last executing test programs: 10m31.697242563s ago: executing program 32 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25b9e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x40000, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3443, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0xfff, 0x2, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x1800, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newqdisc={0xec, 0x24, 0xd0f, 0x70bd27, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xbc, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x68, 0xd, "85fb02f352b681d3566c011dace0362db368f9787dbe92c45230fcca9c00d90865f30d9c53ccef8564098369a85821baf7ee612d34112ccfe4ba45631522022229378d473291bbe423ca32a6777ad0072096e78bb4e782d9d5e0c1bbdf06781e6be86cc9"}, @TCA_NETEM_DELAY_DIST={0x37, 0x2, "ce2b7239806574fd656bfbbed2884a38ee21b8c53d71dec277aff253639741496d3c117833ed96518cd0fddf754c6b14c383c8"}]}}}]}, 0xec}, 0x1, 0x0, 0x0, 0x20048084}, 0x8080) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)='V6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00', 0x10}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x5e, &(0x7f0000000240)={[{@data_journal}, {@orlov}, {@jqfmt_vfsold}, {@data_err_ignore}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x3, 0x451, &(0x7f0000000b40)="$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") 7m21.498037867s ago: executing program 33 (id=2229): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x67, 0x1, {0x20}}, 0x14) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c2ea, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = syz_io_uring_setup(0x3f, &(0x7f00000014c0)={0x0, 0x2a9c6, 0x0, 0x9, 0x19e}, &(0x7f0000001540), &(0x7f0000001580), &(0x7f0000001200)) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) (async) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r6, 0x504c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmmsg$inet(r0, &(0x7f0000000300)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) 7m0.933114352s ago: executing program 34 (id=2361): bind$xdp(0xffffffffffffffff, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x2000001}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1af83a5e26a55ff5, &(0x7f0000000280)=0x10000, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000080)) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x1000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9) r1 = getpid() sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000000b0601020000000000000000010000030900020073797a31000000000500010007000000100007800c000180080001400a0101"], 0x38}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000000d08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000040)=ANY=[], 0x200002e6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) fcntl$setpipe(r5, 0x407, 0x7000000) write$eventfd(r4, &(0x7f0000000040)=0x8, 0x8) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) 6m48.664740978s ago: executing program 3 (id=2452): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) readv(r1, &(0x7f0000000880)=[{&(0x7f0000000180)=""/107, 0x6b}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone3(&(0x7f00000005c0)={0x100000, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280), {0xd}, &(0x7f00000002c0)=""/158, 0x9e, &(0x7f0000000480)=""/215, &(0x7f0000000580)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x6}, 0x58) r5 = getpgrp(r4) r6 = getpgid(r5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=[0x4], 0x0, 0x0, 0x1, 0x1, r6}}, 0x40) r7 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x3000)=nil, 0x3000, 0x0, 0x12012, r8, 0x0) 6m47.341964381s ago: executing program 3 (id=2461): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000140), 0x0, 0x539, &(0x7f0000001440)="$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") ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000740)={{&(0x7f0000000380)=[{0x838f, 0x35, 0x4, {0x7fff, 0x80}, 0x3, 0x9, 0x6a3}, {0x5, 0x7, 0x1ff, {0x6, 0x6}, 0x4, 0x2, 0x1}, {0x52b, 0x2c60000000000000, 0xa584, {0x2, 0xe}, 0x6, 0x7, 0x2c9}, {0x1e20, 0x7, 0xb77, {0x7, 0x2}, 0x1a, 0x2}, {0x9, 0x5, 0x8, {0xffffffffffffe26c, 0x2}, 0x9, 0x0, 0x1}, {0x8, 0x80, 0x2, {0x21, 0x1964}, 0x7f, 0x3, 0x5}, {0x2, 0x8, 0xcf, {0x8, 0x4}, 0x6, 0x3, 0xf}, {0x50, 0xc, 0x3, {0xb345, 0x9}, 0x8001, 0x1, 0x1ff}, {0x9, 0xb2d, 0x3, {0x3, 0x8000000000000000}, 0xe, 0x2, 0x4}, {0x3, 0x4, 0x4, {0x2}, 0x6, 0x9, 0xfff}], 0xa, 0x40, 0x0, 0x1ff}, {&(0x7f0000000600)=[{0x5, 0xd}, {0xfffffffffffffff7, 0x8}, {0x3, 0x4}], 0x3, 0x10, 0x3, 0x6}, {&(0x7f0000000680)=[0xa2f], 0x1, 0x8, 0x3, 0x9}, {&(0x7f00000006c0)=[{0x9123, 0xfffffffffffff000, 0x2, 0x2, 0x5}], 0x1, 0x28, 0x5, 0xfffffffffffff1de}, {&(0x7f0000000700)=[0xa949, 0x6, 0x800], 0x3, 0x8, 0x7, 0xfffffffffffffffc}}) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 6m46.931645684s ago: executing program 3 (id=2463): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0xffffffff7ffffffc]}, 0x8) readv(r0, &(0x7f0000000340)=[{&(0x7f0000006a40)=""/161, 0xa1}], 0x1) 6m45.707259704s ago: executing program 3 (id=2470): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x40000, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_appraise}, {@uid_lt}, {@audit}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x30, 0x62, 0x37, 0x2416e1dc506260e2, 0x34, 0x31], 0x2d, [0x66, 0x65, 0x35, 0x50], 0x2d, [0x34, 0x33, 0x32, 0x63], 0x2d, [0x65, 0x33, 0x39, 0x62], 0x2d, [0x61, 0x38, 0x63, 0x33, 0x31, 0x34, 0x0, 0x65]}}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}]}}) 6m45.579300388s ago: executing program 3 (id=2471): getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={r0, 0x8, 0x38}, &(0x7f00000001c0)=0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0xffff7fff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$kcm(0x11, 0xa, 0x300) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x8907, 0x0) recvmsg$kcm(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000094}, 0x0) io_uring_setup(0x6c7e, &(0x7f0000000140)={0x0, 0xd38f, 0x3000, 0x0, 0xffffffff}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000216, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x38, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x7, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0, @ANYRES64=r5, @ANYRESDEC=r6, @ANYRES64=r4, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x200081, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socket(0x1d, 0x80802, 0x6) 6m44.311459689s ago: executing program 3 (id=2481): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x40000, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_appraise}, {@uid_lt}, {@audit}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x30, 0x62, 0x37, 0x2416e1dc506260e2, 0x34, 0x31], 0x2d, [0x66, 0x65, 0x35, 0x50], 0x2d, [0x34, 0x33, 0x32, 0x63], 0x2d, [0x65, 0x33, 0x39, 0x62], 0x2d, [0x61, 0x38, 0x63, 0x33, 0x31, 0x34, 0x0, 0x65]}}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}]}}) 6m44.26141522s ago: executing program 35 (id=2481): socket$kcm(0x10, 0x400000002, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x40000, &(0x7f0000000740)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_readahead}], [{@subj_role={'subj_role', 0x3d, '\x00'}}, {@dont_appraise}, {@uid_lt}, {@audit}, {@seclabel}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x66, 0x30, 0x62, 0x37, 0x2416e1dc506260e2, 0x34, 0x31], 0x2d, [0x66, 0x65, 0x35, 0x50], 0x2d, [0x34, 0x33, 0x32, 0x63], 0x2d, [0x65, 0x33, 0x39, 0x62], 0x2d, [0x61, 0x38, 0x63, 0x33, 0x31, 0x34, 0x0, 0x65]}}}, {@fowner_lt}, {@obj_user={'obj_user', 0x3d, '9p\x00'}}]}}) 6m13.601955111s ago: executing program 0 (id=2728): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r0, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0xd3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000500)='./file0\x00', 0x18010, &(0x7f00000007c0)=ANY=[@ANYBLOB="646f74732c646f733178666c6f7070792c6572726f72733d72656d6f756e742d726f2c6e6f636173652c616c6c6f775f7574696d653d30303030303030303030303030303030303037373737372c6e6f646f74732c646f74732c6e6f646f74732c6572726f72734372656d6f756e742d726f2c7379735f696d6d757461626c652c6e6f646f74732c666d61736b3d30303030303030303030303030303030303030303030332c6e66733d7374616c655f72772c646f733178666c6f7070792c646f74732c64656275672c6e6f646f74732c646f74732c646f74732c004779a818b37b82197170c861"], 0x1, 0x243, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file3\x00', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000130a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x4000040) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) listen(r3, 0x364) r4 = getpgid(0x0) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x0, r4}) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) openat(r5, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r6 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r6, r7, 0x3, 0x0) 6m13.417846077s ago: executing program 0 (id=2730): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x8c, 0x0, 0x200c}, 0x0, 0x4000000004, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="000426bd7000fcdbdf250c00000034000980080002000010000008000100fbffffff08000100ffffff7f08000200d63c0000080001000400000008000100090000002c0101800d0001007564703a73797a3200000000380004001400010002004e23ac1e00010000000000000000200002000a004e227ffffffffc00000000000000000000000000000001000080080003000400000038000400200001000af04e2000000009ff020000000000000000000000000001040000001400020002004e240000000000000000000000004c00028008000300ff0100000800040001040000080003000900000008000200f600000900000000000000000800020001000000080001001a0000000800030009000000080001001700000054000280080001001c"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800084000000072050005000a0000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x7, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac14142b000000000000000000000000640101000000000000000000000000000000fffdfffe00000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000142e415da5d929ef000000000000000000000006000000000008001000000000e235eef8ec9d997400000000000000030000000000000000000000000000000100008000000000fcffffff0000000000000020000000000000000002000000cd00000000000000"], 0xf0}}, 0x20004000) 6m12.330366662s ago: executing program 0 (id=2732): r0 = socket$nl_route(0x10, 0x3, 0x0) open(0x0, 0x400141042, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x0, 0x20002, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000003c0), &(0x7f0000000200)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r3], 0x44}}, 0x2000850) 6m11.787333189s ago: executing program 0 (id=2736): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1}, 0x94) 6m11.736021291s ago: executing program 0 (id=2737): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x89882) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="f800000016000100000000000000000000000000000000000000ffff7f000001ac1e0001000000000000000000000a0080a000000000", @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="00000000000000000000ffffac14143a0000000033000000fe"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x287, &(0x7f0000000ec0)="$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") r2 = socket(0x10, 0x3, 0x4) connect$qrtr(r2, &(0x7f00000003c0)={0x2a, 0x2, 0x7fff}, 0xc) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r2) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) sendmsg$nl_route(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delnexthop={0x20, 0x69, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x430) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xc0552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2012, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x46, 0x1, 0x0, 0x0, 0x0, 0x3, 0x40510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x101, 0x4030000000000}, 0x0, 0xfffe, 0xfffffffe, 0x5, 0x8, 0x5, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = getpgid(0x0) process_vm_readv(r6, &(0x7f0000000700)=[{&(0x7f0000000280)=""/154, 0x9a}], 0x1, &(0x7f00000012c0)=[{0x0}, {&(0x7f0000000780)=""/239, 0xef}], 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @remote}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r8, 0x84, 0x7a, &(0x7f0000000340)={r9, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000280)={0x0, 0x9}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 6m11.247299927s ago: executing program 0 (id=2741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 5m55.245834264s ago: executing program 36 (id=2741): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x14, r1, 0x6a98047402e98331}, 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) 4m51.550513082s ago: executing program 9 (id=3046): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0xa, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="24000000240035b90000000000000000070000000600040000ef0000060003"], 0x24}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, r2, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB], 0x48) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf610}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0xc, 0x3, 0x0, 0x0, 0x0, 0x0, 0xc400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x9}, 0x420, 0xe52, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000880)=ANY=[@ANYRESDEC, @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6], 0x22c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, [@TCA_NETEM_RATE={0x14, 0xd, {0x4, 0x0, 0x6}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0xfffffffffffff813, 0x0, 0x7, 0x4, 0x55}}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48011}, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) socket$nl_generic(0x10, 0x3, 0x10) 4m50.99842265s ago: executing program 9 (id=3053): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000a000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007b000000db13f411aab0e18400000000000000000000000000000f58589accaf0610292804abe681a9f4956f9978581c5f2a36ef27b4ac71115d1e8a4911fb3d9b98021b8731bcc1f5a269ec95ab600f000000000000005f76eaa79055d365758263ddb7484cdd162bc474ea2d862ce92f8e9128"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000002380)={@l2tp6={0xa, 0x0, 0x9, @loopback, 0x7fc6, 0x4}, {&(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000002340), 0x1}, 0xa0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000b05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r2, @ANYBLOB="800c080007500500340012800b00010062726964676500002400028005001900020000000c00230001000000000000000c0022"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4m49.279203435s ago: executing program 9 (id=3062): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x8c, 0x0, 0x200c}, 0x0, 0x4000000004, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x40408c1}, 0x40) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x8a2b81) write$char_usb(r1, &(0x7f0000000040)="e2", 0x12d8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7b}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601020000000000000000000000000900020073797a3100000000050004000000000011000300686173683a6e65742c6e6574000000000c0007800800084000000072050005000a0000000500010006"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x7, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r5, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) fcntl$lock(r5, 0x7, &(0x7f00000000c0)={0x0, 0x2, 0x2, 0x73e9}) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000000ac14142b000000000000000000000000640101000000000000000000000000000000fffdfffe00000000008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000032000000fc01000000000000000000000000000000000000000000000000000000000000000000000000000000142e415da5d929ef000000000000000000000006000000000008001000000000e235eef8ec9d997400000000000000030000000000000000000000000000000100008000000000fcffffff0000000000000020000000000000000002000000cd00000000000000"], 0xf0}}, 0x20004000) 4m48.385209644s ago: executing program 9 (id=3064): r0 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x2a, 0x4, 0x9, 0xb, 0x0, 0x9, 0xa16ae, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x100000000005, 0x5}, 0x0, 0xa0, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000045"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, 0x38) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xffff46ff}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 4m48.215235939s ago: executing program 9 (id=3065): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=@deltaction={0x1d8, 0x31, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x14, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x44, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x960}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000001}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdc34}}]}, @TCA_ACT_TAB={0x7c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x14, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x4000}, 0x840) 4m48.095661163s ago: executing program 9 (id=3067): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10020f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x48804) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x2}, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x28, 0x0, &(0x7f0000000240)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$security_ima(0x0, &(0x7f0000000000), 0x0, 0xd, 0x0) listxattr(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) 4m33.618319131s ago: executing program 37 (id=3067): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10020f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x48804) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x2, {{0xa, 0x4e20, 0x1, @mcast1, 0x1000}}, {{0xa, 0x4e22, 0x7, @empty, 0x3ff}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000580)={0x3, {{0xa, 0x4e24, 0xc, @mcast1, 0x408}}, 0x1}, 0x90) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x2}, 0xc) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x30) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r1, 0x27, 0x28, 0x0, &(0x7f0000000240)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setxattr$security_ima(0x0, &(0x7f0000000000), 0x0, 0xd, 0x0) listxattr(&(0x7f0000001100)='./file0\x00', 0x0, 0x0) 2m57.884113544s ago: executing program 8 (id=3977): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff9d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) flock(0xffffffffffffffff, 0x2) 2m57.262321264s ago: executing program 8 (id=3987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0x1, 0x2, 0x0, 0x14}, 0x20) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000000), 0x4) 2m57.187431166s ago: executing program 8 (id=3988): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0xa0001) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x0, 0x4, 0x6, 0x14c, 0x1}, 0x48) r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000a000000400000000300000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00007b000000db13f411aab0e18400000000000000000000000000000f58589accaf0610292804abe681a9f4956f9978581c5f2a36ef27b4ac71115d1e8a4911fb3d9b98021b8731bcc1f5a269ec95ab600f000000000000005f76eaa79055d365758263ddb7484cdd162bc474ea2d862ce92f"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000000), 0x0}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002380)={@l2tp6={0xa, 0x0, 0x9, @loopback, 0x7fc6, 0x4}, {&(0x7f0000001340)=""/4096, 0x1000}, &(0x7f0000002340), 0x1}, 0xa0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000000b05000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001000030400000000fcdbdf2500007400", @ANYRES32=r3, @ANYBLOB="800c080007500500340012800b00010062726964676500002400028005001900020000000c00230001000000000000000c0022"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m56.867224626s ago: executing program 8 (id=3994): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$kcm(0xa, 0x3, 0x3a) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x20, r2, 0x101, 0x70bd25, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040805}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) socket$netlink(0x10, 0x3, 0x0) socket(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x799}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r4, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000000)=0x20) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r6, &(0x7f0000000040)='./bus\x00', 0x200) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}}, 0x24}}, 0x44080) unshare(0x24020400) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x50b101, 0x0) mmap$usbmon(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x1010, r8, 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7}, &(0x7f00000000c0)={0x1f, 0x0, 0x8, 0x5, 0xfffffffffffffff8, 0x0, 0x4000000000}, 0x0, 0x0, 0x0) 2m56.725988241s ago: executing program 8 (id=3998): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") (async) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7ac, 0xb5e3}, 0x10c0e8, 0x0, 0x2, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xc}, 0x9f50, 0x2, 0x0, 0x5, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x101000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xfb, 0x1}, 0x1, 0x0, 0x0, {0x1, 0xf1}, 0xf5, 0xa895}) prctl$PR_SET_NAME(0xf, 0x0) r2 = io_uring_setup(0x1b80, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) (async) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x1c) r3 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) lseek(r3, 0x7fffd, 0x1) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) (async) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) socket$phonet(0x23, 0x2, 0x1) ioctl$XFS_IOC_GOINGDOWN(r2, 0x8004587d, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount$cgroup(0x0, 0x0, 0x0, 0x2000, 0x0) 2m55.959629146s ago: executing program 8 (id=4005): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300c05a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400000000008133455d000040cb31a5fc97fc294891f7c08b96fcd151fba110c3", 0x25}], 0x2) 2m55.934852227s ago: executing program 38 (id=4005): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000340)="aefdda9d240300c05a90f57f07703aeff0f64ebbee07962c22772e11070000006641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e2400000000008133455d000040cb31a5fc97fc294891f7c08b96fcd151fba110c3", 0x25}], 0x2) 2m46.819963051s ago: executing program 7 (id=4073): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, 0x0, 0x0) 2m46.611578818s ago: executing program 7 (id=4074): syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) 2m46.022146767s ago: executing program 7 (id=4086): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800682237b36630000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4004095}, 0xc080) 2m45.893149831s ago: executing program 7 (id=4087): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 2m45.873100402s ago: executing program 7 (id=4088): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000019200)='net/route\x00') write$P9_RLOCK(r4, &(0x7f0000019000)={0x8, 0x35, 0x1, 0x2}, 0x8) pread64(r4, &(0x7f0000000000)=""/102382, 0x18fee, 0x8001) 2m45.635964989s ago: executing program 7 (id=4089): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) 2m45.561855682s ago: executing program 39 (id=4089): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) 8.798414886s ago: executing program 6 (id=5565): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c"], 0x24}}, 0x4000000) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 8.734632288s ago: executing program 6 (id=5566): r0 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r1 = syz_io_uring_setup(0x416f, &(0x7f0000000780)={0x0, 0x5c5e, 0x10100, 0x0, 0x1}, &(0x7f0000001240), &(0x7f0000000040), &(0x7f0000000000)) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x20000000}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f0000000500)=ANY=[], 0xff2e) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f00000000c0)={r3}) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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") r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001200000008000800000002000800090000000100180001801400020076657468305f746f5f626f6e640000000800090000000000080006"], 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000880)={@dev, 0x0}, &(0x7f0000000980)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711834000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x8000, '\x00', r7, r3, 0x2, 0x2}, 0x50) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000005b80)={'ip6gre0\x00', &(0x7f0000000000)={'ip6_vti0\x00', 0x0, 0x4, 0xa4, 0x0, 0xe2, 0x36, @private2, @dev={0xfe, 0x80, '\x00', 0x10}, 0x20, 0x0, 0x5, 0xffffeffe}}) sendmsg$NL80211_CMD_LEAVE_MESH(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x20000000) 8.595057353s ago: executing program 6 (id=5568): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0, 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080), 0x800013, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='yeah', 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000200081dc26bd70000300000002000000000002041f00000005"], 0x2c}, 0x1, 0x0, 0x0, 0x20000091}, 0x44004) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @loopback, 0x4}, 0x1c) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180000000001000020000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, &(0x7f00000001c0)=""/152, 0x41000, 0xa}, 0x23) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x4e21, 0x3, 'sh\x00', 0x1d, 0x9d43, 0x75}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x4, 'lc\x00', 0x5, 0xc, 0x75}, {@remote, 0x4e20, 0x10000, 0xcd, 0x3}}, 0x44) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000380)={r0, &(0x7f0000000140)='1\x00', 0x200c00, &(0x7f0000000200)={@_ha_fsid={[0x2, 0x9]}, {0x6804, 0x38, 0x2, 0x80}}, 0x6, &(0x7f0000000300), &(0x7f0000000340)}) bind$bt_l2cap(r6, &(0x7f00000003c0)={0x1f, 0x0, @none, 0xe, 0x1}, 0xe) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x200001, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x1, @rand_addr=' \x01\x00', @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "9b1f80001b00"}, 0x38) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x8000) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r4], 0x110}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000039000000180100002fee702500000000002020"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.552523884s ago: executing program 4 (id=5569): unshare(0x22020600) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) 8.456213437s ago: executing program 6 (id=5571): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCGSERIAL(r0, 0x541e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="24000000000000002cbd7000ffdbdf25021800"/36], 0x24}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8048, 0x40008, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x2020000, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x22020400) poll(0x0, 0x0, 0x9) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0x0, 0xfffffffd}, 0x10) socket$netlink(0x10, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000d40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c028, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000040), 0x0, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x3}}, 0x26) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 8.283552843s ago: executing program 2 (id=5572): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0x6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppoe(0x18, 0x1, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000380)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x4}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 7.851616147s ago: executing program 1 (id=5580): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x6, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r11, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r7], 0x4}}, 0x0) sendfile(r10, r8, 0x0, 0x100000000) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0xffffffff, 0x3}, {0x0}, &(0x7f00000002c0)=[{&(0x7f0000001a00)=""/4090, 0xffa}], 0x1, 0x60, 0x4}}], 0x48, 0x48004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 7.14751907s ago: executing program 4 (id=5583): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x6, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 6.144882602s ago: executing program 1 (id=5584): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x9}, 0x30e600, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x1f, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@ldst={0x3, 0x2, 0x6, 0x8, 0x4, 0x18}, @ldst={0x0, 0x2, 0x6, 0xb, 0x6, 0x40, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0xf}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = gettid() socket(0x5, 0x3, 0x80) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) epoll_create(0x6) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x400, &(0x7f0000000640)=ANY=[@ANYBLOB="636865636b3d7374726963742c636865636b3d72656c61786564006d6f64653d3078303030303030303030303030303030312c6d61703d6f66662c73657373696f6e3d3078303030303030303030303030303027322c696f636861727365743d6d6163677265656b416d61703d61636f726e2c696f636861727365743d69736f383835392d322c73657373696f6e3d3078303030303030303030303030303035382c73686f776173736f632c6d6f64653d3078666666666666666666666666666666652c636865636b3d7374726963742c6673636f6e746578743d73797374656d5f752c7065726d69745f64697265637469f9a8a3d75634bdd2ea56ac526f64f72223cc082f505d16b1ba5ea0fd7c9a262c91bdadc10f9c5c6437414c224bbe313a4117d1602bd35ede73d55154ae0c2cb9551143371fd32306f3dee8613d38e0060354449f63f238ae901f37b2bb89b142696a1d8401d3184a52539fe3b38c382fd66c090599baedc4872e53f40e546c780697"], 0xfe, 0x69f, &(0x7f0000000f00)="$eJzs3c9v2+Ydx/EP5V+yOwTFNhRBkB9PkhVwsEyR5MaBkQEtR1E2N0kUSHmwgQFF1thFEDndkg5YfOl82Q+gA3berZcddts/MKDn/he7bUCx3QZsBw4kRVmyRMlqHLdZ3y8jEUV++Txfkgq/oSU+EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOXUyuWKpYbX2t4x+Zxa4DcnLE9bW9CtdOLW1H4lK/6jYlEX01kXv328+I34rxu6nD67rGL8UNTha2+8fv9b84Vs/QkJfRGatcFnzw8fP+h2956eInZOMzf/ZVLhFEGbbssLfa9pb7rGC32zsb5evrNVD03da7jhbthxm8YJ3ELHD8yqc8tUNjbWjFva9bdbmzW74WYz732vWi6vmx8upQdaUil0trxGw2ttJjHx4jjmnvn4J2mAazeN2X/U3VublmQcVMlbWBgIqk5rqVquViuVarWyfnfj7r1yeX5kRjlmlfs0EnHmL1q8Ys7u5A28oEJc//9mSQ0V1dK2dmTG/jiqKZCvZs7ynqz+v3nHndjvYP3PqvxF6e3e4ktK6v/V9NnVvPqfk4uRSVYYt8TKmT/bz0KSkdEzPdehHuuBuupqT0/PoG0jc+1MWjmHn025aslTKF+emrKTOaY3x2hD61pXWe9qS3WFMqrLU0OuQu0qVEdu8opyFMiVrY58BTJalaNbMqpoQxtak5Grknbla1stbaomW/+Oomhfj5L9vjYhR2VBlZyApcGg6oSW8ur/Tz9KX6e9+l+m/n9dpa+DpfThs0kxwFdA1Lv+n9G1l5MNAAAAAAB4Gazkt+9W8t79FUmR6l7DLeevsHie2QEAAAAAgLNgKVrSZVnx9b+kK7KmXP8DAAAAAIBXjpXcY2dJWkk+1G8d3wl1ml8CzJ1DigAAAAAA4AUld/5fXZSiZNCKa7Jmuv4HAAAAAACvgN8OjLE/n42xG2Vv6xckhe0l66//XFKwYB21d75jHdjxEvtgrpCEjHwCoFO/ZIV/SAfqTcbrXZSUPHPcy1avt94gmP1xBz/fnzbWvxWcSGBxbrCBEwlc6K1txT2vz/ee6WNdf3so9uFhQcmStJeVutdwS47fuF+RbV8odNydzi+ePPqlFPS3c/9Rd6/03gfdh0kuR/Gso4M4j4+ydP6y2Nt1w7kkD/1c/hulpCtjt3hZ9azL37WaK1bSbznb/jnZB4XjY5S7/cN96te6kR6zGytp7Mphf8T9ePuL8fZXSskhG9r6YME6zqJycsvHHYicLIpJFjfTmJurN9OHLL+4nYJV/O6cVC2NHoOhLKqDWUzfF9a/RvbFpCx6+2ItzuLTuKGcLNZmy2LkiADAl2U/GfUnufMvGcR8pO5m5SE7qX2hujO9ur8zXN0//GNcGdP/Xsz33puY2EtR8Rl91Urq0KKSE+v8pZEzerY19oWics7o5ReobnFffz7+DqRe2iNZ/CeKovuVpN/fn6iqn8QrfJLbb9hId/udDw9+lgyAH3t/7/29J9Xq2nr5rXL5blULyWb0HuZE7QEAjJj+HTtTI6y3dD2NuP7wH2+mU0MV75v9jxSU9J4+UFcPtZB9hcC18a2uDHwM4XZ61aqBq1bzxuv3l6WTsRXdzr2qS2rpQGy1H7ugbJXhSn0cu/aSjwIAAOfrxpQ6PL7+F4fq/22tphGrl8Zedw/X8t7Vcf+SPi+2Mj35d856bwAA8PXgBp9bK53fWEHgtd+tbGxU7M6WawLf+ZEJvNqma7xWxw2cLbu16Zp24Hd8x2+YdqAlr+aGJtxut/2gY+p+YNp+6O0k3/xuel/9HrpNu9XxnLDdcO3QNY7f6thOx9S80DHt7R80vHDLDZKVw7breHXPsTue3zKhvx04bsmY0HUHAr2a2+p4dS+ebJl24DXtYNf82G9sN11Tc0Mn8NodP20w68tr1f2gmTRbUjTzFx0CAPD/6Nnzw8cPut29pycnluNL83TOkXJiRicWxzTIGEEAAHzFHJfrGVYq9qc+jV5KVgAAAAAAAAAAAAAAAAAAAAAAYND0W/pmnFgYd7Og1J/z8wu9OfqVjm8xHGnH0lknNstEYda1slsiDh9/NiF4uT8n2/2DMUfntoF//4b0WjJH6Zz5ccHF/Has6X0tTzi4p5yYi3fQaYO/v5/u0dyYeOHYRUv9YzF/9v8c4oknf8pZFEVRNHn1peF9uDhpA4cn5iU9XXyBQ3D+5yIA5+t/AQAA//+xxzz3") openat$ipvs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x8, 0x4, &(0x7f0000000380)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8}, 0x94) write(0xffffffffffffffff, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) sendto$packet(r1, &(0x7f0000000400)="3f03f91c00030202e305001e7dbbced3afd7eb466b0fd22cb19fab0089e9514c11d7c2290f0086dd1327c9167c643c4a1b788055b1b141ab051ba5eaa0e10df71548a3f6c56090633801000000fdf9435e3ffed49a4a6be966768014e97402e7b77592c0a56eff8de14dfbba49c21bc15a5708366c9abfbbf282e5a65b043114", 0xfffffffffffffeb9, 0x800, &(0x7f0000000540)={0xc9, 0xf8, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) open_by_handle_at(r2, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0], 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSWINSZ(r4, 0x5414, &(0x7f0000000040)={0x1d, 0xfeff, 0x21ae}) 5.948583399s ago: executing program 6 (id=5585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xdb, 0x550, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0x5}, 0x105902, 0x10003, 0x33f8, 0x1, 0xb, 0x20007, 0xb, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000010000d046dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="460002000000000b140012806f6e6400000000040002800000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40040}, 0x0) lstat(&(0x7f00000001c0)='./mnt\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180), 0x20000, &(0x7f00000002c0)={[{@clone_children}], [{@smackfsfloor}, {@appraise}, {@smackfstransmute={'smackfstransmute', 0x3d, '{'}}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@appraise_type}, {@fowner_eq={'fowner', 0x3d, r1}}]}) mmap(&(0x7f0000d74000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0xcb0df000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$sg(&(0x7f0000000b00), 0x2, 0x3d4e6ccb7a15d835) ioctl$SG_SET_KEEP_ORPHAN(r4, 0x2287, 0x0) r5 = perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010d7a794d0000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000d0c7116cf56bb197010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001400000000714000000100001000000000000000000"], 0xe4}}, 0x0) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000006c0)=ANY=[@ANYBLOB="bc04000000050104000000000000000003000006540201000300000002"], 0x4bc}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$VFAT_IOCTL_READDIR_BOTH(r2, 0x82307201, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x3, 0x7, 0x2, 0x0, 0xfffffff7}, &(0x7f0000000440)=0x98) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r7, 0x29, 0x44, &(0x7f0000000240)={'ipvs\x00'}, &(0x7f0000000280)=0x1e) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) utimes(0x0, &(0x7f00000000c0)={{}, {0x0, 0x2710}}) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x77, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x107020, 0x10000, 0x20da, 0x5, 0xa, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000a80)={[{@dioread_lock}, {@inlinecrypt}, {@nolazytime}, {@journal_async_commit}, {@jqfmt_vfsold}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB="08010000020000000b0000000000000164c90791d40a4c7609e413eb7c3781eca0e94d38aae9ec141ca496f7b2aaca02269ed12986fc47750243358ca8f7fb484ed7efe7516010f0d38a60c4cc5bb161ac07e57daf0affe6053ace5a74e64483fe2ee100f11226107a8985517e14ca7310d5ef59d2abceb27a879e6144f612"], 0xfe) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r8, 0xc018620c, &(0x7f0000000a40)={0x3}) 5.830735362s ago: executing program 2 (id=5586): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x6, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 5.828170382s ago: executing program 1 (id=5587): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 5.786346394s ago: executing program 1 (id=5588): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x922000000003, 0x11) pipe(&(0x7f0000000140)={0xffffffffffffffff}) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0xfffffffffffffffe, 0x0, 0x6, 0x6, 0x0, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x200, 0x82) r3 = syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2000800, &(0x7f0000000080)={[{@usrjquota}, {@bh}]}, 0x0, 0x4a4, &(0x7f0000001300)="$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") r4 = openat(r3, &(0x7f00000000c0)='./file1\x00', 0x42, 0x197) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) write$binfmt_elf64(r1, &(0x7f0000003280)=ANY=[@ANYRES16=r2], 0x1ab0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x1c, &(0x7f0000000280)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x3ff, 0x34, &(0x7f0000000500)=""/52, 0x40f00, 0x54, '\x00', 0x0, 0x17, r4, 0x8, &(0x7f0000000580)={0x8, 0x8}, 0x8, 0x10, 0x0, 0x0, 0x8fb9, r4, 0x0, 0x0, &(0x7f0000000200), 0x10, 0x84}, 0x94) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x401f, 0x48180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x80000001, 0x1, @perf_bp={0x0, 0x9}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)='nfs4\x00', 0x854c03, 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x2, 0x0) setsockopt(r5, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet6(0xa, 0x800, 0x9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x6, &(0x7f0000102000/0x4000)=nil, 0x2) 5.764756025s ago: executing program 5 (id=5589): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b8000000190001002abd700010000000e0000002000000000000000000000000640101"], 0xb8}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) r3 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) (async) mount(0x0, &(0x7f00000001c0)='.\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b4000000140001000000000000000000e00000020000000000000000000000006401010200"/56, @ANYRES32=0x0], 0xb4}}, 0x0) 5.764433374s ago: executing program 4 (id=5590): unshare(0x20000400) socket(0x80000000000000a, 0x800, 0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2400c800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000004340)={'ip6gre0\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000007f40)={'syztnl1\x00', &(0x7f0000007ec0)={'ip6_vti0\x00', 0x0, 0x2b, 0x40, 0xc, 0x4d, 0x1a, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x80, 0xe, 0x8bb}}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c000280080001409500"], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 5.631443378s ago: executing program 5 (id=5591): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9378, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e88}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x3, 0x100) socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000002880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) sendmsg$L2TP_CMD_NOOP(0xffffffffffffffff, 0x0, 0x814) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0xc, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0xb04, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x85, 0xe8, 0x7ffc0001}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r3 = add_key$fscrypt_v1(&(0x7f00000001c0), &(0x7f0000000200)={'fscrypt:', @desc4}, &(0x7f00000002c0)={0x0, "187fa5dcc1b564ac2b2624429578b937ee70f7f9365adc03a5593fe3b018602ffc0f906e2c7799c24c54cef6d55f6ed89e9e8dc5e64046dc42271c69951def3b", 0x40}, 0x48, 0xfffffffffffffffa) keyctl$read(0xb, r3, &(0x7f0000000340)=""/132, 0x84) cachestat(r2, &(0x7f0000000040)={0x405}, &(0x7f000009de80), 0x0) 5.629122859s ago: executing program 6 (id=5592): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = memfd_secret(0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file1\x00', 0x0, 0x0, 0x0) ioctl$KDSKBENT(r3, 0x4b47, &(0x7f00000000c0)={0x2, 0xd, 0x8}) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff, 0x1a, 0x0, @void}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xeae5, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2020, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000002c0), 0x8}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_setup(0xd2, &(0x7f0000000140)={0x0, 0xf473, 0x80, 0x0, 0x2da}) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0341c8000400e8ff040000000a00a32f26a0f750", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000030000000100"/28], 0x50) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) file_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x4000, 0x800, 0xe, 0x7, 0xae}, 0x18, 0x100) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5.414692186s ago: executing program 4 (id=5593): unshare(0x22020600) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10003, 0x1, 0x3, 0x5, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x3a6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a", 0xa}], 0x1}, 0x40810) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) 3.374417651s ago: executing program 2 (id=5594): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r3, @ANYRES8=r2], 0x6c}, 0x1, 0x0, 0x0, 0x14044085}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x6}, 0x106200, 0x1000, 0x20da, 0x6, 0xa, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000180), 0xfea7) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r2, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0x0, 0x3e}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 2.326104085s ago: executing program 4 (id=5595): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002ba17000fbdbdf25030000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r2, @ANYBLOB="08000b0002000000"], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 2.267481367s ago: executing program 5 (id=5596): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000200012800b00010067656e657665000010000280040010"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getrlimit(0x4, 0x0) perf_event_open(&(0x7f0000000e00)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x91e6, 0xf28}, 0xc8a0, 0xffffffffffffdd25, 0x8, 0x6, 0xc, 0x475, 0x6, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x1) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) fchdir(r2) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0), 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000003700000000"], 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000087cd0000000000000000f57d566f0000cd003d50f8182d425f080000363b473c9348ba5688a90e675079d132c9228b0c85f2e7fca0311f0a1d27e87041fcccc7dc27ee92ec3f3c0bdee045903b4ade92c458a88f79bf7be3cc0a0b7431b35622195cbfe010f71fb6ef7b482c6461a20207092ba9f6549e0945d3759569c907f5567dc88cee8853907cdb9b269e0c83e8eb386a73b852840a42ecc716bb1c32a48d2f9b4532d64d9b448b37cddadefaad87ca6c64d857782e755771da4753d2b9c034e02ca2995c5ce34a42493d106c5d4c9ef04133ab0e17cf688b99bfed56e1fb5d1e991755e9bca33de863f50350cbdf12b86618f84b0e796c4811713dcba0591ca49ab46eb56925"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8}, 0x94) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x5, 0x2a, 0x0, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x9}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000080)=r5, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@barrier}, {@nobarrier}, {@grpjquota}, {@dax_never}, {@journal_path={'journal_path', 0x3d, './file1'}}], [{@smackfstransmute={'smackfstransmute', 0x3d, 'nobarrier'}}, {@dont_measure}, {@defcontext={'defcontext', 0x3d, 'system_u'}}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r6, &(0x7f0000000d40)=""/43, 0x2b) 2.245872878s ago: executing program 4 (id=5597): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x9400, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x1, @perf_config_ext={0x8001, 0x38}, 0xac37184e017a20e7, 0x9, 0x2, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xfffffbffffffffff, 0xffffffffffffffff, 0x1) r0 = memfd_create(&(0x7f0000000000)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oHaW', 0x7) lseek(r0, 0xfffffffffffffc70, 0x3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000bc0)={&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="c291997bdc9fa967b5c18f69543548c622176175e562ffdd0aa50da4303ffb14414f22a59aaa7dcd6d4feb7fa7bb24841f9eab64c768faf792796c27b2891e6a6c87403299eac6014ad878eb26f54842f1343013e0d140bf408fc8d8cb2bbd7e4687e7ba74100c366491edea68fbca8d1f21905101e06afc99edf3312222d787c3fea46611eef743b3d3ef7a052a12e2d3598d3dfa88d232d594be7807dba106a755e59d1250d24e8a5055fd81ac283d8b4a181440742bdd85708ef8bc9171b80f5ca86f4e55774b59ecfdef55", 0xcd}, {&(0x7f0000000240)="818d839b933a4224af3d5b27485544448a8239a44e10777e5d0f663b653776d8f611b95f1bbdf33780bfbbdbe31ae042b0a5f3a20c25ab717922f622a483b029cfa077b014291025d856d2834640044e17948727b2165e13f610ba77dfe77a0962675f2b2ccbc504cb8b89244963d449d61797", 0x73}, {&(0x7f0000000380)="9e1acee167a9316d12c12236b16f5053d24329068c6e0e14564d5947224b71543723911db793f56b8b12b1ac88f352518febeddd04722bb080c1bb05e5f205d2398119757a507adf222928856c99bef99e1047a7fb97b1b6d9aadabfa0d0a7810515aff43a2ba1cae618d2334f07a7a511caa9b71866cb23222e33c4d90c0c0372382a325561719b0594d214428209526731adba2a845fcdb93fde3b7a0de5fc93b27cdc5b1d2634cb8cb9592df3", 0xae}, {&(0x7f0000000480)="03ca5466729b0026ef668be659f3f0432713be1ee26d48fad900023a4e8232aca36a31aaf13d1b2d86e3e9320d449b764479a50edf29e5d0060447cd937917732560f16b3b9aaa14029da2a1b707ec73a1cc97eb4437c5f81688a0e550c1f2be43b937945c61bb3ad553bcb28d0ef9bb8705b96fe0a456db7965babd08ae713241c89ec2e7d3f17fcd62d451229ed01efc3bd85cab2d5035a05f6669ac5a00cacc", 0xa1}, {&(0x7f0000000540)="2dd999498eb168b8058384fbe9e9c093218cf9f8cbdf0bd380a1e84046a478cc06575f482da0baedc417b4dc755c97a1806195b14150c416daec76ff0b261e6378844823c993767b547101951b049c352faf71b08c996b797496b72f69473a5462f8c83b72e19ef7404395e52c542052e81ec33eb2397ea027cd1fcec997a1b6db74df000a36a97289a4fa7e068f6820ff2ac08eae136785c64786bf", 0x9c}], 0x5, &(0x7f00000006c0)=[{0x48, 0x114, 0x0, "c62cd17311820b145601bd75fb23f3618772ce5e1808a9bc7b43f1756d633766af5a39df11e40a76cb6dc6b71f1f94ded73cb620"}, {0x28, 0x10b, 0x569c, "a1ce4dfae234c1ff7ded63d4e988c4fca60f01990bb7"}, {0x40, 0x10b, 0x5, "ce9aec5b6cc562d7085955c724ef752ea136e3475212025745d4d80bd2645c0bc272e372fad928ad4015a69fc95260"}, {0x108, 0x1, 0x744, "1980a06ede58a7724b4fff0f394e1012ddc2ff34e6e5891c8b4c393b21f69cccde5e8266f52ddfe10ea631a59ee654608fe36d861d0b41f27176128aac2a4057f9fbed0328767973d31e782b7cdb0b2c2bc1baed7fcde3006cea8e746ac2db393b01ddf2f48c00f9e2b4b632aeb244f560259b39c8d19900e996fbb0f5adb92237b17f6ae01759f208abf6cac6242210ce6810a197540d98c8f4a8d8b2612d64983aecb6659bf0afaa3adb805b879232e61abdbeb04be34f9885d679076a6004a1817409336c081822ab9d47224f183cd3d043be9089d5c1ae2978f0e60214ddcddd5f56d3f8115dac0dd00a05b6061ad3702643deb4f1"}, {0xf0, 0x117, 0x2, "a1af0c371e6683b6d2b0e1101c77f3f29f1dcd4877a23624b4070593bd49fafc9d5521c1e0de54fb9620badd0936e371572a88bd55760d81c894f5bd52c2cabc2685ede8b3bd8342368ced77222a4b7d175f668871994207499acd9d7d712631c8f6e99cf17d7099d864020a22f24480765640ebbdc773da81abf77544987049817883578c0f4b3a6836227e147b82bad9685bdebf186328b11e7f6ec0a228a0368910cc58e2bbac2f796e20392153e66d0743ebd2c54a38e825f6234d1e6366ad468e31c1ceee64ee8793ef028e546529f343674c74b1d59eee8e"}, {0xf0, 0x109, 0x1, "3779963ea70521a8bba51a16767c9e046b99ee4028133c2f6c5687c7122cafd4e595cda838afe51d2ca09e551b39b8713bad330d3b093610a255ceec6834d20efc878b105ee9856eea71ccf757a5273067fded658fb6140947cd63edfaa1c770e6a975d50a63f28b1d1d30531ecb0a29ca77eca99b9e1a43cc1e863dbe2fe3e5910659d31cad904fe931fcddcf260d09bdd21485f9a7eed1a202dc4b6dca9ed6190b274addcaa52754b708968f997e81c24df3e34cbe6c757da8dc90d15733eb82a1dd9a5b7aedcde95a2309deb0584fa63aa3e431fb725d55c45ffcd0ebcc"}, {0xa0, 0x88, 0x4, "01e60e5fcbc2b7855f9f7c41a825c505e593d45ac13e7c5dcb69b4b2dfa081b9b325c3d1ab3b36d3e05248a0d46ab9e2a75c80b2672c483e46194ac8bb45224a29143713f67b4759bc0fd51299b4879ea0a9d2c12452db1dd8f4555d54450ae1e5135f763df680377477721273c6534c4ac89ff06902d43d3807f31c96d0e87a6e1142a1ec529b3e11"}, {0x98, 0x29, 0x8, "4ec1fb7b59fdc512920de2eaebceb460660899990ced9166a78ced3f52bebeae7b089fdd8df18e308a6028cd8b9aa1e3d81f9eae01e49d9f95614ed9a4f0494c1cc1b74f3a6a06770ae98cdd0e64016b9a3a351c6e7a18cda11e96e044c0fa5c20f2270a3dae072440f3d3ab054ab9975ea729aae6901941d88c0001853e9a6f17fc1fbc"}], 0x4d0}, 0x40000) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYBLOB="600000001200050928bd"], 0x60}, 0x1, 0x0, 0x0, 0x2000010}, 0x20000000) 2.098275723s ago: executing program 1 (id=5598): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xab) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) 2.028989535s ago: executing program 5 (id=5599): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_bp={0x0}, 0x100b08, 0x6, 0x0, 0x9, 0x8, 0x20001, 0x2, 0x0, 0x10000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f00000f8000/0x4000)=nil, 0x4000, 0x0, 0x31, r2, 0x503e5000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$get_persistent(0x16, 0x0, r0) syz_genetlink_get_family_id$tipc(0x0, r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, 0x0, 0x800) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x40) sendmsg$NFT_BATCH(r5, 0x0, 0x40) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, 0x0, 0x20044085) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, 0x0, 0x0) socket$inet(0x2, 0x3, 0x7f) 2.008260775s ago: executing program 1 (id=5600): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x4, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7e, 0x400) (async) syz_open_dev$usbfs(&(0x7f00000000c0), 0x7e, 0x400) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='numa_maps\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff}, {0x1, 0x9, 0x80}, 0x4, 0x400000, 0x0, 0x0, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) preadv(r2, &(0x7f00000011c0), 0x0, 0x200000, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x8, r2, 0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_pidfd_open(0xffffffffffffffff, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg2\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfe94, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r7, &(0x7f00000025c0), 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 355.013219ms ago: executing program 2 (id=5601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x34040017}, 0x80) 288.968871ms ago: executing program 5 (id=5602): r0 = socket(0x11, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) stat(&(0x7f0000008ac0)='./file0\x00', &(0x7f0000008b00)) setresuid(0xee01, 0x0, 0x0) fcntl$getownex(r0, 0x10, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000280)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) bind$packet(r2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@nobarrier}, {@dioread_lock}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x100000001}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noblock_validity}, {@nojournal_checksum}, {@dax}, {@block_validity}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") syz_clone(0x18000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x2}) r4 = syz_io_uring_setup(0x3335, &(0x7f0000001500)={0x0, 0x6720, 0x1, 0x4, 0x18e}, &(0x7f0000000100), &(0x7f0000001380), &(0x7f00000011c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x2000, 0x0, r4}, 0x0, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r5, 0x0, 0x4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="910000a36a2d01f19c6efe41e18ecf2ee96babd5f876e8fa39fce4020c1a09bd9983dcb0023a85a8e259a07765007c2453092454b10afb59f1274495db58b673b53480c3492dc3e602cec433d6adfe82aa94347fdeb8e9c10568b683785e0be271a90d19edf1528dc55425d3ce76219b55dfc2bbfcb0db0699721936bce6f91aba817a57d73aef00cef459"], &(0x7f00000000c0)='GPL\x00'}, 0x94) 288.332981ms ago: executing program 2 (id=5603): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0xfb, 0x0, 0x0, 0x401f, 0x68108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x1, @perf_bp={0x0, 0x5}, 0x88e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000000)={[{@nombcache}, {@nobarrier}, {@norecovery}, {@errors_remount}, {@grpid}]}, 0x8, 0x638, &(0x7f0000000140)="$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") (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000900), 0x0, 0x4000, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000003100)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, r4, 0x1, 0x0, 0x0, {0x3}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) (async) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000780)=0x0, &(0x7f00000007c0)=0x4) (async) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x7, &(0x7f0000000100)=0x6, 0x4) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pB \x00'}, 0x20) (async) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0xc9) write$char_usb(r9, &(0x7f0000000780)="6475c4ddd5c3169fbed04d", 0xb) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2}}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xe, 0x4, 0xc8, 0x0, 0x24108, 0xffffffffffffffff, 0xc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r11, &(0x7f0000000340)=[{&(0x7f0000000200)=""/261, 0x105}], 0x1, 0x102, 0xfffffffd, 0x3b) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d80)=@bpf_ext={0x1c, 0x10, &(0x7f0000000900)=@raw=[@cb_func={0x18, 0x4, 0x4, 0x0, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fffffff}}, @ldst={0x1, 0x3, 0x0, 0x5, 0x8, 0xc, 0x8}], &(0x7f0000000980)='syzkaller\x00', 0xe, 0x59, &(0x7f0000000a40)=""/89, 0x41000, 0x78, '\x00', r6, 0x0, r1, 0x8, &(0x7f0000000ac0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x0, 0x81, 0xfffffff8}, 0x10, 0x6c77, 0xffffffffffffffff, 0x5, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, r8, r9, 0x1, 0x1, r10, r11], &(0x7f0000000d00)=[{0x1, 0x1, 0xe, 0x4}, {0x2, 0x4, 0x1, 0x950af9970e3fc881}, {0x3, 0x5, 0x6, 0x4}, {0x3, 0x4, 0x2, 0x9}, {0x5, 0x4, 0xe, 0x1}], 0x10, 0x7ff}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f00000004c0)={&(0x7f0000000a00)={0x1d, r12}, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "06400000008000"}, 0x10}, 0x1, 0x0, 0x0, 0x81985}, 0x4004080) (async, rerun: 64) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f00000008c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, r4, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_LINK={0x8, 0x1, r12}]}, 0x50}, 0x1, 0x0, 0x0, 0x4080}, 0x84) (async, rerun: 64) r13 = syz_open_procfs(0x0, &(0x7f0000000000)='net/icmp6\x00') pread64(r13, &(0x7f00000001c0)=""/208, 0xd0, 0xa3) prctl$PR_SET_TSC(0x1a, 0x1) 171.558185ms ago: executing program 2 (id=5604): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)='\x00'/12, 0x31}], 0x1, 0x0, 0x0, 0x6000}, 0x40f0) mkdir(0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/../file0\x00', 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0xff, 0x3, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x582}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x9, 0x7fff, 0x0, 0xe30e}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) set_mempolicy(0x5, &(0x7f0000000000)=0x4000000ff9, 0xf) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000040)='./cgroup/../file0\x00', 0x8, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) shutdown(r1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x1, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0xdd, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES64=r4, @ANYRESDEC=r5, @ANYRES8=r2, @ANYRES8=r4, @ANYRES32=r3], 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 0s ago: executing program 5 (id=5605): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0xf93, 0x80, 0x8, 0x5}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xd0f, 0x70ad26, 0x0, {0x60, 0x0, 0x0, r5, {}, {0x8, 0xa}, {0xfff2, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x2006}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r6 = socket$inet6(0xa, 0x802, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r7, 0x0, 0x80000000000008, &(0x7f0000000240)='~', 0x1) getsockopt$inet_opts(r7, 0x0, 0x9, &(0x7f00000001c0)=""/17, &(0x7f00000000c0)=0x11) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) read(r8, &(0x7f00000027c0)=""/4073, 0xfe9) sendmsg$can_raw(r8, &(0x7f0000000240)={&(0x7f00000000c0)={0x1d, r9}, 0x10, &(0x7f00000003c0)={&(0x7f00000001c0)=@can={{0x1, 0x0, 0x1, 0x1}, 0x7, 0x2, 0x0, 0x0, "eb778610de7e3023"}, 0x10}}, 0x4000040) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd5}], 0x1}, 0x40400) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(r6, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f0000001840), 0x3b, 0xc00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0x60}, {0xffff, 0xffff}, {0x0, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x854) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.4.4998'. [ 782.295789][T24289] lo speed is unknown, defaulting to 1000 [ 782.343330][T24297] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5003'. [ 782.512955][T24303] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 782.528443][T24307] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5008'. [ 782.594019][T24307] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5008'. [ 782.640706][T24321] veth0_vlan: entered allmulticast mode [ 782.717216][T24323] loop2: detected capacity change from 0 to 128 [ 782.724365][T24323] FAT-fs (loop2): bogus sectors per cluster 0 [ 782.730488][T24323] FAT-fs (loop2): Can't find a valid FAT filesystem [ 782.778248][T24321] veth0_vlan: left promiscuous mode [ 782.784582][T24321] veth0_vlan: entered promiscuous mode [ 782.803279][T24328] syzkaller1: entered promiscuous mode [ 782.809444][T24328] syzkaller1: entered allmulticast mode [ 783.965652][T24371] loop4: detected capacity change from 0 to 512 [ 784.040708][T24371] EXT4-fs: Invalid want_extra_isize 1969 [ 784.098880][T24371] loop4: detected capacity change from 0 to 128 [ 784.150461][T24371] vfat: Unknown parameter 'time_off0002ce' [ 784.162391][T24379] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 784.162391][T24379] program syz.2.5035 not setting count and/or reply_len properly [ 784.207290][T24382] netlink: 'syz.6.5034': attribute type 1 has an invalid length. [ 784.333178][T24382] __nla_validate_parse: 5 callbacks suppressed [ 784.333194][T24382] netlink: 224 bytes leftover after parsing attributes in process `syz.6.5034'. [ 784.420427][T24384] loop4: detected capacity change from 0 to 512 [ 784.452341][T24379] loop2: detected capacity change from 0 to 4096 [ 784.579459][T24379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.592908][T24384] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5037: Bad quota inum: 1, type: 2 [ 784.603881][T24384] loop4: lost filesystem error report for type 5 error -117 [ 784.613389][T24384] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 784.646930][T24379] 9p: Bad value for 'rfdno' [ 784.675731][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 784.684494][ C1] EXT4-fs (loop4): initial error at time 1781342151: ext4_quota_enable:7221 [ 784.697264][ C1] EXT4-fs (loop4): last error at time 1781342151: ext4_quota_enable:7221 [ 784.716876][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 784.764952][T24384] EXT4-fs (loop4): mount failed [ 784.814315][ T28] audit: type=1400 audit(1781342151.651:9309): avc: denied { append } for pid=24396 comm="syz.2.5041" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 784.828456][T24384] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 784.855115][T24384] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.863955][T24384] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.879366][T24399] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5042'. [ 784.939315][T24397] netlink: 'syz.2.5041': attribute type 5 has an invalid length. [ 785.062783][ T28] audit: type=1400 audit(1781342151.913:9310): avc: denied { read } for pid=24396 comm="syz.2.5041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 785.230213][T24424] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 785.230213][T24424] program syz.2.5051 not setting count and/or reply_len properly [ 785.315735][T24424] loop2: detected capacity change from 0 to 4096 [ 785.524065][T24435] loop4: detected capacity change from 0 to 512 [ 785.558097][T24424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 785.597738][T24424] 9p: Bad value for 'rfdno' [ 785.702248][T24430] program syz.5.5054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 785.742778][T24435] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5056: Bad quota inum: 1, type: 2 [ 785.754792][T24435] loop4: lost filesystem error report for type 5 error -117 [ 785.755239][T24435] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 785.781723][T24435] EXT4-fs (loop4): mount failed [ 785.857322][T24435] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 785.894536][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.984365][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5064'. [ 786.012354][T24456] loop6: detected capacity change from 0 to 256 [ 786.020811][T24456] msdos: Bad value for 'uid' [ 786.027548][T24456] msdos: Bad value for 'uid' [ 786.057346][T24468] 9p: Bad value for 'wfdno' [ 787.208185][T24485] loop4: detected capacity change from 0 to 512 [ 787.434081][T24485] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5074: Bad quota inum: 1, type: 2 [ 787.451800][T24485] loop4: lost filesystem error report for type 5 error -117 [ 787.517957][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 787.535011][ C0] EXT4-fs (loop4): initial error at time 1781342154: ext4_quota_enable:7221 [ 787.546891][ C0] EXT4-fs (loop4): last error at time 1781342154: ext4_quota_enable:7221 [ 788.293556][T24485] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 788.320168][T24485] EXT4-fs (loop4): mount failed [ 788.346554][T24490] loop2: detected capacity change from 0 to 512 [ 788.360127][T24490] EXT4-fs: Ignoring removed i_version option [ 789.248174][T24490] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 789.263185][T24490] ext4 filesystem being mounted at /425/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 789.294777][ T28] audit: type=1400 audit(1781342156.333:9311): avc: denied { write } for pid=24489 comm="syz.2.5076" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 789.375040][T24495] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5077'. [ 789.521215][T24485] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 789.738911][T24490] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 789.781513][T24507] loop5: detected capacity change from 0 to 512 [ 789.876807][T24510] loop4: detected capacity change from 0 to 1764 [ 790.759646][T24507] ext4: Unknown parameter 'obj_role' [ 791.009028][T24512] can0: slcan on ttyS3. [ 791.458757][T24512] can0 (unregistered): slcan off ttyS3. [ 791.937333][T24537] netlink: 84 bytes leftover after parsing attributes in process `syz.5.5087'. [ 791.955520][T24537] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5087'. [ 791.993282][T24536] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5088'. [ 792.041344][T24536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5088'. [ 792.054607][T24536] netlink: 'syz.4.5088': attribute type 1 has an invalid length. [ 792.062818][T24536] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5088'. [ 792.293565][ T28] audit: type=1400 audit(1781342159.293:9312): avc: denied { write } for pid=24521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.463379][ T28] audit: type=1400 audit(1781342159.661:9313): avc: denied { write } for pid=24542 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.589738][T24552] 9p: Bad value for 'wfdno' [ 792.729186][T24557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5093'. [ 793.718598][T24565] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5093'. [ 793.739863][T24563] loop6: detected capacity change from 0 to 512 [ 793.799013][T24563] EXT4-fs: Ignoring removed i_version option [ 793.865547][T24563] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 793.929499][T24563] ext4 filesystem being mounted at /570/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 793.969065][ T28] audit: type=1400 audit(1781342161.257:9314): avc: denied { write } for pid=24562 comm="syz.6.5094" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 794.098616][T24580] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5095'. [ 794.161572][T24580] loop5: detected capacity change from 0 to 1764 [ 794.238092][T24571] 9p: Bad value for 'wfdno' [ 794.242789][ T28] audit: type=1400 audit(1781342161.551:9315): avc: denied { mounton } for pid=24570 comm="syz.5.5095" path="/162/file0/file0" dev="loop5" ino=1923 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=file permissive=1 [ 794.529917][T24563] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 794.659915][T24590] loop5: detected capacity change from 0 to 1024 [ 794.712991][T24590] EXT4-fs: Ignoring removed orlov option [ 794.768910][T24590] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 794.820344][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5097'. [ 794.875396][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5097'. [ 794.905224][ T28] audit: type=1400 audit(1781342162.243:9316): avc: denied { write } for pid=24556 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 794.947946][T24596] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 794.947946][T24596] program syz.6.5098 not setting count and/or reply_len properly [ 795.033409][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.075814][ T28] audit: type=1400 audit(1781342162.306:9317): avc: denied { write } for pid=24598 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.193205][T24603] loop4: detected capacity change from 0 to 512 [ 795.224573][T24596] loop6: detected capacity change from 0 to 4096 [ 795.231462][T24596] /dev/loop6: Can't open blockdev [ 795.269880][T24596] 9p: Bad value for 'wfdno' [ 795.281177][T24603] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5100: bg 0: block 127: padding at end of block bitmap is not set [ 795.303061][T24603] loop4: lost filesystem error report for type 5 error -117 [ 795.312045][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 795.325900][ C1] EXT4-fs (loop4): initial error at time 1781342162: ext4_validate_block_bitmap:441 [ 795.335867][ C1] EXT4-fs (loop4): last error at time 1781342162: ext4_validate_block_bitmap:441 [ 795.341553][T24603] EXT4-fs (loop4): Remounting filesystem read-only [ 795.426032][T24606] FAULT_INJECTION: forcing a failure. [ 795.426032][T24606] name failslab, interval 1, probability 0, space 0, times 0 [ 795.442535][T24606] CPU: 0 UID: 0 PID: 24606 Comm: syz.5.5099 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 795.442578][T24606] Tainted: [W]=WARN [ 795.442588][T24606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 795.442637][T24606] Call Trace: [ 795.442644][T24606] [ 795.442652][T24606] __dump_stack+0x1d/0x30 [ 795.442755][T24606] dump_stack_lvl+0x95/0xd0 [ 795.442783][T24606] dump_stack+0x15/0x1b [ 795.442808][T24606] should_fail_ex+0x25e/0x270 [ 795.442849][T24606] should_failslab+0x8c/0xb0 [ 795.442935][T24606] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 795.442974][T24606] ? __alloc_skb+0x2d6/0x690 [ 795.443089][T24606] __alloc_skb+0x2d6/0x690 [ 795.443113][T24606] ? __alloc_skb+0x200/0x690 [ 795.443137][T24606] netlink_alloc_large_skb+0xbf/0xf0 [ 795.443313][T24606] netlink_sendmsg+0x40c/0x6f0 [ 795.443443][T24606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.443533][T24606] ____sys_sendmsg+0x532/0x580 [ 795.443560][T24606] ___sys_sendmsg+0x195/0x1e0 [ 795.443600][T24606] __x64_sys_sendmsg+0xd4/0x160 [ 795.443664][T24606] x64_sys_call+0x194c/0x3020 [ 795.443694][T24606] do_syscall_64+0x136/0x3c0 [ 795.443730][T24606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.443827][T24606] RIP: 0033:0x7f68a5f3ce59 [ 795.443849][T24606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.443872][T24606] RSP: 002b:00007f68a494d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.443892][T24606] RAX: ffffffffffffffda RBX: 00007f68a61b6180 RCX: 00007f68a5f3ce59 [ 795.443911][T24606] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 795.443986][T24606] RBP: 00007f68a494d090 R08: 0000000000000000 R09: 0000000000000000 [ 795.443999][T24606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.444011][T24606] R13: 00007f68a61b6218 R14: 00007f68a61b6180 R15: 00007fffee6441a8 [ 795.444050][T24606] [ 795.781064][T24603] EXT4-fs warning (device loop4): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.4.5100: cleanup dec ref error -117 [ 795.925170][T24603] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 795.939062][T24603] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 795.949586][T24603] EXT4-fs (loop4): 1 orphan inode deleted [ 795.956296][T24603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.960728][T24609] netlink: 84 bytes leftover after parsing attributes in process `syz.6.5101'. [ 796.008536][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.059463][T24613] loop4: detected capacity change from 0 to 128 [ 796.095773][T24616] loop2: detected capacity change from 0 to 1024 [ 796.104355][T24613] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 796.120967][T24613] FAT-fs (loop4): Filesystem has been set read-only [ 796.129821][T24616] EXT4-fs: test_dummy_encryption option not supported [ 796.218573][T24613] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 54) [ 796.249480][T24618] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5101'. [ 796.484367][T24625] loop2: detected capacity change from 0 to 512 [ 799.246666][T24625] EXT4-fs: error -4 creating inode table initialization thread [ 799.255595][T24625] EXT4-fs (loop2): mount failed [ 799.453454][T24637] 9p: Bad value for 'rfdno' [ 799.558850][T24640] loop2: detected capacity change from 0 to 512 [ 799.567303][T24640] EXT4-fs: Ignoring removed i_version option [ 799.633708][T24640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 799.646850][T24640] ext4 filesystem being mounted at /430/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 799.658815][ T28] audit: type=1400 audit(1781342167.241:9318): avc: denied { write } for pid=24639 comm="syz.2.5108" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 799.838115][ T3308] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.888354][ T3308] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.912181][ T3308] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 799.935976][T24646] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5109'. [ 799.948471][T24640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 799.993780][ T3308] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.033368][T24649] 9p: Bad value for 'wfdno' [ 800.075781][T24652] batman_adv: batadv0: Adding interface: dummy0 [ 800.082527][T24652] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.161245][T24655] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 800.161245][T24655] program syz.2.5113 not setting count and/or reply_len properly [ 800.197892][T24652] batman_adv: batadv0: Interface activated: dummy0 [ 800.281031][T24652] batadv0: mtu less than device minimum [ 800.288214][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.299673][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.311364][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.323086][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.344299][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.367126][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.387393][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.405883][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.428172][T24652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 800.587446][T24655] loop2: detected capacity change from 0 to 4096 [ 801.038382][ T28] audit: type=1400 audit(1781342168.647:9319): avc: denied { read } for pid=24657 comm="syz.5.5114" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 801.157321][ T28] audit: type=1400 audit(1781342168.647:9320): avc: denied { open } for pid=24657 comm="syz.5.5114" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 801.201380][T24655] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.358028][T24655] 9p: Bad value for 'wfdno' [ 801.399827][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 801.741355][T24673] loop5: detected capacity change from 0 to 512 [ 801.996383][T24676] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5119'. [ 802.022936][T24676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5119'. [ 802.044632][T24676] netlink: 'syz.4.5119': attribute type 1 has an invalid length. [ 802.066681][T24676] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5119'. [ 802.067726][T24673] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.5118: Bad quota inum: 1, type: 2 [ 802.086735][T24673] loop5: lost filesystem error report for type 5 error -117 [ 802.087812][T24673] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 802.147498][T24673] EXT4-fs (loop5): mount failed [ 802.167829][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 802.174522][ C0] EXT4-fs (loop5): initial error at time 1781342169: ext4_quota_enable:7221 [ 802.183308][ C0] EXT4-fs (loop5): last error at time 1781342169: ext4_quota_enable:7221 [ 802.208222][T24686] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5121'. [ 802.386931][T24673] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 802.404410][T24694] loop6: detected capacity change from 0 to 2048 [ 802.420044][T24698] loop2: detected capacity change from 0 to 512 [ 802.688053][T24694] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 802.789156][ T28] audit: type=1400 audit(1781342170.516:9321): avc: denied { watch } for pid=24693 comm="syz.6.5126" path="/576/file1" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 802.814148][ T28] audit: type=1400 audit(1781342170.516:9322): avc: denied { write } for pid=24693 comm="syz.6.5126" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 802.889921][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.046062][T24698] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.5125: Bad quota inum: 1, type: 2 [ 803.057780][T24698] loop2: lost filesystem error report for type 5 error -117 [ 803.100808][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 803.115023][ C0] EXT4-fs (loop2): initial error at time 1781342170: ext4_quota_enable:7221 [ 803.123789][ C0] EXT4-fs (loop2): last error at time 1781342170: ext4_quota_enable:7221 [ 803.144090][T24698] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 803.182630][T24698] EXT4-fs (loop2): mount failed [ 803.308769][T24711] loop6: detected capacity change from 0 to 8192 [ 803.342179][T24698] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 803.355998][T24719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5134'. [ 803.385586][T24719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 803.430533][ T28] audit: type=1400 audit(1781342171.198:9323): avc: denied { unmount } for pid=12330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 803.639298][T24734] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 803.639298][T24734] program syz.5.5150 not setting count and/or reply_len properly [ 803.721285][T24734] loop5: detected capacity change from 0 to 4096 [ 803.775334][T24741] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 803.775334][T24741] program syz.6.5142 not setting count and/or reply_len properly [ 803.831737][T24734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.832258][T24745] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5144'. [ 803.867217][T24735] loop2: detected capacity change from 0 to 512 [ 803.870918][T24734] 9p: Bad value for 'rfdno' [ 803.879868][T24741] loop6: detected capacity change from 0 to 4096 [ 803.901192][T24744] SET target dimension over the limit! [ 803.909025][T24741] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 803.942236][T24745] bond0 (unregistering): Released all slaves [ 803.963519][T24735] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.5140: Bad quota inum: 1, type: 2 [ 803.974716][T24735] loop2: lost filesystem error report for type 5 error -117 [ 803.975501][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 803.992542][T24741] 9p: Bad value for 'wfdno' [ 803.993632][T24735] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 804.015158][T24735] EXT4-fs (loop2): mount failed [ 804.050699][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.065092][T24748] syzkaller0: entered promiscuous mode [ 804.088280][T24748] syzkaller0: entered allmulticast mode [ 804.102954][T24758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5146'. [ 804.138219][T24758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.173989][T24735] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 804.185235][T24763] loop6: detected capacity change from 0 to 4096 [ 804.208332][T24766] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5149'. [ 804.238820][T24763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.299268][T24763] lo speed is unknown, defaulting to 1000 [ 804.354591][T24776] netlink: 'syz.2.5153': attribute type 2 has an invalid length. [ 804.386846][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5153'. [ 804.412448][ T28] audit: type=1400 audit(1781342172.206:9324): avc: denied { write } for pid=24761 comm="syz.6.5147" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 804.496637][ T28] audit: type=1400 audit(1781342172.227:9325): avc: denied { bind } for pid=24779 comm="syz.4.5155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 804.522151][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.573003][ T28] audit: type=1400 audit(1781342172.364:9326): avc: denied { write } for pid=24779 comm="syz.4.5155" path="socket:[68344]" dev="sockfs" ino=68344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 804.609682][T24787] loop5: detected capacity change from 0 to 2048 [ 804.621710][T24788] loop4: detected capacity change from 0 to 512 [ 804.702167][T24787] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.761721][T24795] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 804.761721][T24795] program syz.6.5157 not setting count and/or reply_len properly [ 804.792949][ T28] audit: type=1400 audit(1781342172.626:9327): avc: denied { accept } for pid=24786 comm="syz.5.5160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 804.813149][T24797] __nla_validate_parse: 1 callbacks suppressed [ 804.813168][T24797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5159'. [ 804.865599][ T28] audit: type=1400 audit(1781342172.689:9328): avc: denied { read } for pid=24786 comm="syz.5.5160" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 804.888953][ T28] audit: type=1400 audit(1781342172.689:9329): avc: denied { open } for pid=24786 comm="syz.5.5160" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 804.916612][ T28] audit: type=1400 audit(1781342172.731:9330): avc: denied { ioctl } for pid=24786 comm="syz.5.5160" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 804.942271][T24787] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.5160: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 804.959735][T24787] EXT4-fs (loop5): Remounting filesystem read-only [ 804.968408][T24796] 9pnet_fd: Insufficient options for proto=fd [ 804.978994][T24788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 804.987505][T24788] System zones: 0-2, 18-18, 34-34 [ 804.994707][T24788] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 805.009784][T24795] loop6: detected capacity change from 0 to 4096 [ 805.028622][ T28] audit: type=1400 audit(1781342172.847:9331): avc: denied { write } for pid=24786 comm="syz.5.5160" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 805.058579][T24788] EXT4-fs (loop4): Remounting filesystem read-only [ 805.066102][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 805.072663][ C0] EXT4-fs (loop4): initial error at time 1781342172: ext4_mb_generate_buddy:1317 [ 805.082445][ C0] EXT4-fs (loop4): last error at time 1781342172: ext4_mb_generate_buddy:1317 [ 805.097444][T24788] EXT4-fs (loop4): 1 truncate cleaned up [ 805.111060][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.132249][T24788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.144948][T24788] ext4 filesystem being mounted at /245/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 805.193847][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.219681][ T3308] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 805.249606][ T3308] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 805.260948][ T3308] Quota error (device loop4): write_blk: dquota write failed [ 805.268651][ T3308] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 805.278861][ T3308] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 805.290202][ T3308] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 805.292426][T24795] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.393565][T24809] netlink: 'syz.2.5166': attribute type 29 has an invalid length. [ 805.411827][T24809] netlink: 'syz.2.5166': attribute type 29 has an invalid length. [ 805.417057][T24795] 9p: Bad value for 'rfdno' [ 805.435458][T24809] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5166'. [ 805.459229][T24811] loop5: detected capacity change from 0 to 512 [ 805.461889][T24814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5164'. [ 805.478410][T24811] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 805.491780][T24809] loop2: detected capacity change from 0 to 512 [ 805.505703][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.524093][T24811] EXT4-fs (loop5): orphan cleanup on readonly fs [ 805.536213][T24814] loop4: detected capacity change from 0 to 512 [ 805.547725][T24811] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 805.574003][T24814] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 805.584389][T24811] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 805.591376][T24811] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.5167: bad orphan inode 768 [ 805.601487][T24811] loop5: lost filesystem error report for type 5 error -117 [ 805.604231][T24818] netlink: 128 bytes leftover after parsing attributes in process `syz.6.5169'. [ 805.626177][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 805.632896][ C1] EXT4-fs (loop5): initial error at time 1781342173: ext4_orphan_get:1423 [ 805.642549][ C1] EXT4-fs (loop5): last error at time 1781342173: ext4_orphan_get:1423 [ 805.674902][T24811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 805.706262][T24814] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.5164: iget: bad i_size value: 38620345925642 [ 805.745706][T24811] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 805.758001][T24814] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 805.758586][T24814] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5164: couldn't read orphan inode 15 (err -117) [ 805.768249][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 805.768314][ C0] EXT4-fs (loop4): initial error at time 1781342173: ext4_orphan_get:1397: inode 15 [ 805.768423][ C0] EXT4-fs (loop4): last error at time 1781342173: ext4_orphan_get:1397: inode 15 [ 805.809569][T24811] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 805.828994][T24814] loop4: lost filesystem error report for type 5 error -117 [ 805.829783][T24814] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 805.874121][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 805.964069][T24838] FAULT_INJECTION: forcing a failure. [ 805.964069][T24838] name failslab, interval 1, probability 0, space 0, times 0 [ 805.998128][T24838] CPU: 1 UID: 0 PID: 24838 Comm: syz.2.5174 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 805.998227][T24838] Tainted: [W]=WARN [ 805.998301][T24838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 805.998316][T24838] Call Trace: [ 805.998324][T24838] [ 805.998334][T24838] __dump_stack+0x1d/0x30 [ 805.998365][T24838] dump_stack_lvl+0x95/0xd0 [ 805.998398][T24838] dump_stack+0x15/0x1b [ 805.998424][T24838] should_fail_ex+0x25e/0x270 [ 805.998506][T24838] ? __pfx_proc_alloc_inode+0x10/0x10 [ 805.998573][T24838] should_failslab+0x8c/0xb0 [ 805.998691][T24838] kmem_cache_alloc_lru_noprof+0x6c/0x400 [ 805.998753][T24838] ? proc_alloc_inode+0x34/0x90 [ 805.998847][T24838] ? __pfx_proc_alloc_inode+0x10/0x10 [ 805.998890][T24838] proc_alloc_inode+0x34/0x90 [ 805.998973][T24838] alloc_inode+0x40/0x170 [ 805.999104][T24838] new_inode+0x1d/0xe0 [ 805.999132][T24838] proc_pid_make_inode+0x1f/0xd0 [ 805.999162][T24838] proc_pident_instantiate+0x44/0x180 [ 805.999196][T24838] proc_pident_lookup+0x115/0x1a0 [ 805.999308][T24838] proc_tgid_base_lookup+0x2b/0x40 [ 805.999359][T24838] __lookup_slow+0x19d/0x260 [ 805.999395][T24838] lookup_slow+0x3c/0x60 [ 805.999428][T24838] path_lookupat+0x2b2/0x4c0 [ 805.999460][T24838] filename_lookup+0x18f/0x390 [ 805.999558][T24838] user_path_at+0x3e/0x100 [ 805.999584][T24838] __se_sys_mount+0x25b/0x2e0 [ 805.999676][T24838] ? fput+0x8f/0xc0 [ 805.999706][T24838] __x64_sys_mount+0x67/0x80 [ 806.000072][T24838] x64_sys_call+0x2d61/0x3020 [ 806.000109][T24838] do_syscall_64+0x136/0x3c0 [ 806.000184][T24838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.000215][T24838] RIP: 0033:0x7f942f64ce59 [ 806.000239][T24838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.000274][T24838] RSP: 002b:00007f942e09f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 806.000339][T24838] RAX: ffffffffffffffda RBX: 00007f942f8c5fa0 RCX: 00007f942f64ce59 [ 806.000359][T24838] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000200000000000 [ 806.000379][T24838] RBP: 00007f942e09f090 R08: 0000000000000000 R09: 0000000000000000 [ 806.000421][T24838] R10: 0000000000001043 R11: 0000000000000246 R12: 0000000000000001 [ 806.000440][T24838] R13: 00007f942f8c6038 R14: 00007f942f8c5fa0 R15: 00007ffdd4277e48 [ 806.000468][T24838] [ 806.408452][T22443] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:17: bg 0: block 5: invalid block bitmap [ 806.422751][T24848] loop2: detected capacity change from 0 to 512 [ 806.429926][T22443] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 776 with error 28 [ 807.251326][T24861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24861 comm=syz.6.5181 [ 807.279257][T24861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24861 comm=syz.6.5181 [ 807.331980][T22443] EXT4-fs (loop4): This should not happen!! Data will be lost [ 807.331980][T22443] [ 807.346422][T22443] EXT4-fs (loop4): Total free blocks count 0 [ 807.352743][T22443] EXT4-fs (loop4): Free/Dirty block details [ 807.358805][T22443] EXT4-fs (loop4): free_blocks=0 [ 807.364149][T22443] EXT4-fs (loop4): dirty_blocks=776 [ 807.369598][T22443] EXT4-fs (loop4): Block reservation details [ 807.376421][T22443] EXT4-fs (loop4): i_reserved_data_blocks=776 [ 807.386358][T20676] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 807.401062][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 807.607750][T24865] sg_write: data in/out 301408/136 bytes for SCSI command 0x0-- guessing data in; [ 807.607750][T24865] program syz.5.5183 not setting count and/or reply_len properly [ 807.655625][T24865] loop5: detected capacity change from 0 to 4096 [ 807.690428][T24865] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 807.751162][T24868] FAULT_INJECTION: forcing a failure. [ 807.751162][T24868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.777863][T24865] 9p: Bad value for 'rfdno' [ 807.861867][T24868] CPU: 1 UID: 0 PID: 24868 Comm: syz.6.5184 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 807.861914][T24868] Tainted: [W]=WARN [ 807.861924][T24868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 807.862004][T24868] Call Trace: [ 807.862017][T24868] [ 807.862026][T24868] __dump_stack+0x1d/0x30 [ 807.862057][T24868] dump_stack_lvl+0x95/0xd0 [ 807.862109][T24868] dump_stack+0x15/0x1b [ 807.862135][T24868] should_fail_ex+0x25e/0x270 [ 807.862271][T24868] should_fail+0xb/0x20 [ 807.862316][T24868] should_fail_usercopy+0x1a/0x20 [ 807.862342][T24868] _copy_from_user+0x1c/0xb0 [ 807.862370][T24868] __sys_bpf+0x183/0x7e0 [ 807.862471][T24868] __x64_sys_bpf+0x41/0x50 [ 807.862493][T24868] x64_sys_call+0x10cb/0x3020 [ 807.862519][T24868] do_syscall_64+0x136/0x3c0 [ 807.862596][T24868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.862623][T24868] RIP: 0033:0x7fa23757ce59 [ 807.862696][T24868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.862716][T24868] RSP: 002b:00007fa235fcf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 807.862802][T24868] RAX: ffffffffffffffda RBX: 00007fa2377f5fa0 RCX: 00007fa23757ce59 [ 807.862817][T24868] RDX: 0000000000000094 RSI: 0000200000000040 RDI: 0000000000000005 [ 807.862831][T24868] RBP: 00007fa235fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 807.862844][T24868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.862865][T24868] R13: 00007fa2377f6038 R14: 00007fa2377f5fa0 R15: 00007fff2d49ad78 [ 807.862928][T24868] [ 808.093580][T24872] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5187'. [ 808.218716][T24880] loop6: detected capacity change from 0 to 512 [ 808.252257][T24880] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 808.262400][T24880] EXT4-fs (loop6): SIPHASH is not a valid default hash value [ 808.386425][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 808.402418][T24895] loop4: detected capacity change from 0 to 764 [ 808.434379][T24901] 9p: Bad value for 'rfdno' [ 808.445202][T24895] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 808.530924][T24904] sg_write: data in/out 366944/136 bytes for SCSI command 0x0-- guessing data in; [ 808.530924][T24904] program syz.5.5185 not setting count and/or reply_len properly [ 808.818585][T24904] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.042820][T24904] 9p: Bad value for 'wfdno' [ 809.638358][ T28] kauditd_printk_skb: 229 callbacks suppressed [ 809.638377][ T28] audit: type=1326 audit(1781342177.707:9556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24899 comm="syz.2.5194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 809.732882][T24880] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.787945][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 809.808660][ T28] audit: type=1326 audit(1781342177.749:9557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24899 comm="syz.2.5194" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 809.869774][T24880] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 809.918395][T24941] x_tables: duplicate underflow at hook 1 [ 810.049000][T24941] xt_hashlimit: size too large, truncated to 1048576 [ 810.140229][T24939] set_capacity_and_notify: 2 callbacks suppressed [ 810.140246][T24939] loop2: detected capacity change from 0 to 512 [ 810.176130][T24880] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 810.270217][T24880] EXT4-fs error (device loop6): __ext4_remount:6837: comm syz.6.5187: Abort forced by user [ 810.364390][T24880] EXT4-fs (loop6): Remounting filesystem read-only [ 810.373124][T24880] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 810.385621][T24945] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5198'. [ 810.395739][T24945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5198'. [ 810.471346][T24939] EXT4-fs error (device loop2): ext4_quota_enable:7221: comm syz.2.5197: Bad quota inum: 1, type: 2 [ 810.483423][T24939] loop2: lost filesystem error report for type 5 error -117 [ 810.508339][T24939] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 810.570488][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 810.577527][ C0] EXT4-fs (loop2): initial error at time 1781342178: ext4_quota_enable:7221 [ 810.590772][ C0] EXT4-fs (loop2): last error at time 1781342178: ext4_quota_enable:7221 [ 810.627640][T24880] x_tables: duplicate underflow at hook 1 [ 810.653816][ T28] audit: type=1400 audit(1781342178.747:9558): avc: denied { lock } for pid=24964 comm="syz.4.5199" path="socket:[69748]" dev="sockfs" ino=69748 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 810.689230][T24939] EXT4-fs (loop2): mount failed [ 810.715319][T24939] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 810.871604][T24988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5196'. [ 810.912154][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.940156][T24976] wireguard0: entered promiscuous mode [ 810.945787][T24976] wireguard0: entered allmulticast mode [ 810.967109][T24988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5196'. [ 810.976158][T24988] netlink: 'syz.5.5196': attribute type 15 has an invalid length. [ 811.027181][T24988] netlink: 'syz.5.5196': attribute type 18 has an invalid length. [ 811.129771][T25010] loop6: detected capacity change from 0 to 512 [ 811.176275][T25016] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5208'. [ 811.189325][T25014] loop5: detected capacity change from 0 to 512 [ 811.212383][T25019] netlink: 80 bytes leftover after parsing attributes in process `syz.2.5210'. [ 811.217971][T25016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.230446][T25019] tipc: Started in network mode [ 811.235437][T25019] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 811.244973][T25019] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 811.253607][T25019] tipc: Enabled bearer , priority 10 [ 811.292748][T25023] 9p: Bad value for 'rfdno' [ 811.301920][T25014] EXT4-fs error (device loop5): ext4_quota_enable:7221: comm syz.5.5209: Bad quota inum: 1, type: 2 [ 811.313495][T25014] loop5: lost filesystem error report for type 5 error -117 [ 811.313788][T25014] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 811.336497][T25014] EXT4-fs (loop5): mount failed [ 811.414287][T25010] EXT4-fs error (device loop6): ext4_quota_enable:7221: comm syz.6.5206: Bad quota inum: 1, type: 2 [ 811.427046][T25010] loop6: lost filesystem error report for type 5 error -117 [ 811.438658][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 811.445672][T25030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5213'. [ 811.446377][ C0] EXT4-fs (loop6): initial error at time 1781342179: ext4_quota_enable:7221 [ 811.455530][T25010] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 811.461923][ C0] [ 811.487732][ C0] EXT4-fs (loop6): last error at time 1781342179: ext4_quota_enable:7221 [ 811.502153][T25014] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 811.515461][T25034] 9p: Bad value for 'rfdno' [ 811.532685][T25010] EXT4-fs (loop6): mount failed [ 811.550146][T25037] netlink: 'syz.4.5215': attribute type 1 has an invalid length. [ 811.790195][T25042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5215'. [ 811.802739][T25042] bond3 (unregistering): Released all slaves [ 811.961304][ T28] audit: type=1400 audit(1781342180.153:9559): avc: denied { bind } for pid=25045 comm="syz.4.5218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 812.128648][ T3399] tipc: Node number set to 1 [ 812.198130][T25048] lo speed is unknown, defaulting to 1000 [ 812.422758][T25052] vti0: entered promiscuous mode [ 812.532600][ T28] audit: type=1400 audit(1781342180.752:9560): avc: denied { connect } for pid=25053 comm="syz.4.5221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 812.588938][T25056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5223'. [ 812.610939][T25010] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 812.685697][T25062] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=25062 comm=syz.6.5225 [ 812.705010][T25066] serio: Serial port ptm0 [ 812.796564][T25058] 9p: Bad value for 'rfdno' [ 812.864525][T25078] loop2: detected capacity change from 0 to 1024 [ 812.984196][T25078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 813.087340][T25058] lo speed is unknown, defaulting to 1000 [ 813.096551][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 813.337762][T25094] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5233'. [ 813.488730][ T28] audit: type=1400 audit(1781342181.760:9561): avc: denied { write } for pid=25110 comm="syz.2.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 813.606491][T25111] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 813.657736][T25117] loop5: detected capacity change from 0 to 2048 [ 813.699930][T25119] 9p: Bad value for 'wfdno' [ 813.795796][T25117] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.879084][T25121] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 813.893943][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 814.062604][T25128] team0: No ports can be present during mode change [ 814.992780][T25159] loop6: detected capacity change from 0 to 2048 [ 815.061347][T25165] loop4: detected capacity change from 0 to 512 [ 815.097413][T25159] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.232658][T25165] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.5260: Unrecognised inode hash code 255 [ 815.260811][T25165] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.5260: Corrupt directory, running e2fsck is recommended [ 815.285229][T12330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 815.295891][T25165] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 815.304199][T25165] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.5260: corrupted in-inode xattr: e_name out of bounds [ 815.318674][T25165] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 815.319540][T25165] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5260: couldn't read orphan inode 15 (err -117) [ 815.342239][T25165] loop4: lost filesystem error report for type 5 error -117 [ 815.342834][T25165] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 815.770154][T25165] __nla_validate_parse: 8 callbacks suppressed [ 815.770293][T25165] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5260'. [ 816.016014][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 816.347808][T25202] netlink: 'syz.1.5271': attribute type 1 has an invalid length. [ 817.302924][T25207] loop6: detected capacity change from 0 to 256 [ 817.311639][T25207] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 817.326109][T25207] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 817.365284][T25209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5272'. [ 817.428034][T25211] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5274'. [ 817.483204][T25202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5271'. [ 817.497217][T25214] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5272'. [ 817.521002][T25216] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5274'. [ 817.541476][T25209] 8021q: adding VLAN 0 to HW filter on device bond3 [ 817.565287][T25202] bond3 (unregistering): Released all slaves [ 817.686652][T25222] loop4: detected capacity change from 0 to 2048 [ 817.724704][T25222] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.769412][T25224] loop5: detected capacity change from 0 to 1024 [ 817.803017][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.826807][T25224] loop5: detected capacity change from 0 to 512 [ 817.852485][T25224] EXT4-fs: quotafile must be on filesystem root [ 817.923971][T25232] loop4: detected capacity change from 0 to 512 [ 818.068127][T25232] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5278: Bad quota inum: 1, type: 2 [ 818.079237][T25232] loop4: lost filesystem error report for type 5 error -117 [ 818.096493][T25232] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 818.143379][T25232] EXT4-fs (loop4): mount failed [ 818.274829][ T28] audit: type=1400 audit(1781342186.778:9562): avc: denied { write } for pid=25238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.403156][T25260] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5283'. [ 818.432043][ T28] audit: type=1400 audit(1781342186.956:9563): avc: denied { write } for pid=25259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.550829][T25273] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5285'. [ 818.567720][T25274] netlink: 596 bytes leftover after parsing attributes in process `syz.5.5283'. [ 818.627583][T25273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 818.665207][T25273] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5285'. [ 818.783466][ T28] audit: type=1400 audit(1781342187.313:9564): avc: denied { write } for pid=25268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 818.818644][T25288] 9p: Bad value for 'wfdno' [ 819.036338][ T28] audit: type=1400 audit(1781342187.366:9565): avc: denied { write } for pid=25296 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 819.193229][T25291] loop4: detected capacity change from 0 to 512 [ 819.273967][T17202] smc: removing ib device syz1 [ 819.300675][T10166] syz1: Port: 1 Link DOWN [ 819.317610][T25291] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5290: Bad quota inum: 1, type: 2 [ 819.328813][T25291] loop4: lost filesystem error report for type 5 error -117 [ 819.334997][T25291] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 819.397153][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 819.403690][ C1] EXT4-fs (loop4): initial error at time 1781342187: ext4_quota_enable:7221 [ 819.412457][ C1] EXT4-fs (loop4): last error at time 1781342187: ext4_quota_enable:7221 [ 819.442501][T25291] EXT4-fs (loop4): mount failed [ 819.496232][T25310] lo speed is unknown, defaulting to 1000 [ 819.502610][T25291] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 819.693720][T25333] loop2: detected capacity change from 0 to 4096 [ 819.734404][T25333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 819.766744][T25333] 9p: Bad value for 'wfdno' [ 819.847967][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 819.857951][T25348] loop4: detected capacity change from 0 to 512 [ 819.858509][T25310] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.883787][T25310] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.891332][T25310] bridge_slave_0: entered allmulticast mode [ 819.932492][T25356] loop2: detected capacity change from 0 to 1024 [ 819.971214][T25310] bridge_slave_0: entered promiscuous mode [ 819.979333][T25354] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25354 comm=syz.5.5306 [ 820.003011][T25356] loop2: detected capacity change from 0 to 512 [ 820.014429][T25310] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.021640][T25310] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.022126][T25356] EXT4-fs: quotafile must be on filesystem root [ 820.029161][T25310] bridge_slave_1: entered allmulticast mode [ 820.043581][T25310] bridge_slave_1: entered promiscuous mode [ 820.052051][T25348] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5305: Bad quota inum: 1, type: 2 [ 820.062933][T25348] loop4: lost filesystem error report for type 5 error -117 [ 820.066799][T25348] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 820.107237][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 820.115370][ C0] EXT4-fs (loop4): initial error at time 1781342188: ext4_quota_enable:7221 [ 820.125959][T25310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.126008][ C0] EXT4-fs (loop4): last error at time 1781342188: ext4_quota_enable:7221 [ 820.154964][T25348] EXT4-fs (loop4): mount failed [ 820.165742][T22435] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.183793][T25348] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 820.220019][T25310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 820.241377][T25310] team0: Port device team_slave_0 added [ 820.248832][T25310] team0: Port device team_slave_1 added [ 820.299225][T22435] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.330953][T25310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 820.338359][T25310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.365881][T25310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 820.381199][T25310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 820.388326][T25310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 820.416138][T25310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 820.466485][T22435] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.486662][T25380] loop2: detected capacity change from 0 to 2048 [ 820.517848][T25310] hsr_slave_0: entered promiscuous mode [ 820.525191][T25310] hsr_slave_1: entered promiscuous mode [ 820.537092][T25310] debugfs: 'hsr0' already exists in 'hsr' [ 820.543096][T25310] Cannot create hsr debugfs directory [ 820.559604][T25380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 820.602907][T22435] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.611321][ T28] audit: type=1400 audit(1781342189.234:9566): avc: denied { create } for pid=25385 comm="syz.1.5316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 820.660139][T25370] loop4: detected capacity change from 0 to 128 [ 820.674340][T25370] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 820.686826][T25370] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 820.697588][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 820.740223][T25370] FAULT_INJECTION: forcing a failure. [ 820.740223][T25370] name failslab, interval 1, probability 0, space 0, times 0 [ 820.745937][ T28] audit: type=1400 audit(1781342189.360:9567): avc: denied { write } for pid=25369 comm="syz.4.5312" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 820.753848][T25370] CPU: 0 UID: 0 PID: 25370 Comm: syz.4.5312 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 820.753882][T25370] Tainted: [W]=WARN [ 820.753892][T25370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 820.753935][T25370] Call Trace: [ 820.753966][T25370] [ 820.754003][T25370] __dump_stack+0x1d/0x30 [ 820.754109][T25370] dump_stack_lvl+0x95/0xd0 [ 820.754197][T25370] dump_stack+0x15/0x1b [ 820.754306][T25370] should_fail_ex+0x25e/0x270 [ 820.754421][T25370] ? ext4_getfsmap_datadev+0x555/0x1390 [ 820.754546][T25370] should_failslab+0x8c/0xb0 [ 820.754652][T25370] __kmalloc_cache_noprof+0x5f/0x400 [ 820.754758][T25370] ? ext4_bg_num_gdb+0xa6/0x170 [ 820.754882][T25370] ext4_getfsmap_datadev+0x555/0x1390 [ 820.755033][T25370] ext4_getfsmap+0x8d0/0x8f0 [ 820.755096][T25370] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 820.755117][T25370] ? __pfx_ext4_getfsmap_format+0x10/0x10 [ 820.755286][T25370] ? __pfx_ext4_getfsmap_datadev+0x10/0x10 [ 820.755366][T25370] ? ext4_fsmap_to_internal+0xba/0xd0 [ 820.755521][T25370] ext4_ioctl+0x298c/0x31b0 [ 820.755662][T25370] ? __fget_files+0x184/0x1c0 [ 820.755728][T25370] ? mutex_lock+0x57/0x90 [ 820.755974][T25370] ? __pfx_ext4_ioctl+0x10/0x10 [ 820.756051][T25370] __se_sys_ioctl+0xce/0x140 [ 820.756217][T25370] __x64_sys_ioctl+0x43/0x50 [ 820.756358][T25370] x64_sys_call+0x1563/0x3020 [ 820.756441][T25370] do_syscall_64+0x136/0x3c0 [ 820.756545][T25370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.756649][T25370] RIP: 0033:0x7efe7448ce59 [ 820.756731][T25370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 820.756804][T25370] RSP: 002b:00007efe72edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.756882][T25370] RAX: ffffffffffffffda RBX: 00007efe74705fa0 RCX: 00007efe7448ce59 [ 820.756941][T25370] RDX: 0000200000000d40 RSI: 00000000c0c0583b RDI: 000000000000000a [ 820.757017][T25370] RBP: 00007efe72edf090 R08: 0000000000000000 R09: 0000000000000000 [ 820.757060][T25370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.757103][T25370] R13: 00007efe74706038 R14: 00007efe74705fa0 R15: 00007fff58c05078 [ 820.757166][T25370] [ 821.013262][T25397] __nla_validate_parse: 10 callbacks suppressed [ 821.013288][T25397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5317'. [ 821.138465][T20676] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 821.202598][T25403] loop4: detected capacity change from 0 to 512 [ 821.215352][T22435] bond2 (unregistering): (slave ip6gre2): Releasing backup interface [ 821.224200][T22435] ip6gre2 (unregistering): left promiscuous mode [ 821.286846][T25403] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5321: Bad quota inum: 1, type: 2 [ 821.298827][T25403] loop4: lost filesystem error report for type 5 error -117 [ 821.301531][T25403] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 821.309564][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 821.309590][ C0] EXT4-fs (loop4): initial error at time 1781342189: ext4_quota_enable:7221 [ 821.309714][ C0] EXT4-fs (loop4): last error at time 1781342189: ext4_quota_enable:7221 [ 821.352478][T25408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=25408 comm=syz.1.5319 [ 821.355430][T25403] EXT4-fs (loop4): mount failed [ 821.365399][T25408] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=25408 comm=syz.1.5319 [ 821.480529][T22435] bond0 (unregistering): Released all slaves [ 821.490179][T22435] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 821.499834][T22435] bond1 (unregistering): Released all slaves [ 821.509476][T22435] bond2 (unregistering): Released all slaves [ 821.524711][T25397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 821.544727][T25398] bond3 (unregistering): Released all slaves [ 821.559903][T25404] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 821.571893][T25404] batman_adv: batadv0: Adding interface: gretap1 [ 821.578464][T25404] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.604537][T25404] batman_adv: batadv0: Interface activated: gretap1 [ 821.611421][T25403] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 821.645741][T22435] hsr_slave_0: left promiscuous mode [ 821.651887][T22435] hsr_slave_1: left promiscuous mode [ 821.668577][T25412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5322'. [ 821.679054][T22435] batman_adv: batadv0: Interface deactivated: dummy0 [ 821.694177][T22435] batman_adv: batadv0: Removing interface: dummy0 [ 821.728092][T22435] veth1_macvtap: left promiscuous mode [ 821.743887][T22435] veth0_macvtap: left promiscuous mode [ 821.749953][T22435] veth1_vlan: left promiscuous mode [ 821.760926][T22435] veth0_vlan: left promiscuous mode [ 821.804066][T25422] loop4: detected capacity change from 0 to 2048 [ 821.845651][T25422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 821.964656][T25416] loop2: detected capacity change from 0 to 128 [ 821.985508][T25416] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 822.003143][T25416] ext4 filesystem being mounted at /476/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 822.064570][ T28] audit: type=1400 audit(1781342190.756:9568): avc: denied { write } for pid=25415 comm="syz.2.5323" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 822.180647][ T28] audit: type=1400 audit(1781342190.872:9569): avc: denied { write } for pid=25437 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.231581][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.252495][ T28] audit: type=1400 audit(1781342190.914:9570): avc: denied { write } for pid=25453 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.315039][T15674] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 822.333339][T25461] loop4: detected capacity change from 0 to 1024 [ 822.359900][T25461] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 822.373499][T25461] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 822.385405][T25461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.413536][ T28] audit: type=1400 audit(1781342191.113:9571): avc: denied { write } for pid=25460 comm="syz.4.5330" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 822.445382][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 822.468984][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5333'. [ 822.550671][T25470] bridge0: port 3(vlan2) entered blocking state [ 822.557024][T25470] bridge0: port 3(vlan2) entered disabled state [ 822.563940][T25470] vlan2: entered allmulticast mode [ 822.569491][T25470] geneve0: entered allmulticast mode [ 822.575549][T25470] vlan2: entered promiscuous mode [ 822.580667][T25470] geneve0: entered promiscuous mode [ 822.593988][T25457] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 822.770407][T25484] loop5: detected capacity change from 0 to 512 [ 822.799952][T25484] vfat: Unknown parameter '01777777777777777777777' [ 823.065371][T22435] IPVS: stop unused estimator thread 0... [ 823.185343][T25492] EXT4-fs error (device loop4): ext4_quota_enable:7221: comm syz.4.5339: Bad quota inum: 1, type: 2 [ 823.199582][T25492] loop4: lost filesystem error report for type 5 error -117 [ 823.199915][T25492] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 823.237100][T25492] EXT4-fs (loop4): mount failed [ 823.247635][T25492] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 823.311679][T25511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5344'. [ 823.339477][T25310] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 823.358200][T25310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 823.369426][T25310] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 823.395701][T25310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 823.405852][T25310] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 823.416514][T25310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 823.455790][T25310] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 823.465332][T25310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 823.549281][T25310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 823.560985][T25310] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.573745][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.580903][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.589993][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.597588][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.616128][T25310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.627329][T25310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 823.716279][T25526] FAULT_INJECTION: forcing a failure. [ 823.716279][T25526] name failslab, interval 1, probability 0, space 0, times 0 [ 823.730887][T25526] CPU: 1 UID: 0 PID: 25526 Comm: syz.4.5346 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 823.730932][T25526] Tainted: [W]=WARN [ 823.730942][T25526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 823.730960][T25526] Call Trace: [ 823.730970][T25526] [ 823.730981][T25526] __dump_stack+0x1d/0x30 [ 823.731084][T25526] dump_stack_lvl+0x95/0xd0 [ 823.731113][T25526] dump_stack+0x15/0x1b [ 823.731140][T25526] should_fail_ex+0x25e/0x270 [ 823.731199][T25526] ? tcf_action_init_1+0x12d/0x4d0 [ 823.731356][T25526] should_failslab+0x8c/0xb0 [ 823.731399][T25526] __kmalloc_cache_noprof+0x5f/0x400 [ 823.731448][T25526] tcf_action_init_1+0x12d/0x4d0 [ 823.731535][T25526] tcf_action_init+0x29d/0x700 [ 823.731642][T25526] tc_ctl_action+0x29e/0x860 [ 823.731680][T25526] ? __pfx_tc_ctl_action+0x10/0x10 [ 823.731834][T25526] rtnetlink_rcv_msg+0x6a7/0x720 [ 823.731970][T25526] netlink_rcv_skb+0x11e/0x220 [ 823.732005][T25526] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 823.732107][T25526] rtnetlink_rcv+0x1c/0x30 [ 823.732136][T25526] netlink_unicast+0x5a7/0x680 [ 823.732225][T25526] netlink_sendmsg+0x5be/0x6f0 [ 823.732269][T25526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.732309][T25526] ____sys_sendmsg+0x532/0x580 [ 823.732406][T25526] ___sys_sendmsg+0x195/0x1e0 [ 823.732456][T25526] __x64_sys_sendmsg+0xd4/0x160 [ 823.732559][T25526] x64_sys_call+0x194c/0x3020 [ 823.732625][T25526] do_syscall_64+0x136/0x3c0 [ 823.732741][T25526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.732765][T25526] RIP: 0033:0x7efe7448ce59 [ 823.732782][T25526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.732808][T25526] RSP: 002b:00007efe72edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.732875][T25526] RAX: ffffffffffffffda RBX: 00007efe74705fa0 RCX: 00007efe7448ce59 [ 823.732921][T25526] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 823.732936][T25526] RBP: 00007efe72edf090 R08: 0000000000000000 R09: 0000000000000000 [ 823.732953][T25526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.733006][T25526] R13: 00007efe74706038 R14: 00007efe74705fa0 R15: 00007fff58c05078 [ 823.733034][T25526] [ 823.860845][T25310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 824.069920][T25553] 9p: Bad value for 'rfdno' [ 824.235967][T25545] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5349'. [ 824.252242][T25310] veth0_vlan: entered promiscuous mode [ 824.264657][T25560] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 824.274194][T25560] EXT4-fs (loop4): orphan cleanup on readonly fs [ 824.281085][T25560] __quota_error: 5 callbacks suppressed [ 824.281106][T25560] Quota error (device loop4): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 824.293166][T25310] veth1_vlan: entered promiscuous mode [ 824.298438][T25560] EXT4-fs warning (device loop4): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 824.320662][T25560] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 824.329201][T25560] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #16: comm syz.4.5352: inode has both inline data and extents flags [ 824.330780][T25310] veth0_macvtap: entered promiscuous mode [ 824.344780][T25560] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 824.351437][T25560] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.5352: couldn't read orphan inode 16 (err -117) [ 824.361559][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 824.361607][ C0] EXT4-fs (loop4): initial error at time 1781342193: ext4_orphan_get:1397: inode 16 [ 824.362254][ C0] EXT4-fs (loop4): last error at time 1781342193: ext4_orphan_get:1397: inode 16 [ 824.372546][ T28] audit: type=1400 audit(1781342193.182:9577): avc: denied { watch watch_reads } for pid=25569 comm="syz.1.5353" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 824.383625][T25310] veth1_macvtap: entered promiscuous mode [ 824.392431][T25310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.395110][T25310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 824.504620][T25560] loop4: lost filesystem error report for type 5 error -117 [ 824.534887][ T3308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.541002][T25560] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 824.563990][ T3308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.580313][ T3308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.589158][ T3308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.625923][T25581] set_capacity_and_notify: 2 callbacks suppressed [ 824.625988][T25581] loop6: detected capacity change from 0 to 128 [ 824.879469][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.909490][T25595] loop5: detected capacity change from 0 to 4096 [ 825.053377][T25595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.088327][T25595] lo speed is unknown, defaulting to 1000 [ 825.120213][T25604] FAULT_INJECTION: forcing a failure. [ 825.120213][T25604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 825.134010][T25604] CPU: 0 UID: 0 PID: 25604 Comm: syz.4.5360 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 825.134052][T25604] Tainted: [W]=WARN [ 825.134062][T25604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 825.134079][T25604] Call Trace: [ 825.134107][T25604] [ 825.134118][T25604] __dump_stack+0x1d/0x30 [ 825.134150][T25604] dump_stack_lvl+0x95/0xd0 [ 825.134176][T25604] dump_stack+0x15/0x1b [ 825.134201][T25604] should_fail_ex+0x25e/0x270 [ 825.134300][T25604] should_fail+0xb/0x20 [ 825.134322][T25604] should_fail_usercopy+0x1a/0x20 [ 825.134352][T25604] _copy_from_user+0x1c/0xb0 [ 825.134385][T25604] ___sys_sendmsg+0xc1/0x1e0 [ 825.134514][T25604] __sys_sendmmsg+0x185/0x320 [ 825.134560][T25604] __x64_sys_sendmmsg+0x57/0x70 [ 825.134643][T25604] x64_sys_call+0x27aa/0x3020 [ 825.134671][T25604] do_syscall_64+0x136/0x3c0 [ 825.134726][T25604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.134757][T25604] RIP: 0033:0x7efe7448ce59 [ 825.134778][T25604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.134837][T25604] RSP: 002b:00007efe72edf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 825.134860][T25604] RAX: ffffffffffffffda RBX: 00007efe74705fa0 RCX: 00007efe7448ce59 [ 825.134879][T25604] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000003 [ 825.134899][T25604] RBP: 00007efe72edf090 R08: 0000000000000000 R09: 0000000000000000 [ 825.134916][T25604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.134990][T25604] R13: 00007efe74706038 R14: 00007efe74705fa0 R15: 00007fff58c05078 [ 825.135019][T25604] [ 825.388772][T25606] netlink: 'syz.4.5361': attribute type 39 has an invalid length. [ 825.402558][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.422109][ T3565] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 825.525100][T25614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5362'. [ 825.558593][T25614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 825.569372][T25614] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5362'. [ 825.579287][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5362'. [ 825.753309][T25623] tipc: Enabling of bearer rejected, already enabled [ 825.767422][T25632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5369'. [ 825.789962][T25633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5370'. [ 825.790516][T25635] loop6: detected capacity change from 0 to 512 [ 825.821204][T25635] EXT4-fs: test_dummy_encryption option not supported [ 825.884492][T25638] loop2: detected capacity change from 0 to 2048 [ 825.942705][T25638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.955914][T25638] ext4 filesystem being mounted at /485/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 825.967977][ T28] audit: type=1400 audit(1781342194.861:9578): avc: denied { write } for pid=25637 comm="syz.2.5373" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 826.115080][ T28] audit: type=1326 audit(1781342195.008:9579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.165072][T25647] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5375'. [ 826.178799][ T28] audit: type=1326 audit(1781342195.008:9580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.259373][ T28] audit: type=1326 audit(1781342195.008:9581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.316788][ T28] audit: type=1326 audit(1781342195.008:9582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.390709][ T28] audit: type=1326 audit(1781342195.008:9583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.421258][ T28] audit: type=1326 audit(1781342195.008:9584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.454828][ T28] audit: type=1326 audit(1781342195.008:9585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25637 comm="syz.2.5373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f942f64ce59 code=0x7ffc0000 [ 826.498031][T25643] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5373: bg 0: block 345: padding at end of block bitmap is not set [ 826.556105][T25643] EXT4-fs (loop2): Remounting filesystem read-only [ 826.585606][ T3460] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:5075: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 826.616010][T25662] loop5: detected capacity change from 0 to 1024 [ 826.625812][T25662] EXT4-fs: Ignoring removed bh option [ 826.729573][T25662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 826.901513][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.082938][T25672] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5382'. [ 827.193149][T25687] bridge0: entered allmulticast mode [ 827.317289][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.846522][T25725] lo speed is unknown, defaulting to 1000 [ 827.942840][T25728] loop9: detected capacity change from 0 to 7 [ 827.975253][T25728] Buffer I/O error on dev loop9, logical block 0, async page read [ 827.984655][T25728] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.000859][T25728] loop9: unable to read partition table [ 828.017174][T25728] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5) [ 828.054112][T12179] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.063095][T12179] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.081629][T12179] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.097765][T12179] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.109121][T12179] Buffer I/O error on dev loop9, logical block 0, async page read [ 828.167616][T25735] batadv_slave_1: entered promiscuous mode [ 828.177721][T25735] batadv_slave_1: left promiscuous mode [ 828.205108][T25735] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5393'. [ 828.445206][T25748] loop2: detected capacity change from 0 to 512 [ 828.507745][T25749] Invalid ELF header magic: != ELF [ 828.572314][T25748] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 828.715288][T25748] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e01c, mo2=0002] [ 828.874285][T25748] EXT4-fs (loop2): orphan cleanup on readonly fs [ 828.918707][T25748] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.5397: bad orphan inode 3 [ 828.998671][T25748] loop2: lost filesystem error report for type 5 error -117 [ 829.008653][T25748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 829.116620][T25748] EXT4-fs warning (device loop2): dx_probe:861: inode #2: comm syz.2.5397: dx entry: limit 0 != root limit 125 [ 829.131167][T25748] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.5397: Corrupt directory, running e2fsck is recommended [ 829.249843][T25766] pimreg: tun_chr_ioctl cmd 2148553947 [ 829.274552][T25770] loop5: detected capacity change from 0 to 764 [ 829.591952][T25774] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30768 sclass=netlink_route_socket pid=25774 comm=syz.1.5403 [ 829.745017][T15674] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 829.884051][T25786] loop5: detected capacity change from 0 to 1024 [ 830.322301][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.336664][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.345458][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.353874][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.363758][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.373738][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.386021][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.395632][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.401440][T25797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5409'. [ 830.404089][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.404124][T25790] netlink: 'syz.5.5406': attribute type 3 has an invalid length. [ 830.442596][T25797] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5409'. [ 830.546521][T25803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5421'. [ 830.621310][T25807] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 831.004130][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 831.004150][ T28] audit: type=1400 audit(1781342200.142:9743): avc: denied { create } for pid=25822 comm="syz.6.5420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 831.175813][T25837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5424'. [ 831.529890][T25861] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5432'. [ 831.616525][T25861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 831.735492][T25861] bond4 (unregistering): Released all slaves [ 831.940532][T25872] loop4: detected capacity change from 0 to 1024 [ 831.968978][T25870] 9p: Bad value for 'rfdno' [ 831.976313][T25872] EXT4-fs: inline encryption not supported [ 831.994068][T25872] EXT4-fs (loop4): bad geometry: block count 4294901760 exceeds size of device (512 blocks) [ 832.618066][ T28] audit: type=1400 audit(1781342201.843:9744): avc: denied { read } for pid=25888 comm="syz.4.5437" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 832.687108][ T28] audit: type=1400 audit(1781342201.843:9745): avc: denied { open } for pid=25888 comm="syz.4.5437" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 832.787258][ T28] audit: type=1400 audit(1781342201.843:9746): avc: denied { ioctl } for pid=25888 comm="syz.4.5437" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 833.013057][T25899] 9p: Bad value for 'wfdno' [ 833.318022][T25914] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 833.331171][ T28] audit: type=1400 audit(1781342202.588:9747): avc: denied { relabelto } for pid=25910 comm="syz.6.5449" name="bus" dev="tmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 833.375752][ T28] audit: type=1400 audit(1781342202.588:9748): avc: denied { associate } for pid=25910 comm="syz.6.5449" name="bus" dev="tmpfs" ino=121 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 833.415782][T25915] macvlan2: entered promiscuous mode [ 833.421463][T25915] bridge0: entered promiscuous mode [ 833.635178][T25923] loop4: detected capacity change from 0 to 1764 [ 836.181693][T25933] loop5: detected capacity change from 0 to 128 [ 836.193712][ T28] audit: type=1400 audit(1781342205.580:9749): avc: denied { read write } for pid=25932 comm="syz.5.5456" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.235727][T25933] EXT4-fs: test_dummy_encryption option not supported [ 836.314085][T25933] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=25933 comm=syz.5.5456 [ 836.342228][ T28] audit: type=1400 audit(1781342205.580:9750): avc: denied { open } for pid=25932 comm="syz.5.5456" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.424898][ T28] audit: type=1400 audit(1781342205.580:9751): avc: denied { ioctl } for pid=25932 comm="syz.5.5456" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 836.451076][ T28] audit: type=1400 audit(1781342205.622:9752): avc: denied { prog_run } for pid=25920 comm="syz.4.5453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 836.471401][ T28] audit: type=1400 audit(1781342205.643:9753): avc: denied { mounton } for pid=25932 comm="syz.5.5456" path="/228/file1" dev="tmpfs" ino=1225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 836.576753][T25944] loop4: detected capacity change from 0 to 1024 [ 836.594070][ T28] audit: type=1400 audit(1781342205.653:9754): avc: denied { recv } for pid=3282 comm="syz-executor" saddr=10.128.0.163 src=30036 daddr=10.128.0.86 dest=38310 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 836.633849][ T28] audit: type=1400 audit(1781342205.674:9755): avc: denied { create } for pid=25935 comm="syz.2.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 836.684130][T25944] loop4: detected capacity change from 0 to 512 [ 836.691216][T25944] EXT4-fs: quotafile must be on filesystem root [ 836.774070][ T28] audit: type=1400 audit(1781342205.695:9756): avc: denied { open } for pid=25935 comm="syz.2.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 836.866900][ T28] audit: type=1400 audit(1781342205.695:9757): avc: denied { perfmon } for pid=25935 comm="syz.2.5457" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 837.043940][ T28] audit: type=1400 audit(1781342205.695:9758): avc: denied { kernel } for pid=25935 comm="syz.2.5457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 837.096097][T25959] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 837.107705][T25959] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.115087][T25959] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.220576][T25962] loop4: detected capacity change from 0 to 1024 [ 837.358408][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5464'. [ 837.459350][T25962] EXT4-fs (loop4): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 837.471842][T25962] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 2: comm syz.4.5466: lblock 2 mapped to illegal pblock 2 (length 1) [ 837.486247][T25962] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 837.486491][T25962] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.5466: lblock 0 mapped to illegal pblock 48 (length 1) [ 837.511262][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 837.511286][ C1] EXT4-fs (loop4): initial error at time 1781342206: ext4_map_blocks:791: inode 3: block 2 [ 837.511325][ C1] EXT4-fs (loop4): last error at time 1781342206: ext4_map_blocks:791: inode 3: block 2 [ 837.576354][T25962] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 837.576622][T25962] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.5466: Failed to acquire dquot type 0 [ 837.598246][T25962] loop4: lost filesystem error report for type 5 error -117 [ 837.598493][T25962] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6383: Corrupt filesystem [ 837.616309][T25962] loop4: lost filesystem error report for type 5 error -117 [ 837.616806][T25962] EXT4-fs error (device loop4): ext4_evict_inode:267: inode #11: comm syz.4.5466: mark_inode_dirty error [ 837.636583][T25962] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 837.636868][T25962] EXT4-fs warning (device loop4): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 837.787152][T25981] tap0: tun_chr_ioctl cmd 1074025675 [ 837.811044][T25981] tap0: persist enabled [ 837.821082][T25982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=25982 comm=syz.1.5473 [ 837.839835][T25962] EXT4-fs (loop4): 1 orphan inode deleted [ 837.854433][T25981] tap0: tun_chr_ioctl cmd 1074025675 [ 837.862468][T25962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.892013][T25981] tap0: persist disabled [ 838.005564][T25958] EXT4-fs: Ignoring removed bh option [ 838.012552][T25958] EXT4-fs (loop4): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 838.053304][T25987] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5474'. [ 838.710132][ T3308] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 838.798357][T25989] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5474'. [ 838.999050][ T3308] EXT4-fs error (device loop4): ext4_release_dquot:7070: comm kworker/u8:6: Failed to release dquot type 0 [ 839.540854][T25987] 8021q: adding VLAN 0 to HW filter on device bond2 [ 839.629836][T25995] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5477'. [ 839.647217][T25995] 8021q: adding VLAN 0 to HW filter on device bond1 [ 839.666166][T25995] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5477'. [ 839.731750][T25958] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #3: block 48: comm syz.4.5466: lblock 0 mapped to illegal pblock 48 (length 1) [ 839.897146][T26001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5478'. [ 839.910030][T26001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5478'. [ 839.933048][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.949765][T26001] validate_nla: 40 callbacks suppressed [ 839.949791][T26001] netlink: 'syz.5.5478': attribute type 1 has an invalid length. [ 839.987879][T26001] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5478'. [ 840.337634][T26013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=26013 comm=syz.2.5483 [ 840.435387][T26015] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5484'. [ 840.460933][T26015] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5484'. [ 840.490689][T26015] netlink: 'syz.5.5484': attribute type 1 has an invalid length. [ 840.842600][T26034] net_ratelimit: 10 callbacks suppressed [ 840.842625][T26034] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 841.016184][ T28] kauditd_printk_skb: 77 callbacks suppressed [ 841.016205][ T28] audit: type=1400 audit(1781342210.651:9832): avc: denied { create } for pid=26041 comm="syz.2.5502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 841.059297][T26044] loop4: detected capacity change from 0 to 128 [ 841.085356][ T28] audit: type=1400 audit(1781342210.703:9833): avc: denied { write } for pid=26041 comm="syz.2.5502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 841.107160][T26044] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 841.121308][T26044] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 841.205217][ T28] audit: type=1400 audit(1781342210.840:9834): avc: denied { read write } for pid=26041 comm="syz.2.5502" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 841.249441][T26052] tap0: tun_chr_ioctl cmd 1074025675 [ 841.276276][T26052] tap0: persist enabled [ 841.281185][T26052] tap0: tun_chr_ioctl cmd 1074025675 [ 841.289754][ T28] audit: type=1400 audit(1781342210.840:9835): avc: denied { open } for pid=26041 comm="syz.2.5502" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 841.317698][T26052] tap0: persist disabled [ 841.492717][T20676] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 841.697164][T26066] 8021q: adding VLAN 0 to HW filter on device bond4 [ 841.799429][ T28] audit: type=1400 audit(1781342211.480:9836): avc: denied { write } for pid=26065 comm="syz.4.5496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 841.855846][T26076] bond4 (unregistering): Released all slaves [ 841.867148][T26070] loop5: detected capacity change from 0 to 164 [ 841.884771][ T28] audit: type=1400 audit(1781342211.532:9837): avc: denied { create } for pid=26077 comm="syz.6.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 841.904833][ T28] audit: type=1400 audit(1781342211.564:9838): avc: denied { bind } for pid=26077 comm="syz.6.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 841.924547][ T28] audit: type=1400 audit(1781342211.564:9839): avc: denied { write } for pid=26077 comm="syz.6.5500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 841.967652][ T28] audit: type=1400 audit(1781342211.616:9840): avc: denied { mount } for pid=26069 comm="syz.5.5497" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 842.262767][ T28] audit: type=1400 audit(1781342211.963:9841): avc: denied { unmount } for pid=21122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 842.296448][T26106] netlink: 'syz.4.5505': attribute type 1 has an invalid length. [ 842.366884][T26113] __nla_validate_parse: 6 callbacks suppressed [ 842.366966][T26113] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5506'. [ 842.396486][T26111] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5505'. [ 842.405679][T26111] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5505'. [ 842.419246][T26117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5508'. [ 842.446988][T26117] netlink: 596 bytes leftover after parsing attributes in process `syz.2.5508'. [ 842.467378][T26119] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5509'. [ 842.477284][T26119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5509'. [ 842.538081][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5505'. [ 842.549205][T26106] bond4 (unregistering): Released all slaves [ 842.662573][T26126] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5513'. [ 842.765521][T26128] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5507'. [ 843.071796][T26132] syz.4.5516 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 843.086578][T26132] CPU: 1 UID: 0 PID: 26132 Comm: syz.4.5516 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 843.086732][T26132] Tainted: [W]=WARN [ 843.086812][T26132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.086841][T26132] Call Trace: [ 843.086850][T26132] [ 843.086859][T26132] __dump_stack+0x1d/0x30 [ 843.086896][T26132] dump_stack_lvl+0x95/0xd0 [ 843.086926][T26132] dump_stack+0x15/0x1b [ 843.087019][T26132] dump_header+0x80/0x240 [ 843.087130][T26132] oom_kill_process+0x295/0x350 [ 843.087173][T26132] out_of_memory+0x981/0xbc0 [ 843.087216][T26132] try_charge_memcg+0x621/0xa00 [ 843.087266][T26132] __memcg_kmem_charge_page+0x199/0x3a0 [ 843.087397][T26132] __alloc_frozen_pages_noprof+0x18a/0x350 [ 843.087436][T26132] alloc_pages_mpol+0xa9/0x1d0 [ 843.087477][T26132] alloc_pages_noprof+0x8f/0x140 [ 843.087507][T26132] __vmalloc_node_range_noprof+0xae9/0x11e0 [ 843.087550][T26132] __kvmalloc_node_noprof+0x3d4/0x640 [ 843.087681][T26132] ? futex_hash_allocate+0x18d/0x960 [ 843.087733][T26132] ? futex_hash_allocate+0x18d/0x960 [ 843.087779][T26132] futex_hash_allocate+0x18d/0x960 [ 843.087823][T26132] ? cap_task_prctl+0x13f/0x6b0 [ 843.087983][T26132] futex_hash_prctl+0xd8/0xf0 [ 843.088046][T26132] __se_sys_prctl+0x4f4/0x1400 [ 843.088101][T26132] __x64_sys_prctl+0x67/0x80 [ 843.088136][T26132] x64_sys_call+0x2533/0x3020 [ 843.088170][T26132] do_syscall_64+0x136/0x3c0 [ 843.088279][T26132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.088308][T26132] RIP: 0033:0x7efe7448ce59 [ 843.088367][T26132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.088394][T26132] RSP: 002b:00007efe72edf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 843.088423][T26132] RAX: ffffffffffffffda RBX: 00007efe74705fa0 RCX: 00007efe7448ce59 [ 843.088442][T26132] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 843.088534][T26132] RBP: 00007efe74522d6f R08: 0000000000000000 R09: 0000000000000000 [ 843.088616][T26132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.088634][T26132] R13: 00007efe74706038 R14: 00007efe74705fa0 R15: 00007fff58c05078 [ 843.088683][T26132] [ 843.088699][T26132] memory: usage 307200kB, limit 307200kB, failcnt 77 [ 843.436749][T26132] memory+swap: usage 194756kB, limit 9007199254740988kB, failcnt 0 [ 843.444836][T26132] kmem: usage 193724kB, limit 9007199254740988kB, failcnt 0 [ 843.452763][T26132] Memory cgroup stats for /syz4: [ 843.453047][T26132] cache 4096 [ 843.461363][T26132] rss 28672 [ 843.464496][T26132] shmem 4096 [ 843.467730][T26132] mapped_file 4096 [ 843.471564][T26132] dirty 0 [ 843.474811][T26132] writeback 0 [ 843.478181][T26132] workingset_refault_anon 19 [ 843.482861][T26132] workingset_refault_file 0 [ 843.487492][T26132] swap 110592 [ 843.490833][T26132] swapcached 17424384 [ 843.494935][T26132] pgpgin 479100 [ 843.498681][T26132] pgpgout 479013 [ 843.502347][T26132] pgfault 475559 [ 843.506003][T26132] pgmajfault 19 [ 843.509571][T26132] inactive_anon 0 [ 843.513244][T26132] active_anon 77824 [ 843.517077][T26132] inactive_file 0 [ 843.520732][T26132] active_file 0 [ 843.524247][T26132] unevictable 4096 [ 843.528622][T26132] hierarchical_memory_limit 314572800 [ 843.534114][T26132] hierarchical_memsw_limit 9223372036854771712 [ 843.655946][T26132] total_cache 4096 [ 843.660170][T26132] total_rss 28672 [ 843.663869][T26132] total_shmem 4096 [ 843.667612][T26132] total_mapped_file 4096 [ 843.671879][T26132] total_dirty 0 [ 843.675732][T26132] total_writeback 0 [ 843.679609][T26132] total_workingset_refault_anon 20 [ 843.684841][T26132] total_workingset_refault_file 0 [ 843.689995][T26132] total_swap 114688 [ 843.693999][T26132] total_swapcached 17436672 [ 843.698560][T26132] total_pgpgin 479103 [ 843.702579][T26132] total_pgpgout 479015 [ 843.706705][T26132] total_pgfault 475580 [ 843.710860][T26132] total_pgmajfault 21 [ 843.714902][T26132] total_inactive_anon 0 [ 843.719086][T26132] total_active_anon 81920 [ 843.723438][T26132] total_inactive_file 0 [ 843.727756][T26132] total_active_file 0 [ 843.731980][T26132] total_unevictable 4096 [ 843.736440][T26132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4/syz0,task=syz.4.5516,pid=26131,uid=0 [ 843.751712][T26132] Memory cgroup out of memory: Killed process 26131 (syz.4.5516) total-vm:94168kB, anon-rss:1332kB, file-rss:22288kB, shmem-rss:4kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 843.796504][T26135] 9p: Bad value for 'wfdno' [ 844.299769][T26162] netlink: 'syz.2.5522': attribute type 1 has an invalid length. [ 844.412312][T26173] netlink: 'syz.2.5528': attribute type 13 has an invalid length. [ 844.426888][T26173] netlink: 'syz.2.5528': attribute type 17 has an invalid length. [ 844.524748][T26173] 0ªî{X¹¦: left allmulticast mode [ 844.613236][T26180] loop5: detected capacity change from 0 to 1024 [ 844.729097][T26173] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.736603][T26173] bridge0: port 2(bridge_slave_1) entered listening state [ 844.743962][T26173] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.751194][T26173] bridge0: port 1(bridge_slave_0) entered listening state [ 845.551301][T26176] loop5: detected capacity change from 0 to 512 [ 845.557987][T26176] EXT4-fs: quotafile must be on filesystem root [ 845.881091][T26173] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 845.981227][T26173] ip6gre1: left promiscuous mode [ 845.986340][T26173] ip6gre1: left allmulticast mode [ 846.048015][T26173] 8021q: adding VLAN 0 to HW filter on device bond2 [ 846.264516][T26173] hsr1: left promiscuous mode [ 846.277148][T26173] ip6gre2: left promiscuous mode [ 846.282443][T26173] ip6gre2: left allmulticast mode [ 846.291471][T26173] ip6gre3: left promiscuous mode [ 846.296834][T26173] ip6gre3: left allmulticast mode [ 846.344678][T26179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=26179 comm=syz.6.5527 [ 846.357768][T26179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=26179 comm=syz.6.5527 [ 846.371172][T26179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=26179 comm=syz.6.5527 [ 846.384668][T26179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=26179 comm=syz.6.5527 [ 846.422786][T26191] syzkaller0: entered promiscuous mode [ 846.429658][T26191] syzkaller0: entered allmulticast mode [ 846.441860][T26207] tipc: Invalid UDP bearer configuration [ 846.441874][T26207] tipc: Enabling of bearer rejected, failed to enable media [ 846.629564][T26213] loop5: detected capacity change from 0 to 512 [ 846.675899][T26213] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 846.710585][T26213] System zones: 0-2, 18-18, 34-34 [ 846.731730][T26213] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5535: bg 0: block 248: padding at end of block bitmap is not set [ 846.752449][T26213] loop5: lost filesystem error report for type 5 error -117 [ 846.752881][T26213] __quota_error: 59 callbacks suppressed [ 846.752898][T26213] Quota error (device loop5): write_blk: dquota write failed [ 846.760315][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 846.760339][ C1] EXT4-fs (loop5): last error at time 1781342216: ext4_validate_block_bitmap:441 [ 846.830342][T26213] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 846.854433][T26213] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.5535: Failed to acquire dquot type 1 [ 846.884645][T26213] loop5: lost filesystem error report for type 5 error -117 [ 846.897487][T26213] EXT4-fs (loop5): 1 truncate cleaned up [ 846.927191][T26213] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 846.951270][T26213] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 846.962904][ T28] audit: type=1400 audit(1781342216.886:9901): avc: denied { mount } for pid=26209 comm="syz.5.5535" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 847.020944][ T28] audit: type=1400 audit(1781342216.960:9902): avc: denied { write } for pid=26209 comm="syz.5.5535" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 847.050164][ T28] audit: type=1400 audit(1781342216.960:9903): avc: denied { add_name } for pid=26209 comm="syz.5.5535" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 847.075945][ T28] audit: type=1400 audit(1781342216.960:9904): avc: denied { create } for pid=26209 comm="syz.5.5535" name="blkio.bfq.io_merged" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 847.104379][T26211] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.5535: deleted inode referenced: 12 [ 847.118781][T26225] EXT4-fs error (device loop5): ext4_lookup:1789: inode #2: comm syz.5.5535: deleted inode referenced: 12 [ 847.131622][ T28] audit: type=1400 audit(1781342217.054:9905): avc: denied { create } for pid=26209 comm="syz.5.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 847.162246][ T28] audit: type=1400 audit(1781342217.054:9906): avc: denied { setopt } for pid=26209 comm="syz.5.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 847.183002][ T28] audit: type=1400 audit(1781342217.054:9907): avc: denied { write } for pid=26209 comm="syz.5.5535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 847.589222][T26228] __nla_validate_parse: 8 callbacks suppressed [ 847.589255][T26228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5538'. [ 847.606053][T26228] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5538'. [ 847.615838][T26228] netlink: 'syz.4.5538': attribute type 1 has an invalid length. [ 847.623912][T26228] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5538'. [ 849.511791][ T28] audit: type=1400 audit(1781342219.574:9908): avc: denied { unmount } for pid=21122 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 849.572494][T21122] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 849.661829][T26240] loop4: detected capacity change from 0 to 1024 [ 849.682155][T26240] EXT4-fs: dax option not supported [ 850.205225][T26246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5544'. [ 850.218754][T26246] loop4: detected capacity change from 0 to 512 [ 850.246057][T26246] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 850.270070][T26246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 850.283258][T26246] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 850.598706][ T3460] EXT4-fs error (device loop5): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 850.610601][ T3460] loop5: lost filesystem error report for type 5 error -117 [ 851.206073][T26255] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 851.416447][T26263] netlink: 52 bytes leftover after parsing attributes in process `syz.6.5549'. [ 851.549828][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 851.549846][ T28] audit: type=1400 audit(1781342221.695:9931): avc: denied { search } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.606221][T26269] FAULT_INJECTION: forcing a failure. [ 851.606221][T26269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 851.643604][T26269] CPU: 1 UID: 0 PID: 26269 Comm: syz.5.5540 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 851.643648][T26269] Tainted: [W]=WARN [ 851.643658][T26269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 851.643672][T26269] Call Trace: [ 851.643678][T26269] [ 851.643687][T26269] __dump_stack+0x1d/0x30 [ 851.643742][T26269] dump_stack_lvl+0x95/0xd0 [ 851.643770][T26269] dump_stack+0x15/0x1b [ 851.643793][T26269] should_fail_ex+0x25e/0x270 [ 851.643897][T26269] should_fail+0xb/0x20 [ 851.643915][T26269] should_fail_usercopy+0x1a/0x20 [ 851.643996][T26269] _copy_from_user+0x1c/0xb0 [ 851.644033][T26269] kstrtouint_from_user+0x69/0xf0 [ 851.644066][T26269] ? 0xffffffff81000000 [ 851.644085][T26269] ? avc_policy_seqno+0x15/0x30 [ 851.644196][T26269] proc_fail_nth_write+0x50/0x160 [ 851.644304][T26269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 851.644335][T26269] vfs_write+0x252/0x9b0 [ 851.644370][T26269] ? __fget_files+0x184/0x1c0 [ 851.644490][T26269] ? mutex_lock+0x57/0x90 [ 851.644522][T26269] ksys_write+0xdc/0x1a0 [ 851.644561][T26269] __x64_sys_write+0x40/0x50 [ 851.644594][T26269] x64_sys_call+0x27e1/0x3020 [ 851.644634][T26269] do_syscall_64+0x136/0x3c0 [ 851.644750][T26269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.644772][T26269] RIP: 0033:0x7f68a5efd68e [ 851.644842][T26269] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 851.644866][T26269] RSP: 002b:00007f68a496dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 851.644886][T26269] RAX: ffffffffffffffda RBX: 00007f68a496e6c0 RCX: 00007f68a5efd68e [ 851.644900][T26269] RDX: 0000000000000001 RSI: 00007f68a496e0a0 RDI: 0000000000000005 [ 851.644913][T26269] RBP: 00007f68a496e090 R08: 0000000000000000 R09: 0000000000000000 [ 851.644930][T26269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 851.644948][T26269] R13: 00007f68a61b6128 R14: 00007f68a61b6090 R15: 00007fffee6441a8 [ 851.645050][T26269] [ 851.849584][ T28] audit: type=1400 audit(1781342221.758:9932): avc: denied { read } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.897469][ T28] audit: type=1400 audit(1781342221.758:9933): avc: denied { read open } for pid=26265 comm="syz.1.5550" path="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.919940][ T28] audit: type=1400 audit(1781342221.768:9934): avc: denied { search } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.942304][ T28] audit: type=1400 audit(1781342221.768:9935): avc: denied { search } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.964582][ T28] audit: type=1400 audit(1781342221.789:9936): avc: denied { search } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 851.987291][ T28] audit: type=1400 audit(1781342221.800:9937): avc: denied { search } for pid=26265 comm="syz.1.5550" name="/" dev="configfs" ino=363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 852.126113][T26276] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5551'. [ 852.141604][T26276] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5551'. [ 852.568883][T26282] loop5: detected capacity change from 0 to 512 [ 852.580512][T26282] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 852.593916][T26282] EXT4-fs (loop5): failed to initialize system zone (-117) [ 852.601226][T26282] EXT4-fs (loop5): mount failed [ 853.162044][T26249] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 205 vs 206 free clusters [ 854.467276][T20676] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.602826][T26287] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5555'. [ 854.697289][T26289] loop5: detected capacity change from 0 to 2048 [ 854.715171][ T28] audit: type=1400 audit(1781342225.044:9938): avc: denied { remount } for pid=26288 comm="syz.5.5556" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 854.804738][T26290] loop5: detected capacity change from 0 to 512 [ 854.812308][T26290] msdos: Unknown parameter '6' [ 854.852444][ T28] audit: type=1400 audit(1781342225.180:9939): avc: denied { shutdown } for pid=26288 comm="syz.5.5556" lport=41966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 856.546289][T26293] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 856.577386][ T28] audit: type=1400 audit(1781342226.954:9940): avc: denied { name_connect } for pid=26299 comm="syz.6.5561" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 856.604030][ T28] audit: type=1400 audit(1781342227.007:9941): avc: denied { create } for pid=26299 comm="syz.6.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.623683][ T28] audit: type=1400 audit(1781342227.007:9942): avc: denied { setopt } for pid=26299 comm="syz.6.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.652085][T26301] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5558'. [ 856.680997][T26302] loop5: detected capacity change from 0 to 164 [ 856.700580][ T28] audit: type=1400 audit(1781342227.007:9943): avc: denied { connect } for pid=26299 comm="syz.6.5561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.761812][T26305] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5558'. [ 856.801986][ T28] audit: type=1400 audit(1781342227.007:9944): avc: denied { ioctl } for pid=26299 comm="syz.6.5561" path="socket:[74660]" dev="sockfs" ino=74660 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 856.826851][ T28] audit: type=1400 audit(1781342227.007:9945): avc: denied { accept } for pid=26299 comm="syz.6.5561" lport=40374 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 856.850540][ T28] audit: type=1400 audit(1781342227.007:9946): avc: denied { getopt } for pid=26299 comm="syz.6.5561" lport=40374 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 856.875276][ T28] audit: type=1400 audit(1781342227.091:9947): avc: denied { ioctl } for pid=26299 comm="syz.6.5561" path="socket:[74661]" dev="sockfs" ino=74661 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 856.910188][ T28] audit: type=1400 audit(1781342227.112:9948): avc: denied { mount } for pid=26297 comm="syz.5.5560" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 857.432552][ T28] audit: type=1400 audit(1781342227.878:9949): avc: denied { mount } for pid=26310 comm="syz.6.5563" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 857.567666][T26316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5565'. [ 857.647403][T26320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5567'. [ 857.663876][T26320] 8021q: adding VLAN 0 to HW filter on device bond3 [ 857.682288][T26320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5567'. [ 857.734460][T26320] bond3 (unregistering): Released all slaves [ 857.823825][T26323] 9p: Bad value for 'wfdno' [ 857.835138][T26323] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5568'. [ 857.848448][ T3399] IPVS: starting estimator thread 0... [ 858.046773][T26327] IPVS: using max 1824 ests per chain, 91200 per kthread [ 858.183783][T26340] loop5: detected capacity change from 0 to 512 [ 858.209254][T26340] EXT4-fs: quotafile must be on filesystem root [ 858.503089][T26361] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5581'. [ 858.527935][T26361] 8021q: adding VLAN 0 to HW filter on device bond3 [ 858.550886][T26361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5581'. [ 858.574286][T26361] bond3 (unregistering): Released all slaves [ 858.602450][T26364] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5580'. [ 860.431362][T26381] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5585'. [ 860.502529][T26380] netlink: 596 bytes leftover after parsing attributes in process `syz.6.5585'. [ 860.699536][T26386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5586'. [ 860.883580][T26386] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.890975][T26386] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.055679][T26417] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5594'. [ 864.062164][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5596'. [ 864.094246][T26423] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5596'. [ 864.116163][ T28] kauditd_printk_skb: 83 callbacks suppressed [ 864.116228][ T28] audit: type=1400 audit(1781342234.912:10033): avc: denied { mount } for pid=26422 comm="syz.5.5596" name="/" dev="ramfs" ino=74992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 864.152212][T26426] loop5: detected capacity change from 0 to 512 [ 864.159190][T26426] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 864.273341][ T28] audit: type=1400 audit(1781342234.943:10034): avc: denied { setopt } for pid=26422 comm="syz.5.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 864.320113][ T28] audit: type=1400 audit(1781342234.943:10035): avc: denied { getopt } for pid=26422 comm="syz.5.5596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 864.346799][ T28] audit: type=1400 audit(1781342234.954:10036): avc: denied { mounton } for pid=26422 comm="syz.5.5596" path="/file1" dev="ramfs" ino=74996 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 864.372712][ T28] audit: type=1400 audit(1781342234.975:10037): avc: denied { create } for pid=26424 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 864.400481][ T28] audit: type=1400 audit(1781342234.975:10038): avc: denied { write } for pid=26424 comm="syz.4.5597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 864.421996][ T28] audit: type=1400 audit(1781342235.101:10039): avc: denied { write } for pid=26430 comm="syz.5.5599" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 864.442152][ T28] audit: type=1400 audit(1781342235.153:10040): avc: denied { write } for pid=26432 comm="syz.1.5600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 866.054350][ T28] audit: type=1400 audit(1781342236.938:10041): avc: denied { create } for pid=26442 comm="syz.2.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 866.118128][ T28] audit: type=1400 audit(1781342236.938:10042): avc: denied { connect } for pid=26442 comm="syz.2.5603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 866.160210][T26441] loop5: detected capacity change from 0 to 1024 [ 866.169579][T26448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.178177][T26448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.187898][T26441] ext4: Bad value for 'init_itable' [ 866.212934][T26448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.221597][T26448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.260858][T26448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.279682][T26448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.292203][T26448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.300691][T26448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.523822][ C0] ================================================================== [ 866.532295][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 866.540152][ C0] [ 866.542520][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 866.550636][ C0] can_can_gw_rcv+0x812/0x820 [ 866.555447][ C0] can_rcv_filter+0xc3/0x480 [ 866.560183][ C0] can_receive+0x13e/0x190 [ 866.564657][ C0] can_rcv+0x17d/0x1f0 [ 866.568767][ C0] process_backlog+0x354/0x680 [ 866.573632][ C0] __napi_poll+0x61/0x300 [ 866.578017][ C0] net_rx_action+0x456/0x930 [ 866.583085][ C0] handle_softirqs+0xb9/0x280 [ 866.587830][ C0] do_softirq+0x45/0x60 [ 866.592211][ C0] __local_bh_enable_ip+0x70/0x80 [ 866.597299][ C0] __alloc_skb+0x2b6/0x690 [ 866.601756][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 866.607772][ C0] process_scheduled_works+0x4d4/0x9a0 [ 866.613272][ C0] worker_thread+0x569/0x750 [ 866.618168][ C0] kthread+0x221/0x270 [ 866.622367][ C0] ret_from_fork+0x146/0x330 [ 866.627057][ C0] ret_from_fork_asm+0x1a/0x30 [ 866.631888][ C0] [ 866.634238][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 866.642347][ C0] can_can_gw_rcv+0x812/0x820 [ 866.647182][ C0] can_rcv_filter+0xc3/0x480 [ 866.651825][ C0] can_receive+0x13e/0x190 [ 866.656649][ C0] can_rcv+0x17d/0x1f0 [ 866.660871][ C0] process_backlog+0x354/0x680 [ 866.665779][ C0] __napi_poll+0x61/0x300 [ 866.670188][ C0] net_rx_action+0x456/0x930 [ 866.675119][ C0] handle_softirqs+0xb9/0x280 [ 866.679842][ C0] __irq_exit_rcu+0x42/0xd0 [ 866.684549][ C0] sysvec_apic_timer_interrupt+0x74/0x80 [ 866.690852][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.696877][ C0] __sanitizer_cov_trace_const_cmp4+0x30/0x90 [ 866.703818][ C0] __skb_try_recv_datagram+0xdd/0x2b0 [ 866.709514][ C0] __unix_dgram_recvmsg+0x257/0x860 [ 866.715040][ C0] unix_dgram_recvmsg+0x7e/0x90 [ 866.719949][ C0] sock_recvmsg_nosec+0xc2/0xf0 [ 866.725279][ C0] ____sys_recvmsg+0x26f/0x280 [ 866.730146][ C0] ___sys_recvmsg+0x11f/0x3a0 [ 866.735225][ C0] do_recvmmsg+0x1e5/0x560 [ 866.739695][ C0] __x64_sys_recvmmsg+0xe5/0x170 [ 866.744700][ C0] x64_sys_call+0x80f/0x3020 [ 866.749530][ C0] do_syscall_64+0x136/0x3c0 [ 866.754340][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.760277][ C0] [ 866.762636][ C0] value changed: 0x001ca246 -> 0x001ca247 [ 866.769288][ C0] [ 866.771916][ C0] Reported by Kernel Concurrency Sanitizer on: [ 866.780557][ C0] CPU: 0 UID: 0 PID: 26405 Comm: syz.6.5592 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 866.792735][ C0] Tainted: [W]=WARN [ 866.796938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.807730][ C0] ================================================================== [ 869.394950][ C1] ================================================================== [ 869.403103][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 869.410342][ C1] [ 869.412682][ C1] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 869.420775][ C1] can_can_gw_rcv+0x812/0x820 [ 869.425482][ C1] can_rcv_filter+0xc3/0x480 [ 869.430138][ C1] can_receive+0x13e/0x190 [ 869.434606][ C1] can_rcv+0x17d/0x1f0 [ 869.438720][ C1] process_backlog+0x354/0x680 [ 869.443620][ C1] __napi_poll+0x61/0x300 [ 869.448002][ C1] net_rx_action+0x456/0x930 [ 869.452630][ C1] handle_softirqs+0xb9/0x280 [ 869.457336][ C1] do_softirq+0x45/0x60 [ 869.461543][ C1] __local_bh_enable_ip+0x70/0x80 [ 869.466619][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 869.471788][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 869.477471][ C1] process_scheduled_works+0x4d4/0x9a0 [ 869.482973][ C1] worker_thread+0x569/0x750 [ 869.487643][ C1] kthread+0x221/0x270 [ 869.491831][ C1] ret_from_fork+0x146/0x330 [ 869.496476][ C1] ret_from_fork_asm+0x1a/0x30 [ 869.501484][ C1] [ 869.504195][ C1] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 869.512807][ C1] can_can_gw_rcv+0x812/0x820 [ 869.517882][ C1] can_rcv_filter+0xc3/0x480 [ 869.522730][ C1] can_receive+0x13e/0x190 [ 869.527839][ C1] can_rcv+0x17d/0x1f0 [ 869.532337][ C1] process_backlog+0x354/0x680 [ 869.537636][ C1] __napi_poll+0x61/0x300 [ 869.543429][ C1] net_rx_action+0x456/0x930 [ 869.548427][ C1] handle_softirqs+0xb9/0x280 [ 869.553162][ C1] do_softirq+0x45/0x60 [ 869.557378][ C1] __local_bh_enable_ip+0x70/0x80 [ 869.562989][ C1] update_defense_level+0x594/0x5c0 [ 869.568635][ C1] defense_work_handler+0x1f/0x80 [ 869.573909][ C1] process_scheduled_works+0x4d4/0x9a0 [ 869.579800][ C1] worker_thread+0x569/0x750 [ 869.586697][ C1] kthread+0x221/0x270 [ 869.590894][ C1] ret_from_fork+0x146/0x330 [ 869.595551][ C1] ret_from_fork_asm+0x1a/0x30 [ 869.600618][ C1] [ 869.602964][ C1] value changed: 0x00210551 -> 0x00210552 [ 869.608704][ C1] [ 869.611053][ C1] Reported by Kernel Concurrency Sanitizer on: [ 869.617233][ C1] CPU: 1 UID: 0 PID: 10166 Comm: kworker/1:0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 869.628295][ C1] Tainted: [W]=WARN [ 869.632127][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 869.642243][ C1] Workqueue: events_long defense_work_handler [ 869.648449][ C1] ================================================================== [ 872.267894][ C0] ================================================================== [ 872.276056][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 872.283291][ C0] [ 872.285676][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 872.293864][ C0] can_can_gw_rcv+0x812/0x820 [ 872.298577][ C0] can_rcv_filter+0xc3/0x480 [ 872.303205][ C0] can_receive+0x13e/0x190 [ 872.307665][ C0] can_rcv+0x17d/0x1f0 [ 872.311827][ C0] process_backlog+0x354/0x680 [ 872.316724][ C0] __napi_poll+0x61/0x300 [ 872.321125][ C0] net_rx_action+0x456/0x930 [ 872.325769][ C0] handle_softirqs+0xb9/0x280 [ 872.330572][ C0] do_softirq+0x45/0x60 [ 872.334895][ C0] __local_bh_enable_ip+0x70/0x80 [ 872.339975][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 872.345060][ C0] nsim_dev_trap_report_work+0x521/0x630 [ 872.350773][ C0] process_scheduled_works+0x4d4/0x9a0 [ 872.356374][ C0] worker_thread+0x569/0x750 [ 872.361017][ C0] kthread+0x221/0x270 [ 872.365134][ C0] ret_from_fork+0x146/0x330 [ 872.369856][ C0] ret_from_fork_asm+0x1a/0x30 [ 872.374747][ C0] [ 872.377093][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 872.385289][ C0] can_can_gw_rcv+0x812/0x820 [ 872.390113][ C0] can_rcv_filter+0xc3/0x480 [ 872.394967][ C0] can_receive+0x13e/0x190 [ 872.399653][ C0] can_rcv+0x17d/0x1f0 [ 872.404048][ C0] process_backlog+0x354/0x680 [ 872.408871][ C0] __napi_poll+0x61/0x300 [ 872.413386][ C0] net_rx_action+0x456/0x930 [ 872.418099][ C0] handle_softirqs+0xb9/0x280 [ 872.422830][ C0] run_ksoftirqd+0x1c/0x30 [ 872.427485][ C0] smpboot_thread_fn+0x32a/0x510 [ 872.432581][ C0] kthread+0x221/0x270 [ 872.436817][ C0] ret_from_fork+0x146/0x330 [ 872.441517][ C0] ret_from_fork_asm+0x1a/0x30 [ 872.446363][ C0] [ 872.448735][ C0] value changed: 0x00259fd5 -> 0x00259fd6 [ 872.455618][ C0] [ 872.458057][ C0] Reported by Kernel Concurrency Sanitizer on: [ 872.464334][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 872.476025][ C0] Tainted: [W]=WARN [ 872.479966][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.490546][ C0] ================================================================== [ 875.150985][ C0] ================================================================== [ 875.159165][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 875.166401][ C0] [ 875.168858][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 1: [ 875.176959][ C0] can_can_gw_rcv+0x812/0x820 [ 875.181758][ C0] can_rcv_filter+0xc3/0x480 [ 875.186923][ C0] can_receive+0x13e/0x190 [ 875.193487][ C0] can_rcv+0x17d/0x1f0 [ 875.198869][ C0] process_backlog+0x354/0x680 [ 875.204744][ C0] __napi_poll+0x61/0x300 [ 875.211233][ C0] net_rx_action+0x456/0x930 [ 875.217346][ C0] handle_softirqs+0xb9/0x280 [ 875.222091][ C0] do_softirq+0x45/0x60 [ 875.228049][ C0] __local_bh_enable_ip+0x70/0x80 [ 875.233644][ C0] __alloc_skb+0x658/0x690 [ 875.238871][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 875.246167][ C0] process_scheduled_works+0x4d4/0x9a0 [ 875.252696][ C0] worker_thread+0x569/0x750 [ 875.259787][ C0] kthread+0x221/0x270 [ 875.266464][ C0] ret_from_fork+0x146/0x330 [ 875.271486][ C0] ret_from_fork_asm+0x1a/0x30 [ 875.279265][ C0] [ 875.282850][ C0] read-write to 0xffff8881001737a0 of 4 bytes by interrupt on cpu 0: [ 875.294632][ C0] can_can_gw_rcv+0x812/0x820 [ 875.300250][ C0] can_rcv_filter+0xc3/0x480 [ 875.307383][ C0] can_receive+0x13e/0x190 [ 875.313369][ C0] can_rcv+0x17d/0x1f0 [ 875.317678][ C0] process_backlog+0x354/0x680 [ 875.323029][ C0] __napi_poll+0x61/0x300 [ 875.328516][ C0] net_rx_action+0x456/0x930 [ 875.333499][ C0] handle_softirqs+0xb9/0x280 [ 875.339101][ C0] do_softirq+0x45/0x60 [ 875.343523][ C0] __local_bh_enable_ip+0x70/0x80 [ 875.349279][ C0] __alloc_skb+0x658/0x690 [ 875.353922][ C0] nsim_dev_trap_report_work+0x18b/0x630 [ 875.360012][ C0] process_scheduled_works+0x4d4/0x9a0 [ 875.365894][ C0] worker_thread+0x569/0x750 [ 875.370793][ C0] kthread+0x221/0x270 [ 875.375072][ C0] ret_from_fork+0x146/0x330 [ 875.383115][ C0] ret_from_fork_asm+0x1a/0x30 [ 875.389174][ C0] [ 875.391791][ C0] value changed: 0x002a44e1 -> 0x002a44e2 [ 875.398245][ C0] [ 875.400800][ C0] Reported by Kernel Concurrency Sanitizer on: [ 875.409258][ C0] CPU: 0 UID: 0 PID: 22435 Comm: kworker/u8:14 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 875.423451][ C0] Tainted: [W]=WARN [ 875.427509][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 875.440075][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 875.448471][ C0] ==================================================================