last executing test programs: 11m36.916567937s ago: executing program 32 (id=99): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x20400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c756bb51fc34963ba0aa83878b8a9dc308fad735000", @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf252800000005002b000000000006000600030000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) 10m19.354215519s ago: executing program 33 (id=365): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x48, &(0x7f0000000000), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000002c0)={0x0, 0x0}) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @rand_addr=0x64010102, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7b}, {@private=0xa010102, 0x4e22, 0x2, 0xc8, 0xa, 0x12d5c}}, 0x44) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @private1}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x29, 0x24, 0x3}}], 0x18}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read(r6, &(0x7f0000002400)=""/4096, 0x1000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r7, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e23, 0x41200003, @empty, 0x4000b}, 0x1c) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x10}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f00000030c0)={0x2, &(0x7f0000003080)=[{0x2, 0x2, 0xc, 0x3}, {0x16, 0x0, 0x4, 0x4}]}, 0x10) ioctl$SIOCPNADDRESOURCE(r6, 0x89e0, &(0x7f0000000040)=0xcb) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x28, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}}, 0x0) select(0x2a, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x2710}) 7m50.510278603s ago: executing program 5 (id=1169): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f00000000c0), 0x10) r7 = dup3(r6, r5, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r10 = socket$unix(0x1, 0x5, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r10, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r7, &(0x7f0000000080)={&(0x7f00000001c0)={0x1d, r9, 0x3f420f00}, 0x10, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x2c004000) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000230800"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x2710], 0x80}}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="050000002308"], 0x80}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/227, 0x1a, 0xe3, 0x1}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0135014030d9"}) 7m49.752743281s ago: executing program 6 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) close(0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_uring_setup(0x1efe, &(0x7f00000002c0)={0x0, 0x4354, 0x10000, 0x23, 0x34a}) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) write$binfmt_script(r8, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_elf64(r8, &(0x7f0000000200)=ANY=[], 0x1cb) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x0) 7m48.796708262s ago: executing program 6 (id=1173): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x1b, 0x1, 0xfffffffe, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffb, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@mark={0xc, 0x15, {0x35075a, 0xc0}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) 7m47.786451493s ago: executing program 5 (id=1175): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xb}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x4f255000) prctl$PR_SET_IO_FLUSHER(0x34, 0x1) prctl$PR_SET_ENDIAN(0x14, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r3, 0x406, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000000)={0x20000002}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0x20000001}) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000013c0)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x0, &(0x7f0000000100)}) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xa82, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x80890a, &(0x7f0000000d80)={[{@nojournal_checksum}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=") r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r7, 0x660c) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r8, 0x3, &(0x7f0000000500)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0xfffe, r6, 0x0, 0x0, 0x5}, 0x0, 0x0]) 7m46.168054121s ago: executing program 6 (id=1177): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f1, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000, 0x40000000}]) 7m44.809854066s ago: executing program 6 (id=1178): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000140)={[{}, {@noblock_validity}, {@abort}, {@barrier_val}, {@nogrpid}, {@resgid}, {@noinit_itable}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x7}, 0x32}]}, 0x1, 0x4f4, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001dc0)={0x8, 0xd, 0x80000, {r1}}, 0x20) memfd_secret(0x80000) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4) 7m44.765464226s ago: executing program 5 (id=1180): r0 = socket$inet6(0xa, 0x1, 0x84) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x0, 0x71, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1000000000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x376, &(0x7f0000000280)="$eJzs3c9rK1UUwPGTNEmTPF4nC1EUpBffRjdDG12LQd4DIeCj70V8TxCm7URDxqTMhGpEbLtyK+5dCS5KdxZcFLT/QDfudCOCu24EF3ahjsyvZJJM0hhTo+33AyU3994zc+/MLZxJmMz5m5++16w7et3oSDqvJCUiciFSkrREUuFr2i/nJG5fXrj16/fPPnhUywcV6l7l4YtlpdTK6jfvf1QIu50sy1np7fNfyj+fPXn29PmfD99tOKrhqFa7owy12f6xY2xaptpuOE1dqfuWaTimarQc0w7avwq3Y7V3drrKaG3fLu7YpuMoo9VVTbOrOm3VsbvKeMdotJSu6+p2USbJTmy9KWqHGxtGZcbgrTkPBlfEtl1jSUQKIy21w4UMCAAALNRw/p/2UvpZ8v/HslKt3t1QXud+/n/03Gnn1hvHK2H+f5JLyv9f+iHY1kD+711O9PP/dnB9UL88//9cpsr/A6MZ0c0yc/5fuoLBYDaruZGq1MA7264YxfD/13fw1tGaXyD/BwAAAAAAAAAAAAAAAAAAAADg/+DCdTXXdbXoNfrr30IQvse1lB9z/pe9Nu/su5z/6+zBo8eS92/c886x9clubbcWvIYdTkXEEvMPN+WthRhvbUR3HilPSb619sL4vd3akt9SqUvDi5d10aQkMhjvuvdeq95dV4EwvnebUjEeXxZNnojHf+2vTi++PBgf7j8nz9+JxeuiyXdb0hZLtv3I/v4/Xlfq1derQ/EFv5+I/PSvnxQAAAAAAOZMVz2J1++6Pq49+JWRSt3/mMiUNdHk9+Tr+7XE6/OM9kxm0bMHAAAAAOBmcLofNg1Jm7ZfsKykQkEGa6Jv/RM7e4VC8naSC5mBmqyIJHbODdVkJ215KTbDKYdh5CR4gslUnScUvoiO6t+Jig6pN/BeU/6y4zyxEM3fr0llZp2OZaX2xV8A+/GmtEwRnhke/KpXoRI73xm7nYNwIr2a6GOj3JjjLPeHa5bDiORdZEdq3NRsC+Cpz7787Z+un37h5eNwBXxweecDy3T3xk1wUiGfeFh4PA4AAABwDfWT/qjmlXhz/EEi8Yfl8M09AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzNJcfKvMLrjauadFzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP4r/goAAP//Di7sEA==") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000005c0), 0x87af, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000000)={&(0x7f0000000240)=""/187, 0xbb, 0x0, &(0x7f0000000440)=""/208, 0xd0}}, 0x10) r1 = io_uring_setup(0xf06, &(0x7f00000003c0)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) r2 = syz_open_dev$loop(&(0x7f00000002c0), 0x7, 0x2c880) ioctl$BLKSECTGET(r2, 0x1267, &(0x7f0000000300)) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000001440)={{0x1, 0x1, 0x18, r0, {0xfffffffa}}, './file1\x00'}) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) sendto$inet6(r0, &(0x7f0000001b00)="d23268e626d11ddcf735cd5e37942aa784f1f6c2d02cf9e762ed3ece8a8a7b8535e5564ff3975d9f190fa241748022cf45ddecc03f00", 0x36, 0x8090, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00', 0xfffffff1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000020bf0001000000000000000000000000004084a72d68a9bf526363673fb2120a43bc7e4c9ad86db9d88aeccfbe966791081e133965f0dcbd4102af06f112d89326eef0ff5d0b3b0bec47fecad715fbd3c3006a5e5dc4d99d685a6af653f0acafd00bc5f4b57dc39687322bf6d2"], &(0x7f0000001480)='syzkaller\x00', 0x9}, 0xc3a1) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x100000, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f00000002c0)='./file1\x00', 0x200000, &(0x7f0000001ac0), 0x0, 0x585, &(0x7f0000001500)="$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") syz_open_dev$vcsa(0x0, 0x65, 0x101282) r4 = socket(0x400000000010, 0x3, 0xfffffffd) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000003b00)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xe, 0xfff3}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_route={{0xa}, {0x2c, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x28}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x10, 0xfff2}}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xf4}, @TCA_ROUTE4_FROM={0x8, 0x3, 0x6a}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd0, &(0x7f0000000140)=0x2, 0x4) 7m43.990850445s ago: executing program 6 (id=1184): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001780), r0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200840, &(0x7f0000000280)={[{@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x0, 0x4f7, &(0x7f0000000540)="$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") r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2712, &(0x7f0000019580)=""/102392, &(0x7f0000000000)=0x18ff8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in=@multicast1, @in6=@remote, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000007, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@empty, 0x0, 0x6c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3502, 0x1, 0x0, 0x0, 0x9, 0x3}}, 0xe8) syz_emit_ethernet(0x3e, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$NFC_CMD_DISABLE_SE(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001880)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x4040044) 7m43.913795726s ago: executing program 6 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000064000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001800800014000000006"], 0x140}}, 0x0) 7m43.878921366s ago: executing program 34 (id=1185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010002000000000064000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c00018008000140000000032400018008000140000000070800014000000008080001400000000908000140000000080c000180080001400000000a240001800800014000000006"], 0x140}}, 0x0) 7m43.817783627s ago: executing program 5 (id=1187): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file1\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000001500)="$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") sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580), 0x1, 0x4f1, &(0x7f00000005c0)="$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") r0 = creat(&(0x7f0000000000)='./file1\x00', 0x4) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff}}, 0x10) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000, 0x6000000}]) 7m43.526726s ago: executing program 5 (id=1189): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x190, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x6}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x64, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x3, 0x49, 0x7, 0x4}, {0x3, 0x9, 0x9, 0xb24}, {0x6, 0x8, 0x8, 0x6}]}}, @TCA_BPF_FLAGS={0x8}, @TCA_BPF_POLICE={0x24, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfb91}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}]}, @TCA_BPF_FLAGS={0x8, 0x8, 0x80000000}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xf0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd8, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x7, 0x3, '%!\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x9c, 0x5, 0x0, 0x0, {{0xd}, {0x4}, {0x6a, 0x6, "0ef6a460a5bbda16e826eafe044d3376872c48b74ae60f057b238fb15e2207986c5639bfbc3d91ee00b5a433e95b6b3527d9711d16abc0abaea910bcdffe4d3ec14fb60880000000000000873a3f054bcbf1e53f85fe7aee4ccd90229e6ba2b45bd165ebd792"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x190}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}, 0xca9a3b}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 7m42.710660689s ago: executing program 5 (id=1193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x1c, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000000040008}}}}}}}, 0x3e) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) accept$nfc_llcp(r3, &(0x7f0000000040), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1800, 0x0, 0x0, 0xf2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf8ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2000000000}) 7m42.6863176s ago: executing program 35 (id=1193): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x4403b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x32, 0x1c, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pipe(0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x100000000040008}}}}}}}, 0x3e) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) accept$nfc_llcp(r3, &(0x7f0000000040), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x1800, 0x0, 0x0, 0xf2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf8ffffff}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94}, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x2000000000}) 6m42.602571687s ago: executing program 2 (id=1463): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x2d8, 0x228, 0x25a, 0x2d8, 0x228, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0x160, 0x1c8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@hl={{0x28}, {0x3, 0x6}}, @common=@srh1={{0x90}, {0x87, 0x7, 0x5, 0xc, 0x100, @mcast1, @mcast1, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0x0, 0x1fffffffe, 0xff], [0xff000000, 0xffffff00, 0xff, 0xff], 0x5802, 0x40}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x5}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'dummy0\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa3, 0x0, 0x0, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x8, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x1c, 0x66, 0x0, 0xb, 0x32, 0x0, @rand_addr=0x64010102, @broadcast}, "3297e3ba0fa8a2e7"}}, 0x2a) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c000140"], 0x92fc}}, 0x40) 6m42.235835011s ago: executing program 2 (id=1466): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x114, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffdfffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x82d7) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4000000004, 0x0, 0x0, 0xbff, 0x7, 0x62, 0x2c, 0x10}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c0003860800038004000180"], 0x38}}, 0x0) 6m42.121066503s ago: executing program 2 (id=1468): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x3a, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x0, 0x0]}}, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x4000000}, 0x28) 6m42.003677214s ago: executing program 2 (id=1470): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x3, 0xe76, 0x9, 0x3}, 0xfffffffffffffff0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) 6m41.898911795s ago: executing program 2 (id=1472): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2b, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x80}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}]}, 0x38}, 0x1, 0x0, 0x2000000}, 0x4080) 6m41.165289053s ago: executing program 2 (id=1474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x846}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000f1a1528f6dcf2399388e9fe309000000000000000000000000060000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001300e9", @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="f602805167bed16dcbe47af9d59088de63972286edc88747bd89f613fac97ef91b8f0cec67cd1504184f5133c993b256cd04f64cb0e64214f1fb5c682b50fcd57628dfe0a125bbf2dc8cd63ce146f58a00ea576785de26a5bb9403f6b788b6787ac8a80c4fc2e747ef2e4dae6fdb60e800679d190be75a595e9d1fdc2de4e043a6c084e14c2182b781d3ec04a4e16bc8043d724298e3a26490b1247102739be142489291e4b1ffdbfdd26f0fd7f6bb19666e8dccf7369c520d24274ae44636ac0ca48e83833cf3e13b36790a98e17b818c3ab6aeb0a81330eb", @ANYRES8=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2001c}, 0x24008081) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x3, 0x3, 0x0, 0x1}, 0x8) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0xff71}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0xff71}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffef7, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0, 0xb3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r8) (async) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="00cced12aef0bd6d05a217ed78827ebd00"]) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="00cced12aef0bd6d05a217ed78827ebd00"]) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) 6m26.010330662s ago: executing program 36 (id=1474): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x846}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) fstat(0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100"/52, @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000f1a1528f6dcf2399388e9fe309000000000000000000000000060000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001300e9", @ANYRESHEX=0x0, @ANYRESOCT=r1, @ANYBLOB="f602805167bed16dcbe47af9d59088de63972286edc88747bd89f613fac97ef91b8f0cec67cd1504184f5133c993b256cd04f64cb0e64214f1fb5c682b50fcd57628dfe0a125bbf2dc8cd63ce146f58a00ea576785de26a5bb9403f6b788b6787ac8a80c4fc2e747ef2e4dae6fdb60e800679d190be75a595e9d1fdc2de4e043a6c084e14c2182b781d3ec04a4e16bc8043d724298e3a26490b1247102739be142489291e4b1ffdbfdd26f0fd7f6bb19666e8dccf7369c520d24274ae44636ac0ca48e83833cf3e13b36790a98e17b818c3ab6aeb0a81330eb", @ANYRES8=0x0], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x2001c}, 0x24008081) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x3, 0x3, 0x0, 0x1}, 0x8) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0xff71}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0xff71}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f0000000480), &(0x7f00000004c0)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r6, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffef7, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0), 0x0, 0xb3, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xb9, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x104) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r8) (async) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="00cced12aef0bd6d05a217ed78827ebd00"]) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB=',access=', @ANYRESDEC=0x0, @ANYBLOB="00cced12aef0bd6d05a217ed78827ebd00"]) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) (async) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x2}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) 5m41.947663572s ago: executing program 9 (id=1776): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x20, r1, 0x644ad2ec32b79f57, 0x8070bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014800}, 0x4044880) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r1, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004041}, 0x4915) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f00000002c0)={0x0, 0xfffffffffffffef0, &(0x7f0000000280)={&(0x7f0000000600)={0x1c, r6, 0x1, 0x703d25, 0x25dfdbfb, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044040}, 0x8842) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='|\x00', @ANYRES16=r7, @ANYBLOB="0100ffffffff0000"], 0x3c}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x60) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r8 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = dup2(r2, r2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WOWLAN(r10, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040) sendmsg$NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5138134087d6bbc78f20", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf25020000000500590000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c040}, 0x80) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0x8000000000000001, 0xf980}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf8546, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x292, 0xa7, 0x2, 0x5, 0x6, 0x9b9a, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) 5m41.600624795s ago: executing program 9 (id=1779): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1802000004000000000000000000000085000000bc000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xffca, 0x0, &(0x7f0000000500)="b9ff03076804263a9cc17d6aa733", 0x0, 0xcb, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_pid(r0, &(0x7f00000005c0), 0x12) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d80)=[{{&(0x7f0000000280)={0x2, 0x4e20, @private=0xa0101fd}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000880)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000900)=[{&(0x7f00000008c0)='w', 0x1}], 0x1}}, {{&(0x7f00000004c0)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="ad", 0x1}], 0x1}}], 0x3, 0x8080) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x8, 0x401}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/241, 0xf1}], 0x1) 5m41.453773217s ago: executing program 9 (id=1782): creat(&(0x7f0000000040)='./file0\x00', 0x10a) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 5m39.993335063s ago: executing program 9 (id=1785): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000400000000000000000a0000010900010073797a31000000001400048010000180080001006475700004000280090002b245a5ba7a5a4b27677331fc0073797a32000000000500074063000000000100000a000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00'}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000480)=ANY=[@ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0xff, 0x0, 0xff, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x108ce, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xd6af}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3892ce28fa1676c5) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r5, &(0x7f00000007c0)=[{&(0x7f0000000040)='b', 0x1}], 0x100000000000020e, 0x1, 0x1f5) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000140)='./file0/file0\x00', 0xc8d0, &(0x7f00000004c0)=ANY=[@ANYBLOB="d7dab303111bbb6170a06454a122e66f0b048d203703722ebc525da241a521b52cdf7dc6974199", @ANYBLOB="aa5fec00047b6bd8fb77115ee89d88f1115bda60449c5abd743d3f4f40b5e4d4b4a27e2bf0ff2df3d248417f12375a897717a0c469d813a2736417a8980a63cec44e0a913420c5630efd294e5b6d1307670bfb074ff8332f555605fe26e216d4d369a769d4d734a50cb1c4d5cc280de30f9e0e6b5c7fed8d8ae85a2a2b2f3849b7f532d46b8afa4f907da66a283521ad8bc7f316f144f9b00d0714a48caa70b946284db1e5effa0007f0ea482600ae3cfd72a889f6375d", @ANYRESDEC=r5, @ANYRES32=r2], 0x1, 0x317, &(0x7f0000000800)="$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") write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x80) r6 = getpid() syz_pidfd_open(r6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073796f237be8e4e67a30000000000800054000000021280011800a00010071756f74610000001800028008000240000000030c0001400100000000000e4e140000001000010000000000000000000084000a2cef97082de6d1818aa483e1e80ed7fa6a67"], 0xac}}, 0x8004) r8 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') getdents(r8, &(0x7f0000000000)=""/34, 0x22) getdents(r8, 0xffffffffffffffff, 0x5a) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2243005, 0x0) 5m39.34999322s ago: executing program 9 (id=1790): r0 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x53, 0x1, 0x0, 0x0, 0x0, 0x0, 0x14796, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4083, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x3, r1, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xa, 0x8}, 0x6025, 0x4005, 0xb, 0x3, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r3, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x407f8, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x4}, 0x1124, 0x10000, 0x9, 0x1, 0xb, 0x20007, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, r3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x105003, 0x6000040008, 0x0, 0x5, 0x4, 0x8, 0x8, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000140)={0x9b}, 0x4) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @multicast, @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x3, 0x2, 0x0, @broadcast=0x1000000, {0x15, 0x4, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, @private, @empty, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}}}}}}, 0x0) 5m38.928626495s ago: executing program 9 (id=1796): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25180000003deacb420737a4fc95c13865f8e953a02469318363a3856a6734de26d8a0cf1565683ffb12a5af420eea"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) 5m38.928390575s ago: executing program 37 (id=1796): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000000080000000700000003"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25180000003deacb420737a4fc95c13865f8e953a02469318363a3856a6734de26d8a0cf1565683ffb12a5af420eea"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x4000004) 3m0.725938583s ago: executing program 3 (id=2414): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x401, 0x2, 0x80000, {0x0, 0x0, 0x0, 0x0, 0x1000, 0x41042}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x1}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x2, 0x0) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x5, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xb, 0x5, 0xcac, 0xc}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2404c0f1}, 0x4008000) (async) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000000)=0x48, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) recvfrom(r11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1806000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007d9af8ff00000000b5080000000000007baaf0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001500000076000000bf85000000000000b5020000000000002800000000000000b70000000000000095"], &(0x7f0000000340)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (async) set_mempolicy(0x8000, &(0x7f0000000000)=0xfc1b, 0xf) 3m0.362868327s ago: executing program 3 (id=2415): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x0) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{0x8, 0x1, 0x7e, 0xfffffff7}, {0xe, 0xc, 0x3, 0x8}, {0x2351, 0x5, 0x6, 0x3}, {0x9, 0xff, 0xff, 0xe}, {0x66, 0x81, 0x8, 0x2}, {0x3c00, 0x6, 0x0, 0x5}]}) 2m59.376693968s ago: executing program 3 (id=2419): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000010000008000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 2m59.116528761s ago: executing program 3 (id=2420): creat(&(0x7f0000000040)='./file0\x00', 0x10a) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES16=r0], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x10) 2m57.939233283s ago: executing program 3 (id=2425): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @local}, 0x101}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 2m57.183399552s ago: executing program 3 (id=2426): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x20400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 2m41.010837142s ago: executing program 38 (id=2426): r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r0, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x20400000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) 18.166573759s ago: executing program 7 (id=2741): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) 13.229011864s ago: executing program 7 (id=2755): r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2a, 0x1, 0x0, 0xfe, 0x0, 0x0, 0xb801b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0xb093, 0x800000, 0x5, 0x2, 0x4009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0, 0xa00}], 0x2) syz_emit_ethernet(0x120, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 12.590465671s ago: executing program 8 (id=2756): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0xfffffffe, 0x2, 0x100}) r0 = getpid() capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0xd, 0x0, 0x8, 0xe72, 0x2, 0x81}) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1004, 0x100000000000d) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b00)={{0xffffffffffffffff, &(0x7f00000000c0)='syzkaller\x00', 0x10000, &(0x7f00000001c0)={@_ha_fsid={[0x5, 0x48dd29e5]}, {0xf23, 0x10, 0x1a, 0x200}}, 0x99, &(0x7f0000000200), &(0x7f0000000240)=0x9c6}, 0x8, &(0x7f0000000a00)=[{0x2, 0x4, &(0x7f0000000280)='\x00', &(0x7f0000000380)="94696e490b35f0679f9c86af40663b011831a48deeed35c53c71606ea89212955cc1f08c68e2221a7ff03691a3485db10d4234b1574cf3a78d427e50add6e5e99e7bddefc658f930ec5660e63e9dd3d27fa760c7de99c2b3a10041483381ab9aeae9577b8b44dfbee697ac26bec37b462004c7406be5d4068e4f6da187b6e6150c080d03", 0x84, 0x3a}, {0x1, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000480)="602b86a2b3a051b7aa456fd24256ad18ce615d1c30c779896371511263fb995d2c918812e03f638cc16c9a2524432220bfcf6986561ac4fc4f0cadda254d6f12ed84ba328d6b68028f41a988e1ee96cb13c832dda9bb6d0a5c4a687bbe10941c988cf4be2efec9b5737057787d05677da011b90bc0bd2f505d0296542307d8361e8de931f5a42bf60dbf5e3f73ec3f40a71f46ce6ba8d25da5b7a8f8f692182e2e5dc90576f702559af3eb83319a9aac7a7d", 0xb2, 0x20}, {0x1, 0x8, &(0x7f0000000540)='\\\x00', &(0x7f0000000580)="ab9bb6e6a047387e81c86f772d600a457ff3eb5b9d73779e4a0146b285e90f02c551ec11b8ba7f1402f53d46fe33b372dd192cca3d49b46203b43805e696ecf4a91e867c31e31dc936e411a7233be96d7756d5bfa6696a9f3d7c0ba2", 0x5c, 0x1e}, {0x1, 0xfff, &(0x7f0000000600)='$*}L,^\'\x00', &(0x7f0000000640)="ed4ba724956a481c2e866c45b355e2516e9220619f95794af995ae0dcc234e6d7b7347f2c31009a47171be86153006ffab2e696010cf2b101f09ce5efd84885b1c58b4c9eb79d3cb06a11a9b59122c85b0c31e40e3ec9f2ee13a401c6bb88415e48fcd2ca5213ebdfd0b75a064ef3b053eae4b426237c5e664ea89f61d979be8c8509c69e0a728f597f5ee40c86860af9b37d6af33976eda5bee6d32549399b07aecff4ae4aa7c419c76eca6e7d734282aca21661b", 0xb5, 0x3a}, {0x3, 0x0, &(0x7f0000000700)='\x00', &(0x7f0000000740)="58eaeb2940709e51e22a2109936c77642b4703765d8444345cb8d03ddf7ab4cf39bc7737a25401ae0ab0b505f330c494263e76974e4a7739ada74a87", 0x3c}, {0x1, 0x7, &(0x7f0000000780)='syzkaller\x00', &(0x7f00000007c0)="930ef6e4babba6499bdd8e60cbacf69e740d7401ff309d12f59677413293ed78e77e2a6519c6784398f039f140beaaa7d194bc158bf3d18f32ec2d632ffaefac5c5e329842b3bfdb8cee1bad5b16d716e2e9f31934ffa46328447e556a8831a36eb9c18f419f168d2d01f67efa33e51e1ff7ec8fe12b4b9afb4a48b254055644b8b2d9bc9f082911ed7c8f617bfab4ba52f0016a7b734483d0de116b689f9abd60c4f2f13097ff67031796708f56497bac52d6d5fc41719e50c6d40b5faf398a5c063c43acefcac804550aaee806442dd64298530e5020f022fcd9b5275125efb44e879eefb8a634ce0d62", 0xeb}, {0x3, 0x80000000, &(0x7f00000008c0)='syzkaller\x00', &(0x7f0000000900)="f19d3f2e7b9d08fbd58631adcc2fc69954ed103802191d28cd33251b1a7ee56477e84984617e973eeb3411934e29e325d5b7d0671e47a1fe902c622d30e4975e86ab06c7d5580101c9e0d623fec50d8f03c47339a6f10c406566012c57ff350d716b207c8854a7", 0x67, 0x38}, {0x3, 0xfff, &(0x7f0000000980)='@:+&\x00', &(0x7f00000009c0)="578d3ff57c4abc079d3871b75e66a2ce6baf49c27f2a54cda06481214a4ee90ec733e83053b40050", 0x28, 0x10}]}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x3a, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000d80)=0xffffffffffffffff, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x200000000180, 0x100000}}, 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000e80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000e00), &(0x7f0000000e40)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_tracing={0x1a, 0x1d, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000c1000700000200000000000000001811cc120000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901fcffffff0095000000000000008500000026000000b70800000000a9e9d1d7e14ac9dc3d36afb8e9d11500007b8af8ff0000dc8704aa57a272b473ab0000b7080000010000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000c40)='GPL\x00', 0x3ff, 0xc3, &(0x7f0000000c80)=""/195, 0x41100, 0x6, '\x00', r3, 0x6ede70337726d415, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000dc0)={0x3, 0x8, 0x10, 0x3}, 0x10, 0x25063, r6, 0x0, &(0x7f0000000ec0)=[r7]}, 0x94) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 8.256874929s ago: executing program 4 (id=2759): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ftruncate(r3, 0x4a8e) 8.249692539s ago: executing program 8 (id=2760): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x10001}) 8.17071661s ago: executing program 8 (id=2762): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x9, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x2, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2}, 0xfffffd56) (async) unshare(0x60000600) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=@deltaction={0x48, 0x18, 0x1, 0x70bd26, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0xb, @any, 0x0, 0x1}, 0xe) (async) ioctl$KDDELIO(r1, 0x7040, 0x6) sync() sync() (async) sync() (async) futex(0x0, 0x5, 0x0, 0x0, &(0x7f00000000c0)=0x4, 0x20000002) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0xfffffffffffffcd7, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async, rerun: 32) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_nanosleep(0x3, 0x1, &(0x7f0000000440)={r4, r5+10000000}, &(0x7f0000000480)) (async) getpgrp(0xffffffffffffffff) sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) (async, rerun: 32) r6 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r6, {r0}}, './file0\x00'}) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.29926669s ago: executing program 0 (id=2765): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(0xffffffffffffffff, &(0x7f0000000200)={[0xf9a]}, 0x8, 0x80000) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @broadcast=0x1000000, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @broadcast, {[@timestamp_addr={0x44, 0x34, 0x3, 0x1, 0x0, [{@private=0xa010101, 0x4e210000}, {@local, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x52b38397}, {@rand_addr=0x64010101, 0x7}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0xe}, {@loopback, 0x2}]}, @timestamp_addr={0x44, 0x3c, 0xbc, 0x1, 0x0, [{@multicast1}, {}, {@dev, 0x100}, {@private, 0x8}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffc}]}]}}}}}}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100, 0x24014, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x8}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffbfffffffffffff, r0, 0x0) socket$kcm(0x29, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) unshare(0x400) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 7.28429024s ago: executing program 7 (id=2766): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0xe) ioctl$TCSETSF(r1, 0x5404, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2181}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x3, 0x3}}]}]}, @IFLA_TXQLEN={0x8, 0xd, 0x6}]}, 0x50}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x0, 0x5c, 0x160, 0x0, 0x3e0, 0x2d8, 0x228, 0x25a, 0x2d8, 0x228, 0x4, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, [], [0x0, 0x0, 0xff, 0xff], 'veth0_to_batadv\x00', 'pim6reg\x00', {}, {}, 0x3a, 0x1}, 0x5002, 0x160, 0x1c8, 0x52020000, {0x0, 0x6802000000000000}, [@common=@hl={{0x28}, {0x3, 0x6}}, @common=@srh1={{0x90}, {0x87, 0x7, 0x5, 0xc, 0x100, @mcast1, @mcast1, @mcast1, [0x0, 0xffffff00, 0xffffff00, 0xff], [0xff, 0x0, 0x1fffffffe, 0xff], [0xff000000, 0xffffff00, 0xff, 0xff], 0x5802, 0x40}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x1, 0x9, 0x10, '\x00', 'syz0\x00', {0x5}}}}, {{@ipv6={@local, @empty, [0xffffffff, 0x0, 0xffffffff], [0xffffff00], 'dummy0\x00', 'dummy0\x00', {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0xa3, 0x0, 0x0, 'pptp\x00', 'syz0\x00', {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) r3 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\x03\x00l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x7, 0x0, 0x7, 0x4, 0xffffffffffffd019}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x17, 0xc0000, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x1, 0x0, 0x8}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xac, r2, 0x400, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3b}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) 7.076537232s ago: executing program 4 (id=2768): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000580)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@data_err_abort}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ioprio_set$pid(0x2, 0x0, 0x2000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x210, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@usrjquota}, {@dioread_nolock}, {@noinit_itable}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c4e8, 0x0, 0xff, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)=ANY=[]) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x3b76f28c8736158c, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 7.051757553s ago: executing program 8 (id=2769): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000400)={0x0, 0xd386, 0x0, 0x3, 0x7f}, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040), 0x0) 7.002859233s ago: executing program 0 (id=2770): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x1a, 0x0, 0x0}) 6.950885783s ago: executing program 0 (id=2771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001800038014"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf250c000000200001801400020076657468315f746f5f6873720000000008000300030000001800038014"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) (async) 6.790801865s ago: executing program 0 (id=2773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x48100, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000050000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x802) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@deltclass={0x24, 0x29, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0xf, 0xfff1}, {0xffff, 0x5}, {0xfff2, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000101}, 0x880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r7, 0x8004745a, 0x0) futex(&(0x7f0000000340)=0x1, 0x5, 0x1, &(0x7f00000005c0), &(0x7f0000000600)=0x2, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x275a, 0x0) fcntl$lock(r9, 0x7, &(0x7f0000000100)={0x2, 0x2, 0x6}) fcntl$lock(r1, 0x6, &(0x7f0000000180)={0x1, 0x0, 0xb, 0x9}) fcntl$lock(r9, 0x24, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000840)=ANY=[@ANYBLOB="050e37d07bdc05a1bb9c29d691bcadfc12ce266e98ef84f8a897703588e0396500481c42b2acbcc557d9f61023eb03d9dc32ed4c1c49c5130234ee23c46c0c9af32106fdb55aef5bcba452848557ec0688f516f3a3fc", @ANYRES16=0x0, @ANYBLOB="000827bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b757000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 5.788288796s ago: executing program 7 (id=2774): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) close(0x3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000008700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fc2101008500000086000000bf0900000000000055090100000000809500000000000000bf91000000000000b702000080b329008500000085000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0xbb, &(0x7f0000000400)=0x0) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r3, &(0x7f0000000080)='\x00', 0x1}]) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) setitimer(0x0, &(0x7f0000000040)={{0xfffffffffffffff2, 0x4000000000007}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f00000000c0)="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") r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x11, &(0x7f00000001c0)=0x7, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f0000000000)={0xfd, 0x800, 0x1, 'queue1\x00', 0x3}) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='macsec0\x00', 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) 5.43238062s ago: executing program 0 (id=2775): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c756bb51fc34963ba0aa83878b8a9dc30", @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf252800000005002b000000000006000600030000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) 3.782825338s ago: executing program 1 (id=2776): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x2, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x3d}]}, &(0x7f0000000000)='syzkaller\x00', 0x1}, 0x94) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd1200050000001400000060fde10008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001", @ANYRES16, @ANYRES8=r1], 0xfdef) 3.762589979s ago: executing program 8 (id=2777): r0 = perf_event_open(&(0x7f0000000080)={0x4, 0x80, 0x2a, 0x1, 0x0, 0xfe, 0x0, 0x0, 0xb801b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0xb093, 0x800000, 0x5, 0x2, 0x4009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x10001, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x8, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000951000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, 0xffffffffffffffff, 0x7}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {0x0, 0xa00}], 0x2) syz_emit_ethernet(0x120, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 3.602655321s ago: executing program 4 (id=2778): unshare(0x4000400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r0, 0x10f, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2062) r1 = getpgid(0x0) syz_pidfd_open(r1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = io_uring_setup(0x47, &(0x7f0000002b80)={0x0, 0xc8a1, 0x840, 0x80008, 0xbe, 0x0, r2}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x1}, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000003000000", 0xfe60) 3.294003694s ago: executing program 0 (id=2779): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x7fffffff, 0xb}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x70bd2a, 0x25dfdbfc, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0xffffffff}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x3}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x78}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@debug}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$eJzs3cFqE1EUANCbmCYTcdGdIAgjLnRV1C+oSAUxIFSy0J2gK7NqN6mb9jP8Bf/LD5CuspEncSadmKYxBDKj7Tmb3pn7Xt+7M2SSTW5SFL7f/RpZ1or2fuzHpBW70Y6ZswAArpNJSvEjFZreCwBQjzXe/3/WvCUAYMvevnv/+vlgcHCY51nE+dl4OB4Wf4v8y1eDgyf5b7vVrPPxeHjrIv80X/zsMM3vxO0y/6yYn1+kuxEx7Mbjh0V+mnvxZpD/Ob8XH7dcOwAAAAAAAAAAAAAAAAAAAAAANOV+5DNL+/vs7S3m+2W+OJrrD7TQv6cT9zrlYdUeKJ3WURQAAAAAAAAAAAAAAAAAAAD8Z45Pvnz+MBp9OqqCXkTMn+ksGXN10Cr/8VqDmw/asdn0flnmBou2yku03QL7y2/uOkF0/pW7s2mQ17BWf+XlTWkaLH8VzNpiXDm9GxGrV390uOnmJyml0bcHR8cnkVYOrp4RvVqfSAAAAAAAAAAAAAAAAAAAcHPNfev7kqyJDQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAA6rf/58Gl8+sDE4j4k78dfBsrZ3IGq0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6+tXAAAA//85ziI4") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ftruncate(r3, 0x4a8e) 3.186784885s ago: executing program 1 (id=2780): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) (async, rerun: 64) poll(&(0x7f0000000200)=[{r1, 0x200}], 0x1, 0xfff) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r2, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800014000000000080002400000000018000380140001"], 0x80}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x803, 0x0) (rerun: 32) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="7c000000100021ff2abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000000000380012800b00010067726574617000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x20004000) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0x77, "922f082d4d1961b5ccc2d48ce21557a076d8f60bc9951aef43a290d2457f0a440d6332cf01e0018770f83b97b8b434382114a2cd8ee8398c1658c8f2103f52c3c207b3e5e71b24cdc78197c2f86df4042ce265e0670ccf60cbf6f41e4b535100b7ce9bd64dcddf865bc04d7ca874132637717b0e03eccf"}, &(0x7f0000000080)=0x7f) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xe3, 0x3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) timer_create(0x4, &(0x7f0000000340)={0x0, 0xa, 0x0, @thr={&(0x7f0000000140)="f1b39ab61bd8b5a6b9635c924df8cd813f34b72a3e71fd49e670301267fa97cf3158d63d101a0358001169d782ecb1b26f183918b245ed92bcfa8ba2cf36bcb867a26dd5bf24379cc6cd938cdc27fc6156f71fa38d248de96a5962f876638a85bbda6e3760e61e16f32de1da421bf24f62d9a17a9efc9fb827a5f0cf6a66c5b78a543000fabf8e6bbfe860056c9caec4f32c149456c56263882e2cfbe01128c1408e73bb77622f8528d28c32", &(0x7f0000000280)="8eb344d8c6fa757aeb5a729b2a7513e2521465f06ea02af30a9a4f39fd0d2c1d7419b8db0691a4ddb67f3c9a26453430047495db3b9b3e52e107cd3b087ef0113434ba2638c2cf7ba374d93da5e97458d2b16a242b69602a43d3de6a939ee0f8b0e52083a3d2ed1426a7f58cd46110802dbe54fed1bc15518c4355f4b720fb93728ce9077dae3495a2cd2337ec786e76982bbc3d8659cbb2235f05f69d2f7a75c05c8c271415ab69ab7f1d2502ab581aa29cbe0e6536d2"}}, &(0x7f0000000380)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) (async) sendmsg$unix(0xffffffffffffffff, 0x0, 0x802) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.138808726s ago: executing program 4 (id=2781): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x8c, 0x200) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={&(0x7f0000001040), 0x1}, 0x40, 0x0, 0x7ffffc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000010c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) connect$inet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x6, 0x40, 0x1, 0x0, 0x4000000000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1ff, 0x2, @perf_config_ext={0x4, 0x1}, 0x28, 0x7ff, 0x6, 0x3, 0xb, 0x7, 0x3ff, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12011, r5, 0x0) waitid(0x0, r2, 0x0, 0x1000000, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000001000), &(0x7f0000001080)=0x30) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfee9) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000100)={0x11, 0x0, 0x0}) 3.026365337s ago: executing program 1 (id=2782): close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x1000000, 0xc}, 0x94) 2.942775848s ago: executing program 1 (id=2783): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0xfffffffe, 0x169, 0x9b, 0x5}, &(0x7f0000000100)=0x98) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0x1]}, 0xfffffffffffffffe, 0x8) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) openat$cgroup_ro(r6, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) sendfile(r8, r9, 0x0, 0x20000023896) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001040), r2) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9c756bb51fc34963ba0aa8", @ANYRES16=r10, @ANYBLOB="010026bd7000fedbdf252800000005002b000000000006000600030000000a0001007770616e30000000"], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x8004) 1.622866193s ago: executing program 4 (id=2784): r0 = socket$netlink(0x10, 0x3, 0x8000000004) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_gettime(0x2, &(0x7f0000000000)) setuid(0xee00) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000000)="580000001400192340835b80040d8c560a067fbc45ff620500000000070058000b480400945f640094272d7008070000000000000000008000f0fffeffe809000000ffd9dd00000010000100030808004149224e06040800", 0x58}], 0x1) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x101000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x3, 0x3, 0x6, 0x0, 0x2}) r2 = creat(&(0x7f0000000780)='./file0\x00', 0x0) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[], 0x78) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:klogd_exec_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x4e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x2, 0x2, 0x1, 0x9}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.567879443s ago: executing program 7 (id=2785): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0xa, 0x3, 0xff) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x20000000) poll(0x0, 0x0, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011a2abd7000fadbdf250900070000000300000000"], 0x24}, 0x1, 0x0, 0x0, 0xc4}, 0x24040010) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) write$tun(r5, 0x0, 0x82) 1.434676475s ago: executing program 4 (id=2786): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000000580)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@data_err_abort}, {@norecovery}]}, 0xfe, 0x47f, &(0x7f0000000f00)="$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") symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800000, 0x0, 0xb7, 0x0, &(0x7f00000003c0)) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84) ioprio_set$pid(0x2, 0x0, 0x2000) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) sendfile(r0, r0, 0x0, 0x21) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x65, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x9, 0x3}, 0x210, 0x0, 0x10000, 0x2, 0x2, 0x80000003, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x40c, &(0x7f0000000240)={[{@usrjquota}, {@dioread_nolock}, {@noinit_itable}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") creat(&(0x7f0000000e40)='./file1\x00', 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c4e8, 0x0, 0xff, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) perf_event_open(0x0, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x8) ioctl$USBDEVFS_FREE_STREAMS(0xffffffffffffffff, 0x8008551d, &(0x7f00000001c0)=ANY=[]) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001800090001000000fedbdf250a80200004030007"], 0x1c}}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x400c804) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x3b76f28c8736158c, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r4, 0x5425, 0x0) 1.433481895s ago: executing program 7 (id=2787): socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xa420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r5, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/11, 0xb}], 0x1, 0x3, 0x7fffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d, 0x10001}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) read(r7, &(0x7f00000000c0)=""/62, 0x3e) write$binfmt_aout(r7, &(0x7f0000000500)=ANY=[], 0xff2e) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001a80)=@filter={'filter\x00', 0x42, 0x4, 0x2d8, 0xffffffff, 0xf8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x240, 0x240, 0x240, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {}, 0x73}, 0x0, 0xd0, 0xf8, 0x0, {0x100000000000000}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'dvmrp0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x338) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000001c40)=@filter={'filter\x00', 0x8000000, 0x4, 0x370, 0xffffffff, 0xe8, 0x0, 0xe8, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffff00, 0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], 'macvlan0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x15}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xff000000], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x3, 0x5, {0x2000010}}}}, {{@ipv6={@private2, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xffffff00, 0xff], [0x0, 0xffffff00, 0xf97f1f27bc0fd003, 0xff000000], 'bridge_slave_0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x11, 0x80, 0x2, 0x6a}, 0x0, 0xa8, 0xd0}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) 440.976686ms ago: executing program 1 (id=2788): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3e, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) 0s ago: executing program 1 (id=2789): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) (async) setfsgid(0xee00) (async) r2 = syz_clone(0x89c2380, 0x0, 0x52, 0x0, 0x0, 0x0) migrate_pages(r2, 0x5, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x3e) setuid(0xee01) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x8, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x7, 0x10, 0xe28, 0xb, {{0x17, 0x4, 0x0, 0x5, 0x5c, 0x66, 0x0, 0x3, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0x4e, [@local, @loopback]}, @timestamp_addr={0x44, 0x34, 0xc1, 0x1, 0x7, [{@private=0xa010102, 0x7}, {@broadcast, 0x6}, {@private=0xa010102}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xb722}, {@loopback, 0x2}, {@rand_addr=0x64010100, 0xd98}]}, @ssrr={0x89, 0x7, 0xa1, [@private=0xa010101]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000180)={'wg1\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000240)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x5, 0x24, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x20}, @remote, 0x80, 0x40, 0x4, 0x8}}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00002dbd7000fedbdf250300000024000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="b60fd41c996142a4350008dc36ff0c0000591348c04fbb62af04000000bb21e20df7d29c"], 0x38}, 0x1, 0x0, 0x0, 0x4008845}, 0x4008080) kernel console output (not intermixed with test programs): t_r:unlabeled_t tclass=file permissive=1 [ 602.302538][ T28] audit: type=1400 audit(1778182726.170:1998): avc: denied { write } for pid=13849 comm="syz.4.2451" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 602.324451][ T28] audit: type=1400 audit(1778182726.179:1999): avc: denied { lock } for pid=13849 comm="syz.4.2451" path="/120/file1/freezer.state" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 602.384297][T13873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 602.397238][T13873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 602.416070][T13873] loop8: detected capacity change from 0 to 2048 [ 602.459504][T13873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.473140][ T28] audit: type=1400 audit(1778182726.993:2000): avc: denied { write } for pid=13872 comm="syz.8.2458" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 602.512471][ T28] audit: type=1400 audit(1778182727.022:2001): avc: denied { write } for pid=13872 comm="syz.8.2458" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 602.552047][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.806942][T13887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2461'. [ 605.858141][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.573455][T13894] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2464'. [ 608.047131][T13909] syzkaller0: entered promiscuous mode [ 608.372929][T13909] syzkaller0: entered allmulticast mode [ 608.404356][T13909] tipc: Started in network mode [ 608.409570][T13909] tipc: Node identity 42cb3d553c42, cluster identity 4711 [ 609.440906][T13909] tipc: Enabled bearer , priority 0 [ 609.582972][T13908] tipc: Resetting bearer [ 609.606429][T13908] tipc: Disabling bearer [ 609.863215][T13907] loop8: detected capacity change from 0 to 512 [ 610.686506][ T9] tipc: Node number set to 2122923349 [ 611.127496][T13907] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2465: corrupted inode contents [ 611.141678][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.142300][T13907] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.2465: mark_inode_dirty error [ 611.162914][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 611.162933][ C1] EXT4-fs (loop8): initial error at time 1778182735: ext4_do_update_inode:5690: inode 16 [ 611.162969][ C1] EXT4-fs (loop8): last error at time 1778182735: ext4_do_update_inode:5690: inode 16 [ 611.190512][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.191299][T13907] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2465: corrupted inode contents [ 611.215151][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.225471][T13907] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.2465: mark_inode_dirty error [ 611.247733][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.250694][T13907] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2465: corrupted inode contents [ 611.273460][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.276476][T13907] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 611.295320][T13907] loop8: lost filesystem error report for type 5 error -117 [ 611.296766][T13907] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2465: corrupted inode contents [ 611.317085][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.318376][T13907] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.2465: mark_inode_dirty error [ 611.340963][T13907] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 611.346319][T13907] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 611.365451][T13907] loop8: lost filesystem error report for type 5 error -117 [ 611.368608][T13907] EXT4-fs (loop8): 1 truncate cleaned up [ 611.384601][T13907] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.399465][T13907] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 611.443712][T13907] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2465'. [ 611.793581][ T852] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 611.850937][ T852] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 611.892915][T13903] lo speed is unknown, defaulting to 1000 [ 612.146947][T13942] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2474'. [ 612.184045][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.457550][T13933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2472'. [ 612.570399][T13933] xt_CT: You must specify a L4 protocol and not use inversions on it [ 612.603033][ T28] audit: type=1400 audit(1778182736.426:2002): avc: denied { bind } for pid=13932 comm="syz.4.2472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 612.641795][T13933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2472'. [ 612.729071][ T28] audit: type=1400 audit(1778182736.595:2003): avc: denied { read } for pid=13954 comm="syz.8.2476" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 614.184436][T13903] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.191706][T13903] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.199434][T13903] bridge_slave_0: entered allmulticast mode [ 614.206144][T13903] bridge_slave_0: entered promiscuous mode [ 614.224951][T13903] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.341408][T13903] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.005703][T13970] loop4: detected capacity change from 0 to 512 [ 615.360821][T13903] bridge_slave_1: entered allmulticast mode [ 615.371161][T13903] bridge_slave_1: entered promiscuous mode [ 615.716957][T13970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2478: corrupted inode contents [ 615.832775][T13970] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 615.839807][T13970] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2478: mark_inode_dirty error [ 615.851333][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 615.851475][ C1] EXT4-fs (loop4): initial error at time 1778182739: ext4_do_update_inode:5690: inode 16 [ 615.852147][ C1] EXT4-fs (loop4): last error at time 1778182739: ext4_do_update_inode:5690: inode 16 [ 616.019780][T13970] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 616.024147][T13970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2478: corrupted inode contents [ 616.045198][T13970] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 616.046082][T13970] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2478: mark_inode_dirty error [ 616.066748][T13970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2478: corrupted inode contents [ 616.081331][T13970] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 616.089866][T13970] loop4: lost filesystem error report for type 5 error -117 [ 616.090156][T13970] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2478: corrupted inode contents [ 616.111141][T13970] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2478: mark_inode_dirty error [ 616.124076][T13970] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 616.144060][T13970] loop4: lost filesystem error report for type 5 error -117 [ 616.147090][T13903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.151051][T13980] netlink: 'syz.1.2480': attribute type 2 has an invalid length. [ 616.161383][T13903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.190750][T13970] EXT4-fs (loop4): 1 truncate cleaned up [ 616.191170][T13970] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.191244][T13970] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.192616][T13980] netlink: 'syz.1.2480': attribute type 8 has an invalid length. [ 616.192634][T13980] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2480'. [ 616.202363][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2478'. [ 616.213768][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.213816][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 616.213909][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 616.220528][T13903] team0: Port device team_slave_0 added [ 616.274537][T13903] team0: Port device team_slave_1 added [ 616.284458][T13903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.328488][ T28] audit: type=1326 audit(1778182739.917:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.330290][ T9050] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 616.394894][ T28] audit: type=1326 audit(1778182739.917:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.452568][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.455965][ T9050] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:37: Failed to release dquot type 1 [ 616.508356][ T28] audit: type=1326 audit(1778182739.917:2006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.534070][T13903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.548662][T13903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.558334][T13903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 616.585388][ T28] audit: type=1326 audit(1778182739.917:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.629448][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.663741][T13903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.688712][ T28] audit: type=1326 audit(1778182739.917:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.729852][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.740268][ T28] audit: type=1326 audit(1778182739.917:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 616.744933][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 616.822838][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 617.014709][T13903] hsr_slave_0: entered promiscuous mode [ 617.020789][T13903] hsr_slave_1: entered promiscuous mode [ 617.026706][T13903] debugfs: 'hsr0' already exists in 'hsr' [ 617.032458][T13903] Cannot create hsr debugfs directory [ 617.073715][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.084027][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.110370][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 617.197046][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 617.197081][ T28] audit: type=1326 audit(1778182740.750:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbca68ed60e code=0x7ffc0000 [ 617.246506][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.256870][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.267326][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 617.340115][ T28] audit: type=1326 audit(1778182740.890:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbca68ed60e code=0x7ffc0000 [ 617.385834][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2480'. [ 617.444324][T13980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2480'. [ 617.454348][ T28] audit: type=1326 audit(1778182741.002:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13977 comm="syz.8.2479" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbca692cdd9 code=0x7ffc0000 [ 617.576952][T14011] netlink: 'syz.7.2482': attribute type 36 has an invalid length. [ 617.588268][T14011] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 617.598297][T14011] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 617.629946][T14004] netlink: 'syz.7.2482': attribute type 10 has an invalid length. [ 617.637964][T14004] ipvlan0: entered allmulticast mode [ 617.640079][ T28] audit: type=1400 audit(1778182741.171:2112): avc: denied { write } for pid=13992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.643405][T14004] veth0_vlan: entered allmulticast mode [ 617.673295][T14004] team0: Device ipvlan0 is VLAN challenged and team device has VLAN set up [ 617.735397][ T28] audit: type=1400 audit(1778182741.236:2113): avc: denied { write } for pid=14014 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.759627][ T12] bond2 (unregistering): (slave gretap3): Releasing active interface [ 617.784175][ T12] bond3 (unregistering): (slave geneve3): Releasing active interface [ 618.174577][ T12] bond0 (unregistering): Released all slaves [ 618.182596][ T12] bond1 (unregistering): (slave vlan2): Releasing active interface [ 618.192300][ T12] bond1 (unregistering): Released all slaves [ 618.203103][ T12] bond2 (unregistering): Released all slaves [ 618.212062][ T12] bond3 (unregistering): Released all slaves [ 618.228393][T14019] bridge0: port 1(ip6gretap0) entered blocking state [ 618.236499][T14019] bridge0: port 1(ip6gretap0) entered disabled state [ 618.246106][T14019] ip6gretap0: entered allmulticast mode [ 618.262738][T14019] ip6gretap0: entered promiscuous mode [ 618.293507][T14019] bridge0: port 1(ip6gretap0) entered blocking state [ 618.300710][T14019] bridge0: port 1(ip6gretap0) entered forwarding state [ 618.341032][T14025] loop8: detected capacity change from 0 to 512 [ 618.349450][T14025] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 618.373792][T13988] lo speed is unknown, defaulting to 1000 [ 618.389648][ T12] tipc: Left network mode [ 618.397607][ T12] IPVS: stopping backup sync thread 10435 ... [ 618.405962][T14025] EXT4-fs error (device loop8): ext4_iget_extra_inode:5128: inode #15: comm syz.8.2485: corrupted in-inode xattr: e_value out of bounds [ 618.420004][T14025] fserror_report: 4 callbacks suppressed [ 618.420020][T14025] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.430462][T14025] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.2485: couldn't read orphan inode 15 (err -117) [ 618.451573][T14025] loop8: lost filesystem error report for type 5 error -117 [ 618.453645][T14025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 618.476925][ T12] hsr_slave_0: left promiscuous mode [ 618.489112][ T12] hsr_slave_1: left promiscuous mode [ 618.515294][ T12] veth1_macvtap: left promiscuous mode [ 618.529238][ T12] veth0_macvtap: left promiscuous mode [ 618.539894][ T12] veth1_vlan: left promiscuous mode [ 618.552455][ T12] veth0_vlan: left promiscuous mode [ 618.597432][ T28] audit: type=1400 audit(1778182742.088:2114): avc: denied { write } for pid=14029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.684333][ T28] audit: type=1400 audit(1778182742.163:2115): avc: denied { write } for pid=14049 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.811535][ T28] audit: type=1400 audit(1778182742.284:2116): avc: denied { write } for pid=14053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.855859][ T28] audit: type=1400 audit(1778182742.303:2117): avc: denied { write } for pid=14064 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 618.892807][ T28] audit: type=1400 audit(1778182742.322:2118): avc: denied { sqpoll } for pid=14036 comm="syz.7.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 621.775243][T14085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2491'. [ 621.834263][T14085] vlan4: entered promiscuous mode [ 621.841760][T14085] veth0_to_bond: entered promiscuous mode [ 621.848197][T14085] vlan4: entered allmulticast mode [ 621.848521][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.856753][T14085] veth0_to_bond: entered allmulticast mode [ 621.965820][T13903] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 621.999520][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 622.018840][T13903] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 622.040899][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 622.052598][T13903] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 622.064795][T14110] loop8: detected capacity change from 0 to 256 [ 622.076946][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 622.111705][T13903] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 622.128596][T13903] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.139650][ T12] IPVS: stop unused estimator thread 0... [ 622.219105][T13903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.241041][T13903] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.275807][ T839] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.282932][ T839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 622.356014][ T839] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.363208][ T839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.161668][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2499'. [ 623.257462][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 623.257477][ T28] audit: type=1400 audit(1778182746.439:2123): avc: denied { write } for pid=14114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 623.454221][T13903] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 623.464948][T13903] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 623.520883][T14152] bridge0: port 3(veth0_to_bridge) entered blocking state [ 623.540803][T14152] bridge0: port 3(veth0_to_bridge) entered disabled state [ 623.562721][T14152] veth0_to_bridge: entered allmulticast mode [ 623.570837][T14152] veth0_to_bridge: entered promiscuous mode [ 623.577446][T14152] bridge0: port 3(veth0_to_bridge) entered blocking state [ 623.584629][T14152] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 623.693735][T13903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 623.862210][T13903] veth0_vlan: entered promiscuous mode [ 623.878293][T13903] veth1_vlan: entered promiscuous mode [ 623.897148][T14169] loop4: detected capacity change from 0 to 512 [ 623.935450][T13903] veth0_macvtap: entered promiscuous mode [ 623.952953][T13903] veth1_macvtap: entered promiscuous mode [ 624.017461][T13903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.033950][T13903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.064861][ T9050] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.076732][ T9050] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.130079][T14169] EXT4-fs error (device loop4): __ext4_fill_super:5596: inode #2: comm syz.4.2501: iget: special inode unallocated [ 624.257580][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.278160][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.292888][T14169] loop4: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 624.298236][T14169] EXT4-fs (loop4): get root inode failed [ 624.307431][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 624.307451][ C1] EXT4-fs (loop4): initial error at time 1778182747: __ext4_fill_super:5596: inode 2 [ 624.307480][ C1] EXT4-fs (loop4): last error at time 1778182747: __ext4_fill_super:5596: inode 2 [ 624.476933][T14185] netlink: 'syz.0.2467': attribute type 1 has an invalid length. [ 624.592423][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 624.902267][T14169] EXT4-fs (loop4): mount failed [ 624.954604][ T28] audit: type=1400 audit(1778182748.021:2124): avc: denied { write } for pid=14153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.003940][T14165] lo speed is unknown, defaulting to 1000 [ 625.161183][ T28] audit: type=1400 audit(1778182748.227:2125): avc: denied { write } for pid=14196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.222339][ T28] audit: type=1400 audit(1778182748.283:2126): avc: denied { write } for pid=14215 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 625.403772][T14220] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 625.496735][T14225] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2511'. [ 625.577691][T14220] 9p: Bad value for 'rfdno' [ 626.043450][ T28] audit: type=1400 audit(1778182749.050:2127): avc: denied { write } for pid=14229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 626.370247][ T28] audit: type=1400 audit(1778182749.350:2128): avc: denied { write } for pid=14242 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 627.419115][T14250] loop4: detected capacity change from 0 to 512 [ 627.501762][ T3026] 8021q: adding VLAN 0 to HW filter on device eth2 [ 627.548518][T14250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.704751][T14250] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.739897][T14262] netlink: 'syz.7.2516': attribute type 13 has an invalid length. [ 627.772628][T14262] netlink: 'syz.7.2516': attribute type 17 has an invalid length. [ 627.897447][ T28] audit: type=1400 audit(1778182750.791:2129): avc: denied { write } for pid=14246 comm="syz.4.2513" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 628.038429][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2518'. [ 628.097233][T14259] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.104424][T14259] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.116171][T14278] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2518'. [ 628.212943][T14259] tipc: Resetting bearer [ 628.220411][T14286] 9p: Bad value for 'wfdno' [ 628.348415][T14262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.356362][T14262] 8021q: adding VLAN 0 to HW filter on device team0 [ 628.396868][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.418005][T14291] FAULT_INJECTION: forcing a failure. [ 628.418005][T14291] name failslab, interval 1, probability 0, space 0, times 0 [ 628.430892][T14291] CPU: 0 UID: 0 PID: 14291 Comm: syz.4.2522 Tainted: G W syzkaller #0 PREEMPT(full) [ 628.430960][T14291] Tainted: [W]=WARN [ 628.430969][T14291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.430998][T14291] Call Trace: [ 628.431005][T14291] [ 628.431014][T14291] __dump_stack+0x1d/0x30 [ 628.431042][T14291] dump_stack_lvl+0x95/0xd0 [ 628.431143][T14291] dump_stack+0x15/0x1b [ 628.431253][T14291] should_fail_ex+0x263/0x280 [ 628.431340][T14291] should_failslab+0x8c/0xb0 [ 628.431410][T14291] __kmalloc_noprof+0xb8/0x4d0 [ 628.431499][T14291] ? ethnl_default_set_doit+0xab/0x540 [ 628.431536][T14291] ? __nla_parse+0x40/0x60 [ 628.431569][T14291] ethnl_default_set_doit+0xab/0x540 [ 628.431615][T14291] ? genl_family_rcv_msg_attrs_parse+0x154/0x1b0 [ 628.431642][T14291] ? genl_family_rcv_msg_attrs_parse+0x1ad/0x1b0 [ 628.431670][T14291] genl_family_rcv_msg_doit+0x187/0x1f0 [ 628.431700][T14291] genl_rcv_msg+0x432/0x470 [ 628.431750][T14291] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 628.431829][T14291] netlink_rcv_skb+0x123/0x220 [ 628.431930][T14291] ? __pfx_genl_rcv_msg+0x10/0x10 [ 628.432076][T14291] genl_rcv+0x28/0x40 [ 628.432096][T14291] netlink_unicast+0x5a8/0x680 [ 628.432126][T14291] netlink_sendmsg+0x5c8/0x6f0 [ 628.432159][T14291] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.432206][T14291] ____sys_sendmsg+0x563/0x5b0 [ 628.432236][T14291] ___sys_sendmsg+0x195/0x1e0 [ 628.432274][T14291] __x64_sys_sendmsg+0xd4/0x160 [ 628.432317][T14291] x64_sys_call+0x194c/0x3020 [ 628.432346][T14291] do_syscall_64+0x12c/0x3b0 [ 628.432376][T14291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.432432][T14291] RIP: 0033:0x7f3bc93ecdd9 [ 628.432460][T14291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.432481][T14291] RSP: 002b:00007f3bc7e47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.432577][T14291] RAX: ffffffffffffffda RBX: 00007f3bc9665fa0 RCX: 00007f3bc93ecdd9 [ 628.432594][T14291] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 628.432610][T14291] RBP: 00007f3bc7e47090 R08: 0000000000000000 R09: 0000000000000000 [ 628.432626][T14291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.432641][T14291] R13: 00007f3bc9666038 R14: 00007f3bc9665fa0 R15: 00007fff29663b48 [ 628.432683][T14291] [ 628.760564][T14262] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.767696][T14262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 628.815470][T14262] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.822602][T14262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.044929][T14262] veth1_vlan: left promiscuous mode [ 629.050813][T14262] veth0_vlan: left promiscuous mode [ 629.070932][T14262] veth0_vlan: entered promiscuous mode [ 629.083809][T14262] veth1_vlan: entered promiscuous mode [ 629.091222][T14262] ipvlan0: left allmulticast mode [ 629.096279][T14262] veth0_vlan: left allmulticast mode [ 629.103370][T14262] veth1_macvtap: left promiscuous mode [ 629.109413][T14262] veth0_macvtap: left promiscuous mode [ 629.116050][T14262] veth0_macvtap: entered promiscuous mode [ 629.123073][T14262] veth1_macvtap: entered promiscuous mode [ 629.130570][T14262] geneve1: left promiscuous mode [ 629.139127][T14262] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 629.147679][T14262] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 629.156293][T14262] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 629.164677][T14262] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 629.191195][T14262] geneve1: entered promiscuous mode [ 629.198784][T14262] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.200045][T14304] netlink: 'syz.4.2526': attribute type 1 has an invalid length. [ 629.208821][T14262] vlan3: left allmulticast mode [ 629.218113][T14262] veth0_to_bond: left allmulticast mode [ 629.291647][T14304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 629.318339][T14257] lo speed is unknown, defaulting to 1000 [ 631.860904][T14332] loop0: detected capacity change from 0 to 512 [ 632.044648][T14332] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2532: corrupted inode contents [ 632.137815][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.139384][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 632.155071][ C1] EXT4-fs (loop0): initial error at time 1778182754: ext4_do_update_inode:5690: inode 16 [ 632.164938][ C1] EXT4-fs (loop0): last error at time 1778182754: ext4_do_update_inode:5690: inode 16 [ 632.182192][T14332] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2532: mark_inode_dirty error [ 632.196201][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.199350][T14332] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2532: corrupted inode contents [ 632.243375][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.255976][T14332] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2532: mark_inode_dirty error [ 632.350909][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.365531][T14332] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2532: corrupted inode contents [ 632.602503][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 632.609526][T14332] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 632.746010][T14332] loop0: lost filesystem error report for type 5 error -117 [ 633.116474][T14351] loop4: detected capacity change from 0 to 256 [ 633.162701][T14353] netlink: 'syz.1.2535': attribute type 11 has an invalid length. [ 633.253096][ T28] audit: type=1400 audit(1778182755.797:2130): avc: denied { write } for pid=14323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.320646][T14353] geneve2: entered promiscuous mode [ 633.385106][T14353] geneve2: entered allmulticast mode [ 633.420913][T14332] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2532: corrupted inode contents [ 633.436139][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 633.438195][T14332] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2532: mark_inode_dirty error [ 633.458801][T14332] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 633.460072][T14332] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 633.475172][T14351] msdos: Bad value for 'uid' [ 633.478239][T14332] loop0: lost filesystem error report for type 5 error -117 [ 633.478599][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 633.509421][T14351] msdos: Bad value for 'uid' [ 633.520636][ T9050] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 633.529538][ T9050] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 633.538381][ T9050] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 633.556183][T14332] EXT4-fs (loop0): 1 truncate cleaned up [ 633.579072][T14332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.594394][T14332] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.657275][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2532'. [ 633.666820][ T9034] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 633.677325][ T9034] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:30: Failed to release dquot type 1 [ 633.677462][ T28] audit: type=1400 audit(1778182756.134:2131): avc: denied { write } for pid=14359 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.730217][T14365] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2536'. [ 634.049308][ T28] audit: type=1400 audit(1778182756.275:2132): avc: denied { create } for pid=14363 comm="syz.1.2538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 634.087645][T14374] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2540'. [ 634.496119][ T3026] 8021q: adding VLAN 0 to HW filter on device eth1 [ 634.674721][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.979089][T14387] hub 9-0:1.0: USB hub found [ 637.060920][T14387] hub 9-0:1.0: 8 ports detected [ 637.933850][ T28] audit: type=1400 audit(1778182760.186:2133): avc: denied { write } for pid=14391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 638.575905][T14413] loop0: detected capacity change from 0 to 512 [ 639.442068][T14413] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2546: corrupted inode contents [ 639.682889][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 639.693402][T14413] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2546: mark_inode_dirty error [ 639.694426][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 639.694449][ C1] EXT4-fs (loop0): initial error at time 1778182761: ext4_do_update_inode:5690: inode 16 [ 639.694484][ C1] EXT4-fs (loop0): last error at time 1778182761: ext4_do_update_inode:5690: inode 16 [ 639.986628][ T28] audit: type=1400 audit(1778182762.095:2134): avc: denied { write } for pid=14422 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 640.081415][ T3026] 8021q: adding VLAN 0 to HW filter on device eth3 [ 640.437300][T14421] lo speed is unknown, defaulting to 1000 [ 641.023712][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 641.029930][T14413] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2546: corrupted inode contents [ 641.589431][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 642.508875][ T28] audit: type=1400 audit(1778182764.463:2135): avc: denied { write } for pid=14428 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.969525][T14413] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2546: mark_inode_dirty error [ 643.306463][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 643.332327][T14413] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2546: corrupted inode contents [ 643.608103][ T28] audit: type=1400 audit(1778182764.884:2136): avc: denied { write } for pid=14448 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.798279][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 643.807601][T14413] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 644.355561][T14413] loop0: lost filesystem error report for type 5 error -117 [ 644.362355][T14413] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2546: corrupted inode contents [ 644.431897][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 644.433558][ T3026] 8021q: adding VLAN 0 to HW filter on device eth4 [ 644.435049][T14413] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2546: mark_inode_dirty error [ 644.587134][ T28] audit: type=1400 audit(1778182766.400:2137): avc: denied { write } for pid=14457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.607096][ T28] audit: type=1400 audit(1778182766.428:2138): avc: denied { write } for pid=14469 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.705331][ T28] audit: type=1400 audit(1778182766.512:2139): avc: denied { write } for pid=14471 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.828420][ T28] audit: type=1400 audit(1778182766.634:2140): avc: denied { create } for pid=14482 comm="syz.4.2554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 644.860641][ T28] audit: type=1400 audit(1778182766.662:2141): avc: denied { write } for pid=14491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.493095][T14413] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 648.503478][T14413] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 649.022560][ T28] audit: type=1400 audit(1778182770.555:2142): avc: denied { write } for pid=14496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.191872][T14514] pimreg: entered allmulticast mode [ 649.192605][T14514] pimreg: left allmulticast mode [ 649.206907][ T28] audit: type=1400 audit(1778182770.733:2143): avc: denied { write } for pid=14515 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.286519][T14520] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2558'. [ 650.296420][T14413] loop0: lost filesystem error report for type 5 error -117 [ 650.508907][T14413] EXT4-fs (loop0): 1 truncate cleaned up [ 651.300607][ T9036] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 651.317075][ T9036] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:31: Failed to release dquot type 1 [ 651.326238][T14413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.328847][ T9036] loop0: lost filesystem error report for type 5 error -117 [ 651.569233][T14518] loop4: detected capacity change from 0 to 512 [ 652.096123][T14413] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.363004][T14518] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2557: corrupted inode contents [ 652.374896][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.375537][T14518] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2557: mark_inode_dirty error [ 652.396053][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.396481][T14518] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2557: corrupted inode contents [ 652.417488][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.417870][T14518] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2557: mark_inode_dirty error [ 652.438266][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.438512][T14518] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2557: corrupted inode contents [ 652.459802][ C0] EXT4-fs (loop4): error count since last fsck: 4 [ 652.459835][ C0] EXT4-fs (loop4): initial error at time 1778182773: ext4_do_update_inode:5690: inode 16 [ 652.460377][ C0] EXT4-fs (loop4): last error at time 1778182773: __ext4_ext_dirty:207: inode 16 [ 652.494307][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.502687][T14518] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 652.525799][T14518] loop4: lost filesystem error report for type 5 error -117 [ 652.529501][T14518] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2557: corrupted inode contents [ 652.552197][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.556373][T14518] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2557: mark_inode_dirty error [ 652.581279][T14518] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 652.584530][T14518] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 652.607891][T14518] loop4: lost filesystem error report for type 5 error -117 [ 652.627518][T14518] EXT4-fs (loop4): 1 truncate cleaned up [ 652.673627][T14518] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 652.690489][T14518] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 652.719573][ T1824] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 652.788348][ T1824] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 652.826402][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.970404][ T28] audit: type=1400 audit(1778182774.251:2144): avc: denied { write } for pid=14530 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.095110][ T28] audit: type=1400 audit(1778182774.364:2145): avc: denied { write } for pid=14548 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.187981][ T28] audit: type=1400 audit(1778182774.457:2146): avc: denied { listen } for pid=14553 comm="syz.1.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 653.248741][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.307369][ T28] audit: type=1400 audit(1778182774.560:2147): avc: denied { write } for pid=14551 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.444791][T14572] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2567'. [ 653.452047][ T28] audit: type=1400 audit(1778182774.691:2148): avc: denied { write } for pid=14570 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 653.567053][ T28] audit: type=1400 audit(1778182774.719:2149): avc: denied { ioctl } for pid=14571 comm="syz.8.2567" path="socket:[40248]" dev="sockfs" ino=40248 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 653.703472][T14579] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2566'. [ 653.714164][T14581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.796768][T14581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.041435][T14585] loop4: detected capacity change from 0 to 512 [ 654.485493][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 654.485513][ T28] audit: type=1326 audit(1778182775.655:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3bc93ad60e code=0x7ffc0000 [ 654.640584][T14587] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2570'. [ 655.051444][ T28] audit: type=1326 audit(1778182775.655:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3bc93ad60e code=0x7ffc0000 [ 655.051603][T14579] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.077297][ T28] audit: type=1326 audit(1778182775.655:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3bc93ebc47 code=0x7ffc0000 [ 655.112624][ T28] audit: type=1326 audit(1778182775.655:2265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3bc93ee04a code=0x7ffc0000 [ 655.140805][T14590] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2571'. [ 655.171864][T14585] EXT4-fs (loop4): 1 orphan inode deleted [ 655.231195][T14585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 655.607638][ T28] audit: type=1400 audit(1778182776.301:2266): avc: denied { listen } for pid=14589 comm="syz.8.2571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 655.658672][T14579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.740786][ T28] audit: type=1326 audit(1778182776.535:2267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bc93ad60e code=0x7ffc0000 [ 655.815377][T14579] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 655.838528][T14579] bridge0: port 3(veth0_to_bridge) entered disabled state [ 655.845776][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.853656][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.883263][ T28] audit: type=1326 audit(1778182776.535:2268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3bc93ad60e code=0x7ffc0000 [ 655.966371][T14579] bond0 (unregistering): Released all slaves [ 655.995635][ T28] audit: type=1326 audit(1778182776.535:2269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc93ecdd9 code=0x7ffc0000 [ 656.098954][ T28] audit: type=1326 audit(1778182776.535:2270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc93ecdd9 code=0x7ffc0000 [ 656.149999][T14603] lo speed is unknown, defaulting to 1000 [ 656.234388][ T28] audit: type=1326 audit(1778182776.544:2271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14575 comm="syz.4.2566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3bc93ecdd9 code=0x7ffc0000 [ 656.271523][T14610] loop0: detected capacity change from 0 to 512 [ 656.293906][T14610] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 656.313739][T14610] EXT4-fs (loop0): orphan cleanup on readonly fs [ 656.324706][T14610] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2573: bg 0: block 16: invalid block bitmap [ 656.352252][T14610] loop0: lost filesystem error report for type 5 error -117 [ 656.352530][T14610] EXT4-fs (loop0): Remounting filesystem read-only [ 656.366452][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 656.366473][ C1] EXT4-fs (loop0): initial error at time 1778182777: ext4_validate_block_bitmap:432 [ 656.366497][ C1] EXT4-fs (loop0): last error at time 1778182777: ext4_validate_block_bitmap:432 [ 656.434969][T14610] EXT4-fs (loop0): 1 truncate cleaned up [ 656.454353][T14610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 656.488122][T14610] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.895669][T14649] loop8: detected capacity change from 0 to 512 [ 659.028413][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.446727][T14649] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 661.553836][T14666] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2582'. [ 663.063781][T14689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.217521][T14689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.026343][T14689] loop8: detected capacity change from 0 to 2048 [ 664.070846][T14689] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 664.088280][T14682] lo speed is unknown, defaulting to 1000 [ 664.108120][ T28] kauditd_printk_skb: 280 callbacks suppressed [ 664.108206][ T28] audit: type=1400 audit(1778182784.676:2552): avc: denied { write } for pid=14684 comm="syz.8.2587" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 664.192982][ T28] audit: type=1400 audit(1778182784.676:2553): avc: denied { write } for pid=14684 comm="syz.8.2587" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 664.253444][ T28] audit: type=1400 audit(1778182784.816:2554): avc: denied { append } for pid=14711 comm="syz.7.2592" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 664.282268][T14713] lo speed is unknown, defaulting to 1000 [ 664.338810][T14721] FAULT_INJECTION: forcing a failure. [ 664.338810][T14721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 664.352100][T14721] CPU: 0 UID: 0 PID: 14721 Comm: syz.0.2594 Tainted: G W syzkaller #0 PREEMPT(full) [ 664.352134][T14721] Tainted: [W]=WARN [ 664.352141][T14721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.352153][T14721] Call Trace: [ 664.352230][T14721] [ 664.352238][T14721] __dump_stack+0x1d/0x30 [ 664.352291][T14721] dump_stack_lvl+0x95/0xd0 [ 664.352316][T14721] dump_stack+0x15/0x1b [ 664.352335][T14721] should_fail_ex+0x263/0x280 [ 664.352363][T14721] should_fail_alloc_page+0xf2/0x100 [ 664.352449][T14721] __alloc_frozen_pages_noprof+0x108/0x350 [ 664.352480][T14721] alloc_pages_mpol+0xb3/0x260 [ 664.352531][T14721] alloc_pages_noprof+0x8f/0x140 [ 664.352554][T14721] get_free_pages_noprof+0xc/0x40 [ 664.352575][T14721] sel_read_avc_hash_stats+0x27/0xb0 [ 664.352629][T14721] ? __pfx_sel_read_avc_hash_stats+0x10/0x10 [ 664.352664][T14721] vfs_readv+0x432/0x6e0 [ 664.352764][T14721] do_readv+0xe9/0x210 [ 664.352790][T14721] __x64_sys_readv+0x45/0x50 [ 664.352841][T14721] x64_sys_call+0x27c0/0x3020 [ 664.352872][T14721] do_syscall_64+0x12c/0x3b0 [ 664.352958][T14721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.353058][T14721] RIP: 0033:0x7f0ffcf1cdd9 [ 664.353075][T14721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.353111][T14721] RSP: 002b:00007f0ffb96f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 664.353135][T14721] RAX: ffffffffffffffda RBX: 00007f0ffd195fa0 RCX: 00007f0ffcf1cdd9 [ 664.353154][T14721] RDX: 0000000000000001 RSI: 0000200000001d40 RDI: 0000000000000006 [ 664.353171][T14721] RBP: 00007f0ffb96f090 R08: 0000000000000000 R09: 0000000000000000 [ 664.353187][T14721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.353201][T14721] R13: 00007f0ffd196038 R14: 00007f0ffd195fa0 R15: 00007ffd8326cc28 [ 664.353223][T14721] [ 664.852502][T14730] loop4: detected capacity change from 0 to 512 [ 665.706319][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.635201][T14730] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 671.124011][T14745] loop0: detected capacity change from 0 to 512 [ 672.127260][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2599: corrupted inode contents [ 672.139218][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.147887][T14745] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2599: mark_inode_dirty error [ 672.168362][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.173098][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2599: corrupted inode contents [ 672.194068][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.196000][T14745] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2599: mark_inode_dirty error [ 672.216321][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.216886][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2599: corrupted inode contents [ 672.226363][ C0] EXT4-fs (loop0): error count since last fsck: 4 [ 672.226597][ C0] EXT4-fs (loop0): initial error at time 1778182792: ext4_do_update_inode:5690: inode 16 [ 672.226769][ C0] EXT4-fs (loop0): last error at time 1778182792: __ext4_ext_dirty:207: inode 16 [ 672.277742][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.291328][T14745] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 672.308949][T14745] loop0: lost filesystem error report for type 5 error -117 [ 672.322821][T14745] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2599: corrupted inode contents [ 672.342037][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.346905][T14745] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2599: mark_inode_dirty error [ 672.367112][T14745] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 672.426602][T14745] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 672.446745][T14745] loop0: lost filesystem error report for type 5 error -117 [ 672.447508][T14745] EXT4-fs (loop0): 1 truncate cleaned up [ 672.460823][T14745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 672.473394][T14745] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 673.198005][T14782] loop8: detected capacity change from 0 to 512 [ 673.580048][ T1824] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 673.833521][ T1824] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:10: Failed to release dquot type 1 [ 673.936425][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2605: corrupted inode contents [ 674.218514][T14782] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 674.221344][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 674.240057][ C1] EXT4-fs (loop8): initial error at time 1778182794: ext4_do_update_inode:5690: inode 16 [ 674.253073][ C1] EXT4-fs (loop8): last error at time 1778182794: ext4_do_update_inode:5690: inode 16 [ 674.372620][T14782] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.2605: mark_inode_dirty error [ 674.385802][T14782] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 674.393219][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2605: corrupted inode contents [ 674.781707][ T28] audit: type=1400 audit(1778182794.661:2555): avc: denied { write } for pid=14750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.813200][ T28] audit: type=1400 audit(1778182794.689:2556): avc: denied { bind } for pid=14788 comm="syz.4.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 674.870965][ T28] audit: type=1400 audit(1778182794.745:2557): avc: denied { write } for pid=14799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 674.982189][T14782] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 675.005267][T14782] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.2605: mark_inode_dirty error [ 675.077889][T14808] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2608'. [ 675.094141][T14635] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.121071][T14777] lo speed is unknown, defaulting to 1000 [ 675.225610][T14817] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2608'. [ 675.240152][ T28] audit: type=1400 audit(1778182795.092:2558): avc: denied { write } for pid=14806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.259684][ T28] audit: type=1400 audit(1778182795.110:2559): avc: denied { write } for pid=14824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.355454][ T28] audit: type=1400 audit(1778182795.204:2560): avc: denied { write } for pid=14828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.377567][ T28] audit: type=1400 audit(1778182795.223:2561): avc: denied { write } for pid=14839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.475431][ T28] audit: type=1400 audit(1778182795.316:2562): avc: denied { write } for pid=14842 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.497463][ T28] audit: type=1400 audit(1778182795.335:2563): avc: denied { write } for pid=14853 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 675.738826][T14777] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.746089][T14777] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.753536][T14777] bridge_slave_0: entered allmulticast mode [ 675.763759][T14777] bridge_slave_0: entered promiscuous mode [ 675.775592][T14777] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.782796][T14777] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.790016][T14777] bridge_slave_1: entered allmulticast mode [ 675.796664][T14777] bridge_slave_1: entered promiscuous mode [ 675.815449][T14777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 675.826025][T14777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 675.847471][T14777] team0: Port device team_slave_0 added [ 675.854335][T14777] team0: Port device team_slave_1 added [ 675.871569][T14777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.878616][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.910254][T14777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.921806][T14777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.928836][T14777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.955337][T14777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.984224][T14777] hsr_slave_0: entered promiscuous mode [ 675.990425][T14777] hsr_slave_1: entered promiscuous mode [ 675.996611][T14777] debugfs: 'hsr0' already exists in 'hsr' [ 676.002426][T14777] Cannot create hsr debugfs directory [ 676.082294][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2605: corrupted inode contents [ 676.099257][T14782] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 676.126573][T14777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.142632][T14777] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 676.172528][T14863] lo speed is unknown, defaulting to 1000 [ 676.202741][T14782] loop8: lost filesystem error report for type 5 error -117 [ 676.203079][T14782] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2605: corrupted inode contents [ 676.222557][T14782] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.2605: mark_inode_dirty error [ 676.234117][T14782] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 676.243017][T14782] loop8: lost filesystem error report for type 5 error -117 [ 676.244747][T14782] EXT4-fs (loop8): 1 truncate cleaned up [ 676.258101][T14782] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.270608][T14782] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 676.313743][ T9050] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:37: Failed to release dquot type 1 [ 676.326538][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.344763][T14777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.366254][T14777] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 676.387700][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.518259][T14777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.528666][T14777] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 676.800764][T14876] loop0: detected capacity change from 0 to 512 [ 677.022516][T14876] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2610: corrupted inode contents [ 677.040326][T14876] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2610: mark_inode_dirty error [ 677.041350][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 677.041380][ C0] EXT4-fs (loop0): initial error at time 1778182796: ext4_do_update_inode:5690: inode 16 [ 677.042406][ C0] EXT4-fs (loop0): last error at time 1778182796: ext4_do_update_inode:5690: inode 16 [ 677.101674][T14876] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2610: corrupted inode contents [ 677.120050][T14876] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2610: mark_inode_dirty error [ 677.140538][T14876] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2610: corrupted inode contents [ 677.156941][T14876] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 677.167843][T14876] loop0: lost filesystem error report for type 5 error -117 [ 677.172627][T14876] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2610: corrupted inode contents [ 677.199918][T14876] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2610: mark_inode_dirty error [ 677.215524][T14876] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 677.224458][T14876] loop0: lost filesystem error report for type 5 error -117 [ 677.226191][T14876] EXT4-fs (loop0): 1 truncate cleaned up [ 677.240555][T14876] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.253422][T14876] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.335844][T14876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2610'. [ 677.383796][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 677.670724][T14777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.692632][T14777] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 677.731021][T14886] loop4: detected capacity change from 0 to 512 [ 677.873920][T14886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 677.886435][T14886] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 677.943094][ T839] ip6gretap0: left allmulticast mode [ 677.963121][ T839] ip6gretap0: left promiscuous mode [ 677.992461][ T839] bridge0: port 1(ip6gretap0) entered disabled state [ 678.350748][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.420042][T14898] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2618'. [ 679.207705][T14902] loop0: detected capacity change from 0 to 512 [ 679.260060][ T839] .` (unregistering): Released all slaves [ 679.335459][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2619: corrupted inode contents [ 679.377032][T14902] fserror_report: 11 callbacks suppressed [ 679.377080][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.390873][T14902] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #16: comm syz.0.2619: mark_inode_dirty error [ 679.401941][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 679.402011][ C1] EXT4-fs (loop0): initial error at time 1778182798: ext4_do_update_inode:5690: inode 16 [ 679.402512][ C1] EXT4-fs (loop0): last error at time 1778182798: ext4_do_update_inode:5690: inode 16 [ 679.467716][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.473225][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2619: corrupted inode contents [ 679.519273][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.528602][T14902] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #16: comm syz.0.2619: mark_inode_dirty error [ 679.563418][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.566886][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2619: corrupted inode contents [ 679.611980][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.614034][T14902] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 679.634449][T14902] loop0: lost filesystem error report for type 5 error -117 [ 679.642142][T14902] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #16: comm syz.0.2619: corrupted inode contents [ 679.665843][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.668129][T14902] EXT4-fs error (device loop0): ext4_truncate:4690: inode #16: comm syz.0.2619: mark_inode_dirty error [ 679.669430][ T839] bond1 (unregistering): Released all slaves [ 679.676654][ T839] bond2 (unregistering): Released all slaves [ 679.683019][ T839] bond0 (unregistering): Released all slaves [ 679.688924][T14902] loop0: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 679.767268][ T839] bond3 (unregistering): Released all slaves [ 679.800058][T14902] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 679.810600][T14902] loop0: lost filesystem error report for type 5 error -117 [ 679.819745][T14902] EXT4-fs (loop0): 1 truncate cleaned up [ 679.864001][T14902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 679.891259][T14902] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 680.043224][T14777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 680.054007][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 680.062457][T14777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 680.073942][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 680.083119][T14777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 680.093358][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 680.108021][T14777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 680.316713][T14777] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 680.354327][T14777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 680.365786][T14777] 8021q: adding VLAN 0 to HW filter on device team0 [ 680.386345][T14777] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 680.397149][T14777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 680.483383][ T12] __quota_error: 3 callbacks suppressed [ 680.483687][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 680.491629][T14872] lo speed is unknown, defaulting to 1000 [ 680.502986][ T1824] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.512547][ T1824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.513919][ T12] EXT4-fs error (device loop0): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 680.522855][ T1824] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.532486][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.538275][ T1824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.577145][ T839] tipc: Disabling bearer [ 680.589543][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.601634][ T839] tipc: Left network mode [ 680.621670][ T839] IPVS: stopping backup sync thread 12248 ... [ 680.696360][ T839] hsr_slave_0: left promiscuous mode [ 680.712108][ T839] hsr_slave_1: left promiscuous mode [ 680.850772][T14922] syz.0.2620 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 680.865921][ T839] veth1_macvtap: left promiscuous mode [ 680.877966][ T839] veth0_macvtap: left promiscuous mode [ 680.882939][T14922] CPU: 1 UID: 0 PID: 14922 Comm: syz.0.2620 Tainted: G W syzkaller #0 PREEMPT(full) [ 680.883042][T14922] Tainted: [W]=WARN [ 680.883050][T14922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.883064][T14922] Call Trace: [ 680.883071][T14922] [ 680.883081][T14922] __dump_stack+0x1d/0x30 [ 680.883109][T14922] dump_stack_lvl+0x95/0xd0 [ 680.883197][T14922] dump_stack+0x15/0x1b [ 680.883218][T14922] dump_header+0x80/0x240 [ 680.883273][T14922] oom_kill_process+0x295/0x350 [ 680.883307][T14922] out_of_memory+0x97d/0xb80 [ 680.883396][T14922] try_charge_memcg+0x62f/0xa10 [ 680.883432][T14922] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 680.883503][T14922] __alloc_frozen_pages_noprof+0x18a/0x350 [ 680.883534][T14922] alloc_pages_mpol+0x1f6/0x260 [ 680.883561][T14922] alloc_pages_noprof+0x8f/0x140 [ 680.883588][T14922] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 680.883660][T14922] __kvmalloc_node_noprof+0x3d4/0x640 [ 680.883691][T14922] ? futex_hash_allocate+0x190/0x9a0 [ 680.883725][T14922] ? futex_hash_allocate+0x190/0x9a0 [ 680.883863][T14922] futex_hash_allocate+0x190/0x9a0 [ 680.883898][T14922] ? cap_task_prctl+0x13f/0x6b0 [ 680.883926][T14922] futex_hash_prctl+0xd8/0xf0 [ 680.883959][T14922] __se_sys_prctl+0x4f4/0x1400 [ 680.884053][T14922] __x64_sys_prctl+0x67/0x80 [ 680.884080][T14922] x64_sys_call+0x2533/0x3020 [ 680.884184][T14922] do_syscall_64+0x12c/0x3b0 [ 680.884214][T14922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.884265][T14922] RIP: 0033:0x7f0ffcf1cdd9 [ 680.884284][T14922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.884305][T14922] RSP: 002b:00007f0ffb96f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 680.884402][T14922] RAX: ffffffffffffffda RBX: 00007f0ffd195fa0 RCX: 00007f0ffcf1cdd9 [ 680.884474][T14922] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 680.884489][T14922] RBP: 00007f0ffcfb2d69 R08: 0000000000000000 R09: 0000000000000000 [ 680.884556][T14922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.884589][T14922] R13: 00007f0ffd196038 R14: 00007f0ffd195fa0 R15: 00007ffd8326cc28 [ 680.884610][T14922] [ 680.884632][T14922] memory: usage 307200kB, limit 307200kB, failcnt 295 [ 680.926584][ T839] veth1_vlan: left promiscuous mode [ 680.934280][T14922] memory+swap: usage 286056kB, limit 9007199254740988kB, failcnt 0 [ 680.951452][ T839] veth0_vlan: left promiscuous mode [ 680.953809][T14922] kmem: usage 268568kB, limit 9007199254740988kB, failcnt 0 [ 681.688209][T14935] loop4: detected capacity change from 0 to 512 [ 681.735932][T14922] Memory cgroup stats for /syz0: [ 681.736591][T14922] cache 0 [ 681.745531][T14922] rss 4096 [ 681.748662][T14922] shmem 0 [ 681.881054][T14935] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2621: corrupted inode contents [ 681.895356][T14935] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 681.897252][T14935] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2621: mark_inode_dirty error [ 681.909104][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 681.909167][ C1] EXT4-fs (loop4): initial error at time 1778182801: ext4_do_update_inode:5690: inode 16 [ 681.909551][ C1] EXT4-fs (loop4): last error at time 1778182801: ext4_do_update_inode:5690: inode 16 [ 682.007586][T14922] mapped_file 0 [ 682.012581][T14935] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 682.023770][T14935] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2621: corrupted inode contents [ 682.081313][T14935] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 682.084902][T14935] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2621: mark_inode_dirty error [ 682.161008][T14935] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2621: corrupted inode contents [ 682.176862][T14935] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 682.187773][T14935] loop4: lost filesystem error report for type 5 error -117 [ 682.210711][T14935] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2621: corrupted inode contents [ 682.245869][T14935] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2621: mark_inode_dirty error [ 682.260015][T14935] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 682.270170][T14935] loop4: lost filesystem error report for type 5 error -117 [ 682.278881][T14935] EXT4-fs (loop4): 1 truncate cleaned up [ 682.321336][T14935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 682.345154][T14935] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.485625][T14922] dirty 0 [ 682.491788][T14922] writeback 0 [ 682.495169][T14922] workingset_refault_anon 40 [ 682.500908][T14922] workingset_refault_file 0 [ 682.505586][T14922] swap 180224 [ 682.508969][T14922] swapcached 368640 [ 682.514237][T14922] pgpgin 101793 [ 682.517873][T14922] pgpgout 101789 [ 682.521947][T14922] pgfault 132574 [ 682.525767][T14922] pgmajfault 17 [ 682.529316][T14922] inactive_anon 0 [ 682.533563][T14922] active_anon 16384 [ 682.537595][T14922] inactive_file 0 [ 682.541314][T14922] active_file 0 [ 682.546086][T14922] unevictable 0 [ 682.549823][T14922] hierarchical_memory_limit 314572800 [ 682.555535][T14922] hierarchical_memsw_limit 9223372036854771712 [ 682.762304][T14922] total_cache 0 [ 682.765970][T14922] total_rss 4096 [ 682.769583][T14922] total_shmem 0 [ 682.773316][T14922] total_mapped_file 0 [ 682.778329][T14922] total_dirty 0 [ 682.781831][T14922] total_writeback 0 [ 682.785811][T14922] total_workingset_refault_anon 40 [ 682.791624][T14922] total_workingset_refault_file 0 [ 682.797029][T14922] total_swap 180224 [ 682.801322][T14922] total_swapcached 368640 [ 682.805685][T14922] total_pgpgin 101793 [ 682.810657][ T9050] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 682.821432][T14922] total_pgpgout 101789 [ 682.825852][ T9050] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:37: Failed to release dquot type 1 [ 682.838312][T14922] total_pgfault 132574 [ 682.843197][T14922] total_pgmajfault 17 [ 682.847414][T14922] total_inactive_anon 0 [ 682.852761][T14922] total_active_anon 16384 [ 682.857141][T14922] total_inactive_file 0 [ 682.861314][T14922] total_active_file 0 [ 682.865801][T14922] total_unevictable 0 [ 682.869821][T14922] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2620,pid=14921,uid=0 [ 682.889993][T14922] Memory cgroup out of memory: Killed process 14921 (syz.0.2620) total-vm:96216kB, anon-rss:1232kB, file-rss:22164kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 682.917017][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.014407][ T839] pim6reg2 (unregistering): left allmulticast mode [ 683.046289][ T28] audit: type=1400 audit(1778182802.404:2565): avc: denied { setopt } for pid=14943 comm="syz.0.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.080000][ T28] audit: type=1400 audit(1778182802.404:2566): avc: denied { write } for pid=14943 comm="syz.0.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 683.124192][ T28] audit: type=1326 audit(1778182802.404:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14943 comm="syz.0.2624" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ffcf1cdd9 code=0x0 [ 683.171304][T14777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.239619][T14952] loop4: detected capacity change from 0 to 512 [ 683.259068][T14952] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.2625: corrupted in-inode xattr: invalid ea_ino [ 683.273069][T14952] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2625: couldn't read orphan inode 15 (err -117) [ 683.285018][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 683.285036][ C0] EXT4-fs (loop4): initial error at time 1778182802: ext4_iget_extra_inode:5128: inode 15 [ 683.285067][ C0] EXT4-fs (loop4): last error at time 1778182802: ext4_iget_extra_inode:5128: inode 15 [ 683.311242][T14952] loop4: lost filesystem error report for type 5 error -117 [ 683.322081][T14952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.348198][T14777] veth0_vlan: entered promiscuous mode [ 683.357343][T14777] veth1_vlan: entered promiscuous mode [ 683.370433][T14777] veth0_macvtap: entered promiscuous mode [ 683.378124][T14777] veth1_macvtap: entered promiscuous mode [ 683.396242][T14777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 683.408549][T14777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.420224][ T28] audit: type=1400 audit(1778182802.751:2568): avc: denied { write } for pid=14951 comm="syz.4.2625" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 683.420343][T14952] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.2625: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 684.267589][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2626'. [ 684.461167][ T9036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.596041][ T9036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.621313][ T9036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.701253][ T839] IPVS: stop unused estimator thread 0... [ 684.710359][ T9036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.800462][ T28] audit: type=1400 audit(1778182804.024:2569): avc: denied { write } for pid=14777 comm="syz-executor" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 685.235524][ T28] audit: type=1400 audit(1778182804.024:2570): avc: denied { open } for pid=14777 comm="syz-executor" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 686.323321][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.060041][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2634'. [ 687.080096][T14992] team1: entered promiscuous mode [ 687.085767][T14992] team1: entered allmulticast mode [ 687.092143][T14992] 8021q: adding VLAN 0 to HW filter on device team1 [ 687.117401][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2634'. [ 687.136009][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2634'. [ 687.167666][T14994] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2632'. [ 687.334567][T14994] syzkaller0: entered promiscuous mode [ 687.345635][T14994] syzkaller0: entered allmulticast mode [ 690.866788][T15003] syz.7.2639 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 690.921646][T15003] CPU: 0 UID: 0 PID: 15003 Comm: syz.7.2639 Tainted: G W syzkaller #0 PREEMPT(full) [ 690.921706][T15003] Tainted: [W]=WARN [ 690.921791][T15003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.921857][T15003] Call Trace: [ 690.921865][T15003] [ 690.921876][T15003] __dump_stack+0x1d/0x30 [ 690.922018][T15003] dump_stack_lvl+0x95/0xd0 [ 690.922040][T15003] dump_stack+0x15/0x1b [ 690.922063][T15003] dump_header+0x80/0x240 [ 690.922091][T15003] oom_kill_process+0x295/0x350 [ 690.922172][T15003] out_of_memory+0x97d/0xb80 [ 690.922207][T15003] try_charge_memcg+0x62f/0xa10 [ 690.922245][T15003] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 690.922276][T15003] __alloc_frozen_pages_noprof+0x18a/0x350 [ 690.922359][T15003] alloc_pages_mpol+0x1f6/0x260 [ 690.922384][T15003] alloc_pages_noprof+0x8f/0x140 [ 690.922414][T15003] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 690.922532][T15003] __kvmalloc_node_noprof+0x3d4/0x640 [ 690.922553][T15003] ? futex_hash_allocate+0x190/0x9a0 [ 690.922587][T15003] ? futex_hash_allocate+0x190/0x9a0 [ 690.922661][T15003] futex_hash_allocate+0x190/0x9a0 [ 690.922695][T15003] ? cap_task_prctl+0x13f/0x6b0 [ 690.922727][T15003] futex_hash_prctl+0xd8/0xf0 [ 690.922795][T15003] __se_sys_prctl+0x4f4/0x1400 [ 690.922825][T15003] __x64_sys_prctl+0x67/0x80 [ 690.922921][T15003] x64_sys_call+0x2533/0x3020 [ 690.922952][T15003] do_syscall_64+0x12c/0x3b0 [ 690.922982][T15003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.923079][T15003] RIP: 0033:0x7feb1e6fcdd9 [ 690.923096][T15003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.923167][T15003] RSP: 002b:00007feb1d14f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 690.923193][T15003] RAX: ffffffffffffffda RBX: 00007feb1e975fa0 RCX: 00007feb1e6fcdd9 [ 690.923208][T15003] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 690.923259][T15003] RBP: 00007feb1e792d69 R08: 0000000000000000 R09: 0000000000000000 [ 690.923275][T15003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.923291][T15003] R13: 00007feb1e976038 R14: 00007feb1e975fa0 R15: 00007ffcfe0acb88 [ 690.923314][T15003] [ 691.165813][T15003] memory: usage 307196kB, limit 307200kB, failcnt 4593 [ 691.172881][T15003] memory+swap: usage 322732kB, limit 9007199254740988kB, failcnt 0 [ 691.180822][T15003] kmem: usage 307120kB, limit 9007199254740988kB, failcnt 0 [ 691.188189][T15003] Memory cgroup stats for /syz7: [ 691.188549][T15003] cache 8192 [ 691.196781][T15003] rss 20480 [ 691.199895][T15003] shmem 0 [ 691.202843][T15003] mapped_file 0 [ 691.206316][T15003] dirty 0 [ 691.209270][T15003] writeback 0 [ 691.212567][T15003] workingset_refault_anon 1881 [ 691.217332][T15003] workingset_refault_file 828 [ 691.222016][T15003] swap 15908864 [ 691.225486][T15003] swapcached 42270720 [ 691.229473][T15003] pgpgin 296052 [ 691.232947][T15003] pgpgout 296043 [ 691.236510][T15003] pgfault 335601 [ 691.240090][T15003] pgmajfault 414 [ 691.243645][T15003] inactive_anon 0 [ 691.376835][T15003] active_anon 28672 [ 691.385127][T15003] inactive_file 8192 [ 691.392399][T15003] active_file 0 [ 691.399107][T15003] unevictable 0 [ 691.406270][T15003] hierarchical_memory_limit 314572800 [ 691.414819][T15003] hierarchical_memsw_limit 9223372036854771712 [ 691.425582][T15003] total_cache 8192 [ 691.433305][T15003] total_rss 20480 [ 691.438321][T15003] total_shmem 0 [ 691.444041][T15003] total_mapped_file 0 [ 691.450405][T15003] total_dirty 0 [ 691.456638][T15003] total_writeback 0 [ 691.463436][T15003] total_workingset_refault_anon 1881 [ 691.470951][T15003] total_workingset_refault_file 828 [ 691.476276][T15003] total_swap 15908864 [ 691.480326][T15003] total_swapcached 42270720 [ 691.496615][T15003] total_pgpgin 296052 [ 691.500657][T15003] total_pgpgout 296043 [ 691.505001][T15003] total_pgfault 335601 [ 691.509129][T15003] total_pgmajfault 414 [ 691.513445][T15003] total_inactive_anon 0 [ 691.517749][T15003] total_active_anon 28672 [ 691.522122][T15003] total_inactive_file 8192 [ 691.531754][T15003] total_active_file 0 [ 691.535955][T15003] total_unevictable 0 [ 691.540066][T15003] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.2639,pid=15002,uid=0 [ 691.555382][T15003] Memory cgroup out of memory: Killed process 15003 (syz.7.2639) total-vm:100584kB, anon-rss:1236kB, file-rss:26440kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 691.987759][T15041] loop0: detected capacity change from 0 to 512 [ 692.025405][T15041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.252020][T15046] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2646'. [ 692.318876][T15041] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 693.394645][ T28] audit: type=1400 audit(1778182811.748:2571): avc: denied { write } for pid=15037 comm="syz.0.2645" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 696.900995][T15059] x_tables: duplicate entry at hook 3 [ 696.909476][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.801069][T15062] loop4: detected capacity change from 0 to 512 [ 697.814625][T15062] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 698.089467][T15074] can0: slcan on ptm0. [ 699.117518][T15062] EXT4-fs (loop4): 1 truncate cleaned up [ 699.124088][T15062] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 699.223731][T15073] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2650'. [ 699.971971][ T28] audit: type=1400 audit(1778182818.228:2572): avc: denied { write } for pid=15058 comm="syz.4.2659" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 700.007453][T15081] loop0: detected capacity change from 0 to 512 [ 701.061385][T15074] can0 (unregistered): slcan off ptm0. [ 701.428650][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.613571][T15081] EXT4-fs warning (device loop0): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop0. [ 702.813598][T15095] program syz.8.2654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 702.823207][T15095] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 704.044223][T15105] loop4: detected capacity change from 0 to 128 [ 704.051332][T15105] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 704.177722][T15105] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 705.227572][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 706.787124][T15129] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2666'. [ 708.182747][T15138] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2669'. [ 708.782034][T15117] loop4: detected capacity change from 0 to 512 [ 710.007807][T15117] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 710.502381][T15151] loop1: detected capacity change from 0 to 512 [ 711.130138][T15154] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2680'. [ 714.818443][T15151] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 715.190293][T15162] loop4: detected capacity change from 0 to 512 [ 716.409632][T15162] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2673: corrupted inode contents [ 716.451621][T15162] fserror_report: 5 callbacks suppressed [ 716.451670][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.462561][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 716.480001][ C1] EXT4-fs (loop4): initial error at time 1778182833: ext4_do_update_inode:5690: inode 16 [ 716.491119][ C1] EXT4-fs (loop4): last error at time 1778182833: ext4_do_update_inode:5690: inode 16 [ 716.527461][T15162] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2673: mark_inode_dirty error [ 716.541129][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.544493][T15162] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2673: corrupted inode contents [ 716.593377][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.598320][T15162] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2673: mark_inode_dirty error [ 716.628963][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.705717][T15162] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2673: corrupted inode contents [ 716.741978][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.750015][T15162] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 716.782462][T15162] loop4: lost filesystem error report for type 5 error -117 [ 716.785105][T15162] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2673: corrupted inode contents [ 716.852301][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.861088][T15162] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2673: mark_inode_dirty error [ 716.893392][T15162] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 716.895276][T15162] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 716.914709][T15162] loop4: lost filesystem error report for type 5 error -117 [ 716.919697][T15162] EXT4-fs (loop4): 1 truncate cleaned up [ 716.963433][T15162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 716.978236][T15162] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 717.362211][T15189] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2678'. [ 718.366465][ T12] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 718.426243][ T12] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 718.468807][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.777505][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2694'. [ 719.799096][T15208] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2694'. [ 720.277756][T15211] loop8: detected capacity change from 0 to 512 [ 721.257322][T15221] loop0: detected capacity change from 0 to 512 [ 722.454237][T15211] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 722.469237][T15221] EXT4-fs (loop0): orphan cleanup on readonly fs [ 722.476460][T15221] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 722.489987][T15221] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.2686: corrupted inode contents [ 723.268321][T15221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 723.276978][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 723.292643][ C1] EXT4-fs (loop0): initial error at time 1778182840: ext4_do_update_inode:5690: inode 15 [ 723.302532][ C1] EXT4-fs (loop0): last error at time 1778182840: ext4_do_update_inode:5690: inode 15 [ 723.321827][T15221] EXT4-fs error (device loop0): ext4_dirty_inode:6587: inode #15: comm syz.0.2686: mark_inode_dirty error [ 723.343712][T15221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 723.344185][T15221] EXT4-fs error (device loop0): ext4_do_update_inode:5690: inode #15: comm syz.0.2686: corrupted inode contents [ 723.575844][T15221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 723.583632][T15221] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3001: inode #15: comm syz.0.2686: mark_inode_dirty error [ 724.479124][T15221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 724.489924][T15221] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3004: inode #15: comm syz.0.2686: mark inode dirty (error -117) [ 725.575142][T15221] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 725.575322][T15221] EXT4-fs warning (device loop0): ext4_evict_inode:287: xattr delete (err -117) [ 725.723378][T15221] EXT4-fs (loop0): 1 orphan inode deleted [ 725.743323][T15221] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 726.652933][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.095508][T15251] loop1: detected capacity change from 0 to 512 [ 730.407028][T15251] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2693: corrupted inode contents [ 730.459384][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.474815][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 730.490383][ C1] EXT4-fs (loop1): initial error at time 1778182846: ext4_do_update_inode:5690: inode 16 [ 730.500323][ C1] EXT4-fs (loop1): last error at time 1778182846: ext4_do_update_inode:5690: inode 16 [ 730.512269][T15251] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.2693: mark_inode_dirty error [ 730.527101][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.532555][T15251] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2693: corrupted inode contents [ 730.595601][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.601875][T15251] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.2693: mark_inode_dirty error [ 730.673165][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.679387][T15251] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2693: corrupted inode contents [ 730.739921][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.746827][T15251] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 730.812031][T15251] loop1: lost filesystem error report for type 5 error -117 [ 730.820302][T15251] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.2693: corrupted inode contents [ 730.887403][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.896521][T15251] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.2693: mark_inode_dirty error [ 730.938326][T15251] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 730.943980][T15251] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 731.013189][T15251] loop1: lost filesystem error report for type 5 error -117 [ 731.088736][T15251] EXT4-fs (loop1): 1 truncate cleaned up [ 731.183362][T15251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 731.258766][T15251] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 731.319429][ T55] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 731.329875][ T55] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 731.445934][T14777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 731.623161][T15270] loop1: detected capacity change from 0 to 512 [ 731.751284][T15270] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 734.003700][ T28] audit: type=1400 audit(1778182850.118:2573): avc: denied { listen } for pid=15266 comm="syz.1.2698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 734.248459][T15280] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2697'. [ 734.473062][T15289] loop4: detected capacity change from 0 to 512 [ 736.706544][T15289] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2701: corrupted inode contents [ 736.721029][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.722980][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 736.740659][ C0] EXT4-fs (loop4): initial error at time 1778182852: ext4_do_update_inode:5690: inode 16 [ 736.752897][ C0] EXT4-fs (loop4): last error at time 1778182852: ext4_do_update_inode:5690: inode 16 [ 736.772780][T15289] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2701: mark_inode_dirty error [ 736.786453][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.791187][T15289] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2701: corrupted inode contents [ 736.817119][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.820491][T15289] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2701: mark_inode_dirty error [ 736.843063][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.847695][T15289] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2701: corrupted inode contents [ 736.872785][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.874574][T15289] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 736.896398][T15289] loop4: lost filesystem error report for type 5 error -117 [ 736.904275][T15289] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2701: corrupted inode contents [ 736.928393][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.931234][T15289] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2701: mark_inode_dirty error [ 736.957012][T15289] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 736.960579][T15289] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 736.984780][T15289] loop4: lost filesystem error report for type 5 error -117 [ 736.987322][T15289] EXT4-fs (loop4): 1 truncate cleaned up [ 737.002061][T15289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 737.014984][T15289] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 737.108278][ T852] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 737.119434][ T852] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 737.660020][T15284] loop0: detected capacity change from 0 to 8192 [ 737.681214][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 737.831971][T15284] loop0: p1 < > p2 p4 < p5 > [ 737.861749][T15284] loop0: partition table partially beyond EOD, truncated [ 737.893271][T15284] loop0: p1 start 134217728 is beyond EOD, truncated [ 737.911442][T15284] loop0: p2 size 591360 extends beyond EOD, truncated [ 738.993866][T15327] loop8: detected capacity change from 0 to 512 [ 739.133696][T15284] loop0: p5 size 591360 extends beyond EOD, truncated [ 741.199098][T14088] udevd[14088]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 741.199254][T14202] udevd[14202]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 741.242281][T14664] udevd[14664]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 741.446698][T15327] EXT4-fs warning (device loop8): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop8. [ 742.205774][T15351] loop0: detected capacity change from 0 to 512 [ 742.229137][T15351] EXT4-fs: Ignoring removed bh option [ 742.247873][T15351] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 742.361543][T15351] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 742.417512][T15351] loop0: detected capacity change from 0 to 512 [ 742.425352][T15351] EXT4-fs: Ignoring removed mblk_io_submit option [ 742.609449][T15366] loop4: detected capacity change from 0 to 2048 [ 742.635025][T15366] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 742.922925][T15372] loop8: detected capacity change from 0 to 512 [ 742.985039][T15351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 744.048455][T15351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.061114][T15351] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 744.068809][T15377] loop4: detected capacity change from 0 to 512 [ 744.133911][T15372] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.2725: iget: bad extra_isize 94 (inode size 256) [ 744.328312][T15377] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2726: corrupted inode contents [ 744.342782][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.345313][T15377] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.2726: mark_inode_dirty error [ 744.355687][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 744.355924][ C0] EXT4-fs (loop4): initial error at time 1778182859: ext4_do_update_inode:5690: inode 16 [ 744.356210][ C0] EXT4-fs (loop4): last error at time 1778182859: ext4_do_update_inode:5690: inode 16 [ 744.406565][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.420132][T15377] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2726: corrupted inode contents [ 744.445504][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.449774][T15377] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.2726: mark_inode_dirty error [ 744.474003][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.478612][T15377] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2726: corrupted inode contents [ 744.494690][T15372] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 744.496582][ T28] audit: type=1400 audit(1778182859.940:2574): avc: denied { write } for pid=15350 comm="syz.0.2719" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 744.506377][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.594207][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 744.609839][ C0] EXT4-fs (loop8): initial error at time 1778182860: ext4_xattr_inode_iget:441: inode 18 [ 744.619707][ C0] EXT4-fs (loop8): last error at time 1778182860: ext4_xattr_inode_iget:441: inode 18 [ 744.637766][T15377] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 744.648633][T15377] loop4: lost filesystem error report for type 5 error -117 [ 744.653508][T15377] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.2726: corrupted inode contents [ 744.677593][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.682125][T15377] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.2726: mark_inode_dirty error [ 744.706911][T15377] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 744.709778][T15377] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 744.730512][T15377] loop4: lost filesystem error report for type 5 error -117 [ 744.745701][T15377] EXT4-fs (loop4): 1 truncate cleaned up [ 744.786030][T15377] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 744.803686][T15377] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 744.894606][ T55] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 744.904405][ T55] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 744.924870][T15372] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2725: error while reading EA inode 18 err=-117 [ 744.937203][T15372] loop8: lost filesystem error report for type 5 error -117 [ 744.937442][T15372] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.2725: iget: bad extra_isize 94 (inode size 256) [ 745.034267][T15351] IPv6: NLM_F_CREATE should be specified when creating new route [ 745.067508][T15351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.074921][T15351] IPv6: NLM_F_CREATE should be set when creating new route [ 745.082444][T15351] IPv6: NLM_F_CREATE should be set when creating new route [ 745.089789][T15351] IPv6: NLM_F_CREATE should be set when creating new route [ 745.105278][T15372] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 745.231634][T15372] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.2725: error while reading EA inode 18 err=-117 [ 745.261209][T15396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 745.539508][T15372] loop8: lost filesystem error report for type 5 error -117 [ 745.561484][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.618777][T15372] EXT4-fs (loop8): 1 orphan inode deleted [ 745.626025][T15372] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 745.791797][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 746.046177][T15409] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2734'. [ 746.107304][T13903] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 748.978761][T15429] IPv6: Can't replace route, no match found [ 748.989101][T15429] 9pnet_fd: Insufficient options for proto=fd [ 748.995259][ T28] audit: type=1400 audit(1778182864.144:2575): avc: denied { mounton } for pid=15426 comm="syz.0.2739" path="/44/file0" dev="tmpfs" ino=259 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 750.124156][T15431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15431 comm= [ 753.858562][T15464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 753.901934][T15464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 753.969472][T15464] loop8: detected capacity change from 0 to 2048 [ 753.995580][T15464] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.052802][ T28] audit: type=1400 audit(1778182868.881:2576): avc: denied { write } for pid=15463 comm="syz.8.2750" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.075286][ T28] audit: type=1400 audit(1778182868.881:2577): avc: denied { write } for pid=15463 comm="syz.8.2750" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.292820][T15479] netlink: 'syz.4.2761': attribute type 1 has an invalid length. [ 754.307485][T15481] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2751'. [ 755.908695][T15488] loop1: detected capacity change from 0 to 512 [ 756.666962][T15499] loop4: detected capacity change from 0 to 512 [ 757.906205][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.923786][T15499] EXT4-fs warning (device loop4): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop4. [ 759.831701][T15488] EXT4-fs warning (device loop1): ext4_multi_mount_protect:394: Unable to create kmmpd thread for loop1. [ 760.043585][T15512] FAULT_INJECTION: forcing a failure. [ 760.043585][T15512] name failslab, interval 1, probability 0, space 0, times 0 [ 760.056297][T15512] CPU: 0 UID: 0 PID: 15512 Comm: syz.1.2758 Tainted: G W syzkaller #0 PREEMPT(full) [ 760.056337][T15512] Tainted: [W]=WARN [ 760.056345][T15512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 760.056366][T15512] Call Trace: [ 760.056373][T15512] [ 760.056424][T15512] __dump_stack+0x1d/0x30 [ 760.056449][T15512] dump_stack_lvl+0x95/0xd0 [ 760.056472][T15512] dump_stack+0x15/0x1b [ 760.056526][T15512] should_fail_ex+0x263/0x280 [ 760.056556][T15512] should_failslab+0x8c/0xb0 [ 760.056645][T15512] __kmalloc_noprof+0xb8/0x4d0 [ 760.056676][T15512] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 760.056702][T15512] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 760.056826][T15512] genl_start+0xe0/0x390 [ 760.056847][T15512] __netlink_dump_start+0x334/0x520 [ 760.056965][T15512] genl_family_rcv_msg_dumpit+0x1a5/0x210 [ 760.056987][T15512] ? __pfx_genl_start+0x10/0x10 [ 760.057010][T15512] ? __pfx_genl_dumpit+0x10/0x10 [ 760.057028][T15512] ? __pfx_genl_done+0x10/0x10 [ 760.057050][T15512] genl_rcv_msg+0x400/0x470 [ 760.057099][T15512] ? __pfx_nl802154_dump_llsec_key+0x10/0x10 [ 760.057163][T15512] netlink_rcv_skb+0x123/0x220 [ 760.057191][T15512] ? __pfx_genl_rcv_msg+0x10/0x10 [ 760.057287][T15512] genl_rcv+0x28/0x40 [ 760.057372][T15512] netlink_unicast+0x5a8/0x680 [ 760.057418][T15512] netlink_sendmsg+0x5c8/0x6f0 [ 760.057459][T15512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 760.057489][T15512] ____sys_sendmsg+0x563/0x5b0 [ 760.057580][T15512] ___sys_sendmsg+0x195/0x1e0 [ 760.057614][T15512] __x64_sys_sendmsg+0xd4/0x160 [ 760.057642][T15512] x64_sys_call+0x194c/0x3020 [ 760.057668][T15512] do_syscall_64+0x12c/0x3b0 [ 760.057717][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.057752][T15512] RIP: 0033:0x7ff541d3cdd9 [ 760.057771][T15512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.057824][T15512] RSP: 002b:00007ff540797028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.057846][T15512] RAX: ffffffffffffffda RBX: 00007ff541fb5fa0 RCX: 00007ff541d3cdd9 [ 760.057861][T15512] RDX: 0000000004044880 RSI: 00002000000001c0 RDI: 0000000000000005 [ 760.057898][T15512] RBP: 00007ff540797090 R08: 0000000000000000 R09: 0000000000000000 [ 760.057911][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.057925][T15512] R13: 00007ff541fb6038 R14: 00007ff541fb5fa0 R15: 00007fffd1007008 [ 760.057945][T15512] [ 760.390244][T15520] loop4: detected capacity change from 0 to 256 [ 760.717379][T15528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15528 comm=syz.1.2764 [ 760.745764][T15528] netlink: 95 bytes leftover after parsing attributes in process `syz.1.2764'. [ 760.806196][T15528] loop1: detected capacity change from 0 to 4096 [ 761.084742][T15528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 761.117065][T15532] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 761.125904][ T28] audit: type=1400 audit(1778182875.501:2578): avc: denied { write } for pid=15527 comm="syz.1.2764" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.150134][T15528] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.2764: corrupted inode contents [ 761.163857][T15528] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #15: comm syz.1.2764: mark_inode_dirty error [ 761.175530][T15528] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.2764: corrupted inode contents [ 761.187521][T15532] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 761.187812][ T28] audit: type=1400 audit(1778182875.567:2579): avc: denied { write } for pid=15527 comm="syz.1.2764" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.208455][T15536] netem: change failed [ 761.226190][T15528] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.2764: mark_inode_dirty error [ 761.229639][ T28] audit: type=1400 audit(1778182875.567:2580): avc: denied { write } for pid=15527 comm="syz.1.2764" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.270399][T15532] netlink: 84 bytes leftover after parsing attributes in process `syz.7.2766'. [ 761.280092][T15528] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.2764: corrupted inode contents [ 761.303784][T15528] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #15: comm syz.1.2764: mark_inode_dirty error [ 761.321695][T15528] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.2764: corrupted inode contents [ 761.322687][T15545] loop4: detected capacity change from 0 to 512 [ 761.342984][T15545] EXT4-fs: Ignoring removed bh option [ 761.356565][T15545] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 761.365200][T15528] EXT4-fs error (device loop1): ext4_truncate:4690: inode #15: comm syz.1.2764: mark_inode_dirty error [ 761.379020][T15545] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 761.401914][T15528] EXT4-fs error (device loop1) in ext4_setattr:6120: Corrupt filesystem [ 761.411425][T15538] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #15: comm syz.1.2764: corrupted inode contents [ 761.457066][T14777] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 761.457522][T15545] loop4: detected capacity change from 0 to 512 [ 761.460546][T14777] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 761.474198][T15545] EXT4-fs: Ignoring removed mblk_io_submit option [ 761.479114][T14777] EXT4-fs warning (device loop1): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 761.521058][T15545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 762.033963][T15553] loop8: detected capacity change from 0 to 512 [ 762.311925][T15553] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2769: corrupted inode contents [ 762.355685][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 762.357182][T15553] EXT4-fs error (device loop8): ext4_dirty_inode:6587: inode #16: comm syz.8.2769: mark_inode_dirty error [ 762.367700][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 762.368009][ C1] EXT4-fs (loop8): initial error at time 1778182876: ext4_do_update_inode:5690: inode 16 [ 762.368257][ C1] EXT4-fs (loop8): last error at time 1778182876: ext4_do_update_inode:5690: inode 16 [ 762.447936][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 762.457193][T15553] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2769: corrupted inode contents [ 762.513641][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 762.516095][T15553] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.2769: mark_inode_dirty error [ 762.559706][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 762.560752][T15553] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2769: corrupted inode contents [ 762.601675][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 762.731045][T14777] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 762.767716][T15545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.827023][T15545] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 762.988457][ T28] audit: type=1400 audit(1778182877.252:2581): avc: denied { write } for pid=15542 comm="syz.4.2768" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 764.188418][T15553] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 764.201890][T15553] loop8: lost filesystem error report for type 5 error -117 [ 764.206836][T15553] EXT4-fs error (device loop8): ext4_do_update_inode:5690: inode #16: comm syz.8.2769: corrupted inode contents [ 764.226085][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 764.230017][T15567] IPv6: NLM_F_CREATE should be specified when creating new route [ 764.247064][T15567] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 764.254319][T15567] IPv6: NLM_F_CREATE should be set when creating new route [ 764.261528][T15567] IPv6: NLM_F_CREATE should be set when creating new route [ 764.268730][T15567] IPv6: NLM_F_CREATE should be set when creating new route [ 764.276463][T15553] EXT4-fs error (device loop8): ext4_truncate:4690: inode #16: comm syz.8.2769: mark_inode_dirty error [ 764.287595][T15553] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 764.288155][T15553] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 764.332682][T15553] loop8: lost filesystem error report for type 5 error -117 [ 764.339108][T15553] EXT4-fs (loop8): 1 truncate cleaned up [ 764.360548][T15553] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.373039][T15553] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 764.395105][ T9038] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 764.404868][ T9038] EXT4-fs error (device loop8): ext4_release_dquot:7070: comm kworker/u8:32: Failed to release dquot type 1 [ 764.585806][ T8133] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.745211][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.194912][T15586] loop0: detected capacity change from 0 to 256 [ 766.810239][T15604] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2785'. [ 766.896195][T15608] loop4: detected capacity change from 0 to 512 [ 767.025726][T15608] EXT4-fs: Ignoring removed bh option [ 767.068933][T15608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 767.985993][T15608] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 768.222526][T15608] loop4: detected capacity change from 0 to 512 [ 768.256525][T15608] EXT4-fs: Ignoring removed mblk_io_submit option [ 768.336208][T15608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 768.401443][ T2] ================================================================== [ 768.409577][ T2] BUG: KCSAN: data-race in copy_process / free_pid [ 768.416103][ T2] [ 768.418432][ T2] read-write to 0xffffffff86c5c3a8 of 4 bytes by task 14777 on cpu 0: [ 768.426761][ T2] free_pid+0xb3/0x1b0 [ 768.430848][ T2] free_pids+0x54/0xb0 [ 768.435018][ T2] release_task+0x9a7/0xb60 [ 768.439533][ T2] wait_consider_task+0x1160/0x1670 [ 768.444745][ T2] __do_wait+0xf9/0x510 [ 768.448918][ T2] do_wait+0xb6/0x230 [ 768.452913][ T2] kernel_wait4+0x19f/0x210 [ 768.457431][ T2] __x64_sys_wait4+0x91/0x120 [ 768.462122][ T2] x64_sys_call+0x2aee/0x3020 [ 768.466811][ T2] do_syscall_64+0x12c/0x3b0 [ 768.471416][ T2] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.477319][ T2] [ 768.479650][ T2] read to 0xffffffff86c5c3a8 of 4 bytes by task 2 on cpu 1: [ 768.487028][ T2] copy_process+0x1af1/0x2370 [ 768.491715][ T2] kernel_clone+0x1a5/0x5e0 [ 768.496231][ T2] kernel_thread+0xe5/0x120 [ 768.500741][ T2] kthreadd+0x25b/0x320 [ 768.504997][ T2] ret_from_fork+0x146/0x330 [ 768.509600][ T2] ret_from_fork_asm+0x1a/0x30 [ 768.514380][ T2] [ 768.516704][ T2] value changed: 0x80000136 -> 0x80000135 [ 768.522423][ T2] [ 768.524746][ T2] Reported by Kernel Concurrency Sanitizer on: [ 768.530898][ T2] CPU: 1 UID: 0 PID: 2 Comm: kthreadd Tainted: G W syzkaller #0 PREEMPT(full) [ 768.541325][ T2] Tainted: [W]=WARN [ 768.545127][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.555189][ T2] ================================================================== [ 768.713888][T15608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.726453][T15608] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 768.758132][T15608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.766313][T15608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 768.815018][ T28] audit: type=1400 audit(1778182882.608:2582): avc: denied { read } for pid=15624 comm="syz.1.2790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 768.834966][ T28] audit: type=1400 audit(1778182882.617:2583): avc: denied { write } for pid=15607 comm="syz.4.2786" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.076458][T10857] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.