last executing test programs: 9m35.729308048s ago: executing program 32 (id=38): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60864160af36504001a003800", 0x26}, {&(0x7f00000000c0)="83d2ff5f00000080d2898a0cc6d6703b87eb28f77b09bc7e64f918fa3be4664d327d90424d5503002800"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 8m51.00550584s ago: executing program 33 (id=309): r0 = socket(0x848000000015, 0x805, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m16.954288302s ago: executing program 34 (id=1562): clock_gettime(0xb, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x1e00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0xfffffffffffffeff) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000a40)=0xec, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r4) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbd7000fbdbdf25020000000800010003e0d4fed0c865b4baf13b000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x4e22, @multicast1}, 0x10) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000200)={0x200000, 0x0, 0x2b}, 0x18) pipe(&(0x7f0000000340)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000190001090000000020000000021800000002fd010000000008000100ac14140008000400", @ANYRES32, @ANYBLOB="100016"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x71d, &(0x7f00000002c0)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4842, 0x1ff) connect$unix(r9, &(0x7f0000000000)=@file={0x0, './file1\x00'}, 0x6e) 6m13.964982338s ago: executing program 35 (id=1599): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xfffffffd, 0x10}, 0xc) (async, rerun: 32) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) (rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x7, 0x7, 0xf, 0x8040, r0, 0x45, '\x00', 0x0, r1, 0x4, 0x4, 0x4}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r4, 0x20, 0x70bd2b, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0xffffffff7fffffff}, {0xc, 0x90, 0xfffffffffffffffd}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r3) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r3) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000340)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x0, 0xff, 0x19, @private0={0xfc, 0x0, '\x00', 0x1}, @private1, 0x20, 0x9a9cc5a3d5c0392d, 0xd, 0x7}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000480)={'gre0\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x700, 0x700, 0x1, 0x4, {{0xd, 0x4, 0x1, 0x2, 0x34, 0x64, 0x0, 0xa, 0x29, 0x0, @multicast2, @multicast2, {[@end, @ssrr={0x89, 0x13, 0x42, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @empty, @local]}, @rr={0x7, 0xb, 0x0, [@local, @broadcast]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000004c0)={@mcast2, 0x0}, &(0x7f0000000500)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000540)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000006c0)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', 0x0, 0x20, 0x1, 0x1, 0x765, {{0x30, 0x4, 0x0, 0x4, 0xc0, 0x67, 0x0, 0xdc, 0x29, 0x0, @remote, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0x3c, 0x3c, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x33}, 0x2}, {@multicast1, 0x4076}, {@multicast2, 0x3}, {@loopback, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}, {@multicast2, 0x3ff}]}, @ssrr={0x89, 0x27, 0x5, [@private=0xa010100, @loopback, @loopback, @multicast2, @broadcast, @remote, @local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @end, @ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0x71, 0x0, 0xa, [0xffff6ab6, 0x9, 0x2, 0x40, 0x3, 0x6, 0x27]}, @ssrr={0x89, 0x23, 0x33, [@multicast1, @local, @multicast1, @local, @loopback, @multicast2, @rand_addr=0x64010102, @private=0xa010100]}]}}}}}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'netdevsim0\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000840)={'ip_vti0\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x7, 0x60, 0x2, 0x5, {{0x2e, 0x4, 0x3, 0x2d, 0xb8, 0x65, 0x0, 0x4, 0x0, 0x0, @remote, @loopback, {[@generic={0x7, 0x2}, @ra={0x94, 0x4}, @generic={0x44, 0x10, "971bbb221f5fc47f8e3faeb1ef53"}, @ssrr={0x89, 0x13, 0x55, [@multicast1, @loopback, @loopback, @local]}, @timestamp_prespec={0x44, 0xc, 0x2c, 0x3, 0x1, [{@loopback, 0x9}]}, @cipso={0x86, 0x35, 0xffffffffffffffff, [{0x0, 0xa, "2c07ce898e100fbc"}, {0x2, 0xe, "e64a41d75df61c1ff8fa4dbe"}, {0x0, 0x4, 'b;'}, {0x1, 0x6, "ec5f5a69"}, {0x0, 0xd, "56b2d16f540f0031a55f1a"}]}, @rr={0x7, 0x1b, 0x3b, [@local, @rand_addr=0x64010100, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}]}, @ssrr={0x89, 0x1f, 0x55, [@broadcast, @rand_addr=0x64010100, @multicast2, @rand_addr=0x64010102, @remote, @remote, @remote]}]}}}}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000880)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000008c0)=0x0, &(0x7f0000000900)=0x4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'ip6_vti0\x00', &(0x7f0000000940)={'syztnl2\x00', 0x0, 0x2f, 0xc, 0x7, 0x9, 0x20, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x20, 0x9, 0x9a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000a00)={'batadv0\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000ac0)={'ip6_vti0\x00', &(0x7f0000000a40)={'syztnl1\x00', 0x0, 0x2f, 0xff, 0x6, 0x2, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, @remote, 0x20, 0x10, 0x2, 0x7c16}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b40)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={r2, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000c40)={'wg2\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000d40)={'sit0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0xf800, 0x8000, 0xa27, 0x8e, {{0x22, 0x4, 0x2, 0x3, 0x88, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast2, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xac, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x3}, {@multicast2, 0x7fff}, {@empty, 0x81}]}, @cipso={0x86, 0x3e, 0x0, [{0x6, 0x11, "19b5f5c58947c5a855097dbfb44d37"}, {0x2, 0x11, "7339ebcc40cecc3eefc88f0f7676b2"}, {0x0, 0xa, "20b178bd75294816"}, {0x1, 0xc, "d12f87d0cf36ef4e9cb0"}]}, @ssrr={0x89, 0x7, 0x96, [@multicast2]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0xa3, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x6}]}]}}}}}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000d80)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000001000)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000dc0)={0x1f4, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r21}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r22}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r23}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) (async, rerun: 32) r24 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 32) ioctl$sock_SIOCGIFCONF(r24, 0x8912, &(0x7f0000001080)=@req={0x28, &(0x7f0000001040)={'macvlan1\x00', @ifru_mtu=0x80000001}}) (async) setsockopt$sock_linger(r24, 0x1, 0xd, &(0x7f00000010c0)={0x0, 0xd583}, 0x8) 5m12.125517165s ago: executing program 36 (id=2083): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7fffffff, 0x30}, 0xc) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x2, 0x9fb, 0x2}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfffd) 4m36.850691207s ago: executing program 4 (id=2289): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x2, 0x1, 0x9, 0x0, 0x6, 0x51290, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x809, 0x4e16, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xf, 0x2, 0x8, 0x6, 0x0, 0x4, 0x12006, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x10000, 0xf}, 0x10000, 0x401, 0x0, 0x9, 0x3ff, 0x8, 0x0, 0x0, 0x1, 0x0, 0x10001}, 0xffffffffffffffff, 0xa, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)) 4m36.811395438s ago: executing program 37 (id=2289): prlimit64(0x0, 0x0, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x3, 0x2, 0x1, 0x9, 0x0, 0x6, 0x51290, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x809, 0x4e16, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000080)={0x5, 0x80, 0xf, 0x2, 0x8, 0x6, 0x0, 0x4, 0x12006, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x5, 0x1, @perf_config_ext={0x10000, 0xf}, 0x10000, 0x401, 0x0, 0x9, 0x3ff, 0x8, 0x0, 0x0, 0x1, 0x0, 0x10001}, 0xffffffffffffffff, 0xa, r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000040)) 3m54.346940525s ago: executing program 8 (id=2773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async, rerun: 64) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) (async, rerun: 64) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000340)={r1}) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_ext={0x1c, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000003000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186900000a00000000000000ffffffff18120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000012000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000005c000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f00000004c0)='GPL\x00', 0x4, 0x53, &(0x7f0000000500)=""/83, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x3, 0x1, 0x31}, 0x10, 0x14694, 0xffffffffffffffff, 0x2, &(0x7f00000005c0)=[0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x0, 0x5, 0x5, 0x1}, {0x5, 0x3, 0xb, 0xe}], 0x10, 0x8001}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f0000000180)={r1, r3}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) (async) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) (async, rerun: 64) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0xd}}, 0x14) (rerun: 64) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900)={0x100000000000000}, &(0x7f0000000440)) (async) setsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 3m54.318941205s ago: executing program 8 (id=2774): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000580)=""/118, 0x76}, {&(0x7f0000000400)=""/200, 0xc8}], 0x2, 0x5b, 0x100) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRESDEC=r0], 0xb) socket$xdp(0x2c, 0x3, 0x0) 3m54.301407526s ago: executing program 8 (id=2775): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x8000, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x401}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x10000}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x22044028}, 0x20000000) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) 3m54.265869757s ago: executing program 8 (id=2776): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4142, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10b96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x106) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x12612, 0x0, 0x0, 0x9, 0x8, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x12612, 0x0, 0x0, 0x9, 0x8, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002c80)={&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000002840)=[{0x0}, {&(0x7f0000001540)=""/233, 0xe9}, {0x0}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/107, 0x6b}, {0x0}, {&(0x7f0000002780)=""/129, 0x81}], 0x7, &(0x7f0000002b00), 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000fc0)={0x14, 0x1, 0x4, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe, 0x10}}, [@TCA_RATE={0x4}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) pipe(&(0x7f0000000000)) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x40800002}, 0xc) (async) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbfe, 0x40800002}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a58000000060a01040000000000000000020000032c000480280000000e00010002800800014000000015080002400000000a0900010073797a30000000000900020073797a320000000054ee140000001100010000000000000000000100000a551437f647549e4da1b7df3f5c0c41a5dc8c4d5f867669bfbf7c21b9ea9f60f3a23918116fda2b7a6a0cc3e19e696bb29d1ac63fa9aeb3cf8a96bc1dc703eb45f291d5381959896a93665c6094b58a18b255fc4cd43ac69a34e785aee3bb0b03034b34de16fb2978284f93c193f3de85cfd863e5d760b6e000"/250], 0x80}}, 0x44000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) syz_clone(0x20021000, 0x0, 0x0, &(0x7f0000001040), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000004c0)='./file0\x00', 0x1000c00, &(0x7f0000000b00)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES32, @ANYRES32], 0xff, 0x248, &(0x7f0000000880)="$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") creat(&(0x7f00000002c0)='./file0/file0\x00', 0x181) (async) r8 = creat(&(0x7f00000002c0)='./file0/file0\x00', 0x181) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000008}) (async) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, 0xffffffffffffffff, &(0x7f0000000100)={0xa0000008}) io_setup(0x200, &(0x7f00000001c0)) (async) io_setup(0x200, &(0x7f00000001c0)=0x0) io_submit(r9, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e22, @loopback}, 0x10) socket(0x23, 0x8000a, 0xf) 3m54.011367995s ago: executing program 8 (id=2782): r0 = timerfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknod(0x0, 0x8001420, 0x1) writev(0xffffffffffffffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x0, &(0x7f0000000680)}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000480)={{&(0x7f0000000080)=[{0x6, 0x3, 0x7fff, {0x3, 0xb6}, 0xe, 0x0, 0x100}, {0x6, 0x9, 0x1, {0xb, 0x57}, 0xd3d, 0x7, 0x48d}], 0x2, 0x40, 0x2, 0x7}, {&(0x7f0000000100)=[{0xffffffffffffffff}, {0x6, 0x1}, {0xeb5}], 0x3, 0x10, 0x9197, 0x10000}, {&(0x7f00000001c0)=[0x7, 0x4, 0x3], 0x3, 0x8, 0x0, 0x1}, {&(0x7f0000000400), 0x0, 0x28, 0x80, 0x5}, {&(0x7f0000000440)=[0x0, 0x3d9fe248, 0x8001], 0x3, 0x8, 0x8001, 0x4}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4={""/10, ""/2, @private}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@private}}, &(0x7f0000000340)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2c024, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}, {@loose}], [{@fsname={'fsname', 0x3d, '\x00'}}, {@uid_lt={'uid<', r2}}]}}) syz_io_uring_setup(0x2000038, &(0x7f0000000140)={0x0, 0x1d2f, 0x1, 0x0, 0x2}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timerfd_create(0x0, 0x0) socket$inet(0x2, 0x2, 0x1) setrlimit(0x0, &(0x7f0000000200)={0x7, 0x2}) 3m53.163351902s ago: executing program 8 (id=2790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 3m53.161519072s ago: executing program 38 (id=2790): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 3m46.000535791s ago: executing program 2 (id=2854): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@abort}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0xffffffffffffffff}}, {@dax_never}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [{@obj_user={'obj_user', 0x3d, 'usrjquota='}}], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) 3m44.76760075s ago: executing program 2 (id=2860): socket(0xa, 0x3, 0x5) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') syz_io_uring_setup(0x88b, 0x0, 0x0, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000280)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @val={@val={0x88a8, 0x6, 0x0, 0x1}, {0x8100, 0x1, 0x1, 0x4}}, {@generic={0x8809}}}, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f00000000c0)={0xa}, 0x1c) socket$kcm(0x10, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x23, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x330b}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), r2) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) r4 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r4, &(0x7f0000000140)=@in6={0x21, 0x4, 0x2, 0x0, {0xa, 0x4e21, 0xbd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}}, 0xfffffffffffffe67) r5 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r5, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1, 0x2f, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0xac, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbmod={0x5c, 0xa, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x3}}}]}, {0x4}, {0xc}, {0xc}}}, @m_mpls={0x38, 0x2, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x7400, 0xa3623}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2}}}}]}]}, 0xac}}, 0x0) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x80, 0x0, 0x7, 0x520, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x5, 0x6}, 0x10ecc8, 0x1224, 0x8, 0x5, 0xfffffffffffffff4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0xffffffffffffffff, 0xfffffffdfffdffff, 0xffffffffffffffff, 0x8) 3m44.16807085s ago: executing program 2 (id=2869): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x30, r1, 0x1, 0x0, 0x10000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c844}, 0x2040844) 3m44.16780777s ago: executing program 2 (id=2870): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000054) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000440)={[{@resgid={'resgid', 0x3d, 0xee00}}, {}, {@grpquota}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@delalloc}, {@nogrpid}, {@noauto_da_alloc}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0}, 0x28) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183b000000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000)='3', 0x1, 0x4fed0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lseek(r3, 0x6, 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x4, &(0x7f00000000c0)=""/3, &(0x7f0000000200)=0x3) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3m43.935681987s ago: executing program 2 (id=2875): openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) unshare(0x2a060400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x20001, 0x3, 0x6, 0xff, 0x1000, 0xc, 0x3, 0x5, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x1, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x5, 0xb, 0x40, 0xa4d, 0x8, 0x4ab, 0x1, 0x0, 0x11000, 0xf, 0x5, 0x79b, 0x3, 0x1, 0x7e, 0x4, 0xa, 0x7, 0xe, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x10001, 0x5, 0x2af, 0x40000003, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x753, 0x0, 0x3, 0x0, 0x0, 0x8001, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x7, 0x40252, 0x81, 0xb, 0x4, 0x20004, 0x3, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) unshare(0x6a040000) r0 = syz_usb_connect$uac3(0x0, 0x106, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0) unshare(0x40000) syz_usb_disconnect(r0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000140)='./file2\x00', 0xc000, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000280)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) listen(r2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) epoll_create1(0x80000) r4 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0xa4, 0x14, 0xf0b, 0x70bd29, 0x3, {0x2, 0x0, 0x0, 0x0, {0xffe0, 0x9}, {0xb}, {0x4, 0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x24, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x7}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x7f}, @TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x7fffffff}]}}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0x7ff, 0x7, 0x7ff}, 0x5082, 0x0, 0x0, 0x8624, 0x6, 0xa, 0x6, 0x2, 0x7, 0x0, {0x8, 0x1, 0x1, 0x7d20, 0xd, 0xe6a7}}}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x408c1}, 0x0) 3m43.597088558s ago: executing program 2 (id=2880): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x49b, &(0x7f0000000d00)="$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") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xfffffffffffffff5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xfffffffffffffff5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r5, r6, 0x80000) (async) r7 = dup3(r5, r6, 0x80000) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001a0001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x818) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x32, 0x0, 0x0, 0x31, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) 3m43.596008638s ago: executing program 39 (id=2880): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x49b, &(0x7f0000000d00)="$eJzs3M1vG0UfAODfrpP0ffsZoEBbKghUiIiPpEkL9MAFBBKHIkBwKHAKSVpVTRvUBIlUVRsQKhckVAnOwBGJv4AbFwSckJA4wR1VqqCXFsTBaO3dxHHixgmOndbPI7me8cx6Zjw73tmZOgF0rYHsnyRie0T8GhG7qtGlGQaqTzeunR//69r58STK5df+SCr5rl87P17NWFo4blv+noNpRPphkhey1MzcuVNjU1OTZ/P48Ozpd4Zn5s49cfL02InJE5NnRo8cOXxo5OmnRp9sSTuzdl3fd2F6/94X37j80vixy2//8HVW3+15+mI71qlv+UsDWcP/LFfUpz0c//9PxW02O2rCSU8HK8KalCIi667ebPyXy+WLNWm74oUPVjl82wZXD9hA2bVpywqv59fF+XJDyU1TgVtBEp2uAdAZxfU+u/8tHm2cfnTc1WerN0BZu2/kj2pKT6R5nt66+9tWGoiIY/N/f549ohXrEAAAq/h4/LOj8fhK87807qnJtzPfQ+mPiDsi4s6IuCsidkfE3RGVvPdGxJ5mCq3ZIKjfGlo+/0mv1GVp6e5CNv97Jt/bWjr/K2Z/0V/KYzsq7e9Njp+cmjyYfyaD0bsli4/cpIxvn//5k0ZptfO/7JGVX8wF83pc6alboJsYmx2rTEpb4Or7Eft64p9yuVzX/mThg04iYm9E7FvbW+8sAicf/Wp/o0yrt3/Z2y1qwZlQ/jLikWr/z0dd+wvJ8v3Jvh2L+5PD/4upyYPDxVmx3I8/XXqlUfnNt39jZP2/den5n6d8MZcH+t+q3a+diQY7l9sblnHpt48a3tOs9/zvS16vfB8V267vjc3Onh2J6EuOVuJLXh9dPLaIF/mz9g8eyFKK9hdHppXvuMj7/76I2J/vl90fEQ/kdX8wIh6KiAMNWx/x/XON0zZD/0/U9H8S9ef/ngvV56L/59YcKJ367ptG5TfX/4crocH8lcr33yqareD6PzkAAAC4daSVlZskHVoIp+nQUPU/9u6OrenU9MzsY8en3z0zUV3h6Y/etFjp2lWzHjqSzOfvWI2P5mvFRfqhfN3401JU4kPj01MTHW47dLttDcZ/5vdSp2sHbLiV9tFGV/hBG3D7qR//6dLoxZfbWRmgrfxeG7rXKuM/bVc9gPZz/YfutdL4v1gXtxcAtyfXf+hexj90L+Mfulfd+C/FL52qCdBG6/g5v8CmCbw6tJajtkQrS490k3wITQSa/3sQGx14c3NUo4lAp7+ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWuPfAAAA//9oq+sP") syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') (async) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x3, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xfffffffffffffff5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r4, 0xfffffffffffffff5, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r5, r6, 0x80000) (async) r7 = dup3(r5, r6, 0x80000) ioctl$MON_IOCX_GETX(r7, 0x4018920a, &(0x7f00000001c0)={0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="540100001a0001000000000800000000ac1414bb00000000000000000000000000000000000000000000000000000001000200004e2000500000200016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aafffffffc33000000ac1414aa0000000000000000000000000400000000000040040000000000000061f10000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff0000008056000000000000000000000000000000000000000000010000000000010400000d00000000000000feffffff000000000a00040090000000000000004800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700000000002dbd700028bd70002bbd70002bbd700008000000"], 0x154}}, 0x818) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x32, 0x0, 0x0, 0x31, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) 2m24.661287349s ago: executing program 5 (id=3672): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m24.449953726s ago: executing program 5 (id=3676): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001400078008000640000002000800084088cda533"], 0x60}}, 0x200040c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x41843, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() bind$can_j1939(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, 0x0, 0x3, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000ac0), 0x2, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x200, 0x189) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) socket$nl_generic(0x10, 0x3, 0x10) ioperm(0x2, 0x7ff, 0x8) ioperm(0x9, 0x6, 0x0) socket$inet(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3000009, 0x4082172, 0xffffffffffffffff, 0x97c3e000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg2\x00'}) 2m23.353386901s ago: executing program 5 (id=3693): perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x880) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) 2m22.510454798s ago: executing program 5 (id=3699): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3b, 0x5}, 0x1040, 0x1002, 0x20da, 0x0, 0xe, 0xd3e, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64], 0x1, 0x359, &(0x7f0000000bc0)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81902) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r5, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0xe61c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x3, 0x0, 0x9}) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1a8) 2m20.931086598s ago: executing program 5 (id=3713): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002198230"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x40f, &(0x7f0000000000)={0x0, 0x0, 0x71, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073114300000000008510000002000000850000000500000095000000000000009500a50500000000bbb59326c132d9e8113f03dd4c5f7b2810be721bc7b3fa228e4de89290d067af914f6237e3a75ba7a792e072188500dc5cc2c630bce68c65f8b2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002198230"], 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) fcntl$lock(r0, 0x40f, &(0x7f0000000000)={0x0, 0x0, 0x71, 0x2}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000073114300000000008510000002000000850000000500000095000000000000009500a50500000000bbb59326c132d9e8113f03dd4c5f7b2810be721bc7b3fa228e4de89290d067af914f6237e3a75ba7a792e072188500dc5cc2c630bce68c65f8b2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) (async) 2m20.144497274s ago: executing program 5 (id=3725): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m19.864607442s ago: executing program 40 (id=3725): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 50.344658622s ago: executing program 3 (id=4411): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe3a}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffae, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000008c00)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4020114}, 0x40000) socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8993, &(0x7f0000001000)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed@n\x00\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xf3\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x9c\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000300)={0x2, r1, 'id0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) semget(0x0, 0x1, 0x281) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{}, {0x8, 0x4}], {0x10, 0x7}}, 0x3c, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4004) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x8, @local}}, 0x0, 0x0, 0x2c, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09340005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 5.088188947s ago: executing program 7 (id=4726): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='hybla', 0x5) utime(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) unshare(0x60480) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_open_pts(r1, 0x280) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) r5 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) capset(&(0x7f0000000280)={0x20080522}, &(0x7f0000000040)={0xfff, 0x10ffff, 0xfffffffd}) socket$key(0xf, 0x3, 0x2) capget(&(0x7f0000000000)={0xf1504, r4}, &(0x7f0000000240)={0x6, 0xaa22, 0x1, 0xdee, 0x5, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000001c0)=0x400009, 0x3) 4.853987355s ago: executing program 7 (id=4730): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{0x0}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x24, 0x0}, 0x2103) 4.562915814s ago: executing program 7 (id=4741): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xa6c2, 0xffffffffffffffff, 'id0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000906020100000002000000000a00000080be54368403599500670500015a0700000008d048778178fcaaab586d7d0009400000f7"], 0x24}, 0x1, 0x0, 0x0, 0x4004082}, 0x2040040) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300)=r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000080)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES64=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 4.549171265s ago: executing program 42 (id=4741): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000180)={0xa6c2, 0xffffffffffffffff, 'id0\x00'}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_config_ext={0x1, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000000906020100000002000000000a00000080be54368403599500670500015a0700000008d048778178fcaaab586d7d0009400000f7"], 0x24}, 0x1, 0x0, 0x0, 0x4004082}, 0x2040040) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x3, 0x4}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000300)=r0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) ioctl$TIOCGRS485(r2, 0x542e, &(0x7f0000000080)) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES64=r1, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.400317755s ago: executing program 9 (id=4768): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12a) close(r0) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.340867697s ago: executing program 9 (id=4770): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x60840, 0x44) fcntl$setlease(r0, 0x400, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 1.340367547s ago: executing program 6 (id=4771): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getrusage(0xfffffffffffffffe, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) add_key$user(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) setfsgid(0xee01) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000000c0)={0x6, 0x8, 0x8, 0x0, 0xe, 0x9}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x5, 0xb, {{0x21, 0x4, 0x1, 0x1e, 0x84, 0x66, 0x0, 0x7, 0x4, 0x0, @loopback, @remote, {[@lsrr={0x83, 0x17, 0xcc, [@dev={0xac, 0x14, 0x14, 0x31}, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}]}, @lsrr={0x83, 0x27, 0xa6, [@empty, @local, @multicast1, @multicast2, @remote, @broadcast, @multicast2, @loopback, @multicast1]}, @ssrr={0x89, 0x7, 0x2d, [@empty]}, @timestamp={0x44, 0x28, 0x7a, 0x0, 0x0, [0x7, 0x80, 0xfffffffb, 0x632, 0x7, 0x4, 0x387c3aab, 0x800, 0x7]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newqdisc={0xd0, 0x24, 0x800, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xf, 0xc}, {0xfff3, 0xb}, {0x8, 0x5}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0x6, 0x5, 0x8, 0x0, 0x9, 0x401, 0x1}}, {0x6, 0x2, [0x885]}}, {{0x1c, 0x1, {0xf8, 0x2, 0x9, 0x10000, 0x0, 0xbb35, 0x52e5, 0x7}}, {0x12, 0x2, [0x7, 0x1, 0x4, 0xfff9, 0x1, 0xab, 0x60]}}, {{0x1c, 0x1, {0x6, 0x4, 0x5, 0x81, 0x0, 0x9, 0xfff, 0x2}}, {0x8, 0x2, [0x1, 0xfff5]}}, {{0x1c, 0x1, {0x4e, 0x5, 0x7ff, 0x9, 0x2, 0x9c8, 0x3, 0x3}}, {0xa, 0x2, [0x3, 0x2, 0x2]}}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004000000e27f0000ff01000044"], 0x50) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000001200)=0x2, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYRESOCT=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) request_key(&(0x7f00000001c0)='id_legacy\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000580)='\x00', 0xfffffffffffffffe) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.221469391s ago: executing program 6 (id=4772): socket$kcm(0x10, 0x2, 0x4) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) syz_clone3(0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x11, 0x0, @broadcast, @empty}, {0x0, 0x4e22, 0x8}}}}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000300)={0x7d, {{0x29, 0x0, 0x3000000, @local, 0x5}}}, 0x88) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x3c, r4, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="0a3cb03451305f3ea4974379e9f4425157c69101367b899c48633e7c0c27eaf00ffc60cf109008584b99144aa6edff485db2478af488ce1c54fa74cd7effd0f570d205f51e335f09c1c808bb43f0ae38f4838e73b05f70e1b69e9be1", 0x5c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000001", @ANYRES16=r7, @ANYBLOB="a10828bd7000fcdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) write(r9, &(0x7f0000000280)="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", 0x1000) pwritev2(r8, &(0x7f0000000980)=[{&(0x7f0000000880)="599f03", 0x3}], 0x1, 0x8, 0x2, 0x16) 1.219684081s ago: executing program 9 (id=4781): socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x11c}], 0x1, 0x0, 0x0, 0x44}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000006000000040000000285732300edd645065824838b97f19bfd93527367187d12326cfb9db08a9fac30b1552c2bdad32f97efe57cefc8d942aaa2a118682dfbfec2cb33a69155d13ab61a76f6224823c8a9ab9f8afd53"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000007b8af8ff00000000bfa29e00000000f8ffffffb703000008000000b704000000000000850000008300000095008b656a1157eca22400"/72], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x15a0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x100000000001, 0xfffffffffffffff0}, 0x110200, 0xfffffffffffffffe, 0xbd6, 0x6, 0x7, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xc, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = getpgrp(0xffffffffffffffff) ptrace$setopts(0x4206, r4, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0x1, 0x20000000000000fb, 0x100000000000, 0x0, 0x858, 0x6, 0x0, 0x6, 0x20000, 0x8000000000000001, 0xde1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x401, 0x3}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x7, &(0x7f00000000c0)=0x7f, 0xff20) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x24000800) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, r9, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) listen(r6, 0x3) close(r7) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) 1.141149533s ago: executing program 1 (id=4775): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000300)={&(0x7f0000000000)=""/74, 0x110e000, 0x1000}, 0x20) readv(r1, &(0x7f00000002c0), 0x44) 1.102768244s ago: executing program 6 (id=4777): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x24, 0x0}, 0x2103) 474.546595ms ago: executing program 0 (id=4778): prlimit64(0x0, 0x0, &(0x7f0000000800)={0x1, 0xffffffffffffffff}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x1, 0x40, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @multicast2}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f00000000c0)={'sit0\x00', r1, 0x7, 0x40, 0x3, 0x4, {{0x5, 0x4, 0x2, 0x7, 0x14, 0x64, 0x0, 0x2, 0x4, 0x0, @remote, @remote}}}}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x11ece8, 0x1224, 0xfffffffc, 0x4, 0x8, 0x20005, 0x200, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000000c0), 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x200408d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff2000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36f, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 454.033005ms ago: executing program 4 (id=4743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb70300008a000000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 382.469467ms ago: executing program 4 (id=4779): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10181, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)) r3 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r3, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000300)={0x2, r1, 'id0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) semget(0x0, 0x1, 0x281) fsetxattr$system_posix_acl(r4, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{}, {0x8, 0x4}], {0x10, 0x7}}, 0x3c, 0x2) 382.088018ms ago: executing program 4 (id=4780): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x70060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r0, 0x0, 0x0) 369.766658ms ago: executing program 0 (id=4782): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200008, &(0x7f0000000440)={[{@grpid}, {@noinit_itable}, {@inlinecrypt}, {@resgid={'resgid', 0x3d, 0xee00}}, {@norecovery}, {@resuid}, {@noblock_validity}, {@dioread_nolock}]}, 0xfe, 0x575, &(0x7f0000000ec0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x30a1c3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x47) fallocate(r1, 0x0, 0x1, 0x8ffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 327.862249ms ago: executing program 0 (id=4783): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x70060, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0xecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0xffffffff, 0x0, 0x2000001020000001}, 0x0, 0xfffffffffe000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) listxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) write$selinux_context(r0, 0x0, 0x0) 327.106829ms ago: executing program 4 (id=4784): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 264.757801ms ago: executing program 0 (id=4785): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='hybla', 0x5) utime(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) unshare(0x60480) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffe}) r2 = syz_open_pts(r1, 0x280) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000200), 0x0, 0x0, 0x0) r4 = gettid() rt_tgsigqueueinfo(0x0, r4, 0x2c, &(0x7f0000000100)={0x11, 0x905, 0x4}) r5 = syz_clone(0x23940200, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r5, 0x2b, &(0x7f0000000040)={0x29, 0x6, 0xfff00000}) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000001c0)=0x400009, 0x3) 264.385071ms ago: executing program 9 (id=4786): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10181, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000300)={0x2, r1, 'id0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) semget(0x0, 0x1, 0x281) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{}, {0x8, 0x4}], {0x10, 0x7}}, 0x3c, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4004) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x8, @local}}, 0x0, 0x0, 0x2c, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09340005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 263.775162ms ago: executing program 4 (id=4787): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000000000000000000202000000040000000000000803000000000000000000000d000000000000305f5f"], 0x0, 0x46}, 0x28) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x0, @rand_addr=0x64010102}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x208400, 0x0, 0x4}, 0x18) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000340)={0x4, 0x6, 0x31, 0x5, 0x80, 0x9, 0x42, 0x1, 0x8b, 0x7, 0x8, 0x8, 0xfe, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101e6ffffff5d1affd5020000000900010073797a300000000008000240000000032c000000030a01230400e6ff00000000020000100900010073797a30000000000900030073d300000000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c000240000000000000000114000000110001"], 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) shutdown(r5, 0x1) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x3c, r4, 0x1, 0x70bd36, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5f}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00'/17], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) 181.014024ms ago: executing program 9 (id=4788): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$inet6(0xa, 0xa, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1c, r3, 0x321, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0x8}, @void}}}, 0x1c}}, 0x50) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0xe4ff, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0x2, 0xb, 0x2, 0x1, 0xfffffffffffffd78, 0x4, 0x0}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') socket$packet(0x11, 0x3, 0x300) pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) utime(&(0x7f0000000000)='.\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r8 = syz_open_dev$evdev(&(0x7f0000000200), 0x1, 0x80842) write$evdev(r8, &(0x7f0000000000)=[{{0x0, 0xea60}, 0x0, 0x1, 0x2}], 0xfe72) read(r8, &(0x7f00000000c0)=""/36, 0x24) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x937e, 0x0, @perf_config_ext, 0x0, 0x0, 0x84, 0x2, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 166.057314ms ago: executing program 6 (id=4789): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet(0xa, 0x801, 0x84) (async) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) (async) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000240)="3d4077e50823a7746c0ee30dd0afdfb5ff2a258d495dc9d2c2a25bc7dc0b11bde0d15d0770675db17901", 0x2a}, {&(0x7f0000000080)="b28231adddba8ed6f23bf98ca8caa015ab797f57", 0x14}], 0x2, 0x0) (async) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x6, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) close(r6) recvmmsg(r5, &(0x7f0000001440)=[{{&(0x7f0000000280)=@un=@abs, 0x0, &(0x7f0000001400)=[{&(0x7f0000001480)=""/1}, {&(0x7f0000000300)=""/102}, {&(0x7f0000000380)=""/4096}, {&(0x7f0000001380)=""/111}]}}], 0x700, 0x40002002, 0x0) (async) clock_nanosleep(0x5, 0x1, &(0x7f00000001c0), &(0x7f0000000200)) write$binfmt_misc(r4, &(0x7f0000000040), 0xffc1) setsockopt$sock_int(r5, 0x1, 0x10, &(0x7f0000000180)=0x55b7, 0x4) (async) splice(r2, 0x0, r4, 0x0, 0x4ffe0, 0x0) (async) listen(r1, 0x8) (async) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0xc080}, 0x84) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x402, 0x4) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettaction={0x14, 0x32, 0x605, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 158.821384ms ago: executing program 1 (id=4790): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x441, 0x193) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r1) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) fallocate(r0, 0x10, 0x3ffd, 0xe68d) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x842, 0x22) 144.625535ms ago: executing program 1 (id=4791): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) socket$rds(0x15, 0x5, 0x0) 123.300166ms ago: executing program 6 (id=4792): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{}, {0x8, 0x4}], {0x10, 0x7}}, 0x3c, 0x2) 122.677546ms ago: executing program 0 (id=4793): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x5, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 115.281866ms ago: executing program 6 (id=4794): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010084000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 87.515057ms ago: executing program 1 (id=4795): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r1, 0x209, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x0) 59.790808ms ago: executing program 0 (id=4796): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x0, 0x9}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e22, 0xffffffff, @mcast1, 0xf}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000e00)=ANY=[@ANYBLOB="01000000000000000a000000005900"], 0x90) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040), 0x10) unshare(0x20000400) file_getattr(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x18, 0x1000) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='trusted\x00', &(0x7f0000000180)=@keyring) 59.265608ms ago: executing program 1 (id=4797): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x200, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x208, 0x1, @perf_bp={0x0}, 0xc234, 0x2, 0x8, 0x7, 0x8000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x94) 550.48µs ago: executing program 1 (id=4798): r0 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10181, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x4) faccessat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r4, 0x400, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f0000000300)={0x2, r1, 'id0\x00'}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r6, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x100) semget(0x0, 0x1, 0x281) fsetxattr$system_posix_acl(r6, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x4}, [{}], {}, [{}, {0x8, 0x4}], {0x10, 0x7}}, 0x3c, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4004) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x4e24, 0x8, @local}}, 0x0, 0x0, 0x2c, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09340005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) 0s ago: executing program 9 (id=4799): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0, 0x800300}, 0x4040891) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x24, 0x0}, 0x2103) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.0.3798'. [ 485.535308][T17163] netlink: 92 bytes leftover after parsing attributes in process `syz.6.3797'. [ 485.796595][T17172] hsr0 speed is unknown, defaulting to 1000 [ 487.513258][T17189] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 487.840178][T17200] loop3: detected capacity change from 0 to 512 [ 487.857814][T17200] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 487.884466][T17200] EXT4-fs (loop3): orphan file too big: 4294967295 [ 487.902981][T17200] EXT4-fs (loop3): mount failed [ 488.667978][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3821'. [ 488.684834][T17205] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3821'. [ 488.709728][T17206] vlan0: entered promiscuous mode [ 488.719477][T17206] bridge2: entered promiscuous mode [ 488.724853][T17206] vlan0: entered allmulticast mode [ 488.730595][T17206] bridge2: entered allmulticast mode [ 488.809172][ T28] audit: type=1400 audit(1781934559.665:3339): avc: denied { write } for pid=17183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.895827][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 488.904914][ T28] audit: type=1400 audit(1781934559.775:3340): avc: denied { write } for pid=17231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 488.942589][T17229] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 488.969708][T17227] erspan0: entered allmulticast mode [ 489.167502][ T28] audit: type=1400 audit(1781934560.045:3341): avc: denied { write } for pid=17243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.196969][T17267] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3826'. [ 489.257637][T17276] devpts: Bad value for 'gid' [ 489.267188][ T28] audit: type=1400 audit(1781934560.085:3342): avc: denied { write } for pid=17266 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.291846][T17276] devpts: Bad value for 'gid' [ 489.312261][T17283] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3830'. [ 489.364150][ T28] audit: type=1400 audit(1781934560.235:3343): avc: denied { write } for pid=17278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.472093][T17235] hsr0 speed is unknown, defaulting to 1000 [ 489.491192][ T28] audit: type=1400 audit(1781934560.355:3344): avc: denied { write } for pid=17299 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.650110][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3835'. [ 489.662671][T17303] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3835'. [ 489.687331][T17316] 9pnet: p9_errstr2errno: server reported unknown error [ 489.714588][T17321] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3842'. [ 490.487095][ T28] audit: type=1326 audit(1781934561.364:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17341 comm="syz.6.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 490.583359][ T28] audit: type=1326 audit(1781934561.384:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17341 comm="syz.6.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 490.617969][ T28] audit: type=1326 audit(1781934561.384:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17341 comm="syz.6.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 490.681736][ T28] audit: type=1326 audit(1781934561.384:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17341 comm="syz.6.3848" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 490.739618][T17356] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3854'. [ 490.828104][T17358] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 491.144325][T17395] pim6reg: entered allmulticast mode [ 491.192674][T17399] hsr0 speed is unknown, defaulting to 1000 [ 492.211052][T17412] loop3: detected capacity change from 0 to 8192 [ 492.248117][T17412] loop3: p1 p2 p3 p4 < > [ 492.252533][T17412] loop3: partition table partially beyond EOD, truncated [ 492.259756][T17412] loop3: p1 start 51379968 is beyond EOD, truncated [ 492.268767][T17412] loop3: p3 size 100663552 extends beyond EOD, truncated [ 492.276597][T17412] loop3: p4 start 32768 is beyond EOD, truncated [ 492.286690][ T2978] loop3: p1 p2 p3 p4 < > [ 492.317750][ T2978] loop3: partition table partially beyond EOD, truncated [ 492.368137][ T2978] loop3: p1 start 51379968 is beyond EOD, truncated [ 492.415012][ T2978] loop3: p3 size 100663552 extends beyond EOD, truncated [ 492.456812][ T2978] loop3: p4 start 32768 is beyond EOD, truncated [ 492.950749][T17440] random: crng reseeded on system resumption [ 492.982062][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 492.997692][ T4067] udevd[4067]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 493.098047][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 493.108978][ T4067] udevd[4067]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 493.581968][T17482] tipc: Started in network mode [ 493.587064][T17482] tipc: Node identity 7f000001, cluster identity 4711 [ 493.595452][T17482] tipc: Enabled bearer , priority 10 [ 494.232064][ T28] kauditd_printk_skb: 255 callbacks suppressed [ 494.232088][ T28] audit: type=1400 audit(1781934565.083:3604): avc: denied { read } for pid=17504 comm="syz.3.3904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 494.739893][ T4253] tipc: Node number set to 2130706433 [ 496.945564][T17520] __nla_validate_parse: 2 callbacks suppressed [ 496.945581][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3909'. [ 497.010870][T17520] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3909'. [ 498.069229][T17547] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3918'. [ 498.363209][T17564] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3926'. [ 498.538308][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3931'. [ 498.547677][T17577] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3931'. [ 498.806425][T17591] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3938'. [ 498.925170][T17596] IPv6: sit1: Disabled Multicast RS [ 498.946407][T17596] sit1: entered allmulticast mode [ 499.064171][T17594] syzkaller0: entered promiscuous mode [ 499.069846][T17594] syzkaller0: entered allmulticast mode [ 499.083206][T17600] netlink: 136 bytes leftover after parsing attributes in process `syz.9.3943'. [ 499.110982][ T28] audit: type=1400 audit(1781934569.970:3605): avc: denied { create } for pid=17601 comm="syz.9.3944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 499.295379][T17610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.135444][T17622] loop3: detected capacity change from 0 to 1764 [ 500.142405][T17622] iso9660: Unknown parameter 'utfE' [ 500.801874][T17620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3946'. [ 501.314377][T17629] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3950'. [ 501.926532][T17623] hsr0 speed is unknown, defaulting to 1000 [ 502.512886][T17644] __nla_validate_parse: 1 callbacks suppressed [ 502.512904][T17644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3956'. [ 502.556705][T17644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 502.720526][T17642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.754093][T17642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.925845][T17667] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3964'. [ 503.015601][T17673] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3966'. [ 504.469854][T17701] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3978'. [ 504.479289][T17701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3978'. [ 504.489102][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3978'. [ 504.541494][T17706] netlink: 92 bytes leftover after parsing attributes in process `syz.9.3980'. [ 504.569144][T17708] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3982'. [ 504.608400][T17711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3981'. [ 504.670842][T17720] loop6: detected capacity change from 0 to 8192 [ 504.834440][T17720] loop6: p1 p2 p3 p4 < > [ 504.838797][T17720] loop6: partition table partially beyond EOD, truncated [ 504.846044][T17720] loop6: p1 start 51379968 is beyond EOD, truncated [ 504.871335][T17720] loop6: p3 size 100663552 extends beyond EOD, truncated [ 504.884983][T17720] loop6: p4 start 32768 is beyond EOD, truncated [ 506.972024][T17743] loop3: detected capacity change from 0 to 1024 [ 506.983816][T17745] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3994'. [ 507.026383][T17743] EXT4-fs: Ignoring removed bh option [ 507.073712][T17743] EXT4-fs (loop3): stripe (15) is not aligned with cluster size (16), stripe is disabled [ 507.217049][T17743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 507.562546][T16764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.682552][ T28] audit: type=1400 audit(1781934578.546:3606): avc: denied { ioctl } for pid=17758 comm="syz.3.3998" path="socket:[57726]" dev="sockfs" ino=57726 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 507.724358][T17759] loop3: detected capacity change from 0 to 512 [ 507.765440][T17759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 507.800727][T17759] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.3998: corrupted in-inode xattr: invalid ea_ino [ 507.879090][T17759] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 507.879320][T17759] EXT4-fs (loop3): Remounting filesystem read-only [ 507.888642][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 507.888663][ C1] EXT4-fs (loop3): initial error at time 1781934578: ext4_iget_extra_inode:5180: inode 15 [ 507.888697][ C1] EXT4-fs (loop3): last error at time 1781934578: ext4_iget_extra_inode:5180: inode 15 [ 508.003505][T17759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.301322][T17782] netlink: 92 bytes leftover after parsing attributes in process `syz.9.4006'. [ 508.362541][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4007'. [ 508.555651][T16764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.737639][T17792] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4010'. [ 508.779039][T17798] netlink: 'syz.9.4011': attribute type 21 has an invalid length. [ 508.787059][T17798] netlink: 'syz.9.4011': attribute type 6 has an invalid length. [ 508.794922][T17798] netlink: 132 bytes leftover after parsing attributes in process `syz.9.4011'. [ 508.814049][T17798] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4011'. [ 508.917421][T17803] hsr0 speed is unknown, defaulting to 1000 [ 509.000781][T17807] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4015'. [ 509.136052][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4016'. [ 509.146662][T17809] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4016'. [ 509.242316][T17811] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4017'. [ 509.497663][T17819] loop3: detected capacity change from 0 to 8192 [ 509.527826][T17819] loop3: p1 p2 p3 p4 < > [ 509.532201][T17819] loop3: partition table partially beyond EOD, truncated [ 509.539408][T17819] loop3: p1 start 51379968 is beyond EOD, truncated [ 509.546551][T17819] loop3: p3 size 100663552 extends beyond EOD, truncated [ 509.554124][T17819] loop3: p4 start 32768 is beyond EOD, truncated [ 510.193138][T17828] loop3: detected capacity change from 0 to 8192 [ 510.246610][T17828] loop3: p1 p2 p3 p4 < > [ 510.250966][T17828] loop3: partition table partially beyond EOD, truncated [ 510.258145][T17828] loop3: p1 start 51379968 is beyond EOD, truncated [ 510.265256][T17828] loop3: p3 size 100663552 extends beyond EOD, truncated [ 510.273016][T17828] loop3: p4 start 32768 is beyond EOD, truncated [ 510.293986][ T2978] loop3: p1 p2 p3 p4 < > [ 510.444906][ T2978] loop3: partition table partially beyond EOD, truncated [ 510.667504][ T2978] loop3: p1 start 51379968 is beyond EOD, truncated [ 510.682466][T17832] netlink: 'syz.6.4024': attribute type 21 has an invalid length. [ 510.708619][ T2978] loop3: p3 size 100663552 extends beyond EOD, truncated [ 510.726363][T17832] netlink: 'syz.6.4024': attribute type 6 has an invalid length. [ 510.746491][ T2978] loop3: p4 start 32768 is beyond EOD, truncated [ 510.761870][T17832] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4024'. [ 511.331887][T17842] xt_hashlimit: size too large, truncated to 1048576 [ 511.596360][ T28] audit: type=1326 audit(1781934582.455:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.641558][ T28] audit: type=1326 audit(1781934582.485:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.685003][ T28] audit: type=1326 audit(1781934582.485:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.711775][ T28] audit: type=1326 audit(1781934582.485:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b294dbcc7 code=0x7ffc0000 [ 511.738837][ T28] audit: type=1326 audit(1781934582.485:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.876191][ T28] audit: type=1326 audit(1781934582.485:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.967515][ T28] audit: type=1326 audit(1781934582.485:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 511.993092][ T28] audit: type=1326 audit(1781934582.485:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 512.059971][ T28] audit: type=1326 audit(1781934582.485:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 512.893694][ T28] kauditd_printk_skb: 157 callbacks suppressed [ 512.893710][ T28] audit: type=1326 audit(1781934583.754:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 513.086165][ T28] audit: type=1326 audit(1781934583.754:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 513.296520][ T28] audit: type=1326 audit(1781934583.794:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17851 comm="syz.0.4029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 513.322685][T17878] xt_cgroup: xt_cgroup: no path or classid specified [ 513.347105][T17877] netlink: 'syz.0.4040': attribute type 21 has an invalid length. [ 513.396677][T17879] __nla_validate_parse: 6 callbacks suppressed [ 513.396742][T17879] netlink: 830 bytes leftover after parsing attributes in process `syz.0.4040'. [ 513.397777][T17878] hub 8-0:1.0: USB hub found [ 513.419869][T17878] hub 8-0:1.0: 8 ports detected [ 513.445534][T17877] netlink: 'syz.0.4040': attribute type 6 has an invalid length. [ 513.484176][T17877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4040'. [ 513.722748][T17889] loop6: detected capacity change from 0 to 512 [ 513.768592][T17889] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 513.806130][T17889] EXT4-fs (loop6): orphan file too big: 4294967295 [ 513.814207][T17889] EXT4-fs (loop6): mount failed [ 513.947629][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4046'. [ 513.981821][T17895] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4046'. [ 514.072793][ T28] audit: type=1326 audit(1781934584.934:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.106989][T17901] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4047'. [ 514.145965][ T28] audit: type=1326 audit(1781934584.934:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.172267][ T28] audit: type=1326 audit(1781934584.934:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.198363][ T28] audit: type=1326 audit(1781934584.934:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f7afefabcc7 code=0x7ffc0000 [ 514.226280][ T28] audit: type=1326 audit(1781934584.963:3780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.252766][ T28] audit: type=1326 audit(1781934584.963:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.278617][ T28] audit: type=1326 audit(1781934584.963:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17896 comm="syz.3.4049" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x7ffc0000 [ 514.413514][T17914] vhci_hcd vhci_hcd.0: invalid port number 0 [ 514.424579][T17912] xfrm1: entered allmulticast mode [ 514.641997][T17918] hsr0 speed is unknown, defaulting to 1000 [ 514.664737][T17925] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 514.727998][T17928] hsr0 speed is unknown, defaulting to 1000 [ 514.804945][T17936] netlink: 22 bytes leftover after parsing attributes in process `syz.0.4063'. [ 516.203754][T17972] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4076'. [ 516.343627][T17977] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4078'. [ 518.304808][T17998] SET target dimension over the limit! [ 519.545472][T18000] hsr0 speed is unknown, defaulting to 1000 [ 519.705116][T18010] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4088'. [ 519.838819][T18013] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4089'. [ 519.865491][T18015] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4090'. [ 519.896279][T18019] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4092'. [ 519.922003][T18019] bond0: Unable to set peer notification delay as MII monitoring is disabled [ 519.964148][T18023] loop3: detected capacity change from 0 to 512 [ 519.980163][T18023] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 519.991426][T18023] EXT4-fs (loop3): orphan file too big: 4294967295 [ 519.998068][T18023] EXT4-fs (loop3): mount failed [ 520.068165][T18032] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4097'. [ 520.190331][T18038] ipt_ECN: cannot use operation on non-tcp rule [ 520.506247][T18046] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4101'. [ 520.545595][T18048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.584611][T18048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.925585][T18055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4103'. [ 521.221249][T18068] ipvlan2: entered promiscuous mode [ 521.227883][T18068] bridge0: port 2(ipvlan2) entered blocking state [ 521.244884][T18068] bridge0: port 2(ipvlan2) entered disabled state [ 521.253313][T18068] ipvlan2: entered allmulticast mode [ 521.258803][T18068] bridge0: entered allmulticast mode [ 521.278079][T18068] ipvlan2: left allmulticast mode [ 521.306794][T18068] bridge0: left allmulticast mode [ 521.636578][T18079] sctp: [Deprecated]: syz.0.4113 (pid 18079) Use of struct sctp_assoc_value in delayed_ack socket option. [ 521.636578][T18079] Use struct sctp_sack_info instead [ 521.668853][T18081] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4114'. [ 521.762368][T18092] syzkaller0: entered promiscuous mode [ 521.768087][T18092] syzkaller0: entered allmulticast mode [ 521.814268][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 521.814283][ T28] audit: type=1326 audit(1781934592.670:3846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 521.883754][ T28] audit: type=1326 audit(1781934592.710:3847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 522.152027][ T28] audit: type=1326 audit(1781934592.710:3848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 522.258460][ T28] audit: type=1326 audit(1781934592.710:3849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f898ba1bcc7 code=0x7ffc0000 [ 522.309100][ T28] audit: type=1326 audit(1781934592.710:3850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.214589][ T28] audit: type=1326 audit(1781934592.710:3851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.513232][ T28] audit: type=1326 audit(1781934592.710:3852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.539214][ T28] audit: type=1326 audit(1781934592.710:3853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.544354][T18111] 9pnet_fd: Insufficient options for proto=fd [ 523.587570][ T28] audit: type=1326 audit(1781934592.710:3854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.613317][ T28] audit: type=1326 audit(1781934592.710:3855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18095 comm="syz.1.4121" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 523.808378][T18119] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4129'. [ 523.956930][T18116] hsr0 speed is unknown, defaulting to 1000 [ 526.979915][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 526.979928][ T28] audit: type=1326 audit(1781934597.808:3916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.022319][T18158] netlink: 92 bytes leftover after parsing attributes in process `syz.3.4142'. [ 527.071816][ T28] audit: type=1326 audit(1781934597.808:3917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.097840][ T28] audit: type=1326 audit(1781934597.838:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.124195][ T28] audit: type=1326 audit(1781934597.838:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.150432][ T28] audit: type=1326 audit(1781934597.838:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f898ba1bcc7 code=0x7ffc0000 [ 527.179308][ T28] audit: type=1326 audit(1781934597.838:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.205314][ T28] audit: type=1326 audit(1781934597.838:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.231308][ T28] audit: type=1326 audit(1781934597.878:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.258048][ T28] audit: type=1326 audit(1781934597.878:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.296620][ T28] audit: type=1326 audit(1781934597.878:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18149 comm="syz.1.4140" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 527.399977][T18163] hsr0 speed is unknown, defaulting to 1000 [ 527.551164][T18171] loop6: detected capacity change from 0 to 128 [ 527.587889][T18172] hsr0 speed is unknown, defaulting to 1000 [ 527.589160][T18171] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 527.920824][T18171] ext4 filesystem being mounted at /191/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 529.398880][T14848] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 530.035246][T18212] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4157'. [ 530.354460][T18217] hsr0 speed is unknown, defaulting to 1000 [ 531.497225][T18225] pimreg: entered allmulticast mode [ 531.517662][T18224] pimreg: left allmulticast mode [ 531.778830][T18233] loop6: detected capacity change from 0 to 512 [ 531.816196][T18233] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.849489][T18230] hsr0 speed is unknown, defaulting to 1000 [ 531.859310][T18233] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.998096][T18233] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.021841][T18237] hsr0 speed is unknown, defaulting to 1000 [ 532.095346][T18233] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.129021][T18233] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.173637][T18246] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.202028][T18233] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.237828][T18246] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.262991][T18233] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.277222][ T28] kauditd_printk_skb: 115 callbacks suppressed [ 532.277238][ T28] audit: type=1400 audit(1781934603.115:4041): avc: denied { read } for pid=18231 comm="syz.6.4163" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 532.330994][T18253] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.346654][T18246] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.364328][ T28] audit: type=1400 audit(1781934603.205:4042): avc: denied { write } for pid=18231 comm="syz.6.4163" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 532.394636][T18233] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.414457][T18253] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.446956][T18246] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.562532][ T28] audit: type=1400 audit(1781934603.415:4043): avc: denied { watch watch_reads } for pid=18231 comm="syz.6.4163" path="/196/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 532.564006][T18253] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.4163: corrupted xattr block 13: invalid checksum [ 532.587638][ T28] audit: type=1400 audit(1781934603.415:4044): avc: denied { execute } for pid=18231 comm="syz.6.4163" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 532.646146][T18253] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop6 ino=15 [ 532.655689][ T28] audit: type=1400 audit(1781934603.505:4045): avc: denied { open } for pid=18231 comm="syz.6.4163" path="/196/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 533.124054][T18236] EXT4-fs error (device loop6): ext4_validate_block_bitmap:423: comm ext4lazyinit: bg 0: bad block bitmap checksum [ 533.629748][T14848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.978548][T18268] hsr0 speed is unknown, defaulting to 1000 [ 534.601396][ T28] audit: type=1326 audit(1781934605.354:4046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.1.4173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 534.650966][T18275] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4177'. [ 535.071332][ T28] audit: type=1326 audit(1781934605.354:4047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.1.4173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 535.121399][ T28] audit: type=1326 audit(1781934605.354:4048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.1.4173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 535.260829][ T28] audit: type=1326 audit(1781934605.354:4049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.1.4173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 535.286373][ T28] audit: type=1326 audit(1781934605.454:4050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18265 comm="syz.1.4173" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 535.540275][T18294] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4182'. [ 535.625764][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 535.666643][T18297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4184'. [ 535.926527][T18315] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4192'. [ 535.937446][T18315] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4192'. [ 535.947870][T18315] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4192'. [ 535.969512][T18319] hsr0 speed is unknown, defaulting to 1000 [ 536.017555][T18318] loop3: detected capacity change from 0 to 512 [ 536.037721][T18318] FAT-fs (loop3): Directory bread(block 199916) failed [ 536.048656][T18318] FAT-fs (loop3): Directory bread(block 199917) failed [ 536.072863][T18318] FAT-fs (loop3): Directory bread(block 199918) failed [ 536.082906][T18318] FAT-fs (loop3): Directory bread(block 199919) failed [ 536.089104][T18329] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4195'. [ 536.090324][T18318] FAT-fs (loop3): Directory bread(block 199920) failed [ 536.109387][T18318] FAT-fs (loop3): Directory bread(block 199921) failed [ 536.116337][T18318] FAT-fs (loop3): Directory bread(block 199922) failed [ 536.123356][T18318] FAT-fs (loop3): Directory bread(block 199923) failed [ 536.134732][T18330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.147116][T18330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.165939][T18330] ±ÿ: renamed from lo (while UP) [ 536.171790][T18318] FAT-fs (loop3): Directory bread(block 199916) failed [ 536.180386][T18318] FAT-fs (loop3): Directory bread(block 199917) failed [ 536.382963][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'. [ 536.393398][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'. [ 536.482463][T18349] xt_hashlimit: size too large, truncated to 1048576 [ 536.638227][T18363] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_0, syncid = 4, id = 0 [ 536.651680][T18366] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 536.745711][T18369] hsr0 speed is unknown, defaulting to 1000 [ 537.827438][T18385] bridge0: port 3(syz_tun) entered disabled state [ 537.834085][T18385] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.857261][ T28] kauditd_printk_skb: 170 callbacks suppressed [ 537.857287][ T28] audit: type=1400 audit(1781934608.703:4221): avc: denied { write } for pid=18392 comm="syz.3.4217" name="file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 537.886022][ T28] audit: type=1400 audit(1781934608.703:4222): avc: denied { open } for pid=18392 comm="syz.3.4217" path="/71/file0" dev="tmpfs" ino=391 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 537.917853][T18393] pimreg: tun_chr_ioctl cmd 1074025677 [ 537.927792][T18393] pimreg: linktype set to 768 [ 537.950102][T18393] loop3: detected capacity change from 0 to 512 [ 537.967459][T18393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 537.978029][ T28] audit: type=1400 audit(1781934608.813:4223): avc: denied { mounton } for pid=18392 comm="syz.3.4217" path="/file0" dev="ramfs" ino=60051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 538.016699][T18393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 538.033280][T18393] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.045297][T18393] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 538.262802][ T28] audit: type=1107 audit(1781934609.113:4224): pid=18401 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 538.335462][T18406] tipc: Started in network mode [ 538.343186][T18406] tipc: Node identity ac14140f, cluster identity 4711 [ 538.357987][T18406] tipc: New replicast peer: 255.255.255.255 [ 538.364249][T18406] tipc: Enabled bearer , priority 10 [ 538.461335][T18419] hsr0 speed is unknown, defaulting to 1000 [ 538.653882][T18423] loop3: detected capacity change from 0 to 512 [ 538.685816][T18423] ext3: Unknown parameter 'mask' [ 538.907686][ T28] audit: type=1326 audit(1781934609.753:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18422 comm="syz.3.4227" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7afeface59 code=0x0 [ 539.025337][T18435] loop3: detected capacity change from 0 to 1764 [ 539.380913][ T4229] tipc: Node number set to 2886997007 [ 539.749615][T18455] tipc: Enabling of bearer rejected, already enabled [ 539.948420][T18461] hsr0 speed is unknown, defaulting to 1000 [ 540.491877][ T28] audit: type=1326 audit(1781934611.342:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.9.4241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa71cce59 code=0x7ffc0000 [ 540.719766][ T28] audit: type=1326 audit(1781934611.362:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.9.4241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa71cce59 code=0x7ffc0000 [ 540.834470][ T28] audit: type=1326 audit(1781934611.362:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.9.4241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa71cce59 code=0x7ffc0000 [ 540.914518][T18485] __nla_validate_parse: 9 callbacks suppressed [ 540.914568][T18485] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4247'. [ 540.961094][ T28] audit: type=1326 audit(1781934611.362:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.9.4241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fcfa71cbcc7 code=0x7ffc0000 [ 541.086585][ T28] audit: type=1326 audit(1781934611.372:4230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18465 comm="syz.9.4241" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfa71cce59 code=0x7ffc0000 [ 541.340110][T18498] netlink: 'syz.6.4252': attribute type 1 has an invalid length. [ 541.369072][T18506] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4254'. [ 541.378470][T18498] netlink: 'syz.6.4252': attribute type 2 has an invalid length. [ 541.402074][T18498] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4252'. [ 541.569026][T18487] netlink: 'syz.0.4248': attribute type 2 has an invalid length. [ 541.573626][T18513] pim6reg: entered allmulticast mode [ 541.641198][T18519] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4258'. [ 541.678217][T18521] hsr0 speed is unknown, defaulting to 1000 [ 541.695333][T18503] loop3: detected capacity change from 0 to 1764 [ 541.727060][T18503] iso9660: Unknown parameter 'overƒiderockperm' [ 541.871464][T18529] FAULT_INJECTION: forcing a failure. [ 541.871464][T18529] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 541.885051][T18529] CPU: 0 UID: 0 PID: 18529 Comm: syz.3.4263 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 541.885080][T18529] Tainted: [W]=WARN [ 541.885086][T18529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 541.885098][T18529] Call Trace: [ 541.885105][T18529] [ 541.885113][T18529] __dump_stack+0x1d/0x30 [ 541.885134][T18529] dump_stack_lvl+0x95/0xd0 [ 541.885206][T18529] dump_stack+0x15/0x1b [ 541.885224][T18529] should_fail_ex+0x25e/0x270 [ 541.885264][T18529] should_fail+0xb/0x20 [ 541.885281][T18529] should_fail_usercopy+0x1a/0x20 [ 541.885306][T18529] _copy_from_iter+0xcc/0xe70 [ 541.885333][T18529] ? __alloc_skb+0x511/0x6f0 [ 541.885415][T18529] ? __alloc_skb+0x205/0x6f0 [ 541.885444][T18529] netlink_sendmsg+0x4a4/0x6f0 [ 541.885476][T18529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.885515][T18529] ____sys_sendmsg+0x532/0x580 [ 541.885598][T18529] ___sys_sendmsg+0x195/0x1e0 [ 541.885628][T18529] __x64_sys_sendmsg+0xd4/0x160 [ 541.885648][T18529] x64_sys_call+0x194c/0x3020 [ 541.885680][T18529] do_syscall_64+0x136/0x3c0 [ 541.885705][T18529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.885727][T18529] RIP: 0033:0x7f7afeface59 [ 541.885744][T18529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.885801][T18529] RSP: 002b:00007f7afda07028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.885819][T18529] RAX: ffffffffffffffda RBX: 00007f7aff225fa0 RCX: 00007f7afeface59 [ 541.885834][T18529] RDX: 0000000008000002 RSI: 0000200000000180 RDI: 0000000000000005 [ 541.885847][T18529] RBP: 00007f7afda07090 R08: 0000000000000000 R09: 0000000000000000 [ 541.885859][T18529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.885907][T18529] R13: 00007f7aff226038 R14: 00007f7aff225fa0 R15: 00007ffc292abb88 [ 541.885925][T18529] [ 542.415703][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 542.424957][T18539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4265'. [ 543.100409][ T35] IPVS: starting estimator thread 0... [ 543.185707][T18551] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4270'. [ 543.200621][T18545] IPVS: using max 2544 ests per chain, 127200 per kthread [ 543.324521][T18559] hsr0 speed is unknown, defaulting to 1000 [ 543.360943][T18564] loop0: detected capacity change from 512 to 511 [ 543.380687][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 543.380702][ T28] audit: type=1107 audit(1781934614.221:4292): pid=18563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 543.611446][T18580] netlink: 'syz.9.4282': attribute type 10 has an invalid length. [ 544.017395][T18564] loop6: detected capacity change from 0 to 4096 [ 544.284588][T18604] netlink: 'syz.3.4290': attribute type 1 has an invalid length. [ 544.378790][T18607] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65525 sclass=netlink_xfrm_socket pid=18607 comm=syz.3.4291 [ 544.401296][ T28] audit: type=1400 audit(1781934615.220:4293): avc: denied { create } for pid=18606 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=ieee802154_socket permissive=1 [ 544.423054][ T28] audit: type=1400 audit(1781934615.220:4294): avc: denied { create } for pid=18606 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 544.444990][ T28] audit: type=1400 audit(1781934615.220:4295): avc: denied { write } for pid=18606 comm="syz.3.4291" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 544.604911][T18564] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.781454][ T28] audit: type=1400 audit(1781934615.620:4296): avc: denied { write } for pid=18563 comm="syz.6.4276" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 544.819923][T18614] tipc: Enabling of bearer rejected, already enabled [ 544.882110][T18618] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4294'. [ 544.925224][ T28] audit: type=1400 audit(1781934615.710:4297): avc: denied { accept } for pid=18617 comm="syz.1.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 545.033276][T18624] hsr0 speed is unknown, defaulting to 1000 [ 545.040411][T14848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.226555][T18659] hsr0 speed is unknown, defaulting to 1000 [ 546.454581][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4309'. [ 546.550950][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4311'. [ 546.585719][T18665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4311'. [ 546.633693][T18667] FAULT_INJECTION: forcing a failure. [ 546.633693][T18667] name failslab, interval 1, probability 0, space 0, times 0 [ 546.663029][T18667] CPU: 0 UID: 0 PID: 18667 Comm: syz.6.4312 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 546.663062][T18667] Tainted: [W]=WARN [ 546.663070][T18667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 546.663082][T18667] Call Trace: [ 546.663089][T18667] [ 546.663098][T18667] __dump_stack+0x1d/0x30 [ 546.663180][T18667] dump_stack_lvl+0x95/0xd0 [ 546.663236][T18667] dump_stack+0x15/0x1b [ 546.663255][T18667] should_fail_ex+0x25e/0x270 [ 546.663341][T18667] should_failslab+0x8c/0xb0 [ 546.663422][T18667] __kmalloc_node_noprof+0xc8/0x550 [ 546.663446][T18667] ? crypto_create_tfm_node+0x5b/0x230 [ 546.663478][T18667] crypto_create_tfm_node+0x5b/0x230 [ 546.663528][T18667] crypto_spawn_tfm2+0x43/0x80 [ 546.663551][T18667] aead_init_geniv+0x71/0xe0 [ 546.663574][T18667] ? __pfx_aead_init_geniv+0x10/0x10 [ 546.663609][T18667] crypto_aead_init_tfm+0xb7/0xd0 [ 546.663629][T18667] crypto_create_tfm_node+0xcf/0x230 [ 546.663656][T18667] crypto_alloc_tfm_node+0xb8/0x280 [ 546.663683][T18667] crypto_alloc_aead+0x2d/0x40 [ 546.663706][T18667] esp_init_state+0x3ec/0xa00 [ 546.663777][T18667] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 546.663800][T18667] ? irqentry_exit+0x7d/0x610 [ 546.663886][T18667] __xfrm_init_state+0x6b9/0xae0 [ 546.663912][T18667] xfrm_init_state+0x1e/0x80 [ 546.663951][T18667] pfkey_add+0xfa3/0x1290 [ 546.663984][T18667] pfkey_sendmsg+0x839/0x970 [ 546.664021][T18667] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 546.664105][T18667] ____sys_sendmsg+0x532/0x580 [ 546.664131][T18667] ___sys_sendmsg+0x195/0x1e0 [ 546.664241][T18667] __x64_sys_sendmsg+0xd4/0x160 [ 546.664274][T18667] x64_sys_call+0x194c/0x3020 [ 546.664301][T18667] do_syscall_64+0x136/0x3c0 [ 546.664381][T18667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.664401][T18667] RIP: 0033:0x7efde891ce59 [ 546.664415][T18667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.664432][T18667] RSP: 002b:00007efde736f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 546.664449][T18667] RAX: ffffffffffffffda RBX: 00007efde8b95fa0 RCX: 00007efde891ce59 [ 546.664497][T18667] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 546.664566][T18667] RBP: 00007efde736f090 R08: 0000000000000000 R09: 0000000000000000 [ 546.664580][T18667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 546.664593][T18667] R13: 00007efde8b96038 R14: 00007efde8b95fa0 R15: 00007ffc7a2074a8 [ 546.664614][T18667] [ 547.061195][T18674] netlink: 68 bytes leftover after parsing attributes in process `syz.9.4315'. [ 547.250702][T18682] xt_connbytes: Forcing CT accounting to be enabled [ 547.971923][T18676] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4316'. [ 548.850204][T18690] loop3: detected capacity change from 0 to 2048 [ 548.923740][ T28] audit: type=1400 audit(1781934619.758:4298): avc: denied { read } for pid=18687 comm="syz.3.4318" path="socket:[60797]" dev="sockfs" ino=60797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 549.784782][T18698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=18698 comm=syz.3.4321 [ 549.806033][T18698] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=18698 comm=syz.3.4321 [ 549.983805][ T28] audit: type=1400 audit(1781934620.828:4299): avc: denied { write } for pid=18706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.009985][T18723] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4327'. [ 550.019171][T18724] bridge0: port 4(batadv1) entered blocking state [ 550.019203][T18724] bridge0: port 4(batadv1) entered disabled state [ 550.019266][T18724] batadv1: entered allmulticast mode [ 550.019674][T18724] batadv1: entered promiscuous mode [ 550.064245][ T28] audit: type=1400 audit(1781934620.918:4300): avc: denied { write } for pid=18728 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 550.151620][T18734] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4329'. [ 550.204737][T18702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4323'. [ 550.240533][ T28] audit: type=1326 audit(1781934621.088:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 550.310872][T18746] loop6: detected capacity change from 0 to 512 [ 550.324642][ T28] audit: type=1326 audit(1781934621.088:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 550.388228][T18746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.402880][ T28] audit: type=1326 audit(1781934621.088:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 550.412778][T18746] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.502969][ T28] audit: type=1326 audit(1781934621.088:4304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 550.528964][T16973] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 550.538276][T16973] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 550.615355][ T28] audit: type=1326 audit(1781934621.118:4305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1b294dbcc7 code=0x7ffc0000 [ 550.691668][ T28] audit: type=1326 audit(1781934621.118:4306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 550.770174][ T28] audit: type=1326 audit(1781934621.118:4307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18742 comm="syz.0.4331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b294dce59 code=0x7ffc0000 [ 551.027508][T18786] tipc: Started in network mode [ 551.032599][T18786] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 551.048216][T18786] tipc: Enabling of bearer rejected, failed to enable media [ 551.076197][T18788] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4338'. [ 551.278725][T14848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.506586][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4343'. [ 551.516556][T18802] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4343'. [ 552.658439][T18834] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 552.680341][T18834] ip6gretap1: entered promiscuous mode [ 553.405160][T18861] tipc: Started in network mode [ 553.419686][T18861] tipc: Node identity ac14140f, cluster identity 4711 [ 553.426960][T18861] tipc: New replicast peer: 255.255.255.255 [ 553.433139][T18861] tipc: Enabled bearer , priority 10 [ 555.630782][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 555.630796][ T28] audit: type=1400 audit(1781934626.475:4365): avc: denied { read write } for pid=18893 comm="syz.3.4365" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 555.678338][ T28] audit: type=1400 audit(1781934626.475:4366): avc: denied { open } for pid=18893 comm="syz.3.4365" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 555.974461][ T35] tipc: Node number set to 2886997007 [ 555.980079][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4359'. [ 555.989869][T18879] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4359'. [ 555.999294][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 556.018179][T18890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4364'. [ 556.097251][T18907] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4372'. [ 557.384196][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4377'. [ 557.384547][T18943] 9p: Bad value for 'wfdno' [ 557.417219][T18930] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4377'. [ 557.543337][T18950] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4383'. [ 557.682602][T18921] loop3: detected capacity change from 0 to 4096 [ 557.691915][T18956] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4385'. [ 557.750898][T18921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 558.267790][T16764] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.457354][T18980] tipc: New replicast peer: 255.255.255.255 [ 558.463499][T18980] tipc: Enabled bearer , priority 10 [ 558.823942][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4396'. [ 558.970143][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4396'. [ 559.872041][ T28] audit: type=1400 audit(1781934630.713:4367): avc: denied { mount } for pid=18996 comm="syz.3.4397" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 560.118006][ T3537] tipc: Node number set to 1 [ 560.494706][T19006] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4398'. [ 560.965470][T19022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4401'. [ 560.992727][T19023] loop3: detected capacity change from 0 to 128 [ 561.032706][T19023] loop3: detected capacity change from 0 to 1764 [ 561.197032][T19034] x_tables: ip6_tables: DNPT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 561.245466][ T28] audit: type=1400 audit(1781934632.083:4368): avc: denied { setattr } for pid=19032 comm="syz.0.4407" name="RAWv6" dev="sockfs" ino=62437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 561.309399][ T28] audit: type=1400 audit(1781934632.133:4369): avc: denied { append } for pid=19028 comm="syz.9.4406" name="file0" dev="tmpfs" ino=2468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 561.522777][ T28] audit: type=1400 audit(1781934632.363:4370): avc: denied { ioctl } for pid=19044 comm="syz.3.4411" path="socket:[62469]" dev="sockfs" ino=62469 ioctlcmd=0x9436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 561.577911][T19054] tipc: Enabling of bearer rejected, already enabled [ 561.578300][T19045] loop3: detected capacity change from 0 to 1764 [ 561.618365][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'. [ 561.630071][T19057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'. [ 561.664531][T19062] loop6: detected capacity change from 0 to 256 [ 561.713394][ T28] audit: type=1400 audit(1781934632.553:4371): avc: denied { mount } for pid=19061 comm="syz.6.4418" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 561.736205][T19058] tipc: Enabling of bearer rejected, already enabled [ 561.839909][T19065] hsr0 speed is unknown, defaulting to 1000 [ 561.967751][T19085] loop3: detected capacity change from 0 to 128 [ 562.007431][T19087] tipc: Started in network mode [ 562.012471][T19087] tipc: Node identity ac14140f, cluster identity 4711 [ 562.019763][T19087] tipc: New replicast peer: 255.255.255.255 [ 562.056395][T19087] tipc: Enabled bearer , priority 10 [ 562.220811][T19085] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 562.316920][T19085] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 562.433665][ T28] audit: type=1400 audit(1781934633.272:4372): avc: denied { write } for pid=19084 comm="syz.3.4426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 562.579513][T19085] support for cryptoloop has been removed. Use dm-crypt instead. [ 562.594168][ T28] audit: type=1400 audit(1781934633.302:4373): avc: denied { ioctl } for pid=19084 comm="syz.3.4426" path="/104/file1/file1" dev="loop3" ino=12 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 562.746396][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 1024 [ 562.840484][ T28] audit: type=1400 audit(1781934633.362:4374): avc: denied { write } for pid=19084 comm="syz.3.4426" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 562.878382][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 8192 [ 562.953588][T16764] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 562.972409][ T28] audit: type=1400 audit(1781934633.372:4375): avc: denied { mounton } for pid=19084 comm="syz.3.4426" path="/104/file1/bus" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 563.000335][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'. [ 563.018021][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 1024 [ 563.046471][T19107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4431'. [ 563.064050][ T28] audit: type=1400 audit(1781934633.402:4376): avc: denied { listen } for pid=19098 comm="syz.6.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 563.086460][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 8192 [ 563.102104][ T35] tipc: Node number set to 2886997007 [ 563.118340][T19109] netlink: 'syz.0.4432': attribute type 1 has an invalid length. [ 563.131346][T16764] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 563.149072][ T28] audit: type=1400 audit(1781934633.412:4377): avc: denied { accept } for pid=19098 comm="syz.6.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 563.178837][T19109] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 563.195959][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 1024 [ 563.269108][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 8192 [ 563.439915][T16764] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 563.460977][T16764] EXT4-fs error (device loop3): ext4_readdir:225: inode #11: comm syz-executor: path /104/file1/lost+found: directory fails checksum at offset 1024 [ 563.606272][T19124] 9p: Bad value for 'wfdno' [ 564.068030][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4443'. [ 564.079054][T19141] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4443'. [ 564.134587][T16764] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 564.144750][T16968] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.217179][T16968] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.276124][T16968] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.333558][T16968] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.468326][T16968] bridge_slave_1: left allmulticast mode [ 564.474355][T16968] bridge_slave_1: left promiscuous mode [ 564.488536][T16968] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.524309][T16968] bridge_slave_0: left allmulticast mode [ 564.536491][T16968] bridge_slave_0: left promiscuous mode [ 564.554821][T16968] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.752731][T16968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.908267][T16968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.923477][T16968] bond0 (unregistering): Released all slaves [ 564.939547][T16968] bond1 (unregistering): Released all slaves [ 565.271092][ T3017] 8021q: adding VLAN 0 to HW filter on device eth13 [ 565.333079][T16968] tipc: Disabling bearer [ 565.364385][T16968] tipc: Left network mode [ 565.442256][T16968] hsr_slave_0: left promiscuous mode [ 565.516706][T16968] hsr_slave_1: left promiscuous mode [ 565.558462][T16968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.620176][T19181] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4451'. [ 565.670887][T16968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.705087][T16968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.735378][T16968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.770899][T16968] veth1_macvtap: left promiscuous mode [ 565.794880][T16968] veth0_macvtap: left promiscuous mode [ 565.813013][T16968] veth1_vlan: left promiscuous mode [ 565.827244][T16968] veth0_vlan: left promiscuous mode [ 566.029972][T16968] team0 (unregistering): Port device team_slave_1 removed [ 566.064119][T16968] team0 (unregistering): Port device team_slave_0 removed [ 566.199172][T19181] bridge0: port 3(gretap0) entered blocking state [ 566.207142][T19181] bridge0: port 3(gretap0) entered disabled state [ 566.238654][T19181] gretap0: entered allmulticast mode [ 566.282176][T19181] gretap0: entered promiscuous mode [ 566.302281][T19181] bridge0: port 3(gretap0) entered blocking state [ 566.308820][T19181] bridge0: port 3(gretap0) entered forwarding state [ 566.334106][T19172] hsr0 speed is unknown, defaulting to 1000 [ 566.413092][T19159] hsr0 speed is unknown, defaulting to 1000 [ 566.606136][T19159] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.633099][T19208] 9p: Bad value for 'wfdno' [ 566.646937][T19159] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.655369][T19159] bridge_slave_0: entered allmulticast mode [ 566.662306][T19159] bridge_slave_0: entered promiscuous mode [ 566.669516][ T3017] 8021q: adding VLAN 0 to HW filter on device eth14 [ 566.682408][T19159] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.689647][T19159] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.697208][T19159] bridge_slave_1: entered allmulticast mode [ 566.703908][T19159] bridge_slave_1: entered promiscuous mode [ 566.715295][ T28] kauditd_printk_skb: 169 callbacks suppressed [ 566.715309][ T28] audit: type=1107 audit(1781934637.551:4547): pid=19213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='^ñ¸É×èÙB3¶Êܑ݅؂bCŒ+fx:£Rê¾h|' [ 566.736814][T19212] loop6: detected capacity change from 0 to 4096 [ 566.748819][T19159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.759869][T19159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.796284][T19212] EXT4-fs: Ignoring removed orlov option [ 566.796393][T19159] team0: Port device team_slave_0 added [ 566.809289][T16968] IPVS: stop unused estimator thread 0... [ 566.824905][T19159] team0: Port device team_slave_1 added [ 566.842422][T19212] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 566.877704][T19159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.898381][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.925025][T19159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.936874][T19159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.944029][T19159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.011696][T19159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.022608][T19212] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.035700][ T28] audit: type=1400 audit(1781934637.870:4548): avc: denied { mount } for pid=19211 comm="syz.6.4454" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 567.180168][T19159] hsr_slave_0: entered promiscuous mode [ 567.255383][T19159] hsr_slave_1: entered promiscuous mode [ 567.306779][T19159] debugfs: 'hsr0' already exists in 'hsr' [ 567.354354][T14848] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.366935][T19159] Cannot create hsr debugfs directory [ 568.013527][ T28] audit: type=1400 audit(1781934637.880:4549): avc: denied { write } for pid=19211 comm="syz.6.4454" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.035290][ T28] audit: type=1400 audit(1781934637.880:4550): avc: denied { add_name } for pid=19211 comm="syz.6.4454" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.056128][ T28] audit: type=1400 audit(1781934637.880:4551): avc: denied { create } for pid=19211 comm="syz.6.4454" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 568.122741][ T28] audit: type=1400 audit(1781934637.880:4552): avc: denied { append } for pid=19211 comm="syz.6.4454" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.224783][ T28] audit: type=1400 audit(1781934637.880:4553): avc: denied { open } for pid=19211 comm="syz.6.4454" path="/252/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.316535][ T28] audit: type=1400 audit(1781934637.880:4554): avc: denied { read write } for pid=19211 comm="syz.6.4454" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.402527][T19244] mmap: syz.0.4458 (19244): VmData 17584128 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 568.420470][T19159] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 568.448552][ T28] audit: type=1400 audit(1781934637.880:4555): avc: denied { map } for pid=19211 comm="syz.6.4454" path="/252/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.487017][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 568.517364][T19159] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 568.546212][ T28] audit: type=1400 audit(1781934637.880:4556): avc: denied { execute } for pid=19211 comm="syz.6.4454" path="/252/file0/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 568.579045][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 568.974840][T19159] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 569.101448][T19263] 9p: Bad value for 'wfdno' [ 569.344725][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 569.358433][T19159] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 569.368098][T19159] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 569.376590][ T3017] 8021q: adding VLAN 0 to HW filter on device eth15 [ 569.428011][T19159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.443869][T19159] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.486910][T16970] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.494014][T16970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 569.518771][T16970] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.525882][T16970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 569.587664][T19275] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4467'. [ 569.626288][T19286] tipc: Enabling of bearer rejected, already enabled [ 569.666543][ T3017] 8021q: adding VLAN 0 to HW filter on device eth16 [ 569.687906][T19299] netlink: 'syz.6.4470': attribute type 2 has an invalid length. [ 569.719752][T19299] 0: entered promiscuous mode [ 569.775045][T19159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.881118][T19331] FAULT_INJECTION: forcing a failure. [ 569.881118][T19331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.895863][T19331] CPU: 0 UID: 0 PID: 19331 Comm: syz.1.4472 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 569.895892][T19331] Tainted: [W]=WARN [ 569.895961][T19331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 569.895974][T19331] Call Trace: [ 569.895981][T19331] [ 569.895989][T19331] __dump_stack+0x1d/0x30 [ 569.896088][T19331] dump_stack_lvl+0x95/0xd0 [ 569.896107][T19331] dump_stack+0x15/0x1b [ 569.896122][T19331] should_fail_ex+0x25e/0x270 [ 569.896232][T19331] should_fail+0xb/0x20 [ 569.896251][T19331] should_fail_usercopy+0x1a/0x20 [ 569.896279][T19331] _copy_from_user+0x1c/0xb0 [ 569.896310][T19331] ___sys_sendmsg+0xc1/0x1e0 [ 569.896414][T19331] __x64_sys_sendmsg+0xd4/0x160 [ 569.896483][T19331] x64_sys_call+0x194c/0x3020 [ 569.896507][T19331] do_syscall_64+0x136/0x3c0 [ 569.896563][T19331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.896581][T19331] RIP: 0033:0x7f898ba1ce59 [ 569.896597][T19331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 569.896616][T19331] RSP: 002b:00007f898a477028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.896645][T19331] RAX: ffffffffffffffda RBX: 00007f898bc95fa0 RCX: 00007f898ba1ce59 [ 569.896736][T19331] RDX: 0000000020040051 RSI: 0000200000002ac0 RDI: 0000000000000003 [ 569.896747][T19331] RBP: 00007f898a477090 R08: 0000000000000000 R09: 0000000000000000 [ 569.896759][T19331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.896806][T19331] R13: 00007f898bc96038 R14: 00007f898bc95fa0 R15: 00007ffc1bd3c1c8 [ 569.896827][T19331] [ 570.124495][T19159] veth0_vlan: entered promiscuous mode [ 570.135069][T19159] veth1_vlan: entered promiscuous mode [ 570.248487][T19159] veth0_macvtap: entered promiscuous mode [ 570.256148][T19159] veth1_macvtap: entered promiscuous mode [ 570.266794][T19159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.275631][T19159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.298015][T16963] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.307020][T16963] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.597235][T16963] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.645983][T16963] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.755448][T19346] tipc: Enabling of bearer rejected, already enabled [ 571.141156][T19356] loop7: detected capacity change from 0 to 512 [ 571.173137][T19356] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 571.198460][T19356] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 571.216142][T19359] tipc: Enabling of bearer rejected, already enabled [ 571.226785][T19356] EXT4-fs (loop7): orphan cleanup on readonly fs [ 571.238065][T19356] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 571.307523][T19356] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 571.334154][T19365] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 571.348597][T19356] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.4446: bg 0: block 15: invalid block bitmap [ 571.371615][T19356] loop7: lost filesystem error report for type 5 error -117 [ 571.371766][T19356] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 571.379126][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 571.379142][ C0] EXT4-fs (loop7): initial error at time 1781934642: ext4_validate_block_bitmap:432 [ 571.379177][ C0] EXT4-fs (loop7): last error at time 1781934642: ext4_validate_block_bitmap:432 [ 571.452543][T19365] xt_hashlimit: max too large, truncated to 1048576 [ 571.501963][T19356] loop7: lost filesystem error report for type 5 error -117 [ 571.502216][T19356] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.4446: data will be lost [ 571.531816][T19381] netlink: 'syz.9.4480': attribute type 1 has an invalid length. [ 571.585672][T19356] EXT4-fs (loop7): 1 truncate cleaned up [ 571.619456][T19381] bond3: (slave geneve3): making interface the new active one [ 571.631283][T19356] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.660494][T19381] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 571.672663][T19388] syz.0.4483: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 571.693812][T16965] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.705612][T16965] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 571.719315][T19388] CPU: 0 UID: 0 PID: 19388 Comm: syz.0.4483 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 571.719351][T19388] Tainted: [W]=WARN [ 571.719358][T19388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 571.719369][T19388] Call Trace: [ 571.719375][T19388] [ 571.719382][T19388] __dump_stack+0x1d/0x30 [ 571.719469][T19388] dump_stack_lvl+0x95/0xd0 [ 571.719497][T19388] dump_stack+0x15/0x1b [ 571.719520][T19388] warn_alloc+0x145/0x1c0 [ 571.719550][T19388] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 571.719640][T19388] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 571.719669][T19388] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 571.719692][T19388] ? avc_denied+0xe4/0x100 [ 571.719711][T19388] ? slow_avc_audit+0x14c/0x190 [ 571.719810][T19388] ? should_fail_ex+0x30/0x270 [ 571.719841][T19388] vmalloc_user_noprof+0x7d/0xb0 [ 571.719876][T19388] ? xskq_create+0x80/0xe0 [ 571.719914][T19388] xskq_create+0x80/0xe0 [ 571.719950][T19388] xsk_init_queue+0x70/0xb0 [ 571.719976][T19388] xsk_setsockopt+0x471/0x640 [ 571.719998][T19388] ? __pfx_xsk_setsockopt+0x10/0x10 [ 571.720026][T19388] __sys_setsockopt+0x184/0x200 [ 571.720055][T19388] __x64_sys_setsockopt+0x64/0x80 [ 571.720078][T19388] x64_sys_call+0x2327/0x3020 [ 571.720152][T19388] do_syscall_64+0x136/0x3c0 [ 571.720180][T19388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.720203][T19388] RIP: 0033:0x7f1b294dce59 [ 571.720220][T19388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.720306][T19388] RSP: 002b:00007f1b27f2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 571.720329][T19388] RAX: ffffffffffffffda RBX: 00007f1b29755fa0 RCX: 00007f1b294dce59 [ 571.720347][T19388] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000009 [ 571.720362][T19388] RBP: 00007f1b29572e6f R08: 0000000000000004 R09: 0000000000000000 [ 571.720377][T19388] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 571.720390][T19388] R13: 00007f1b29756038 R14: 00007f1b29755fa0 R15: 00007fff65872bf8 [ 571.720492][T19388] [ 571.720512][T19388] Mem-Info: [ 571.950751][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 571.950766][ T28] audit: type=1400 audit(1781934642.778:4621): avc: denied { write } for pid=19377 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 571.951287][T19388] active_anon:32888 inactive_anon:5 isolated_anon:0 [ 571.951287][T19388] active_file:16321 inactive_file:14306 isolated_file:0 [ 571.951287][T19388] unevictable:0 dirty:145 writeback:0 [ 571.951287][T19388] slab_reclaimable:4211 slab_unreclaimable:32606 [ 571.951287][T19388] mapped:30049 shmem:17657 pagetables:3808 [ 571.951287][T19388] sec_pagetables:0 bounce:0 [ 571.951287][T19388] kernel_misc_reclaimable:0 [ 571.951287][T19388] free:1784295 free_pcp:31384 free_cma:0 [ 571.983651][ T28] audit: type=1400 audit(1781934642.818:4622): avc: denied { read write } for pid=19393 comm="syz.1.4486" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 572.050767][T19356] tipc: Started in network mode [ 572.053854][ T28] audit: type=1400 audit(1781934642.818:4623): avc: denied { open } for pid=19393 comm="syz.1.4486" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 572.081815][ T28] audit: type=1400 audit(1781934642.888:4624): avc: denied { map } for pid=19387 comm="syz.0.4483" path="socket:[64186]" dev="sockfs" ino=64186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 572.082334][T19356] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 572.105832][ T28] audit: type=1400 audit(1781934642.888:4625): avc: denied { getopt } for pid=19387 comm="syz.0.4483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 572.114347][T19356] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 572.135904][T19388] Node 0 active_anon:131668kB inactive_anon:20kB active_file:65284kB inactive_file:57224kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120196kB dirty:580kB writeback:0kB shmem:70628kB kernel_stack:5856kB pagetables:15116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 572.161121][T19356] tipc: Enabled bearer , priority 10 [ 572.190764][T19388] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 572.190959][T19388] lowmem_reserve[]: 0 2878 7857 7857 [ 572.191026][T19388] Node 0 DMA32 free:2944156kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947784kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 572.191189][T19388] lowmem_reserve[]: 0 0 4978 4978 [ 572.191239][T19388] Node 0 Normal free:4177664kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:131552kB inactive_anon:20kB active_file:65284kB inactive_file:57224kB unevictable:0kB writepending:580kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:121660kB local_pcp:120820kB free_cma:0kB [ 572.191619][T19388] lowmem_reserve[]: 0 0 0 0 [ 572.191741][T19388] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 572.192675][T19388] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944156kB [ 572.193209][T19388] Node 0 Normal: 4473*4kB (UM) 1652*8kB (UME) 811*16kB (UME) 685*32kB (UME) 467*64kB (UME) 292*128kB (UME) 144*256kB (UM) 105*512kB (U) 39*1024kB (UE) 61*2048kB (UE) 925*4096kB (UM) = 4177556kB [ 572.193755][T19388] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 572.193792][T19388] 48280 total pagecache pages [ 572.193801][T19388] 6 pages in swap cache [ 572.193809][T19388] Free swap = 124972kB [ 572.193829][T19388] Total swap = 124996kB [ 572.193848][T19388] 2097051 pages RAM [ 572.193855][T19388] 0 pages HighMem/MovableOnly [ 572.193870][T19388] 81706 pages reserved [ 572.231444][T19159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.334371][T19392] bond1: invalid ARP target 0.0.0.0 specified for addition [ 572.404798][ T28] audit: type=1400 audit(1781934643.208:4626): avc: denied { create } for pid=19405 comm="syz.7.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 572.417779][T19392] bond1: option arp_ip_target: invalid value (0) [ 572.423758][ T28] audit: type=1400 audit(1781934643.208:4627): avc: denied { bind } for pid=19405 comm="syz.7.4487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 572.476924][ T28] audit: type=1400 audit(1781934643.208:4628): avc: denied { ioctl } for pid=19405 comm="syz.7.4487" path="socket:[64199]" dev="sockfs" ino=64199 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 572.501755][ T28] audit: type=1400 audit(1781934643.278:4629): avc: denied { write } for pid=19400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.512033][T19392] bond1 (unregistering): Released all slaves [ 572.525234][ T28] audit: type=1400 audit(1781934643.298:4630): avc: denied { write } for pid=19415 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 572.592708][T16975] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.601909][T16975] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 572.677405][T19434] netlink: 1335 bytes leftover after parsing attributes in process `syz.0.4493'. [ 572.692658][T19437] netlink: 388 bytes leftover after parsing attributes in process `syz.7.4494'. [ 572.737763][T19437] 9pnet_fd: Insufficient options for proto=fd [ 572.757630][T19437] loop7: detected capacity change from 0 to 512 [ 572.773206][T19437] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 573.163577][T18709] tipc: Node number set to 1 [ 573.329121][T19437] EXT4-fs (loop7): 1 truncate cleaned up [ 573.337213][T19437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.405544][T19499] bridge0: port 2(batadv1) entered blocking state [ 573.412338][T19499] bridge0: port 2(batadv1) entered disabled state [ 573.420956][T19499] batadv1: entered allmulticast mode [ 573.427270][T19499] batadv1: entered promiscuous mode [ 573.974858][T16963] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 573.984111][T16963] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 574.052790][T19159] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.370219][T19613] loop6: detected capacity change from 0 to 128 [ 576.401157][T19613] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 576.427234][T19613] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 576.482884][T14848] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 576.549504][ T3403] kernel read not supported for file [fscontext] (pid: 3403 comm: kworker/0:5) [ 576.574327][T19629] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.696893][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4526'. [ 577.958745][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 577.958760][ T28] audit: type=1326 audit(1781934648.796:4688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19683 comm="syz.9.4533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcfa71cce59 code=0x0 [ 578.865523][T19700] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 578.877391][T19700] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 578.924917][ T28] audit: type=1400 audit(1781934649.695:4689): avc: denied { mac_admin } for pid=19697 comm="syz.0.4538" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 578.944017][T19700] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4538'. [ 578.948044][ T28] audit: type=1400 audit(1781934649.695:4690): avc: denied { relabelto } for pid=19697 comm="syz.0.4538" name="325" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 578.982322][ T28] audit: type=1400 audit(1781934649.695:4691): avc: denied { associate } for pid=19697 comm="syz.0.4538" name="325" dev="tmpfs" ino=1746 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 579.010390][ T28] audit: type=1400 audit(1781934649.695:4692): avc: denied { write } for pid=19697 comm="syz.0.4538" name="325" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 579.037693][ T28] audit: type=1400 audit(1781934649.695:4693): avc: denied { add_name } for pid=19697 comm="syz.0.4538" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 579.118642][T19700] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 579.134896][ T28] audit: type=1400 audit(1781934649.695:4694): avc: denied { create } for pid=19697 comm="syz.0.4538" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 579.216181][T19700] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 579.247109][ T28] audit: type=1400 audit(1781934649.695:4695): avc: denied { associate } for pid=19697 comm="syz.0.4538" name=E91F7189591E9233614B scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 579.277149][T19700] bond0 (unregistering): Released all slaves [ 579.292933][ T28] audit: type=1400 audit(1781934649.695:4696): avc: denied { write } for pid=19697 comm="syz.0.4538" name="325" dev="tmpfs" ino=1746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 579.328260][ T28] audit: type=1400 audit(1781934650.125:4697): avc: denied { write } for pid=19710 comm="syz.9.4541" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 579.420330][T19715] netlink: 'syz.9.4542': attribute type 14 has an invalid length. [ 579.445285][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4542'. [ 579.455588][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4542'. [ 579.482670][T19719] loop7: detected capacity change from 0 to 1764 [ 581.928860][T19757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.946022][T19757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.092548][T19801] netlink: 'syz.7.4569': attribute type 1 has an invalid length. [ 586.052169][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 586.052219][ T28] audit: type=1400 audit(1781934656.618:4716): avc: denied { write } for pid=19780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 586.727937][ T28] audit: type=1400 audit(1781934656.926:4717): avc: denied { write } for pid=19814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 587.170440][T19833] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=19833 comm=syz.1.4576 [ 587.183272][ T28] audit: type=1400 audit(1781934657.665:4718): avc: denied { bind } for pid=19831 comm="syz.1.4576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 587.242943][T19838] tipc: New replicast peer: 255.255.255.255 [ 587.294298][ T28] audit: type=1400 audit(1781934657.665:4719): avc: denied { name_bind } for pid=19831 comm="syz.1.4576" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 587.320408][T19838] tipc: Enabled bearer , priority 10 [ 587.467062][ T28] audit: type=1400 audit(1781934657.665:4720): avc: denied { node_bind } for pid=19831 comm="syz.1.4576" saddr=172.20.20.170 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 588.174371][T19851] loop7: detected capacity change from 0 to 256 [ 588.197852][T19851] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 588.271856][ T28] audit: type=1400 audit(1781934658.694:4721): avc: denied { mount } for pid=19849 comm="syz.7.4580" name="/" dev="loop7" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 588.545732][T19864] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 588.980377][ T28] audit: type=1400 audit(1781934659.349:4722): avc: denied { write } for pid=19875 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.069462][ T28] audit: type=1400 audit(1781934659.414:4723): avc: denied { create } for pid=19866 comm="syz.0.4588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 589.131648][ T28] audit: type=1400 audit(1781934659.414:4724): avc: denied { ioctl } for pid=19866 comm="syz.0.4588" path="socket:[64794]" dev="sockfs" ino=64794 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 589.210386][ T28] audit: type=1400 audit(1781934659.414:4725): avc: denied { write } for pid=19887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 589.255928][T19896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4594'. [ 589.566741][T19894] loop7: detected capacity change from 0 to 512 [ 589.588508][T19894] ext4: Unknown parameter 'smackfstransmute' [ 591.391598][T19914] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20001 [ 591.436917][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 591.436932][ T28] audit: type=1400 audit(1781934661.650:4731): avc: denied { write } for pid=19926 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.490796][ T28] audit: type=1400 audit(1781934661.706:4732): avc: denied { write } for pid=19941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.552036][T19948] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4605'. [ 591.583894][T19946] syzkaller0: entered promiscuous mode [ 591.589841][ T28] audit: type=1400 audit(1781934661.790:4733): avc: denied { create } for pid=19947 comm="syz.9.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 591.613049][T19946] syzkaller0: entered allmulticast mode [ 591.622223][T19946] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 591.636212][ T28] audit: type=1400 audit(1781934661.837:4734): avc: denied { ioctl } for pid=19947 comm="syz.9.4605" path="socket:[65909]" dev="sockfs" ino=65909 ioctlcmd=0x89e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 591.701458][ T28] audit: type=1400 audit(1781934661.902:4735): avc: denied { write } for pid=19949 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.744660][ T28] audit: type=1400 audit(1781934661.921:4736): avc: denied { write } for pid=19965 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.808427][T19962] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4606'. [ 591.914551][ T28] audit: type=1400 audit(1781934662.108:4737): avc: denied { unmount } for pid=19159 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 591.950924][T19977] FAULT_INJECTION: forcing a failure. [ 591.950924][T19977] name failslab, interval 1, probability 0, space 0, times 0 [ 591.964963][T19977] CPU: 0 UID: 0 PID: 19977 Comm: syz.7.4611 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 591.964990][T19977] Tainted: [W]=WARN [ 591.964997][T19977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.965010][T19977] Call Trace: [ 591.965017][T19977] [ 591.965078][T19977] __dump_stack+0x1d/0x30 [ 591.965100][T19977] dump_stack_lvl+0x95/0xd0 [ 591.965121][T19977] dump_stack+0x15/0x1b [ 591.965140][T19977] should_fail_ex+0x25e/0x270 [ 591.965224][T19977] should_failslab+0x8c/0xb0 [ 591.965243][T19977] __kmalloc_node_noprof+0xc8/0x550 [ 591.965280][T19977] ? qdisc_alloc+0x65/0x410 [ 591.965304][T19977] qdisc_alloc+0x65/0x410 [ 591.965398][T19977] qdisc_create+0xf0/0x9c0 [ 591.965430][T19977] tc_modify_qdisc+0x102a/0x1550 [ 591.965474][T19977] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 591.965552][T19977] rtnetlink_rcv_msg+0x6a7/0x720 [ 591.965576][T19977] netlink_rcv_skb+0x11e/0x220 [ 591.965611][T19977] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 591.965642][T19977] rtnetlink_rcv+0x1c/0x30 [ 591.965750][T19977] netlink_unicast+0x5a7/0x680 [ 591.965773][T19977] netlink_sendmsg+0x5be/0x6f0 [ 591.965809][T19977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 591.965832][T19977] ____sys_sendmsg+0x532/0x580 [ 591.965852][T19977] ___sys_sendmsg+0x195/0x1e0 [ 591.965912][T19977] __sys_sendmmsg+0x185/0x320 [ 591.965943][T19977] __x64_sys_sendmmsg+0x57/0x70 [ 591.966028][T19977] x64_sys_call+0x27aa/0x3020 [ 591.966103][T19977] do_syscall_64+0x136/0x3c0 [ 591.966171][T19977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.966192][T19977] RIP: 0033:0x7f166984ce59 [ 591.966214][T19977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.966229][T19977] RSP: 002b:00007f16682a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 591.966247][T19977] RAX: ffffffffffffffda RBX: 00007f1669ac5fa0 RCX: 00007f166984ce59 [ 591.966262][T19977] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000005 [ 591.966292][T19977] RBP: 00007f16682a7090 R08: 0000000000000000 R09: 0000000000000000 [ 591.966306][T19977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 591.966317][T19977] R13: 00007f1669ac6038 R14: 00007f1669ac5fa0 R15: 00007fff9285d508 [ 591.966334][T19977] [ 593.364653][T19988] bond1: invalid ARP target 0.0.0.0 specified for addition [ 593.400447][T19988] bond1: option arp_ip_target: invalid value (0) [ 593.434268][T19988] bond1 (unregistering): Released all slaves [ 593.507105][T19997] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 593.602072][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4621'. [ 593.619210][ T28] audit: type=1400 audit(1781934663.670:4738): avc: denied { getopt } for pid=20000 comm="syz.9.4621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 593.650159][T20001] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4621'. [ 594.022279][T20015] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4626'. [ 594.031442][T20015] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4626'. [ 594.889628][ T28] audit: type=1326 audit(1781934664.886:4739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20034 comm="syz.9.4634" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcfa71cce59 code=0x0 [ 594.953439][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4633'. [ 594.982432][T20033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4633'. [ 595.559059][ T28] audit: type=1400 audit(1781934665.503:4740): avc: denied { connect } for pid=20038 comm="syz.7.4635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 595.641450][T20055] bond1: invalid ARP target 0.0.0.0 specified for addition [ 595.649880][T20055] bond1: option arp_ip_target: invalid value (0) [ 595.670049][T20055] bond1 (unregistering): Released all slaves [ 595.938471][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 595.947759][T20072] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4648'. [ 599.441463][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 599.441475][ T28] audit: type=1326 audit(1781934669.141:4742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20096 comm="syz.1.4657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f898ba1ce59 code=0x0 [ 601.888943][ T28] audit: type=1400 audit(1781934671.414:4743): avc: denied { nlmsg_read } for pid=20111 comm="syz.0.4661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 601.931266][ T28] audit: type=1400 audit(1781934671.423:4744): avc: denied { watch } for pid=20111 comm="syz.0.4661" path="/353/file0" dev="tmpfs" ino=1900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 602.008929][ T28] audit: type=1400 audit(1781934671.545:4745): avc: denied { read } for pid=20120 comm="syz.1.4664" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 602.063976][ T28] audit: type=1400 audit(1781934671.545:4746): avc: denied { open } for pid=20120 comm="syz.1.4664" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 602.112503][ T28] audit: type=1400 audit(1781934671.573:4747): avc: denied { ioctl } for pid=20120 comm="syz.1.4664" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 602.165588][T20131] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 602.357511][T20140] netlink: 'syz.6.4669': attribute type 12 has an invalid length. [ 602.514344][ T28] audit: type=1400 audit(1781934672.013:4748): avc: denied { connect } for pid=20142 comm="syz.1.4670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 602.749554][ T28] audit: type=1326 audit(1781934672.050:4749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20142 comm="syz.1.4670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 602.886000][T20148] netlink: 14 bytes leftover after parsing attributes in process `syz.6.4672'. [ 602.978020][ T28] audit: type=1326 audit(1781934672.050:4750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20142 comm="syz.1.4670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 603.139616][ T28] audit: type=1326 audit(1781934672.050:4751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20142 comm="syz.1.4670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f898ba1ce59 code=0x7ffc0000 [ 603.335066][T20148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.345465][T20148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.355848][T20148] bond0 (unregistering): Released all slaves [ 603.368222][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4670'. [ 603.485277][T20153] bridge3: entered promiscuous mode [ 603.543496][T20162] team1: entered promiscuous mode [ 603.556254][T20162] team1: entered allmulticast mode [ 603.562525][T20162] 8021q: adding VLAN 0 to HW filter on device team1 [ 603.785815][T20168] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4677'. [ 603.844055][T20168] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4677'. [ 604.096497][T20181] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4683'. [ 604.393423][T20191] tipc: Enabling of bearer rejected, already enabled [ 604.510235][T20197] ucma_write: process 809 (syz.6.4688) changed security contexts after opening file descriptor, this is not allowed. [ 604.748298][T20202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4690'. [ 604.862234][T20206] loop6: detected capacity change from 0 to 128 [ 604.874579][T20204] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4691'. [ 604.920369][T20206] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 604.956033][T20206] ext4 filesystem being mounted at /306/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 604.993987][T20216] ªªªªªª: renamed from hsr0 (while UP) [ 605.000261][T20206] netlink: 84 bytes leftover after parsing attributes in process `syz.6.4692'. [ 605.015707][T20206] EXT4-fs (loop6): resizing filesystem from 64 to 2 blocks [ 605.019496][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'. [ 605.028113][T20206] EXT4-fs warning (device loop6): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 605.052771][T14848] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 605.053612][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4696'. [ 605.145187][ T28] kauditd_printk_skb: 143 callbacks suppressed [ 605.145237][ T28] audit: type=1400 audit(1781934674.472:4895): avc: denied { mount } for pid=20223 comm="syz.1.4700" name="/" dev="ramfs" ino=66625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 605.174314][T20225] FAULT_INJECTION: forcing a failure. [ 605.174314][T20225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.191778][T20225] CPU: 0 UID: 0 PID: 20225 Comm: syz.1.4700 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 605.191809][T20225] Tainted: [W]=WARN [ 605.191817][T20225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.191829][T20225] Call Trace: [ 605.191839][T20225] [ 605.191846][T20225] __dump_stack+0x1d/0x30 [ 605.191870][T20225] dump_stack_lvl+0x95/0xd0 [ 605.191890][T20225] dump_stack+0x15/0x1b [ 605.191908][T20225] should_fail_ex+0x25e/0x270 [ 605.191931][T20225] should_fail+0xb/0x20 [ 605.192016][T20225] should_fail_usercopy+0x1a/0x20 [ 605.192037][T20225] strncpy_from_user+0x27/0x250 [ 605.192055][T20225] ? kmem_cache_alloc_noprof+0x18c/0x3f0 [ 605.192149][T20225] do_getname+0x59/0x1c0 [ 605.192169][T20225] __se_sys_symlinkat+0x23/0x1b0 [ 605.192214][T20225] __x64_sys_symlinkat+0x43/0x50 [ 605.192235][T20225] x64_sys_call+0x2b7d/0x3020 [ 605.192286][T20225] do_syscall_64+0x136/0x3c0 [ 605.192381][T20225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.192400][T20225] RIP: 0033:0x7f898ba1ce59 [ 605.192471][T20225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.192489][T20225] RSP: 002b:00007f898a477028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 605.192507][T20225] RAX: ffffffffffffffda RBX: 00007f898bc95fa0 RCX: 00007f898ba1ce59 [ 605.192574][T20225] RDX: 0000200000000140 RSI: 0000000000000005 RDI: 0000200000000000 [ 605.192587][T20225] RBP: 00007f898a477090 R08: 0000000000000000 R09: 0000000000000000 [ 605.192660][T20225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.192673][T20225] R13: 00007f898bc96038 R14: 00007f898bc95fa0 R15: 00007ffc1bd3c1c8 [ 605.192693][T20225] [ 605.435830][T20228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 605.447450][T20228] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 605.474883][T20240] xt_hashlimit: size too large, truncated to 1048576 [ 605.509691][T20228] batman_adv: batadv0: Interface deactivated: geneve2 [ 605.525899][T16965] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.537716][ T28] audit: type=1400 audit(1781934674.847:4896): avc: denied { ioctl } for pid=20236 comm="syz.0.4704" path="socket:[65128]" dev="sockfs" ino=65128 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 605.540938][T16965] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.619588][T20246] 9p: Bad value for 'wfdno' [ 605.624368][T16965] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 605.643320][T16965] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.664729][T16965] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.673635][T16965] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 605.685411][T20247] bridge2: entered promiscuous mode [ 605.702939][T16965] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.712070][T16965] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.732587][T16965] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 605.741721][T16965] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 605.750802][T16965] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.772205][T16965] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 605.786192][ T28] audit: type=1400 audit(1781934675.071:4897): avc: denied { nlmsg_write } for pid=20252 comm="syz.9.4717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 605.849053][ T28] audit: type=1326 audit(1781934675.136:4898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 605.907345][ T28] audit: type=1326 audit(1781934675.136:4899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 605.948234][ T28] audit: type=1326 audit(1781934675.165:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 605.990186][ T28] audit: type=1326 audit(1781934675.165:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 606.043145][ T28] audit: type=1326 audit(1781934675.165:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 606.108498][ T28] audit: type=1326 audit(1781934675.165:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 606.138213][ T28] audit: type=1326 audit(1781934675.165:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20254 comm="syz.6.4708" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 606.259432][T20281] bridge0: port 3(syz_tun) entered blocking state [ 606.265926][T20281] bridge0: port 3(syz_tun) entered listening state [ 606.272627][T20281] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.279686][T20281] bridge0: port 1(bridge_slave_0) entered listening state [ 606.292599][T20281] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.354377][T20281] bridge0: port 2(batadv1) entered blocking state [ 606.360856][T20281] bridge0: port 2(batadv1) entered listening state [ 606.367474][T20281] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 606.454046][T20281] hsr0 speed is unknown, defaulting to 1000 [ 606.735564][T20302] loop7: detected capacity change from 0 to 512 [ 606.789514][T20302] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.803782][T20308] bond2: invalid ARP target 0.0.0.0 specified for addition [ 606.804918][T20302] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.814639][T20308] bond2: option arp_ip_target: invalid value (0) [ 606.838774][T20308] bond2 (unregistering): Released all slaves [ 606.918679][T19159] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 606.919638][T20321] netlink: 'syz.9.4731': attribute type 1 has an invalid length. [ 606.934649][T19159] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 606.945935][T20321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 607.056722][T20336] ip6erspan0: entered allmulticast mode [ 607.163393][T20319] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.286610][T16963] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.335152][T16963] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.391590][T20346] hsr0 speed is unknown, defaulting to 1000 [ 607.408357][T16963] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.476064][T16963] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.591320][T16963] bridge_slave_1: left allmulticast mode [ 607.624662][T16963] bridge_slave_1: left promiscuous mode [ 607.644428][T16963] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.661702][T16963] bridge_slave_0: left allmulticast mode [ 607.670211][T16963] bridge_slave_0: left promiscuous mode [ 607.676565][T16963] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.807005][T16963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 607.827653][T16963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 607.842950][T16963] bond0 (unregistering): Released all slaves [ 607.884032][ T3017] 8021q: adding VLAN 0 to HW filter on device eth5 [ 607.906568][T16963] tipc: Disabling bearer [ 607.912081][T16963] tipc: Disabling bearer [ 607.917459][T16963] tipc: Left network mode [ 607.939189][T16963] hsr_slave_0: left promiscuous mode [ 607.972797][T16963] hsr_slave_1: left promiscuous mode [ 607.979442][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.012932][T16963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.037350][T16963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.045547][T16963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.068565][T16963] veth1_macvtap: left promiscuous mode [ 608.074695][T16963] veth0_macvtap: left promiscuous mode [ 608.080474][T16963] veth1_vlan: left promiscuous mode [ 608.089096][T16963] veth0_vlan: left promiscuous mode [ 608.197603][T16963] team0 (unregistering): Port device team_slave_1 removed [ 608.207883][T16963] team0 (unregistering): Port device team_slave_0 removed [ 608.253122][T20399] __nla_validate_parse: 7 callbacks suppressed [ 608.253274][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4753'. [ 608.283132][T20399] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4753'. [ 608.296945][T20346] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.305985][T20346] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.318567][T20346] bridge_slave_0: entered allmulticast mode [ 608.333502][T20346] bridge_slave_0: entered promiscuous mode [ 608.345966][T20346] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.362273][T20346] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.375028][T20346] bridge_slave_1: entered allmulticast mode [ 608.385207][T20346] bridge_slave_1: entered promiscuous mode [ 608.440706][T20346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.461558][T20346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 609.510424][T20422] ip6tnl0: Caught tx_queue_len zero misconfig [ 609.529410][T20346] team0: Port device team_slave_0 added [ 609.552818][T20346] team0: Port device team_slave_1 added [ 609.607831][T20346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.638768][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.722082][T20346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.757938][T20346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.798724][T20346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.906540][T20346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.975956][ T3017] 8021q: adding VLAN 0 to HW filter on device eth6 [ 610.011347][T20423] netlink: 88 bytes leftover after parsing attributes in process `syz.9.4756'. [ 610.054958][T20346] hsr_slave_0: entered promiscuous mode [ 610.069078][T20346] hsr_slave_1: entered promiscuous mode [ 610.087046][T20346] debugfs: 'hsr0' already exists in 'hsr' [ 610.105505][T20346] Cannot create hsr debugfs directory [ 610.113372][T20452] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4764'. [ 610.362621][ T3017] 8021q: adding VLAN 0 to HW filter on device eth7 [ 610.502083][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 610.502103][ T28] audit: type=1326 audit(1781934679.486:5008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20483 comm="syz.6.4771" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efde891ce59 code=0x7ffc0000 [ 610.559151][ T28] audit: type=1400 audit(1781934679.486:5009): avc: denied { write } for pid=20497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 610.591246][ T3017] 8021q: adding VLAN 0 to HW filter on device eth8 [ 610.672733][ T28] audit: type=1400 audit(1781934679.645:5010): avc: denied { mount } for pid=20502 comm="syz.9.4781" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 610.762982][T20346] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 610.772110][T20346] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 610.780331][T20346] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 610.790223][T20346] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 610.798239][T20346] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 610.807559][T20346] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 610.815076][T20346] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 610.824005][T20346] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 610.858613][T20346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 610.869883][T20346] 8021q: adding VLAN 0 to HW filter on device team0 [ 610.879741][T16965] bridge0: port 1(bridge_slave_0) entered blocking state [ 610.886832][T16965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 610.900914][T16963] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.908011][T16963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.034290][T20346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 611.161361][T20346] veth0_vlan: entered promiscuous mode [ 611.170372][T20346] veth1_vlan: entered promiscuous mode [ 611.185609][T20346] veth0_macvtap: entered promiscuous mode [ 611.194253][T20346] veth1_macvtap: entered promiscuous mode [ 611.204623][T20346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.215775][T20346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.227772][T16959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.237183][T16959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.253144][T16959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.262809][T16959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.675160][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4794'. [ 611.686937][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4794'. [ 611.696847][T20599] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4794'. [ 611.719510][ T28] audit: type=1400 audit(1781934680.627:5011): avc: denied { ioctl } for pid=20603 comm="syz.0.4796" path="socket:[67405]" dev="sockfs" ino=67405 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 611.759203][ T4229] ================================================================== [ 611.767297][ T4229] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 611.774321][ T4229] [ 611.776630][ T4229] read-write to 0xffff888237c2a8e4 of 4 bytes by task 3389 on cpu 0: [ 611.784674][ T4229] wq_worker_running+0x9b/0x120 [ 611.789515][ T4229] schedule_timeout+0xca/0x180 [ 611.794262][ T4229] msleep+0x4f/0x90 [ 611.798064][ T4229] nsim_fib_event+0x4996/0x4dc0 [ 611.802899][ T4229] nsim_fib_event_work+0x133/0x200 [ 611.807993][ T4229] process_scheduled_works+0x4d4/0x9a0 [ 611.813435][ T4229] worker_thread+0x569/0x750 [ 611.818006][ T4229] kthread+0x221/0x270 [ 611.822054][ T4229] ret_from_fork+0x146/0x330 [ 611.826625][ T4229] ret_from_fork_asm+0x1a/0x30 [ 611.831370][ T4229] [ 611.833673][ T4229] read to 0xffff888237c2a8e4 of 4 bytes by task 4229 on cpu 1: [ 611.841197][ T4229] kick_pool+0x49/0x2d0 [ 611.845339][ T4229] __queue_work+0x8e9/0xb90 [ 611.849828][ T4229] queue_work_on+0xa9/0x140 [ 611.854318][ T4229] process_srcu+0xa39/0xd90 [ 611.858806][ T4229] process_scheduled_works+0x4d4/0x9a0 [ 611.864247][ T4229] worker_thread+0x569/0x750 [ 611.868846][ T4229] kthread+0x221/0x270 [ 611.872932][ T4229] ret_from_fork+0x146/0x330 [ 611.877521][ T4229] ret_from_fork_asm+0x1a/0x30 [ 611.882291][ T4229] [ 611.884592][ T4229] value changed: 0x00000000 -> 0x00000001 [ 611.890284][ T4229] [ 611.892584][ T4229] Reported by Kernel Concurrency Sanitizer on: [ 611.898714][ T4229] CPU: 1 UID: 0 PID: 4229 Comm: kworker/1:9 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 611.909649][ T4229] Tainted: [W]=WARN [ 611.913448][ T4229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.923482][ T4229] Workqueue: rcu_gp process_srcu [ 611.928407][ T4229] ==================================================================