ecb1e6670e6b892aca287a93e14726069f40e87677af540c"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3m47.338322283s ago: executing program 2 (id=8417): pipe(&(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4) 3m47.338081053s ago: executing program 41 (id=8417): pipe(&(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1}, 0x4) 1m30.155376584s ago: executing program 4 (id=9525): r0 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x8, 0x7f02ae, 0x1a0, 0x200, 0x2b0, 0x2e8, 0x2e8, 0x2b0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x138, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@private0, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x1c}, @ipv4=@remote}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x13, 0xec, 0x5, 0x400, 'snmp\x00', 'syz0\x00', {0xffffffff8cdbbefd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x86, r1, 0x80000000}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r6 = syz_pidfd_open(0x0, 0x0) process_madvise(r6, &(0x7f0000001500)=[{0x0}, {0x0}], 0x2, 0x9, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x3c, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r7, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1, 0xe9f0ad8ee409064d}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008844}, 0x4010) r8 = getgid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000020000000000000000000700"/42], 0x0, 0x2a}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000a40)={{{@in=@broadcast, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000000b40)=0xe8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x21c91c, &(0x7f0000000b80)={[{@dioread_nolock}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@resgid}, {@norecovery}, {@quota}, {@auto_da_alloc}, {@dax_inode}, {@resgid={'resgid', 0x3d, r8}, 0x32}], [{@uid_eq={'uid', 0x3d, r9}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'snmp\x00'}}]}, 0x1, 0x526, &(0x7f0000000c80)="$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") 1m29.914928247s ago: executing program 4 (id=9527): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b48000", 0x5f}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0xa, 0xfc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x408c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x29, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x240048d0) 1m28.683408121s ago: executing program 4 (id=9533): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000000000000080098000000", @ANYRES64, @ANYBLOB="ac1414aaac14140000000b"], 0x38}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r4, r4) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xee00, r5}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="480000002000200025bd7000fedbdf25029414010400000600000100b38baa08730a00000c001400", @ANYRES32=r4, @ANYRES32=r8, @ANYBLOB="0800060001000000080001007f00000108000200ac141423"], 0x48}}, 0x40800) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000180)=0xc) socket$packet(0x11, 0x3, 0x300) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x4000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="2000000000000000840000000200000004004d000000000000", @ANYRES32=0x0, @ANYBLOB="000000004ebc5bdfcd9105c4"], 0x20, 0x4048800}, 0x0) 1m28.492459261s ago: executing program 4 (id=9534): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone(0x68100200, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) capset(0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) 1m27.583180039s ago: executing program 4 (id=9538): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0xfffffffd}}, 0x10) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) set_mempolicy_home_node(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3, 0x0) 1m26.243265349s ago: executing program 4 (id=9548): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone(0x68100200, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) 1m26.197419131s ago: executing program 42 (id=9548): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone(0x68100200, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) 56.790597873s ago: executing program 8 (id=9781): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 55.52244726s ago: executing program 8 (id=9790): mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r0) close_range(r6, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x110, 0x0, 0x0, 0x0, &(0x7f0000000000)) 55.372982237s ago: executing program 8 (id=9796): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 55.150520389s ago: executing program 8 (id=9797): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0) 55.029755075s ago: executing program 8 (id=9798): set_mempolicy(0x4005, &(0x7f0000000080)=0x3576, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000380)=ANY=[@ANYBLOB='1'], 0x31) 54.412762018s ago: executing program 8 (id=9804): epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 53.728190814s ago: executing program 43 (id=9804): epoll_create1(0x0) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x24004840) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xe, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40f00, 0x39, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x1ffff}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.762184556s ago: executing program 9 (id=9831): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000840}, 0x24000090) 51.746185667s ago: executing program 9 (id=9832): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) sendmmsg$inet6(r0, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000004c0)="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", 0x675}], 0x1, &(0x7f0000001500)=[@dstopts={{0x18, 0x29, 0x37, {0x513d0aa524afde27}}}], 0x18}}, {{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001580)="e028d5f310646e6e088e60606462b6124402b98b63130ed9c04a7e2efc64a3df6275382398156a6b0491f820cea6a6a348144e13247c7685dc514bc942e759dbd4611598227634401f70ee0865112880763ef83ef321d1f348e8abf873ecb1", 0x5f}, {0x0}, {0x0}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000040c0)=[{&(0x7f0000001c40)="e6f09e9c275276460223734884b9e0aade73409fd095eac19a501ae383287ecaf644d0ee9d3e73cfc48f1f2b7d", 0x2d}, {&(0x7f0000001c80)="5b6301627d7b6a52cf14c285df40ca9fd2ae82d52d40c80a09bbbd6b24cb92cc5158e26d93b98782", 0x28}, {&(0x7f0000001cc0)="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", 0xac0}, {&(0x7f0000002cc0)="89b893af43dce95a6736359e578f5800d35267004677be159a3829de00aba4100edb07cd53ce40d17993a84ed1c7cc29376a8d56f0d3f3edec5b7a107d1645cc44ccd8aff9f1", 0x46}, {&(0x7f0000002d40)}, {&(0x7f0000002d80)="7b2ffcabc15d99115336", 0xa}, {&(0x7f0000002ec0)="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", 0xf00}, {&(0x7f0000003ec0)="9eef71e5126090d76ccb6a1a0ad0cb4bfaa31d1f31c0e3e296dbefe050247b123db7f04ae294abd4f652bcff762ab6ab889699c1d1b13f4d9273fa48c7375a9dadad1b0cb0f6b0a86f0737817ce8902ccfcaa727f96d427f2bbd6cacf4d293b0e16e08a0c291f7a8724ec00987875e5abc36a86e65f9c9b93bfa58c264e7b5b8ede5e371f236884b74e49680cb1a4283f76994a37745b8638ac6f52f18994c68460a5fef6daef3eaa69175e2dbb58b5223a6c9d55d0a6c7e686d1f766bb560abe27b", 0xc2}, {&(0x7f0000003fc0)="d1d5739660677ef704fcbde6f56b6267d5f9251b20196fd1744819d2b9311577d483f7641c82d365a19d4a869b715ed4ad15c1202551c7f5270875f0598a42a731cb925cbf7a221d6b29ea7e2ae533af17e0b13d907d904564880418133637956eb934433ba14d73ff47a103881f652c503a3e3b49f1fd77842a918e3e13cbcdb068d44d7e385e3588b66b2bd03ca2f4018c3262d0017d9826a375e8d3cff016001c3b2ff4b83f59a8d6e6a4baf1fff34e16e93f2531aea92980d208bcfb", 0xbe}], 0x9}}], 0x3, 0x0) 51.686223981s ago: executing program 9 (id=9833): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xffffffc2, 0x20000000, 0xc, 0x5, 0x19, "0c00004f00000000000000f822cec10000000e", 0x4000009, 0x3}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000400)=0xc) 51.685765881s ago: executing program 9 (id=9834): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000440)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nomblk_io_submit}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 51.110566051s ago: executing program 9 (id=9838): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f000049e000/0x4000)=nil, 0xfffffffffffffe94, 0x0) socket$inet6(0xa, 0x2, 0x0) 50.74642021s ago: executing program 9 (id=9851): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f00000002c0)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 50.712042372s ago: executing program 44 (id=9851): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x2, &(0x7f00000002c0)) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 10.796396014s ago: executing program 3 (id=10326): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000040)={@private2, r1}, 0x14) 10.739823597s ago: executing program 3 (id=10327): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r8 = getpid() fcntl$lock(r7, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r8}) ioctl$sock_inet_SIOCGIFPFLAGS(r7, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xa1, &(0x7f00000002c0)={0x9a, 0x8, 0x5, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 10.434640023s ago: executing program 0 (id=10333): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x4000) 10.378563836s ago: executing program 0 (id=10335): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}, {0x2b, 'devices'}]}, 0x2c) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 10.372439566s ago: executing program 0 (id=10336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) 10.263817822s ago: executing program 0 (id=10340): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b48000", 0x5f}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0xa, 0xfc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x408c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x29, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x240048d0) 6.502144429s ago: executing program 0 (id=10345): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000007c0)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x4400d040) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="37909abc5566925acf74acff82", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="7d7f73776f0a4e916eb4702aa259bee3f4a9d6f0d2385d3aff63bc6b6a3342512252d621cac84bba3498b4744d6b1b4af2d55160002d5d7ec99885ccb158d840256f3628b26be049365e85fad51d5b64cbb1d1c6a14b37ff0742e38a7c82a2f0dc5244c54a5496c989e1ca2f743a1f2b789f968a451c110b7f51a4ec831f2cd8084985f27d90d35de4cc5b6eba798768de72fd65a7499c6f355a4ac2d0435e8ddf9b212aad4dfc44e7e934eee9615ae1f6a9eacd6d1afafc", @ANYRES64=0x0], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000018d7f309c1d1a57800850000006d0000001801004020696c25ff00000000bfa100000000000007010000b8ffffffb70200"/69], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20000) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x9) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 6.368365256s ago: executing program 1 (id=10347): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2d, 'rlimit'}, {0x2b, 'devices'}]}, 0x2b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 6.30089705s ago: executing program 0 (id=10348): r0 = socket$netlink(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = getpid() r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f00000000c0)={0x1, 0x1, 0x4004, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20170, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x5, 0xfffd, 0x0, 0x0, 0x0, 0x10000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="40040202"], 0x7) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x90404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x1000002}, 0x1101, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getegid() kcmp(r1, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 6.280948701s ago: executing program 1 (id=10349): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'blkio'}, {0x2b, 'cpuacct'}, {0x2d, 'rlimit'}]}, 0x2b) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 6.080501651s ago: executing program 1 (id=10352): add_key$fscrypt_provisioning(&(0x7f0000000240), 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = memfd_secret(0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r4, 0x4018f50b, &(0x7f0000000140)={0x0, 0x8, 0x7ff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x18, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo\x00') r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r6, &(0x7f0000002600)={0x15, 0x162, 0xfa00, {r7, 0x0, 0x30, 0x30, 0x0, @in6={0x1b, 0x4000, 0x5735, @remote, 0x31}, @in6={0xa, 0x4e24, 0x24b, @local, 0xe}}}, 0x118) write$RDMA_USER_CM_CMD_QUERY(r6, &(0x7f0000000000)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r7, 0x2}}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) fchdir(r5) r8 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x68180, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0c8, 0x0, 0x0, 0x3, 0x9, 0x8001, 0x7fff}, 0x0, 0xff6fffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040)={0x45}, 0x4) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8000900080008400400027c9c000461c1d67f6f94001600cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0x12b}], 0x1}, 0x0) 5.171570889s ago: executing program 5 (id=10358): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xa1, &(0x7f00000002c0)={0x9a, 0x8, 0x5, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 3.62458176s ago: executing program 1 (id=10363): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$eJzs3F9oVNkZAPDvTv4YE9ukrS1V+pBiaQNqYpKpoWChgVIKlWLVh9L2JZg/hk6MNVGMpbSVQvWhD4W+tbT42qfQCqXtw+7Kwj7sg8uu7JOssPuy6xIiq/uyIrPcOzNqzCQxJuayzu8HZ+ac4x3PN3Pynblz4N4AGlZ3+pBE7IiIGxHRWWkuPaC78nR5cP5kWpIol48tJtlxZwfnT9YOrb2uI30oRLRFxLWLSez9w/JxZ+Yu/HKkVBo7U233zU6d7puZu7B/cmpkYmxi7FRxYGDoYLFYLA5t2nvtu3N+ouOlw/3/PXF76pvf/t/RJL6Xve944n1slu7oXvpZVjUnEb2bPVjOvvxYPWnOMRCe2m9Lc9ubIuJLEbEny//OaIrK5D348y8+6owPP1nptf//9d8/2MpYgc1XLndmZQV3ysALqxDpuX9S6K2csseOKBR6eyvn8DujvVCanpndOz599tRo5TdCV7QUxidLYweqvxW6oiVJ2/1Z/VF74In2YER8ISIuNW3P2r0npkujW7vUAVU7It75969OtHaskP+pm015Rwk8D2n+j/+l6Xdp/Z48h4aS5v8/7039KOQ/NBz5D41L/kPjkv/QuOQ/NC75D41L/kPjkv/QuOQ/NK5a/j+8DldFRaXhKnmvQwDA1iuXk8j7GmQgHyv/NMh7ZQKet/a7zXH8sXahep+OQrV8PSK7I1haH4yI1ohoiogHUbm/X5KeQ+QYP/Bstp354628YwAAAAAAAAAAAAAAAADWdnZw/mStbNWYo69t1UisZGG4coFnOu+Xq6XyL83ZNZ8RbdGSXSeaZNeB1iTV60I3YvF6RHeUFm/+6+qf0hLVv8MN/rd8Rsy/m3cE5Km1mHcE5Gn3T/KOgDxdv5R3BOTprYW8IyBPR4/lHQF5+vHBvCMgT39dzDsCXh6OiH319v8K8ZXsuS17fHL/pyMi2xfaiCOvR3TH6P3H+5bv/xRub3AYVrEwHHEoIi4v2/8r1A7paqq2Ppc2oiUZnyyNHYiIz0dET7RsS9v9q4zx/vSb5+r1H/tbOv8/763t/6UlHb+2F1iN43bztqWvGx2ZHdno+6Zi4fcRu5vrzX8t39uyvd72u4Vl+79d1ee07FxljBvtX9tTr//ccDr/r/SsPv88T+UrEd+qm//Jw2PSWt/s1Om+mbkL+yenRibGJsZOFQcGhg4Wi8XiUF+2HvTVVoXl3vvqP75Tr/+N++n8H7pq/vOT5n/76vOfrf+Pbg68/jF++Oo3dtXr/80P0vm/9fGzrP+tyfEswNZq3/mR2dkz/RGtyeHl/QPrj/lFVfs8ap9XOv89e+p//38xe66t/81L1v/13Cf2Pz878v16sVzszb7/98n//KTzP7pG/idL8n/9le/OvD1Xb+xdV9L5v/bTtfO/mAXTU+1x/re2p52gvOMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACARvJpAAAA//+F6yev") r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone(0x68100200, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) 3.125553606s ago: executing program 5 (id=10364): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd2a, 0x0, {0xa, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FRA_SRC={0x14, 0x2, @loopback}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc011}, 0x40008) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 2.589025754s ago: executing program 1 (id=10365): socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000001"], 0x48) r3 = fsmount(r0, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) fchdir(r3) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107220, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r2}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pread64(0xffffffffffffffff, &(0x7f00000002c0)=""/125, 0x7d, 0x1000000000000054) 2.463584721s ago: executing program 5 (id=10366): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x82d7) 2.406606424s ago: executing program 5 (id=10367): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c01000015000a001800feffffff09000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b48000", 0x5f}], 0x1}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, @perf_bp={0x0, 0xa}, 0x1022e0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000680)={0x2, 0xa, 0xfc, 0x9, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x408c0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000100)=0x2, 0x4) connect$inet(r5, 0x0, 0x0) sendto(r5, &(0x7f0000000140)='A', 0xfffff, 0x40008c1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d40)=""/4096, 0x1000}], 0x1}, 0x1}], 0x256, 0x10022, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/18, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000000000000105000c000100000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000340)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x81, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0x29, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x88, r7, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x10001}, @ETHTOOL_A_CHANNELS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x4}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000001}, 0x240048d0) 2.029225564s ago: executing program 1 (id=10368): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='Lcpu'], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x800}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size']) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) getpid() setns(0xffffffffffffffff, 0x24020000) 2.028316174s ago: executing program 5 (id=10369): fallocate(0xffffffffffffffff, 0x0, 0xb, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xb, 0x7fffffff}}, './file0\x00'}) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)={[{@debug}, {@debug}, {@errors_remount}]}, 0x1, 0x530, &(0x7f0000000140)="$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") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040)="5ee592a7b48078a5e4192c86a5806ffb60e964c3754019528367b20f6e9beed5648a3c8aa9e1a0e00e87574c11f4c0853910f4165cd8ffa167a26fb5aa5c14", &(0x7f0000000080)=@tcp=r1}, 0x20) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) socket$l2tp(0x2, 0x2, 0x73) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x5, 0xffffffffffff0000}, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) lsetxattr$security_selinux(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), &(0x7f0000000180)='system_u:object_r:ptmx_t:s0\x00', 0x1c, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x0, 0x180, 0x180, 0xffffffff, 0xffffffff, 0x218, 0x218, 0x218, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'ipvlan0\x00', 'nr0\x00', {}, {}, 0x2f, 0x2}, 0x74000002, 0x70, 0xd0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x7, 0x11, 0x0, 0x5], 0x1, 0x5}, {0xffffffffffffffff, [0x1, 0x1, 0x4, 0x6, 0x7], 0x3, 0x6}}}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00', {0xff}, {}, 0x16}, 0x287, 0x70, 0xb0, 0x2000000}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x3, {0x100008}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.931395559s ago: executing program 45 (id=10368): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='Lcpu'], 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r4, @ANYBLOB="08000b000000000008000200ac14143f080009c05c"], 0x54}}, 0x4000000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x800}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x5608) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size']) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) getpid() setns(0xffffffffffffffff, 0x24020000) 1.787299217s ago: executing program 3 (id=10372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x8}, 0x102801, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x7ffffffffc}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') munmap(&(0x7f0000123000/0x4000)=nil, 0x4000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, 0x1c, &(0x7f0000000280)=[{0x0}], 0x1}}], 0x1, 0x4) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0x40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000340)=0x4000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) io_setup(0xa, &(0x7f00000103c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xf, &(0x7f0000000180)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @tail_call, @exit], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xb, 0x80, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440)=[{0x2, 0x2, 0x0, 0xb}], 0x10, 0x80000001}, 0x94) 1.621526425s ago: executing program 7 (id=10373): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000007c0)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x4400d040) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="37909abc5566925acf74acff82", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="7d7f73776f0a4e916eb4702aa259bee3f4a9d6f0d2385d3aff63bc6b6a3342512252d621cac84bba3498b4744d6b1b4af2d55160002d5d7ec99885ccb158d840256f3628b26be049365e85fad51d5b64cbb1d1c6a14b37ff0742e38a7c82a2f0dc5244c54a5496c989e1ca2f743a1f2b789f968a451c110b7f51a4ec831f2cd8084985f27d90d35de4cc5b6eba798768de72fd65a7499c6f355a4ac2d0435e8ddf9b212aad4dfc44e7e934eee9615ae1f6a9eacd6d1afafc", @ANYRES64=0x0], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20000) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x9) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.536564499s ago: executing program 7 (id=10374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={0x0, 0xac}}, 0x4000) 1.469672533s ago: executing program 7 (id=10375): openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.390848647s ago: executing program 7 (id=10376): r0 = socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$inet6(0xa, 0x5, 0x0) listen(r1, 0x50) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x4}, 0x102802, 0x2e, 0xfffffff8, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_open_procfs(0x0, 0x0) fchdir(r4) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x1) write$UHID_INPUT2(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x8) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x14, 0x14, 0x9, 0x3, 0x25dfdbff, {0xe}}, 0x14}}, 0x20004000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x5, 0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='check=relaxed,unhide\x00uid=', @ANYRESHEX, @ANYRESHEX=r4, @ANYRESHEX=0x0, @ANYBLOB="41757466382c686964652c757466382c6f76657272696465726f636b7065726d2c63727566742c6d61703d6e6f726d616c2c6e6f636f6d70726573732c636865636b3d72ed6c617865642c7375626a5f726f6c653d757466382c00", @ANYRES8=r2, @ANYRES16], 0x2, 0x6b8, &(0x7f0000000180)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000a00), 0x4) 1.296458852s ago: executing program 7 (id=10377): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000580), 0x400000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) lseek(r4, 0x103, 0x1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xe, 0x7}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4) socket$kcm(0x10, 0x2, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xffde}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000014c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x3, 0x7}, {}, {0x7, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x0) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x9, 0x4) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x5, 0x1) syz_emit_ethernet(0x1fa, &(0x7f00000003c0)={@local, @local, @val={@val={0x88a8, 0x0, 0x1}, {0x8100, 0x6, 0x1}}, {@ipv4={0x800, @tcp={{0x13, 0x4, 0x2, 0x1e, 0x1e4, 0x65, 0x0, 0x4, 0x6, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x35, 0xffffffffffffffff, [{0x2, 0xc, "f5eebc93e0abf76df457"}, {0x7, 0x2}, {0x1, 0x5, "d75711"}, {0x2, 0x2}, {0x2, 0x4, "8d0d"}, {0x5, 0xe, "e83e362bd73edee2398bcd05"}, {0x7, 0x8, "e52a876abeef"}]}]}}, {{0x4e23, 0x4e24, r9, r10, 0x1, 0x0, 0x36, 0x8, 0x5, 0x0, 0x6, {[@exp_smc={0xfe, 0x6}, @sack={0x5, 0x12, [0x5, 0x2, 0x8, 0x8]}, @mptcp=@remove_addr={0x1e, 0xa8, 0x0, 0x0, "ca28c5ecfb063cf67001cec5251261256d50fed9f52dd989f0f92ef624227291b67985556d7a3319fe17d24fb44f8be624aae8d6605d1b30d70ef666b2b14e4ba6e44796b84c9660596d7c82a60029efcbffcc5706aaa6ee65d162bea84725a60166b2798fa172e5286fc8b3034c8a47a7cfe20b9a90e7f94b24b784bbf11dbc337e179c5b20cca9231e5cce32296c472af87cf119e875258f00883251f5e097221bf6a084"}, @sack_perm={0x4, 0x2}]}}, {"1cfcc721b1356262640532b203bc0070c532d66c981d6533b7823de9e3e22e8f72939d41ba1d3c26b6d5008cf0f5b15a90c7924ea04f1a0cb43942cd5c1a3e2cb7eb3f8a79a237377aeb8ad49091b696b55c564902ae46b8fed345049754207b6148aacbf6def072323ea6dfd97e8cc08c26835ff6054f6e0d4d3d83509f69cd31a639ca2a46789112bbb94ef111b3c51e10839c4c8d39ebfc5c28aabf82b3fbc4f47d531acf3cd8ecb1e6670e6b892aca287a93e14726069f40e87677af540c"}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.127582091s ago: executing program 3 (id=10378): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004002800018007000100637400001c00028008000240000000150500030000000000080001400000000d0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f00000007c0)={0x64, 0x9, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_ADT={0x3c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x100}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x5, 0x1a, '\x00'}}]}, @IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x4400d040) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f00000009c0)=ANY=[@ANYRESOCT, @ANYRES16=r0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="37909abc5566925acf74acff82", @ANYRES16=0x0, @ANYRES32, @ANYBLOB="7d7f73776f0a4e916eb4702aa259bee3f4a9d6f0d2385d3aff63bc6b6a3342512252d621cac84bba3498b4744d6b1b4af2d55160002d5d7ec99885ccb158d840256f3628b26be049365e85fad51d5b64cbb1d1c6a14b37ff0742e38a7c82a2f0dc5244c54a5496c989e1ca2f743a1f2b789f968a451c110b7f51a4ec831f2cd8084985f27d90d35de4cc5b6eba798768de72fd65a7499c6f355a4ac2d0435e8ddf9b212aad4dfc44e7e934eee9615ae1f6a9eacd6d1afafc", @ANYRES64=0x0], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007"], 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa0677"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000018d7f309c1d1a57800850000006d0000001801004020696c25ff00000000bfa100000000000007010000b8ffffffb70200"/69], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000001040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r6 = syz_open_dev$evdev(&(0x7f0000000140), 0x0, 0x20000) ioctl$int_in(r6, 0x5452, &(0x7f0000000280)=0x9) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfc, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 1.083566013s ago: executing program 7 (id=10379): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r5, 0x12d, &(0x7f00000035c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x4}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x12b, 0xffffffffffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}]) capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000280)={0x73, 0xe0, 0x943, 0x4, 0x2, 0x5}) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r4, 0x1, 0x21, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a80f03c0aa6191, @perf_config_ext={0xffffffff, 0x830d}, 0x100600, 0x9, 0xfffffffe, 0x5, 0x0, 0x2, 0x0, 0x0, 0x53, 0x0, 0x8}, 0x0, 0xfffbfffffffffffb, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], 0x0}, 0x94) 1.027201656s ago: executing program 3 (id=10380): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x50d, &(0x7f0000000600)="$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") setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e24, 0x5, @loopback, 0x3}, 0x1c) get_mempolicy(0x0, &(0x7f0000000080), 0x4, &(0x7f0000ffb000/0x4000)=nil, 0xa) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300), 0x3) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "9e409f4ee088d3b9", "7ddaa7f671b14a16d81cb4864bfb6418", "974a7bf1", "e487b6d91d2dd524"}, 0x28) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ffd, 0xe) socket$kcm(0xa, 0x1, 0x106) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x810, 0x0, 0x0) madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) syz_clone(0x68100200, 0x0, 0xffffffffffffff59, 0x0, 0x0, 0x0) capset(0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) 903.738313ms ago: executing program 5 (id=10381): socket$kcm(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r9 = getpid() fcntl$lock(r8, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r9}) ioctl$sock_inet_SIOCGIFPFLAGS(r8, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xa1, &(0x7f00000002c0)={0x9a, 0x8, 0x5, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 0s ago: executing program 3 (id=10382): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x1ff, 0x80000001}, 0x0, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x6}, 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x20002) r3 = fcntl$dupfd(r2, 0x406, r2) ioctl$SG_IO(r3, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x4, 0x0, @buffer={0x2, 0x0, 0x0}, &(0x7f0000000380)="259374c9", 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r3, &(0x7f0000000100)={[{0x2d, 'hugetlb'}, {0x2d, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'rlimit'}, {0x2b, 'devices'}]}, 0x2d) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r1}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) kernel console output (not intermixed with test programs): 000000000. [ 1511.099095][ T4685] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 1511.157018][ T4685] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1511.185506][ T4685] EXT4-fs error (device loop7): ext4_get_journal_inode:5896: inode #5: comm syz.7.9105: unexpected bad inode w/o EXT4_IGET_BAD [ 1511.217663][ T4685] loop7: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 1511.217801][ T4685] EXT4-fs (loop7): no journal found [ 1511.226976][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 1511.227000][ C0] EXT4-fs (loop7): initial error at time 1726: ext4_get_journal_inode:5896: inode 5 [ 1511.227038][ C0] EXT4-fs (loop7): last error at time 1726: ext4_get_journal_inode:5896: inode 5 [ 1511.259374][ T4696] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1511.280104][ T4696] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9109'. [ 1511.353936][ T4685] EXT4-fs (loop7): can't get journal size [ 1511.373895][ T4685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1511.433619][ T4685] EXT4-fs error (device loop7): __ext4_iget:5481: inode #15: block 1803188595: comm syz.7.9105: invalid block [ 1511.564886][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.659059][ T4712] ip6t_srh: unknown srh invflags 4000 [ 1511.936291][ T4715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9114'. [ 1512.099879][ T4722] loop8: detected capacity change from 0 to 1024 [ 1512.109571][ T4722] EXT4-fs: inline encryption not supported [ 1512.122138][ T4722] EXT4-fs: Ignoring removed nobh option [ 1512.147870][ T4722] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a803c129, mo2=0002] [ 1512.167252][ T4722] System zones: 0-1, 3-12 [ 1512.178160][ T4722] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.258686][ T4732] netlink: 33 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1512.268956][ T4732] netlink: 140 bytes leftover after parsing attributes in process `syz.0.9120'. [ 1512.529857][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.735417][ T4753] loop7: detected capacity change from 0 to 256 [ 1513.449558][ T4765] loop3: detected capacity change from 0 to 256 [ 1513.733567][ T4780] netlink: 'syz.7.9136': attribute type 11 has an invalid length. [ 1513.793268][ T4784] tmpfs: Unknown parameter 'size/vcs' [ 1514.075725][ T4791] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4791 comm=syz.4.9140 [ 1514.163604][ T4788] ip6t_srh: unknown srh invflags 4000 [ 1514.747217][ T4803] netlink: 'syz.4.9143': attribute type 1 has an invalid length. [ 1514.766770][ T4803] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1514.865508][ T4806] __nla_validate_parse: 6 callbacks suppressed [ 1514.865527][ T4806] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9142'. [ 1515.165222][ T4815] netlink: 33 bytes leftover after parsing attributes in process `syz.7.9145'. [ 1515.174256][ T4815] netlink: 140 bytes leftover after parsing attributes in process `syz.7.9145'. [ 1515.327773][ T4810] bond2: entered promiscuous mode [ 1515.344867][ T4813] dummy0: left allmulticast mode [ 1515.363041][ T4813] bond2: (slave dummy0): making interface the new active one [ 1515.378984][ T4813] dummy0: entered promiscuous mode [ 1515.392507][ T4813] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1515.842568][ T4832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.851587][ T4832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.098097][ T4816] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1516.106421][ T4816] dummy0: left promiscuous mode [ 1516.112778][ T4816] bond2 (unregistering): Released all slaves [ 1516.126150][ T4815] netlink: 33 bytes leftover after parsing attributes in process `syz.7.9145'. [ 1516.163562][ T4843] netlink: 60 bytes leftover after parsing attributes in process `syz.7.9152'. [ 1516.175088][ T28] kauditd_printk_skb: 52 callbacks suppressed [ 1516.175104][ T28] audit: type=1326 audit(1731.406:14300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4840 comm="syz.0.9151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40e9efcdd9 code=0x0 [ 1516.231314][ T4845] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1516.231314][ T4845] program syz.7.9153 not setting count and/or reply_len properly [ 1516.330423][ T4858] loop7: detected capacity change from 0 to 512 [ 1516.338542][ T4858] EXT4-fs: Ignoring removed oldalloc option [ 1516.343413][ T28] audit: type=1400 audit(1731.564:14301): avc: denied { create } for pid=4851 comm="syz.3.9156" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 1516.371806][ T4858] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 1516.461006][ T4861] loop4: detected capacity change from 0 to 512 [ 1516.493285][ T4861] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.532415][ T1417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.847527][ T4878] loop4: detected capacity change from 0 to 512 [ 1516.920475][ T4878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1517.243706][ T4882] ip6t_srh: unknown srh invflags 4000 [ 1517.449265][ T4889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9165'. [ 1517.484321][ T4889] netlink: 'syz.3.9165': attribute type 12 has an invalid length. [ 1517.548521][ T1417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.597232][ T4892] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1517.597232][ T4892] program syz.4.9166 not setting count and/or reply_len properly [ 1517.639262][ T4885] loop7: detected capacity change from 0 to 32768 [ 1517.694129][ T4885] loop7: p1 p3 < p5 p6 > [ 1517.785555][ T3007] loop7: p1 p3 < p5 p6 > [ 1517.898589][ T3007] loop7: p1 p3 < p5 p6 > [ 1517.971680][ T4906] loop4: detected capacity change from 0 to 512 [ 1518.041957][ T4906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.059429][ T28] audit: type=1400 audit(1733.390:14302): avc: denied { append } for pid=4905 comm="syz.4.9171" path="/163/file1/memory.events" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1518.085841][ T1417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.184751][ T4915] FAULT_INJECTION: forcing a failure. [ 1518.184751][ T4915] name failslab, interval 1, probability 0, space 0, times 0 [ 1518.198974][ T4913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1518.212215][ T4915] CPU: 1 UID: 0 PID: 4915 Comm: syz.3.9174 Tainted: G W syzkaller #0 PREEMPT(full) [ 1518.212253][ T4915] Tainted: [W]=WARN [ 1518.212284][ T4915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1518.212301][ T4915] Call Trace: [ 1518.212309][ T4915] [ 1518.212318][ T4915] __dump_stack+0x1d/0x30 [ 1518.212355][ T4915] dump_stack_lvl+0x95/0xd0 [ 1518.212450][ T4915] dump_stack+0x15/0x1b [ 1518.212481][ T4915] should_fail_ex+0x263/0x280 [ 1518.212525][ T4915] ? sctp_auth_set_key+0x115/0x4f0 [ 1518.212658][ T4915] should_failslab+0x8c/0xb0 [ 1518.212684][ T4915] __kmalloc_cache_noprof+0x5f/0x400 [ 1518.212717][ T4915] sctp_auth_set_key+0x115/0x4f0 [ 1518.212745][ T4915] ? sctp_setsockopt_auth_key+0xad/0x3e0 [ 1518.212771][ T4915] sctp_setsockopt_auth_key+0x2d7/0x3e0 [ 1518.212850][ T4915] sctp_setsockopt+0x4cc/0xea0 [ 1518.212890][ T4915] sock_common_setsockopt+0x69/0x80 [ 1518.212917][ T4915] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1518.212944][ T4915] __sys_setsockopt+0x184/0x200 [ 1518.213037][ T4915] __x64_sys_setsockopt+0x64/0x80 [ 1518.213143][ T4915] x64_sys_call+0x2327/0x3020 [ 1518.213181][ T4915] do_syscall_64+0x12c/0x3b0 [ 1518.213258][ T4915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.213287][ T4915] RIP: 0033:0x7fefe2e9cdd9 [ 1518.213357][ T4915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1518.213381][ T4915] RSP: 002b:00007fefe18ef028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1518.213430][ T4915] RAX: ffffffffffffffda RBX: 00007fefe3115fa0 RCX: 00007fefe2e9cdd9 [ 1518.213509][ T4915] RDX: 0000000000000017 RSI: 0000000000000084 RDI: 0000000000000005 [ 1518.213594][ T4915] RBP: 00007fefe18ef090 R08: 0000000000000009 R09: 0000000000000000 [ 1518.213611][ T4915] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000001 [ 1518.213653][ T4915] R13: 00007fefe3116038 R14: 00007fefe3115fa0 R15: 00007ffda3bbb778 [ 1518.213679][ T4915] [ 1518.411393][ T4913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1518.722038][ T4928] loop3: detected capacity change from 0 to 512 [ 1518.818507][ T4928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.386024][ T4949] xt_hashlimit: size too large, truncated to 1048576 [ 1519.510320][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.669252][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9186'. [ 1519.749067][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9186'. [ 1520.210921][ T4958] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1520.210921][ T4958] program syz.8.9188 not setting count and/or reply_len properly [ 1520.328752][ T28] audit: type=1326 audit(1735.774:14303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.430637][ T28] audit: type=1326 audit(1735.795:14304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.505252][ T4969] loop3: detected capacity change from 0 to 128 [ 1520.526903][ T28] audit: type=1326 audit(1735.795:14305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.610790][ T4973] netlink: 'syz.3.9195': attribute type 3 has an invalid length. [ 1520.639131][ T28] audit: type=1326 audit(1735.795:14306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.715974][ T28] audit: type=1326 audit(1735.795:14307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.744255][ T28] audit: type=1326 audit(1735.795:14308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.779134][ T28] audit: type=1326 audit(1735.795:14309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37482ecdd9 code=0x7ffc0000 [ 1520.942879][ T28] kauditd_printk_skb: 130 callbacks suppressed [ 1520.942893][ T28] audit: type=1326 audit(1736.414:14440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.015168][ T28] audit: type=1326 audit(1736.446:14441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.113417][ T4987] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1521.113417][ T4987] program syz.4.9199 not setting count and/or reply_len properly [ 1521.120082][ T28] audit: type=1326 audit(1736.446:14442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.156656][ T28] audit: type=1326 audit(1736.446:14443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.180920][ T4989] random: crng reseeded on system resumption [ 1521.222423][ T28] audit: type=1326 audit(1736.446:14444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.252508][ T28] audit: type=1326 audit(1736.446:14445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.261595][ T4989] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9200'. [ 1521.277330][ T28] audit: type=1326 audit(1736.446:14446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.336166][ T28] audit: type=1326 audit(1736.446:14447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.359953][ T28] audit: type=1326 audit(1736.446:14448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.426950][ T28] audit: type=1326 audit(1736.456:14449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4961 comm="syz.8.9189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f37482ad60e code=0x7ffc0000 [ 1521.787114][ T5006] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1522.239868][ T4962] Set syz1 is full, maxelem 65536 reached [ 1522.303147][ T5016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1522.323496][ T5016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1522.377103][ T5022] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1522.377103][ T5022] program syz.4.9212 not setting count and/or reply_len properly [ 1522.415789][ T5025] random: crng reseeded on system resumption [ 1522.485000][ T5025] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9213'. [ 1522.501870][ T5028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9214'. [ 1522.530468][ T5028] xfrm1: entered allmulticast mode [ 1522.948821][ T5040] loop3: detected capacity change from 0 to 512 [ 1523.116150][ T5040] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1523.613202][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.666421][ T5051] loop3: detected capacity change from 0 to 1024 [ 1523.682449][ T5051] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1523.701591][ T5051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1523.726116][ T5051] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1523.772898][ T5057] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1523.772898][ T5057] program syz.4.9223 not setting count and/or reply_len properly [ 1523.791149][ T5051] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9222'. [ 1523.817685][ T5051] EXT4-fs (loop3): shut down requested (0) [ 1523.866175][ T5062] random: crng reseeded on system resumption [ 1523.902478][ T5062] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9226'. [ 1524.018507][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.250363][ T5080] loop3: detected capacity change from 0 to 1024 [ 1524.269757][ T5080] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1524.302203][ T5080] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.9232: Invalid block bitmap block 0 in block_group 0 [ 1524.335549][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 1524.335748][ T5080] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.9232: Failed to acquire dquot type 0 [ 1524.354337][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1524.354362][ C0] EXT4-fs (loop3): initial error at time 1739: ext4_read_block_bitmap_nowait:483 [ 1524.354385][ C0] EXT4-fs (loop3): last error at time 1739: ext4_read_block_bitmap_nowait:483 [ 1524.410362][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 1524.410599][ T5080] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.9232: Freeing blocks not in datazone - block = 0, count = 4096 [ 1524.442404][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 1524.442593][ T5080] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.9232: Invalid inode bitmap blk 0 in block_group 0 [ 1524.462740][T30120] EXT4-fs error (device loop3): ext4_release_dquot:7070: comm kworker/u8:36: Failed to release dquot type 0 [ 1524.475167][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 1524.476946][ T5080] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 1524.476940][T30120] loop3: lost filesystem error report for type 5 error -117 [ 1524.513215][ T5080] loop3: lost filesystem error report for type 5 error -117 [ 1524.536657][ T5080] EXT4-fs (loop3): 1 orphan inode deleted [ 1524.560447][ T5080] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1524.724896][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1524.748529][ T5084] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9233'. [ 1524.779735][ T5084] ip6t_srh: unknown srh invflags 4000 [ 1525.117816][ T5095] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9237'. [ 1525.170560][ T5104] xt_hashlimit: size too large, truncated to 1048576 [ 1525.385134][ T5111] netlink: 'syz.0.9241': attribute type 1 has an invalid length. [ 1525.482559][ T5116] xt_TCPMSS: Only works on TCP SYN packets [ 1525.544814][ T5118] netlink: 'syz.8.9246': attribute type 11 has an invalid length. [ 1525.552925][ T5118] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9246'. [ 1525.588215][ T5118] openvswitch: netlink: Message has 4 unknown bytes. [ 1525.600020][ T5118] loop8: detected capacity change from 0 to 512 [ 1525.619399][ T5125] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1525.619399][ T5125] program syz.7.9248 not setting count and/or reply_len properly [ 1525.650407][ T5118] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1525.666658][ T5118] EXT4-fs warning (device loop8): verify_group_input:137: Cannot add at group 511 (only 1 groups) [ 1525.700073][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.706597][ T5133] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9251'. [ 1525.772536][ T5140] loop7: detected capacity change from 0 to 512 [ 1525.802530][ T5140] EXT4-fs (loop7): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1525.851143][ T4447] EXT4-fs (loop7): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1525.887360][ T5154] loop7: detected capacity change from 0 to 512 [ 1525.897683][ T5154] EXT4-fs (loop7): Couldn't mount because of unsupported optional features (40000) [ 1525.918895][ T5154] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 1525.959269][ T5156] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1525.959269][ T5156] program syz.7.9260 not setting count and/or reply_len properly [ 1526.510513][ T5170] random: crng reseeded on system resumption [ 1526.628706][ T5170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9265'. [ 1526.812827][ T5173] loop7: detected capacity change from 0 to 1024 [ 1526.942334][ T5180] loop8: detected capacity change from 0 to 256 [ 1526.978625][ T5180] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1526.991630][ T5170] xt_hashlimit: size too large, truncated to 1048576 [ 1527.084486][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 1527.084505][ T28] audit: type=1400 audit(1742.256:14656): avc: denied { remount } for pid=5179 comm="syz.8.9268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1527.093967][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.148435][T30118] FAT-fs (loop8): Filesystem has been set read-only [ 1527.159168][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.184249][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.221276][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.254602][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.299094][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.335696][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.369740][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.405453][T30118] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.441085][ T5183] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1527.735052][ T5193] random: crng reseeded on system resumption [ 1527.744051][ T5194] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1527.744051][ T5194] program syz.3.9271 not setting count and/or reply_len properly [ 1527.810079][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.812626][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9272'. [ 1527.820578][ T5183] FAT-fs (loop8): Filesystem has been set read-only [ 1527.835649][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.841208][ T5196] loop3: detected capacity change from 0 to 136 [ 1527.862439][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.870572][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.878579][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.886518][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.894560][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.898374][ T5196] tipc: Started in network mode [ 1527.907674][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.922914][ T5196] tipc: Node identity de1128db6955, cluster identity 4711 [ 1527.930517][ T5196] tipc: Enabled bearer , priority 0 [ 1527.932243][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.942005][ T5196] syzkaller0: entered promiscuous mode [ 1527.950291][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.953467][ T5196] syzkaller0: entered allmulticast mode [ 1527.959200][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.975449][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1527.985211][ T5196] tipc: Resetting bearer [ 1527.991171][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.003942][ T5196] hub 1-0:1.0: USB hub found [ 1528.009227][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.017309][ T5196] hub 1-0:1.0: 8 ports detected [ 1528.024562][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.033795][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.041832][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.050705][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.051225][ T5195] tipc: Resetting bearer [ 1528.065718][ T5195] tipc: Disabling bearer [ 1528.066023][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.081735][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.089796][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.097958][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.105993][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.114045][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.122013][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.130096][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.138035][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.151099][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.160899][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.178203][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.199937][ T5183] FAT-fs (loop8): error, corrupted file size (i_pos 196, 16779008) [ 1528.249394][ T5211] netlink: 'syz.4.9279': attribute type 11 has an invalid length. [ 1528.257662][ T5211] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9279'. [ 1528.283788][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1528.293244][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1528.309798][ T5211] tmpfs: Unknown parameter 'size/vcs' [ 1528.339891][ T5220] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1528.339891][ T5220] program syz.4.9283 not setting count and/or reply_len properly [ 1528.444143][ T5223] loop7: detected capacity change from 0 to 8192 [ 1528.529195][ T5224] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9284'. [ 1528.550496][ T5224] netlink: 'syz.4.9284': attribute type 12 has an invalid length. [ 1528.773034][ T5231] loop8: detected capacity change from 0 to 512 [ 1528.797850][ T5231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1529.618319][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1529.860591][ T5254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1529.869314][ T5254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1529.946072][ T5256] qrtr: Invalid version 0 [ 1529.976828][ T28] audit: type=1400 audit(1744.961:14657): avc: denied { setopt } for pid=5257 comm="syz.0.9291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1531.331118][ T5391] netlink: 'syz.0.9295': attribute type 11 has an invalid length. [ 1531.339148][ T5391] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9295'. [ 1531.700347][ T28] audit: type=1400 audit(1746.579:14658): avc: denied { connect } for pid=5403 comm="syz.7.9300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1531.802597][ T5414] xt_hashlimit: size too large, truncated to 1048576 [ 1532.067896][ T5421] loop3: detected capacity change from 0 to 512 [ 1532.122596][ T5421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1532.603130][ T5433] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1532.603130][ T5433] program syz.7.9308 not setting count and/or reply_len properly [ 1532.725053][ T5435] loop8: detected capacity change from 0 to 8192 [ 1532.959908][ T5437] netlink: 'syz.7.9309': attribute type 11 has an invalid length. [ 1533.027457][ T5437] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9309'. [ 1533.099927][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.479309][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9310'. [ 1533.922620][ T5450] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5450 comm=syz.3.9314 [ 1533.977848][ T5450] netlink: 'syz.3.9314': attribute type 1 has an invalid length. [ 1534.044411][ T5450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1534.067892][ T5456] loop7: detected capacity change from 0 to 256 [ 1534.088550][ T5456] msdos: Bad value for 'gid' [ 1534.103630][ T5454] bond1: (slave geneve2): making interface the new active one [ 1534.114280][ T5456] msdos: Bad value for 'gid' [ 1534.141447][ T5454] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1534.183209][T30118] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.209466][T30118] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.245491][T30118] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.286360][T30118] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1534.369903][ T5463] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1534.369903][ T5463] program syz.7.9319 not setting count and/or reply_len properly [ 1534.700138][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9322'. [ 1534.727082][ T5478] futex_wake_op: syz.8.9323 tries to shift op by 32; fix this program [ 1534.797318][ T5480] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5480 comm=syz.7.9324 [ 1534.819395][ T5465] loop3: detected capacity change from 0 to 256 [ 1534.833477][ T5465] vfat: Unknown parameter '0xffffffffffffffff18446744073709551615' [ 1534.843362][ T5480] netlink: 'syz.7.9324': attribute type 1 has an invalid length. [ 1534.887029][ T5480] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9324'. [ 1534.902312][ T5480] loop7: detected capacity change from 0 to 512 [ 1534.909064][ T5480] EXT4-fs: dax option not supported [ 1535.168301][ T5496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1535.193808][ T5496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5496 comm=syz.3.9328 [ 1535.408149][ T5503] loop3: detected capacity change from 0 to 512 [ 1535.452068][ T5503] FAT-fs (loop3): Directory bread(block 199916) failed [ 1535.480373][ T5503] FAT-fs (loop3): Directory bread(block 199917) failed [ 1535.507681][ T5503] FAT-fs (loop3): Directory bread(block 199918) failed [ 1535.524222][ T5503] FAT-fs (loop3): Directory bread(block 199919) failed [ 1535.535999][ T5503] FAT-fs (loop3): Directory bread(block 199920) failed [ 1535.555918][ T5503] FAT-fs (loop3): Directory bread(block 199921) failed [ 1535.562959][ T5503] FAT-fs (loop3): Directory bread(block 199922) failed [ 1535.577416][ T5503] FAT-fs (loop3): Directory bread(block 199923) failed [ 1535.601860][ T5503] FAT-fs (loop3): Directory bread(block 199916) failed [ 1535.630809][ T5503] FAT-fs (loop3): Directory bread(block 199917) failed [ 1535.746873][ T5511] loop8: detected capacity change from 0 to 512 [ 1535.761344][ T5511] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1535.801079][ T5511] EXT4-fs (loop8): 1 truncate cleaned up [ 1535.811957][ T5511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1535.851063][ T5517] netlink: 'syz.0.9336': attribute type 11 has an invalid length. [ 1535.893966][ T5517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9336'. [ 1535.989640][ T5517] tmpfs: Unknown parameter 'size/vcs' [ 1536.060951][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9340'. [ 1536.142630][ T5526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5526 comm=syz.0.9340 [ 1536.224154][ T5529] netlink: 'syz.3.9342': attribute type 1 has an invalid length. [ 1536.261193][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9342'. [ 1536.361990][ T5537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9345'. [ 1536.503297][ T5551] netlink: 'syz.0.9350': attribute type 11 has an invalid length. [ 1536.529029][ T5551] tmpfs: Unknown parameter 'size/vcs' [ 1536.585510][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.609171][ T28] audit: type=1326 audit(1751.165:14659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5545 comm="syz.3.9348" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fefe2e9cdd9 code=0x0 [ 1536.721466][ T5559] __nla_validate_parse: 1 callbacks suppressed [ 1536.721488][ T5559] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9351'. [ 1536.751932][ T5558] netlink: 'syz.3.9348': attribute type 21 has an invalid length. [ 1536.833980][ T5563] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9346'. [ 1536.844765][ T5559] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25370 sclass=netlink_route_socket pid=5559 comm=syz.0.9351 [ 1536.916345][ T5564] netlink: 44 bytes leftover after parsing attributes in process `syz.8.9352'. [ 1537.070052][ T5573] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5573 comm=syz.0.9355 [ 1537.103703][ T5573] netlink: 'syz.0.9355': attribute type 1 has an invalid length. [ 1537.124362][ T5573] netlink: 5 bytes leftover after parsing attributes in process `syz.0.9355'. [ 1537.303079][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9359'. [ 1537.356526][ T5589] netlink: 'syz.0.9361': attribute type 11 has an invalid length. [ 1537.382726][ T5589] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9361'. [ 1537.409273][ T5589] tmpfs: Unknown parameter 'size/vcs' [ 1537.481224][ T5593] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9363'. [ 1537.534769][ T5593] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5593 comm=syz.4.9363 [ 1537.739162][ T5607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5607 comm=syz.4.9368 [ 1537.823356][ T5607] netlink: 'syz.4.9368': attribute type 1 has an invalid length. [ 1537.868016][ T5607] netlink: 5 bytes leftover after parsing attributes in process `syz.4.9368'. [ 1538.114434][ T5607] loop4: detected capacity change from 0 to 512 [ 1538.174071][ T5607] EXT4-fs: dax option not supported [ 1538.260275][ T5624] loop8: detected capacity change from 0 to 512 [ 1538.271665][ T5624] EXT4-fs: Ignoring removed bh option [ 1538.286792][ T5624] EXT4-fs: Ignoring removed i_version option [ 1538.302603][ T5624] ext4: Unknown parameter 'subj_user' [ 1538.347904][ T5626] loop4: detected capacity change from 0 to 2048 [ 1538.382970][ T5626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1538.471341][ T5633] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9374'. [ 1538.504124][ T5633] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9374'. [ 1538.525768][ T5633] bridge0: left allmulticast mode [ 1538.712642][ T5637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5637 comm=syz.7.9376 [ 1538.888079][ T5655] FAULT_INJECTION: forcing a failure. [ 1538.888079][ T5655] name failslab, interval 1, probability 0, space 0, times 0 [ 1538.902235][ T5655] CPU: 1 UID: 0 PID: 5655 Comm: syz.8.9383 Tainted: G W syzkaller #0 PREEMPT(full) [ 1538.902276][ T5655] Tainted: [W]=WARN [ 1538.902285][ T5655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1538.902300][ T5655] Call Trace: [ 1538.902307][ T5655] [ 1538.902352][ T5655] __dump_stack+0x1d/0x30 [ 1538.902396][ T5655] dump_stack_lvl+0x95/0xd0 [ 1538.902430][ T5655] dump_stack+0x15/0x1b [ 1538.902460][ T5655] should_fail_ex+0x263/0x280 [ 1538.902502][ T5655] should_failslab+0x8c/0xb0 [ 1538.902528][ T5655] __kmalloc_noprof+0xb8/0x4d0 [ 1538.902640][ T5655] ? ip_options_get+0x52/0x350 [ 1538.902741][ T5655] ip_options_get+0x52/0x350 [ 1538.902783][ T5655] do_ip_setsockopt+0x19d2/0x2290 [ 1538.902883][ T5655] ip_setsockopt+0x58/0x110 [ 1538.902986][ T5655] udp_setsockopt+0x89/0xa0 [ 1538.903016][ T5655] sock_common_setsockopt+0x69/0x80 [ 1538.903104][ T5655] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1538.903133][ T5655] __sys_setsockopt+0x184/0x200 [ 1538.903168][ T5655] __x64_sys_setsockopt+0x64/0x80 [ 1538.903207][ T5655] x64_sys_call+0x2327/0x3020 [ 1538.903287][ T5655] do_syscall_64+0x12c/0x3b0 [ 1538.903321][ T5655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.903423][ T5655] RIP: 0033:0x7f37482ecdd9 [ 1538.903443][ T5655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1538.903467][ T5655] RSP: 002b:00007f3746d3f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1538.903508][ T5655] RAX: ffffffffffffffda RBX: 00007f3748565fa0 RCX: 00007f37482ecdd9 [ 1538.903526][ T5655] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1538.903542][ T5655] RBP: 00007f3746d3f090 R08: 0000000000000004 R09: 0000000000000000 [ 1538.903559][ T5655] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1538.903576][ T5655] R13: 00007f3748566038 R14: 00007f3748565fa0 R15: 00007ffe705a9d88 [ 1538.903602][ T5655] [ 1539.156111][ T5660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1539.170991][ T5660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1539.213684][ T1417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.261921][ T5666] loop7: detected capacity change from 0 to 512 [ 1539.290533][ T5666] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1539.664342][ T5677] netlink: 'syz.4.9386': attribute type 11 has an invalid length. [ 1539.684420][ T5677] tmpfs: Unknown parameter 'size/vcs' [ 1539.796845][ T5688] loop3: detected capacity change from 0 to 128 [ 1539.809636][ T5691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5691 comm=syz.4.9391 [ 1539.832601][ T5688] x_tables: duplicate underflow at hook 3 [ 1539.838644][ T28] audit: type=1400 audit(1754.178:14660): avc: denied { watch watch_reads } for pid=5687 comm="syz.3.9392" path="/171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1539.928902][ T5698] random: crng reseeded on system resumption [ 1539.996253][ T5698] xt_hashlimit: size too large, truncated to 1048576 [ 1540.344256][ T5700] xt_hashlimit: size too large, truncated to 1048576 [ 1540.563573][ T5729] ip6t_srh: unknown srh invflags 4000 [ 1540.947815][ T5738] netlink: 'syz.4.9406': attribute type 11 has an invalid length. [ 1540.960987][ T5738] tmpfs: Unknown parameter 'size/vcs' [ 1540.996101][ T5740] ip6t_srh: unknown srh invflags 4000 [ 1541.446887][ T5754] random: crng reseeded on system resumption [ 1541.680442][ T5754] xt_hashlimit: size too large, truncated to 1048576 [ 1541.738894][ T5769] loop4: detected capacity change from 0 to 512 [ 1541.773251][ T5769] EXT4-fs (loop4): 1 truncate cleaned up [ 1541.790511][ T5769] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1541.819636][ T5769] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.9415: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 1542.649500][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1542.933154][ T5797] netlink: 'syz.3.9423': attribute type 11 has an invalid length. [ 1542.970111][ T5797] __nla_validate_parse: 12 callbacks suppressed [ 1542.970129][ T5797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9423'. [ 1543.048976][ T1417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1543.058751][ T5800] tmpfs: Unknown parameter 'size/vcs' [ 1543.238460][ T5807] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1543.273474][ T5807] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1543.304912][ T5807] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9428'. [ 1543.734826][ T2463] IPVS: starting estimator thread 0... [ 1543.837651][ T5817] IPVS: using max 2448 ests per chain, 122400 per kthread [ 1544.525863][ T5820] loop4: detected capacity change from 0 to 164 [ 1544.611315][ T5820] Unable to read rock-ridge attributes [ 1544.657660][ T5820] Unable to read rock-ridge attributes [ 1544.692073][ T5820] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 1544.732140][ T5825] loop8: detected capacity change from 0 to 512 [ 1544.777593][ T5825] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1544.816624][ T5825] System zones: 0-2, 18-18, 34-34 [ 1544.832327][ T5825] Quota error (device loop8): v2_read_file_info: Can't read info structure [ 1544.853198][ T5825] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1544.868252][ T5825] EXT4-fs (loop8): mount failed [ 1544.963706][ T5837] netlink: 'syz.0.9436': attribute type 1 has an invalid length. [ 1544.987486][ T5843] netlink: 76 bytes leftover after parsing attributes in process `syz.7.9438'. [ 1545.029563][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9437'. [ 1545.309466][ T5859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5859 comm=syz.0.9442 [ 1545.449840][ T5866] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1545.449840][ T5866] program syz.4.9445 not setting count and/or reply_len properly [ 1545.457580][ T28] audit: type=1400 audit(1759.437:14661): avc: denied { getopt } for pid=5865 comm="syz.0.9446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1545.653712][ T5871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9448'. [ 1545.805746][ T5892] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5892 comm=syz.4.9454 [ 1547.087735][T30289] IPVS: starting estimator thread 0... [ 1548.197768][ T5915] IPVS: using max 2448 ests per chain, 122400 per kthread [ 1548.669358][ T5924] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1548.669358][ T5924] program syz.4.9461 not setting count and/or reply_len properly [ 1548.840148][ T5937] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9467'. [ 1548.913193][ T5942] netlink: 'syz.7.9469': attribute type 11 has an invalid length. [ 1548.944011][ T5942] netlink: 36 bytes leftover after parsing attributes in process `syz.7.9469'. [ 1548.985577][ T5949] tmpfs: Unknown parameter 'size/vcs' [ 1549.089961][ T5948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5948 comm=syz.0.9468 [ 1549.188125][ T5947] loop4: detected capacity change from 0 to 128 [ 1549.309890][ T5964] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 1549.375984][ T5973] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1549.375984][ T5973] program syz.8.9479 not setting count and/or reply_len properly [ 1549.706772][ T5985] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9484'. [ 1550.745004][ T5987] loop8: detected capacity change from 0 to 512 [ 1550.970911][ T5987] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1551.155399][ T5994] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5994 comm=syz.3.9486 [ 1551.444842][ T6008] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1551.444842][ T6008] program syz.3.9490 not setting count and/or reply_len properly [ 1551.482721][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1551.570052][ T6019] loop4: detected capacity change from 0 to 128 [ 1551.577993][ T6021] loop7: detected capacity change from 0 to 128 [ 1551.584866][ T6021] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1551.602015][ T6021] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1551.720733][ T28] audit: type=1400 audit(1765.305:14662): avc: denied { mounton } for pid=6016 comm="syz.4.9496" path="/227/file0/file0" dev="loop4" ino=713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1551.758279][ T28] audit: type=1400 audit(1765.305:14663): avc: denied { mounton } for pid=6016 comm="syz.4.9496" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1551.841166][ T6023] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1551.849744][ T6023] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1551.860587][ T6023] xt_hashlimit: max too large, truncated to 1048576 [ 1551.877588][ T28] audit: type=1400 audit(1765.464:14664): avc: denied { unmount } for pid=1417 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 1552.061517][T30118] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1552.506767][ T6036] netlink: 'syz.7.9500': attribute type 1 has an invalid length. [ 1552.596514][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9501'. [ 1552.616889][ T6034] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6034 comm=syz.7.9500 [ 1552.718970][ T6047] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6047 comm=syz.7.9503 [ 1552.792101][ T6047] netlink: 'syz.7.9503': attribute type 1 has an invalid length. [ 1552.811641][ T6047] netlink: 5 bytes leftover after parsing attributes in process `syz.7.9503'. [ 1552.859141][ T6047] loop7: detected capacity change from 0 to 512 [ 1552.876276][ T6047] EXT4-fs: dax option not supported [ 1552.950998][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1552.977856][ T6052] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1552.977856][ T6052] program syz.7.9506 not setting count and/or reply_len properly [ 1553.536627][ T6063] random: crng reseeded on system resumption [ 1553.676814][ T6063] netlink: 36 bytes leftover after parsing attributes in process `syz.8.9504'. [ 1553.812182][ T6068] loop3: detected capacity change from 0 to 512 [ 1553.923077][ T6068] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.974356][ T6063] xt_hashlimit: size too large, truncated to 1048576 [ 1554.427703][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9510'. [ 1554.519048][ T6083] netlink: 'syz.4.9512': attribute type 11 has an invalid length. [ 1554.546480][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9512'. [ 1554.595885][ T6084] loop7: detected capacity change from 0 to 512 [ 1554.693609][ T6085] tmpfs: Unknown parameter 'size/vcs' [ 1555.094986][ T6089] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6089 comm=syz.8.9514 [ 1555.110783][ T6090] netlink: 'syz.4.9513': attribute type 1 has an invalid length. [ 1555.184771][ T6089] netlink: 'syz.8.9514': attribute type 1 has an invalid length. [ 1555.215916][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6090 comm=syz.4.9513 [ 1555.236290][ T6089] netlink: 5 bytes leftover after parsing attributes in process `syz.8.9514'. [ 1555.292881][ T6091] loop8: detected capacity change from 0 to 512 [ 1555.323671][ T6091] EXT4-fs: dax option not supported [ 1555.535587][ T6084] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1556.055105][ T6104] netlink: 'syz.4.9516': attribute type 3 has an invalid length. [ 1556.071187][ T6104] netlink: 'syz.4.9516': attribute type 1 has an invalid length. [ 1556.084767][ T6104] netlink: 191376 bytes leftover after parsing attributes in process `syz.4.9516'. [ 1556.161234][ T6108] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1556.161234][ T6108] program syz.4.9518 not setting count and/or reply_len properly [ 1556.259271][ T6112] netlink: 33 bytes leftover after parsing attributes in process `syz.8.9520'. [ 1556.268262][ T6112] netlink: 140 bytes leftover after parsing attributes in process `syz.8.9520'. [ 1556.277394][ T6112] netlink: 33 bytes leftover after parsing attributes in process `syz.8.9520'. [ 1556.332600][ T6114] loop8: detected capacity change from 0 to 2048 [ 1556.352349][ T6110] netlink: 33 bytes leftover after parsing attributes in process `syz.4.9519'. [ 1556.362654][ T6110] netlink: 140 bytes leftover after parsing attributes in process `syz.4.9519'. [ 1556.398101][ T6114] loop8: p1 < > [ 1556.422203][ T3007] loop8: p1 < > [ 1556.747029][ T6119] netlink: 'syz.4.9523': attribute type 11 has an invalid length. [ 1556.807738][ T6119] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9523'. [ 1556.820568][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1556.835647][ T6119] tmpfs: Unknown parameter 'size/vcs' [ 1556.924354][ T6125] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6125 comm=syz.4.9525 [ 1556.960802][ T6125] netlink: 'syz.4.9525': attribute type 1 has an invalid length. [ 1557.031749][ T6125] loop4: detected capacity change from 0 to 512 [ 1557.059743][ T6125] EXT4-fs: dax option not supported [ 1557.816060][ T6132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6132 comm=syz.4.9527 [ 1557.894128][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1559.025430][ T6163] loop4: detected capacity change from 0 to 512 [ 1559.073286][ T6163] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1559.573568][ T6176] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6176 comm=syz.0.9539 [ 1559.611322][ T6166] xt_hashlimit: size too large, truncated to 1048576 [ 1559.647811][ T6176] netlink: 'syz.0.9539': attribute type 1 has an invalid length. [ 1559.928874][ T6183] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1559.928874][ T6183] program syz.7.9542 not setting count and/or reply_len properly [ 1560.127369][ T6188] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6188 comm=syz.0.9543 [ 1560.145914][ T4417] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.604053][ T6190] ip6t_srh: unknown srh invflags 4000 [ 1560.691961][ T6194] __nla_validate_parse: 10 callbacks suppressed [ 1560.691983][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9545'. [ 1560.861565][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9546'. [ 1560.934586][ T6208] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9551'. [ 1560.944338][ T6209] ip6t_srh: unknown srh invflags 4000 [ 1560.964453][ T6212] netlink: 'syz.0.9552': attribute type 21 has an invalid length. [ 1561.010961][ T6216] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6216 comm=syz.8.9553 [ 1561.054548][ T6216] netlink: 'syz.8.9553': attribute type 1 has an invalid length. [ 1561.062446][ T6216] netlink: 5 bytes leftover after parsing attributes in process `syz.8.9553'. [ 1561.098434][ T6216] loop8: detected capacity change from 0 to 512 [ 1561.105103][ T6216] EXT4-fs: dax option not supported [ 1561.286320][ T6205] chnl_net:caif_netlink_parms(): no params data found [ 1561.294595][ T6235] ip6t_srh: unknown srh invflags 4000 [ 1561.487044][ T6238] loop8: detected capacity change from 0 to 512 [ 1562.150646][ T6238] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1562.497205][T30087] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1562.561732][T30087] bond0 (unregistering): Released all slaves [ 1562.576455][T30087] bond1 (unregistering): Released all slaves [ 1562.592432][ T6250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6250 comm=syz.3.9559 [ 1562.753896][ T6253] loop7: detected capacity change from 0 to 512 [ 1562.847814][ T6253] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.071283][ T6205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1563.113166][ T6205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.160243][ T6205] bridge_slave_0: entered allmulticast mode [ 1563.166955][ T6205] bridge_slave_0: entered promiscuous mode [ 1563.181530][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.206256][T30087] tipc: Left network mode [ 1563.212415][ T6205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1563.221969][ T6205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.229209][ T6205] bridge_slave_1: entered allmulticast mode [ 1563.235860][ T6205] bridge_slave_1: entered promiscuous mode [ 1563.295074][ T6205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1563.308881][ T6205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1563.322535][T30087] hsr_slave_0: left promiscuous mode [ 1563.337846][T30087] hsr_slave_1: left promiscuous mode [ 1563.413161][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1563.455101][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9560'. [ 1563.475026][ T6279] netlink: 68 bytes leftover after parsing attributes in process `syz.7.9563'. [ 1563.526730][ T3046] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1563.536261][ T6205] team0: Port device team_slave_0 added [ 1563.548363][ T6282] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1563.548363][ T6282] program syz.3.9564 not setting count and/or reply_len properly [ 1563.556393][ T6205] team0: Port device team_slave_1 added [ 1563.618380][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1563.635849][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.662077][ T6287] netlink: 'syz.0.9566': attribute type 41 has an invalid length. [ 1563.696341][ T28] audit: type=1400 audit(1776.516:14665): avc: denied { create } for pid=6286 comm="syz.0.9566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 1563.703258][ T6205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1563.726181][ T6294] loop3: detected capacity change from 0 to 1024 [ 1563.745493][ T6296] ip6t_srh: unknown srh invflags 4000 [ 1563.757520][ T6205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1563.766221][ T6294] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1563.772977][ T6205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.874008][ T6205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1563.944781][ T6205] hsr_slave_0: entered promiscuous mode [ 1563.956122][ T6205] hsr_slave_1: entered promiscuous mode [ 1563.972108][ T6205] debugfs: 'hsr0' already exists in 'hsr' [ 1563.982675][ T6316] ip6t_srh: unknown srh invflags 4000 [ 1563.988287][ T6205] Cannot create hsr debugfs directory [ 1564.005725][ T3046] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1564.044635][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9571'. [ 1564.186270][ T6335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6335 comm=syz.8.9571 [ 1564.253234][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1564.264864][ T3046] 8021q: adding VLAN 0 to HW filter on device eth19 [ 1564.287365][T30087] IPVS: stop unused estimator thread 0... [ 1564.396240][ T6348] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9575'. [ 1564.531795][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9577'. [ 1564.543849][ T3046] 8021q: adding VLAN 0 to HW filter on device eth20 [ 1564.610727][ T6205] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1564.628301][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1564.639742][ T6205] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1564.651406][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1564.661168][ T6205] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1564.680498][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1564.694223][ T6205] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1564.706332][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1564.760138][ T6205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1564.775450][ T6398] loop8: detected capacity change from 0 to 512 [ 1564.791353][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1564.800819][ T6398] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1564.809089][ T6398] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1564.817948][ T6398] System zones: 0-1, 15-15, 18-18, 34-34 [ 1564.824112][ T6398] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1564.830894][ T6398] Quota error (device loop8): v2_read_header: Failed header read: expected=8 got=0 [ 1564.834162][T30089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1564.841938][ T6398] EXT4-fs warning (device loop8): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1564.847351][T30089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1564.868720][ T6398] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 1564.875962][ T6398] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.9581: bad orphan inode 16 [ 1564.886423][ T6398] loop8: lost filesystem error report for type 5 error -117 [ 1564.887803][ T6398] ext4_test_bit(bit=15, block=18) = 1 [ 1564.895220][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1564.895245][ C1] EXT4-fs (loop8): initial error at time 1777: ext4_orphan_get:1423 [ 1564.895271][ C1] EXT4-fs (loop8): last error at time 1777: ext4_orphan_get:1423 [ 1564.919778][T22919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1564.930388][T22919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1564.939219][ T6398] is_bad_inode(inode)=0 [ 1564.952862][ T6398] NEXT_ORPHAN(inode)=0 [ 1564.962895][ T6398] max_ino=32 [ 1564.970662][ T6398] i_nlink=2 [ 1564.985738][ T6398] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1565.001014][ T28] audit: type=1400 audit(1777.742:14666): avc: denied { read } for pid=6397 comm="syz.8.9581" name="file2" dev="loop8" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 1565.010702][ T6398] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1565.037378][ T6205] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1565.098924][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1565.145919][ T28] audit: type=1326 audit(1777.873:14667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6402 comm="syz.7.9582" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25a63fcdd9 code=0x0 [ 1565.178733][ T6205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.200548][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9584'. [ 1565.211565][ T28] audit: type=1326 audit(1777.882:14668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6403 comm="syz.0.9583" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40e9efcdd9 code=0x0 [ 1565.215923][ T6426] netlink: 'syz.7.9582': attribute type 21 has an invalid length. [ 1565.259381][ T6429] netlink: 'syz.0.9583': attribute type 21 has an invalid length. [ 1565.319774][ T6437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6437 comm=syz.8.9584 [ 1565.615174][ T6205] veth0_vlan: entered promiscuous mode [ 1565.644406][ T6205] veth1_vlan: entered promiscuous mode [ 1565.703010][ T6205] veth0_macvtap: entered promiscuous mode [ 1565.720110][ T6205] veth1_macvtap: entered promiscuous mode [ 1565.747542][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1565.773901][ T6205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1565.806337][T30120] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.840967][T30091] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.865898][T30091] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1565.894722][T30091] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1566.322411][ T6492] loop9: detected capacity change from 0 to 512 [ 1566.461668][ T6492] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.112596][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1567.149850][ T6504] __nla_validate_parse: 1 callbacks suppressed [ 1567.149870][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9590'. [ 1567.242273][ T6515] ip6t_srh: unknown srh invflags 4000 [ 1567.484392][ T6468] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9589'. [ 1567.502467][ T6532] ip6t_srh: unknown srh invflags 4000 [ 1567.577838][ T6468] dvmrp2: entered allmulticast mode [ 1567.794484][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9597'. [ 1567.861531][ T6567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6567 comm=syz.0.9597 [ 1567.910902][T30120] dvmrp2: left allmulticast mode [ 1568.004403][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9598'. [ 1568.022895][ T6595] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1568.362247][ T6615] loop3: detected capacity change from 0 to 512 [ 1568.392079][ T6615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.810146][ T6623] loop9: detected capacity change from 0 to 512 [ 1568.823716][ T6623] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1568.857482][ T6623] EXT4-fs (loop9): 1 truncate cleaned up [ 1568.875986][ T6623] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1568.914880][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.037523][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1569.199572][ T6665] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9611'. [ 1569.370640][ T6683] ip6t_srh: unknown srh invflags 4000 [ 1569.409313][ T28] audit: type=1400 audit(1781.850:14669): avc: denied { append } for pid=6670 comm="syz.7.9614" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 1569.498173][ T6687] ip6t_srh: unknown srh invflags 4000 [ 1569.872694][ T6693] loop7: detected capacity change from 0 to 512 [ 1569.968374][ T6693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1570.445616][ T6704] bridge0: port 3(batadv1) entered blocking state [ 1570.452784][ T6704] bridge0: port 3(batadv1) entered disabled state [ 1570.459513][ T6704] batadv1: entered allmulticast mode [ 1570.465560][ T6704] batadv1: entered promiscuous mode [ 1570.519267][ T6713] loop9: detected capacity change from 0 to 512 [ 1570.548152][ T6713] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.624346][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.662647][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.727281][ T6730] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1570.727281][ T6730] program syz.7.9629 not setting count and/or reply_len properly [ 1570.787272][T30290] IPVS: starting estimator thread 0... [ 1570.865823][ T6735] IPVS: using max 2256 ests per chain, 112800 per kthread [ 1570.882182][ T6740] ip6t_srh: unknown srh invflags 4000 [ 1570.919728][ T6742] loop3: detected capacity change from 0 to 512 [ 1570.996657][T22919] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 1571.006136][T22919] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 1571.022157][ T6742] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1571.064901][ T6742] System zones: 0-2, 18-18, 34-34 [ 1571.089791][ T6742] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 1571.107887][ T6742] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1571.161584][ T6742] EXT4-fs (loop3): mount failed [ 1571.523104][ T6763] loop9: detected capacity change from 0 to 512 [ 1571.630718][ T6763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1572.040942][ T6771] netlink: 'syz.0.9644': attribute type 4 has an invalid length. [ 1572.110205][ T28] audit: type=1400 audit(1784.386:14670): avc: denied { map } for pid=6768 comm="syz.7.9643" path="/proc/306/net/tcp" dev="proc" ino=4026532517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1572.182971][ T6778] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1572.182971][ T6778] program syz.8.9646 not setting count and/or reply_len properly [ 1572.275174][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.367726][ T6790] geneve3: entered promiscuous mode [ 1572.380883][ T6790] geneve3: entered allmulticast mode [ 1572.398493][ T28] audit: type=1326 audit(1784.657:14671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.439575][ T28] audit: type=1326 audit(1784.685:14672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.465368][ T28] audit: type=1326 audit(1784.685:14673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.492935][ T6804] netlink: 'syz.0.9655': attribute type 4 has an invalid length. [ 1572.505633][ T28] audit: type=1326 audit(1784.685:14674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.509917][ T6805] ip6t_srh: unknown srh invflags 4000 [ 1572.533980][ T28] audit: type=1326 audit(1784.685:14675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.558057][ T28] audit: type=1326 audit(1784.685:14676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.581587][ T28] audit: type=1326 audit(1784.685:14677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6796 comm="syz.9.9654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb63f6cdd9 code=0x7ffc0000 [ 1572.616804][ T6799] loop7: detected capacity change from 0 to 512 [ 1572.636876][ T6799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1572.648298][ T6799] EXT4-fs: dax option not supported [ 1573.004045][ T6827] loop7: detected capacity change from 0 to 512 [ 1573.363061][ T6831] sg_write: data in/out 1651274817/4 bytes for SCSI command 0x72-- guessing data in; [ 1573.363061][ T6831] program syz.3.9662 not setting count and/or reply_len properly [ 1573.819017][ T6827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.174553][ T6845] bridge0: entered promiscuous mode [ 1574.243027][ T6851] loop3: detected capacity change from 0 to 1024 [ 1574.251690][ T6851] EXT4-fs (loop3): bad geometry: bigalloc file system with non-zero first_data_block [ 1574.251690][ T6851] [ 1574.284833][ T6851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57380 sclass=netlink_route_socket pid=6851 comm=syz.3.9668 [ 1574.306071][ T6851] SET target dimension over the limit! [ 1574.343841][ T6855] netlink: 'syz.9.9669': attribute type 4 has an invalid length. [ 1574.382108][ T6851] loop3: detected capacity change from 0 to 1024 [ 1574.389707][ T6851] EXT4-fs: Ignoring removed mblk_io_submit option [ 1574.526476][ T6851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1574.529694][ T6865] netlink: 33 bytes leftover after parsing attributes in process `syz.9.9672'. [ 1574.543567][ T6851] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #15: comm syz.3.9668: lblock 0 mapped to illegal pblock 0 (length 1) [ 1574.553384][ T6865] netlink: 140 bytes leftover after parsing attributes in process `syz.9.9672'. [ 1574.579801][ T6865] netlink: 33 bytes leftover after parsing attributes in process `syz.9.9672'. [ 1574.580136][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1574.621183][ T6870] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6870 comm=syz.3.9673 [ 1574.706229][ T6873] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1574.721022][ T6873] loop9: detected capacity change from 0 to 512 [ 1574.817690][ T6873] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1574.854964][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1574.982317][ T6891] netlink: 'syz.8.9681': attribute type 4 has an invalid length. [ 1575.000694][ T6891] netlink: 'syz.8.9681': attribute type 4 has an invalid length. [ 1575.099225][ T6900] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 1575.111089][ T6900] loop7: detected capacity change from 0 to 512 [ 1575.134163][ T6901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6901 comm=syz.3.9685 [ 1575.165896][ T6900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1575.179117][ T6900] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.230921][ T6906] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1575.239933][ T6906] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1575.249149][ T6906] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9686'. [ 1575.250524][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1575.286415][ T6909] loop9: detected capacity change from 0 to 512 [ 1575.298329][ T6909] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1575.303773][ T6910] ip6t_srh: unknown srh invflags 4000 [ 1575.503430][ T6913] loop8: detected capacity change from 0 to 512 [ 1575.567033][ T6909] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 1575.591772][ T6913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1576.366544][ T6909] __quota_error: 69 callbacks suppressed [ 1576.366559][ T6909] Quota error (device loop9): write_blk: dquota write failed [ 1576.387314][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1576.393799][ C0] EXT4-fs (loop9): initial error at time 1787: ext4_mb_generate_buddy:1317 [ 1576.402457][ C0] EXT4-fs (loop9): last error at time 1787: ext4_mb_generate_buddy:1317 [ 1576.430162][ T6909] Quota error (device loop9): find_free_dqentry: Can't write quota data block 5 [ 1577.401345][ T6909] Quota error (device loop9): write_blk: dquota write failed [ 1577.409206][ T6909] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1577.419283][ T6909] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.9687: Failed to acquire dquot type 1 [ 1577.437371][ T6909] loop9: lost filesystem error report for type 5 error -28 [ 1577.437684][ T6909] EXT4-fs (loop9): 1 truncate cleaned up [ 1577.560344][ T6909] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1578.323918][ T6942] Quota error (device loop9): write_blk: dquota write failed [ 1578.341203][ T6942] Quota error (device loop9): qtree_write_dquot: Error -28 occurred while creating quota [ 1578.368271][ T6942] EXT4-fs error (device loop9): ext4_acquire_dquot:7034: comm syz.9.9687: Failed to acquire dquot type 1 [ 1578.601060][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1578.694821][ T6958] netlink: 'syz.7.9693': attribute type 4 has an invalid length. [ 1578.745102][ T6958] netlink: 'syz.7.9693': attribute type 4 has an invalid length. [ 1578.862503][ T6969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6969 comm=syz.3.9697 [ 1578.895905][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1578.907495][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1578.937957][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1578.964740][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1578.983578][ T6971] loop7: detected capacity change from 0 to 512 [ 1578.996952][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.018331][ T6976] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1579.036233][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.048186][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.059054][ T6976] netlink: 140 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1579.070172][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.090119][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.098023][ T6976] netlink: 33 bytes leftover after parsing attributes in process `syz.3.9699'. [ 1579.111313][ T2463] hid-generic 00B0:0006:0002.0017: unknown main item tag 0x0 [ 1579.135466][ T6971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.159807][ T2463] hid-generic 00B0:0006:0002.0017: hidraw0: HID v0.05 Device [syz0] on syz0 [ 1579.219462][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9701'. [ 1579.420943][ T6997] ip6t_srh: unknown srh invflags 4000 [ 1579.601999][ T7006] loop3: detected capacity change from 0 to 512 [ 1579.789840][ T7006] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1580.202828][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.373327][ T7022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7022 comm=syz.0.9709 [ 1580.432772][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.654009][ T7033] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1580.674195][ T7043] ip6t_srh: unknown srh invflags 4000 [ 1580.685772][ T7033] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1580.859840][ T7046] netlink: 33 bytes leftover after parsing attributes in process `syz.8.9712'. [ 1580.889620][ T7046] netlink: 140 bytes leftover after parsing attributes in process `syz.8.9712'. [ 1580.915079][ T7046] netlink: 33 bytes leftover after parsing attributes in process `syz.8.9712'. [ 1580.995762][ T7049] loop8: detected capacity change from 0 to 736 [ 1581.366227][ T7065] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9720'. [ 1581.613169][ T7070] loop8: detected capacity change from 0 to 512 [ 1581.629947][ T7070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1582.112234][ T7074] ip6t_srh: unknown srh invflags 4000 [ 1582.653906][ T3957] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1582.671745][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1583.808907][ T28] audit: type=1400 audit(1795.288:14747): avc: denied { ioctl } for pid=7123 comm="syz.8.9733" path="socket:[124623]" dev="sockfs" ino=124623 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1586.929080][ T7172] vti0: entered promiscuous mode [ 1586.957405][ T7172] vti0: entered allmulticast mode [ 1587.223058][ T7184] loop8: detected capacity change from 0 to 128 [ 1587.229693][ T7184] vfat: Unknown parameter '184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#' [ 1588.103735][ T7191] netlink: 216 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1588.133890][ T7191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9754'. [ 1588.625762][ T7219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1588.635115][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1588.645562][ T7219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1588.664330][ T7219] bond4: (slave bond0): Enslaving as an active interface with a down link [ 1588.681838][ T7219] netlink: 'syz.0.9765': attribute type 4 has an invalid length. [ 1588.689909][ T7219] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9765'. [ 1588.700014][ T7219] .`: renamed from bond0 (while UP) [ 1589.231365][ T7262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.241397][ T7262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.588530][ T7304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1589.600567][ T7304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1589.830119][ T28] audit: type=1400 audit(1800.968:14748): avc: denied { append } for pid=7326 comm="syz.3.9778" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1589.855188][ T28] audit: type=1400 audit(1800.968:14749): avc: denied { ioctl } for pid=7326 comm="syz.3.9778" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1591.525697][ T7373] syz_tun: entered allmulticast mode [ 1591.542481][ T7373] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1591.551182][ T7373] mroute: pending queue full, dropping entries [ 1591.673034][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1591.714105][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1591.896150][ T7395] loop8: detected capacity change from 0 to 1024 [ 1591.903922][ T7395] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1591.937508][ T7395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1591.955084][ T28] audit: type=1400 audit(1802.961:14750): avc: denied { mounton } for pid=7394 comm="syz.8.9797" path="/157/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1592.021067][ T7395] loop8: detected capacity change from 1024 to 64 [ 1592.265527][ T6734] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1592.276425][ T7396] bio_check_eod: 33 callbacks suppressed [ 1592.276444][ T7396] kmmpd-loop8: attempt to access beyond end of device [ 1592.276444][ T7396] loop8: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1592.304051][ T7396] buffer_io_error: 2326 callbacks suppressed [ 1592.304070][ T7396] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 1592.332162][ T2463] hid_parser_main: 5 callbacks suppressed [ 1592.332252][ T2463] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 1592.357489][ T2463] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1592.549759][ T7407] syzkaller0: entered promiscuous mode [ 1592.561115][ T7407] syzkaller0: entered allmulticast mode [ 1592.644367][T30126] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.198453][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9805'. [ 1593.213856][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9805'. [ 1593.696307][T30126] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.740197][T30126] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.758673][ T7431] syzkaller0: entered promiscuous mode [ 1593.771899][ T7431] syzkaller0: entered allmulticast mode [ 1593.781627][ T7435] syzkaller0: entered promiscuous mode [ 1593.789127][ T7435] syzkaller0: entered allmulticast mode [ 1593.805198][T30126] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1593.873082][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9813'. [ 1594.009472][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 1594.054039][T30126] bridge_slave_1: left allmulticast mode [ 1594.063055][T30126] bridge_slave_1: left promiscuous mode [ 1594.069025][T30126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.078426][T30126] bridge_slave_0: left allmulticast mode [ 1594.086675][ T7468] netlink: 'syz.9.9820': attribute type 1 has an invalid length. [ 1594.086772][T30126] bridge_slave_0: left promiscuous mode [ 1594.100545][T30126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.110935][T30126] dvmrp0: left allmulticast mode [ 1594.257645][T30126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1594.271046][T30126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1594.283366][T30126] bond0 (unregistering): Released all slaves [ 1594.335923][ T7471] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1594.347508][ T7471] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1594.372706][ T7476] bond1: (slave gretap1): making interface the new active one [ 1594.380815][ T7476] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1594.420481][T30126] hsr_slave_0: left promiscuous mode [ 1594.428205][T30126] hsr_slave_1: left promiscuous mode [ 1594.434281][T30126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1594.441975][T30126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1594.450377][T30126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1594.458211][T30126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1594.469767][T30126] veth1_macvtap: left promiscuous mode [ 1594.475417][T30126] veth0_macvtap: left promiscuous mode [ 1594.481190][T30126] veth1_vlan: left promiscuous mode [ 1594.486588][T30126] veth0_vlan: left promiscuous mode [ 1594.566127][T30126] team0 (unregistering): Port device team_slave_1 removed [ 1594.580421][T30126] team0 (unregistering): Port device team_slave_0 removed [ 1594.641724][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1594.654780][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 1594.662575][ T7427] bridge_slave_0: entered allmulticast mode [ 1594.669351][ T7427] bridge_slave_0: entered promiscuous mode [ 1594.684458][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 1594.691842][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 1594.699893][ T7427] bridge_slave_1: entered allmulticast mode [ 1594.707810][ T7427] bridge_slave_1: entered promiscuous mode [ 1594.733698][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1594.755108][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1594.785012][ T7427] team0: Port device team_slave_0 added [ 1594.792149][ T7427] team0: Port device team_slave_1 added [ 1594.812310][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.819318][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.846013][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.858092][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.865239][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.894686][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.908035][T30126] IPVS: stop unused estimator thread 0... [ 1594.978423][ T7427] hsr_slave_0: entered promiscuous mode [ 1595.000286][ T7427] hsr_slave_1: entered promiscuous mode [ 1595.015908][ T7427] debugfs: 'hsr0' already exists in 'hsr' [ 1595.033483][ T7427] Cannot create hsr debugfs directory [ 1595.108804][ T7508] syzkaller0: entered promiscuous mode [ 1595.114682][ T7508] syzkaller0: entered allmulticast mode [ 1595.204220][ T3046] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1595.259437][T30126] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1595.269800][T30126] geneve1 (unregistering): left allmulticast mode [ 1595.276353][T30126] geneve1 (unregistering): left promiscuous mode [ 1595.431497][ T7532] loop9: detected capacity change from 0 to 1024 [ 1595.439161][ T7532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1595.496884][ T7532] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1595.586506][T30126] bond0 (unregistering): Released all slaves [ 1595.598106][T30126] bond1 (unregistering): Released all slaves [ 1595.615883][T30126] bond2 (unregistering): Released all slaves [ 1595.632607][T30126] bond3 (unregistering): Released all slaves [ 1595.660141][T30126] bond4 (unregistering): Released all slaves [ 1595.685871][T30126] bond5 (unregistering): Released all slaves [ 1595.722184][T30126] bond6 (unregistering): Released all slaves [ 1595.749000][T30126] bond7 (unregistering): Released all slaves [ 1595.828016][ T7532] loop9: detected capacity change from 1024 to 64 [ 1595.884218][T30126] hsr_slave_0: left promiscuous mode [ 1595.898327][T30126] hsr_slave_1: left promiscuous mode [ 1596.025626][ T6205] syz_tun (unregistering): left allmulticast mode [ 1596.042065][ T7550] syz_tun: entered allmulticast mode [ 1596.088399][ T3046] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1596.200815][ T6205] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1596.227168][ T7533] kmmpd-loop9: attempt to access beyond end of device [ 1596.227168][ T7533] loop9: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 1596.250023][ T7533] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1596.388181][ T3046] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1596.409980][ T7607] loop3: detected capacity change from 0 to 512 [ 1596.423158][ T7607] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.9856: iget: bad i_size value: 38620345925642 [ 1596.448001][ T7607] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1596.451127][ T7607] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.9856: couldn't read orphan inode 15 (err -117) [ 1596.460413][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 1596.460438][ C0] EXT4-fs (loop3): initial error at time 1807: ext4_orphan_get:1397: inode 15 [ 1596.460475][ C0] EXT4-fs (loop3): last error at time 1807: ext4_orphan_get:1397: inode 15 [ 1596.513079][ T7607] loop3: lost filesystem error report for type 5 error -117 [ 1596.520405][ T7607] EXT4-fs (loop3): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1596.555379][ T7427] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1596.569828][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1596.584479][ T7427] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1596.592940][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 1596.600405][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1596.623125][ T7622] loop3: detected capacity change from 0 to 256 [ 1596.635508][ T7427] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1596.795814][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1596.806646][ T7427] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1596.828612][ T7427] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1596.996071][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.259359][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 1597.292909][T22919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.300188][T22919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.397783][T22919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.404921][T22919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1597.441323][ T3046] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1597.461987][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9865'. [ 1597.474903][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.9865'. [ 1597.488064][ T7661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1597.497023][ T7661] bond1: (slave bond0): making interface the new active one [ 1597.506116][ T7661] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1597.521268][ T7661] netlink: 'syz.7.9865': attribute type 4 has an invalid length. [ 1597.545357][ T7661] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9865'. [ 1597.597389][ T7661] .`: renamed from bond0 (while UP) [ 1597.667919][ T7614] chnl_net:caif_netlink_parms(): no params data found [ 1597.733808][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1597.762819][ T7614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.780781][ T7614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1597.788183][ T7614] bridge_slave_0: entered allmulticast mode [ 1597.795027][ T7614] bridge_slave_0: entered promiscuous mode [ 1597.803265][ T7614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1597.811846][ T7614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1597.819224][ T7614] bridge_slave_1: entered allmulticast mode [ 1597.827812][ T7614] bridge_slave_1: entered promiscuous mode [ 1597.849054][ T7614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1597.859660][ T7614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1597.898698][ T7614] team0: Port device team_slave_0 added [ 1597.909328][ T7614] team0: Port device team_slave_1 added [ 1597.940245][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1597.951331][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.005223][ T7614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.075259][ T7614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.093843][ T7614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.136415][ T7614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1598.227257][ T7614] hsr_slave_0: entered promiscuous mode [ 1598.259853][ T7614] hsr_slave_1: entered promiscuous mode [ 1599.476396][ T7427] veth0_vlan: entered promiscuous mode [ 1599.501679][ T7427] veth1_vlan: entered promiscuous mode [ 1599.538780][ T7427] veth0_macvtap: entered promiscuous mode [ 1599.554579][ T7427] veth1_macvtap: entered promiscuous mode [ 1599.579127][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1599.599838][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1599.620571][T22919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.640842][T22919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.701480][T22919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.721060][T22919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1599.770840][ T28] audit: type=1400 audit(1810.270:14751): avc: denied { write } for pid=7427 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1599.880164][ T28] audit: type=1400 audit(1810.270:14752): avc: denied { open } for pid=7427 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 1600.133086][ T7743] loop1: detected capacity change from 0 to 128 [ 1601.460264][ T7614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1601.494941][ T7614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1601.502897][ T7614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1601.516368][ T7614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1601.532591][ T7614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1601.547183][ T7614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1601.558881][ T7614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1601.571078][ T7614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1601.642291][ T7614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.655797][ T7614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.666151][T30089] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.673333][T30089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.768265][T30091] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.775548][T30091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.801241][ T7803] bond1: option mode: unable to set because the bond device has slaves [ 1601.857976][ T7803] netlink: 'syz.7.9889': attribute type 4 has an invalid length. [ 1601.873610][ T7803] netlink: 152 bytes leftover after parsing attributes in process `syz.7.9889'. [ 1601.977340][ T7614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1602.829474][ T7852] loop3: detected capacity change from 0 to 1024 [ 1602.863392][ T7852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1602.908270][ T7852] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1603.065251][ T7877] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1603.091451][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1603.121857][ T7881] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9896'. [ 1603.469458][ T7614] veth0_vlan: entered promiscuous mode [ 1603.480022][ T7614] veth1_vlan: entered promiscuous mode [ 1603.493157][ T7614] veth0_macvtap: entered promiscuous mode [ 1603.500798][ T7614] veth1_macvtap: entered promiscuous mode [ 1603.512302][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.521334][ T7614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.572424][T27811] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.610656][T27811] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.622279][T27811] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1603.631252][T27811] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1605.137408][ T7973] loop7: detected capacity change from 0 to 1024 [ 1605.181786][ T28] audit: type=1400 audit(1815.342:14753): avc: denied { read } for pid=7974 comm="syz.5.9854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1605.189174][ T7980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.209629][ T7973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1605.211281][ T7980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.247216][ T7973] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1605.397383][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1605.547997][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.571859][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.653326][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.662719][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1605.673016][ T8015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1605.681945][ T8015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1606.463714][ T8053] Cannot find del_set index 2 as target [ 1607.055461][ T8069] loop7: detected capacity change from 0 to 1024 [ 1607.145944][ T8069] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1607.234193][ T8069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1607.866077][ T8088] vti0: entered promiscuous mode [ 1607.891880][ T8088] vti0: entered allmulticast mode [ 1608.123171][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1608.213738][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.234115][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.257236][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.282584][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.306157][ T8107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1608.336499][ T8107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1608.546266][ T28] audit: type=1400 audit(1818.486:14754): avc: denied { append } for pid=8104 comm="syz.7.9928" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1610.286881][ T8152] loop7: detected capacity change from 0 to 1024 [ 1610.313685][ T8156] loop5: detected capacity change from 0 to 128 [ 1610.328277][ T8152] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1610.398157][ T8152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1610.507713][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1610.517874][ T28] audit: type=1400 audit(1820.330:14755): avc: denied { shutdown } for pid=8162 comm="syz.0.9940" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1610.591234][ T8180] loop5: detected capacity change from 0 to 256 [ 1610.663428][ T8180] FAT-fs (loop5): codepage cp857 not found [ 1611.770551][ T8206] loop1: detected capacity change from 0 to 1024 [ 1611.777656][ T8206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1611.828387][ T8206] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1611.887640][ T7427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1611.922514][ T8229] loop7: detected capacity change from 0 to 128 [ 1611.944123][ T8231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1611.961694][ T8229] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1611.988544][ T8231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.066108][ T8245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1612.077866][ T8245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1612.345387][ T8271] syz_tun: entered allmulticast mode [ 1612.893926][ T4447] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1612.984117][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9975'. [ 1612.997504][ T8292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.024953][ T8292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.129788][ T8335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1613.149702][ T8335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1613.275474][ T8274] syz_tun: left allmulticast mode [ 1613.286255][ T28] audit: type=1400 audit(1822.903:14756): avc: denied { create } for pid=8326 comm="syz.5.9981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1614.157390][ T2463] page_pool_release_retry() stalled pool shutdown: id 364, 1 inflight 60 sec [ 1614.192598][ T8366] netlink: 'syz.5.9988': attribute type 39 has an invalid length. [ 1614.360587][ T8384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1614.378058][ T8384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1614.569723][ T8410] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9998'. [ 1614.580912][ T8410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9998'. [ 1614.611597][ T8410] netlink: 'syz.5.9998': attribute type 4 has an invalid length. [ 1614.646960][ T8410] netlink: 152 bytes leftover after parsing attributes in process `syz.5.9998'. [ 1614.666340][ T8410] .`: renamed from bond0 [ 1615.088257][ T28] audit: type=1400 audit(1824.606:14757): avc: denied { unmount } for pid=7427 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 1615.241021][ T8510] netlink: 'syz.5.10030': attribute type 16 has an invalid length. [ 1615.264946][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10030'. [ 1615.579794][ T8566] IPv6: sit1: Disabled Multicast RS [ 1615.585913][ T8566] sit1: entered allmulticast mode [ 1616.329844][ T8612] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10068'. [ 1616.367582][ T8612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1616.368175][ T8619] 9p: Bad value for 'rfdno' [ 1616.379499][ T8618] syz_tun: entered allmulticast mode [ 1616.388431][ T8612] macvlan2: entered promiscuous mode [ 1616.394195][ T8612] macvlan2: entered allmulticast mode [ 1616.401557][ T8612] bond0: (slave macvlan2): Opening slave failed [ 1617.726244][ T8653] 9p: Bad value for 'rfdno' [ 1617.796916][ T8659] syz_tun: entered allmulticast mode [ 1617.989202][ T8679] netlink: 80 bytes leftover after parsing attributes in process `syz.7.10090'. [ 1618.018540][ T8692] 9p: Bad value for 'rfdno' [ 1618.046539][ T8695] syz_tun: entered allmulticast mode [ 1618.069047][ T8695] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1618.077753][ T8695] mroute: pending queue full, dropping entries [ 1618.117258][ T8694] syz_tun: left allmulticast mode [ 1618.205438][ T8713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10102'. [ 1618.225649][ T8713] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1618.245020][ T8713] macvlan2: entered promiscuous mode [ 1618.250414][ T8713] macvlan2: entered allmulticast mode [ 1618.275493][ T8713] bond2: entered promiscuous mode [ 1618.367030][ T8722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10102'. [ 1618.435619][ T8713] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1618.480933][ T8713] bond2: left promiscuous mode [ 1618.638532][ T8722] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1618.823404][ T28] audit: type=1400 audit(1828.106:14758): avc: denied { mounton } for pid=8734 comm="syz.1.10113" path="/proc/130/task" dev="proc" ino=129022 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1618.888224][ T28] audit: type=1326 audit(1828.172:14759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8740 comm="syz.7.10115" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f25a63fcdd9 code=0x0 [ 1619.124383][ T8753] bridge_slave_0: left allmulticast mode [ 1619.130432][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.600766][ T8813] loop7: detected capacity change from 0 to 1764 [ 1621.185441][ T8866] syz_tun: entered allmulticast mode [ 1621.207709][ T8865] syz_tun: left allmulticast mode [ 1621.328980][ T8878] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 1621.906354][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10182'. [ 1622.520915][ T8940] loop7: detected capacity change from 0 to 256 [ 1622.551439][ T8940] FAT-fs (loop7): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 1622.632667][ T8942] loop7: detected capacity change from 0 to 256 [ 1622.948100][ T8962] netlink: 33 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1622.962891][ T8962] netlink: 140 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1622.973207][ T8962] netlink: 33 bytes leftover after parsing attributes in process `syz.5.10203'. [ 1623.046719][ T8973] loop5: detected capacity change from 0 to 512 [ 1623.071100][ T8973] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1623.106886][ T8973] System zones: 0-2, 18-18, 34-34 [ 1624.068920][ T8973] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 1624.078720][ T8973] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1624.094585][ T8973] EXT4-fs (loop5): mount failed [ 1624.202600][ T8982] loop1: detected capacity change from 0 to 512 [ 1624.313381][ T8982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1624.672720][ T8977] loop3: detected capacity change from 0 to 512 [ 1624.710919][ T8977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1624.766664][ T8997] loop7: detected capacity change from 0 to 128 [ 1624.935118][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.158293][ T9011] syzkaller0: entered promiscuous mode [ 1625.170757][ T9011] syzkaller0: entered allmulticast mode [ 1625.196500][ T9017] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1625.205207][ T9017] mroute: pending queue full, dropping entries [ 1625.270110][ T7427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1625.409140][ T9026] netlink: 'syz.0.10224': attribute type 11 has an invalid length. [ 1625.433728][ T9026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10224'. [ 1625.489613][ T9035] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1625.498361][ T9035] mroute: pending queue full, dropping entries [ 1625.617737][ T9045] netlink: 80 bytes leftover after parsing attributes in process `syz.5.10232'. [ 1625.799309][ T9070] netlink: 'syz.0.10241': attribute type 11 has an invalid length. [ 1625.808348][ T9070] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10241'. [ 1625.811533][ T28] audit: type=1326 audit(1834.648:14760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.7.10233" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f25a63fcdd9 code=0x0 [ 1625.909297][ T9072] netlink: 'syz.7.10233': attribute type 21 has an invalid length. [ 1625.963137][ T9074] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1625.970871][ T9074] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1625.979996][ T9074] xt_hashlimit: max too large, truncated to 1048576 [ 1626.388280][ T9085] syz_tun: entered allmulticast mode [ 1626.447825][ T9082] syz_tun: left allmulticast mode [ 1626.875611][ T9106] netlink: 'syz.5.10253': attribute type 11 has an invalid length. [ 1626.893661][ T9104] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10252'. [ 1626.916696][ T9106] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10253'. [ 1627.019297][ T9112] tmpfs: Bad value for 'size' [ 1627.963178][ T9149] netlink: 'syz.3.10270': attribute type 11 has an invalid length. [ 1627.971589][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10270'. [ 1627.985784][ T9149] tmpfs: Bad value for 'size' [ 1628.080482][ T9158] loop3: detected capacity change from 0 to 512 [ 1628.098431][ T9158] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1628.106656][ T9158] System zones: 0-2, 18-18, 34-34 [ 1628.114027][ T9158] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 1628.123113][ T9158] EXT4-fs warning (device loop3): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1628.137920][ T9158] EXT4-fs (loop3): mount failed [ 1628.957238][ T9224] syz_tun: entered allmulticast mode [ 1628.968240][ T9223] syz_tun: left allmulticast mode [ 1629.782591][ T9246] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9246 comm=syz.5.10292 [ 1629.874472][ T9248] loop5: detected capacity change from 0 to 512 [ 1629.923976][ T9248] EXT4-fs: dax option not supported [ 1629.950844][ T9251] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10293'. [ 1629.985915][ T9251] netlink: 140 bytes leftover after parsing attributes in process `syz.3.10293'. [ 1630.021797][ T9251] netlink: 33 bytes leftover after parsing attributes in process `syz.3.10293'. [ 1630.037954][ T9262] loop5: detected capacity change from 0 to 1024 [ 1630.082577][ T9262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1630.126189][ T9262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1630.176881][ T7614] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1632.068103][ T9300] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9300 comm=syz.5.10307 [ 1632.200316][ T9300] loop5: detected capacity change from 0 to 512 [ 1632.277798][ T9306] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 1632.286454][ T9306] mroute: pending queue full, dropping entries [ 1632.295273][ T9305] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10309'. [ 1632.296023][ T9300] EXT4-fs: dax option not supported [ 1632.304346][ T9305] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10309'. [ 1632.304370][ T9305] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10309'. [ 1632.374671][ T9308] loop1: detected capacity change from 0 to 1024 [ 1632.393056][ T9308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1632.427818][ T9308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1632.483935][ T7427] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1633.073680][ T9326] loop7: detected capacity change from 0 to 512 [ 1633.171764][ T9326] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1635.245645][ T9329] xt_hashlimit: max too large, truncated to 1048576 [ 1636.039680][ T9347] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10322'. [ 1636.070408][ T9347] netlink: 140 bytes leftover after parsing attributes in process `syz.1.10322'. [ 1636.209919][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1636.223571][ T9347] netlink: 41 bytes leftover after parsing attributes in process `syz.1.10322'. [ 1636.298473][ T9354] loop7: detected capacity change from 0 to 1024 [ 1636.341581][ T9354] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1636.479680][ T9354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 1636.560915][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 1636.573386][ T9371] netlink: 'syz.0.10330': attribute type 11 has an invalid length. [ 1636.583968][ T9371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10330'. [ 1636.593950][ T9371] tmpfs: Bad value for 'size' [ 1636.818761][ T9398] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1636.830245][ T9398] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1637.176774][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10340'. [ 1638.179271][ T9404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9404 comm=syz.0.10340 [ 1640.056129][ T9406] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1640.064378][ T9406] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1640.270593][ T9406] xt_hashlimit: max too large, truncated to 1048576 [ 1640.972971][ T9438] loop7: detected capacity change from 0 to 512 [ 1641.212898][ T9438] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1641.548528][ T1999] syz_tun (unregistering): left allmulticast mode [ 1641.589537][ T28] audit: type=1326 audit(1849.405:14761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9439 comm="syz.1.10352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5f7638cdd9 code=0x0 [ 1641.621065][ T9458] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10354'. [ 1641.697221][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10355'. [ 1641.737835][ T4447] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1641.752439][ T9462] netlink: 'syz.1.10352': attribute type 21 has an invalid length. [ 1641.787906][ T9464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9464 comm=syz.5.10355 [ 1642.163110][ T9477] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1642.171018][ T9477] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1642.181942][ T9477] xt_hashlimit: max too large, truncated to 1048576 [ 1643.150278][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 1643.448416][ T9489] loop7: detected capacity change from 0 to 512 [ 1643.626582][ T9489] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1643.732448][ T9489] System zones: 0-2, 18-18, 34-34 [ 1643.858204][ T9495] loop1: detected capacity change from 0 to 512 [ 1643.977029][ T9495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1644.284492][ T9489] Quota error (device loop7): v2_read_file_info: Can't read info structure [ 1644.304697][T30120] bond4 (unregistering): (slave .`): Releasing active interface [ 1644.311770][ T9489] EXT4-fs warning (device loop7): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1644.337218][T30120] .` (unregistering): Released all slaves [ 1644.343488][ T9489] EXT4-fs (loop7): mount failed [ 1644.357648][T30120] bond1 (unregistering): Released all slaves [ 1644.365642][ T9501] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10364'. [ 1644.381646][T30120] bond2 (unregistering): Released all slaves [ 1644.390932][T30120] bond3 (unregistering): Released all slaves [ 1644.400500][T30120] bond4 (unregistering): Released all slaves [ 1644.483178][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.492329][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.500174][ T9445] bridge_slave_0: entered allmulticast mode [ 1644.544991][ T9445] bridge_slave_0: entered promiscuous mode [ 1644.569178][ T7738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.592052][T30120] hsr_slave_0: left promiscuous mode [ 1644.614982][T30120] hsr_slave_1: left promiscuous mode [ 1644.712389][ T9512] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10367'. [ 1644.788873][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.809206][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.827544][ T9445] bridge_slave_1: entered allmulticast mode [ 1644.844379][ T9445] bridge_slave_1: entered promiscuous mode [ 1644.884497][ T3046] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1644.891998][ T9512] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9512 comm=syz.5.10367 [ 1644.920139][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1644.940657][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1644.973442][ T9445] team0: Port device team_slave_0 added [ 1644.985991][ T9445] team0: Port device team_slave_1 added [ 1645.010712][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.018481][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.066453][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.096963][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.107317][ T9528] loop5: detected capacity change from 0 to 512 [ 1645.119986][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1645.180318][ T9528] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1645.191694][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.206230][ T9528] System zones: 0-2, 18-18, 34-34 [ 1645.235323][ T9528] Quota error (device loop5): v2_read_file_info: Can't read info structure [ 1645.309504][ T9528] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1645.363148][ T9445] hsr_slave_0: entered promiscuous mode [ 1645.374897][ T9528] EXT4-fs (loop5): mount failed [ 1645.384448][ T9445] hsr_slave_1: entered promiscuous mode [ 1645.405258][ T9445] debugfs: 'hsr0' already exists in 'hsr' [ 1645.421664][ T9445] Cannot create hsr debugfs directory [ 1645.532278][ T3046] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1645.702646][T30120] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.798964][T30120] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.892376][T30120] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.938079][T30120] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1646.195941][ T9544] chnl_net:caif_netlink_parms(): no params data found [ 1646.406415][ T9616] loop3: detected capacity change from 0 to 512 [ 1646.419477][ T9616] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.809387][T30120] bridge_slave_1: left allmulticast mode [ 1646.824984][T30120] bridge_slave_1: left promiscuous mode [ 1646.845655][T30120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.098592][ T9629] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1647.106138][ T9629] vhci_hcd vhci_hcd.0: default hub control req: 9a08 v0005 i0007 l0 [ 1647.205390][T30120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1647.218210][ T2090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.249702][T30120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1647.269322][T30120] bond0 (unregistering): Released all slaves [ 1647.306101][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.327030][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1647.344227][ T9544] bridge_slave_0: entered allmulticast mode [ 1647.356543][ T9544] bridge_slave_0: entered promiscuous mode [ 1647.374190][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1647.387431][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1647.405642][ T9544] bridge_slave_1: entered allmulticast mode [ 1647.416945][ T9544] bridge_slave_1: entered promiscuous mode [ 1647.459413][ T9544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1647.482635][ T9544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.524121][ T9544] team0: Port device team_slave_0 added [ 1647.537636][ T9544] team0: Port device team_slave_1 added [ 1647.580453][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.588504][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.642617][ T9544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.670028][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.688687][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1647.747988][ T9544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1647.804180][ T9544] hsr_slave_0: entered promiscuous mode [ 1647.821160][ T9544] hsr_slave_1: entered promiscuous mode [ 1647.828989][ T9544] debugfs: 'hsr0' already exists in 'hsr' [ 1647.845145][ T9544] Cannot create hsr debugfs directory [ 1647.998017][ T2465] ================================================================== [ 1648.006180][ T2465] BUG: KCSAN: data-race in __filemap_remove_folio / nr_blockdev_pages [ 1648.014394][ T2465] [ 1648.016745][ T2465] read-write to 0xffff88810048fd78 of 8 bytes by task 2090 on cpu 1: [ 1648.024842][ T2465] __filemap_remove_folio+0x218/0x2e0 [ 1648.030271][ T2465] __remove_mapping+0x398/0x4c0 [ 1648.035169][ T2465] remove_mapping+0x22/0x90 [ 1648.039706][ T2465] mapping_try_invalidate+0x293/0x430 [ 1648.045160][ T2465] invalidate_mapping_pages+0x27/0x40 [ 1648.050565][ T2465] invalidate_bdev+0x58/0x70 [ 1648.055190][ T2465] ext4_put_super+0x610/0x7b0 [ 1648.059899][ T2465] generic_shutdown_super+0xee/0x220 [ 1648.065226][ T2465] kill_block_super+0x2a/0x70 [ 1648.069968][ T2465] ext4_kill_sb+0x42/0x80 [ 1648.074325][ T2465] deactivate_locked_super+0x75/0x1c0 [ 1648.079741][ T2465] deactivate_super+0x97/0xa0 [ 1648.084450][ T2465] cleanup_mnt+0x2bb/0x330 [ 1648.088898][ T2465] __cleanup_mnt+0x19/0x20 [ 1648.093431][ T2465] task_work_run+0x130/0x1a0 [ 1648.098064][ T2465] exit_to_user_mode_loop+0x1f4/0x6f0 [ 1648.103480][ T2465] do_syscall_64+0x232/0x3b0 [ 1648.108099][ T2465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1648.114022][ T2465] [ 1648.116442][ T2465] read to 0xffff88810048fd78 of 8 bytes by task 2465 on cpu 0: [ 1648.124017][ T2465] nr_blockdev_pages+0x7e/0xd0 [ 1648.128842][ T2465] si_meminfo+0x87/0xd0 [ 1648.133028][ T2465] update_defense_level+0x47/0x5d0 [ 1648.138167][ T2465] defense_work_handler+0x1f/0x80 [ 1648.144611][ T2465] process_scheduled_works+0x4f0/0x9c0 [ 1648.150201][ T2465] worker_thread+0x58a/0x780 [ 1648.154910][ T2465] kthread+0x22a/0x280 [ 1648.159020][ T2465] ret_from_fork+0x146/0x330 [ 1648.163632][ T2465] ret_from_fork_asm+0x1a/0x30 [ 1648.168432][ T2465] [ 1648.170770][ T2465] value changed: 0x0000000000000009 -> 0x0000000000000003 [ 1648.177916][ T2465] [ 1648.180261][ T2465] Reported by Kernel Concurrency Sanitizer on: [ 1648.186434][ T2465] CPU: 0 UID: 0 PID: 2465 Comm: kworker/0:4 Tainted: G W syzkaller #0 PREEMPT(full) [ 1648.197398][ T2465] Tainted: [W]=WARN [ 1648.201222][ T2465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1648.211306][ T2465] Workqueue: events_long defense_work_handler [ 1648.217405][ T2465] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1648.261426][ T28] audit: type=1400 audit(1855.628:14762): avc: denied { write } for pid=3308 comm="syz-executor" path="pipe:[487]" dev="pipefs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1648.835155][ T9628] syz_tun (unregistering): left allmulticast mode [ 1648.853387][T30120] hsr_slave_0: left promiscuous mode [ 1648.859107][T30120] hsr_slave_1: left promiscuous mode [ 1648.871342][T30120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1648.902985][T30120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.910617][T30120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.921144][T30120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.940990][T30120] veth1_macvtap: left promiscuous mode [ 1648.956336][T30120] veth0_macvtap: left promiscuous mode [ 1648.963440][T30120] veth1_vlan: left promiscuous mode [ 1648.977676][T30120] veth0_vlan: left promiscuous mode [ 1649.069130][T30120] team0 (unregistering): Port device team_slave_1 removed [ 1649.092924][T30120] team0 (unregistering): Port device team_slave_0 removed [ 1649.658971][T30102] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.673816][ T9593] syz_tun (unregistering): left allmulticast mode [ 1649.684294][T30102] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.743116][ T3046] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1649.769728][T30102] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.844800][T30102] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1649.875644][ T3046] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1649.942265][T30102] bridge_slave_1: left allmulticast mode [ 1649.961378][T30102] bridge_slave_1: left promiscuous mode [ 1649.967099][T30102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.983834][T30102] bridge_slave_0: left allmulticast mode [ 1649.994741][T30102] bridge_slave_0: left promiscuous mode [ 1650.015161][T30102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.024414][T30102] bridge_slave_1: left allmulticast mode [ 1650.037277][T30102] bridge_slave_1: left promiscuous mode [ 1650.048171][T30102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.056070][T30102] bridge_slave_0: left allmulticast mode [ 1650.061915][T30102] bridge_slave_0: left promiscuous mode [ 1650.067649][T30102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.076337][T30102] batadv1: left allmulticast mode [ 1650.081906][T30102] batadv1: left promiscuous mode [ 1650.086970][T30102] bridge0: port 3(batadv1) entered disabled state [ 1650.094249][T30102] bridge_slave_1: left allmulticast mode [ 1650.100026][T30102] bridge_slave_1: left promiscuous mode [ 1650.105773][T30102] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.113745][T30102] bridge_slave_0: left allmulticast mode [ 1650.119428][T30102] bridge_slave_0: left promiscuous mode [ 1650.125388][T30102] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.163839][T30283] SELinux: failure in sel_netif_sid_slow(), invalid network interface (97) [ 1650.187766][T30102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.197769][T30102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.207847][T30102] bond0 (unregistering): Released all slaves [ 1650.251970][T30102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.261851][T30102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.272053][T30102] bond0 (unregistering): Released all slaves [ 1650.300042][T30102] bond1 (unregistering): (slave geneve2): Releasing active interface [ 1650.357640][T30102] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1650.411767][T30102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.422440][T30102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.432313][T30102] bond0 (unregistering): Released all slaves [ 1650.439864][T30102] bond1 (unregistering): Released all slaves [ 1650.448585][T30102] bond2 (unregistering): Released all slaves [ 1650.476712][ T3046] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1650.523573][T30102] tipc: Left network mode [ 1650.533218][T30102] hsr_slave_0: left promiscuous mode [ 1650.541773][T30102] hsr_slave_1: left promiscuous mode [ 1650.547537][T30102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.556908][T30102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.566387][T30102] hsr_slave_0: left promiscuous mode [ 1650.572306][T30102] hsr_slave_1: left promiscuous mode [ 1650.578059][T30102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.586045][T30102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.596437][T30102] hsr_slave_0: left promiscuous mode [ 1650.602403][T30102] hsr_slave_1: left promiscuous mode [ 1650.608137][T30102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.615757][T30102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.661632][T30102] team0 (unregistering): Port device team_slave_1 removed [ 1650.671708][T30102] team0 (unregistering): Port device team_slave_0 removed [ 1650.733347][T30102] team0 (unregistering): Port device team_slave_1 removed [ 1650.743842][T30102] team0 (unregistering): Port device team_slave_0 removed [ 1650.807503][T30102] team0 (unregistering): Port device team_slave_1 removed [ 1650.818160][T30102] team0 (unregistering): Port device team_slave_0 removed [ 1650.857331][ T3046] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1650.970785][ T3046] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1651.086437][ T3046] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1651.201575][ T3046] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1651.315902][ T3046] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1651.435619][ T3046] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1651.519256][T30102] IPVS: stop unused estimator thread 0... [ 1651.564399][ T3046] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1651.684302][ T3046] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1651.796208][ T3046] 8021q: adding VLAN 0 to HW filter on device eth28