last executing test programs: 20m18.577149033s ago: executing program 4 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a0300"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r1) r5 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket(0x2, 0x80805, 0x0) socket$netlink(0x10, 0x3, 0x4) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xab4ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x1000, 0x200, 0xffffffff, 0xb, 0xa0, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x400000f, 0x4, 0x0, 0x80000002}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x40, 0x52, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x5c, r4, 0x400, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_LINK={0x8, 0x1, r6}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_VERSION={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44091}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, 0x0, 0x2000c004) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004e000100000000000000000000030000080001"], 0x1c}}, 0x0) socket(0x10, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) creat(&(0x7f0000000340)='./file0\x00', 0x80) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000400)=@ethtool_regs={0x4, 0x0, 0x8a, "5ca5ce0698fb7ef2e6fba011bb81fd61dcae9254660ff042adb9d7999e8dc114d925861fc2d1ae2e6cd30e9022c3aa4b138f3f416cf64818c9a23325ee9f0de83791a0178f14a3e88c9ee8b73a407cbcdadc50a8f5e562976f9fa0ccb8d0b1fa3ba5882135d7dbf8777233bd21b0a5ea793313560699e84c2cc451501ffcb3a58314ecabdb930c9d64cd"}}) 20m14.981637124s ago: executing program 4 (id=461): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x11, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, {}, {}, [@call={0x85, 0x0, 0x0, 0xc9}, @jmp={0x5, 0x0, 0x8, 0x5, 0x3, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000018c0)='syzkaller\x00', 0x101, 0xd4, &(0x7f0000001900)=""/212, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001a00)={0x4, 0x8, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x480}, 0x94) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8, 0x0, 0x0, [0xff, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xdd86}}}}}}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={&(0x7f0000000540)='./file0\x00', r3}, 0x18) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="24000000200001030000000000000000020000004a2d34187b819800000000160011000000000000000000e8d71e324a2376"], 0x24}}, 0x44004) r6 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r6, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$eJzs281rHGUYAPBnJh9t7UdirR+tVaNFCIpJk1btwYui4KGioId6jMm2hG4baaLYUmwqUi+CFPQsHgX/Am8iiHoSvOrFkxSK9tLqKTKzM+1mm02N2WRi9veDzb7vzrs7z5P5eud9dwPoWkPZnyRiR0T8EhEDjeriBkONpxvXzk/+de38ZBILC6//keTtrl87P1k2Ld+3vagMpxHph0mxksVmz547OVGv184U9dG5U2+Pzp4999S7pyZO1E7UTo8fOXL40Nizz4w/3ZE8s7yu73t/Zv/el9+8/Mrksctv/fBVFu+OYnlzHp0ylCX+50KuddnjnV5ZxXY2lZPeCgNhRXoiIttcffnxPxA9cWvjDcRLH1QaHLCmsmvTlvaL5xeATSyJqiMAqlFe6LP73/KxTl2PDeHq840boCzvG8WjsaQ30qJNX8v9bScNRcSx+b8/zx6xRuMQAADNPp787Gh/UV7c/0vjvvz5t/zvrmIOZTAi7o6I3RFxT0TsiYh7I/K290fEA6uM5/b+T3pllR+5rKz/91wxt7W4/1f2/mKwp6jtzPPvS45P12sHi//JcPRtyepjy6zjmxd//qTdsub+X/bI1l/2BYs4rvS2DNBNTcxN5J3SDrh6MWJf71L5JzdnApKI2BsR+1b20bvKwvQTX+5v1+jO+S+jA/NMC19k6c1n+c9HS/6lpHl+cvq2+cnRrVGvHRwt94rb/fjTpdfarX9V+XfA1VrjuWn7tzYZTJrna2dXvo5Lv37U9p7mP+7/aX/yRj7PXJ673puYmzszFtGfHM3ri14fv/Xesl62z/b/4QNLH/+7i/dk+T8YEdlO/FBEPBwRjxSxPxoRj0XEgWXy//6F9svK/COtaPtfjJha8vx3c/9v2f4rL/Sc/O7rduv/d9v/cF4aLl7Jz393sFQ42emiNcDV/O8AAADg/yLNvwOfpCM3y2k6MtL4Dv+euCutz8zOPXl85p3TU43vyg9GX1qOdA0U46H16XptLJkvPrExPjpejBWX46WHinHjT3u25fWRyZn6VMW5Q7fb3ub4z/zeU3V0wBrbtuSr4/3rHghQgdZ59HRx9cKr4WQAm5Xfa0P3usPxn65XHMD6c/2H7rXU8X+hpW4uADYn13/oXo5/6FLpt1VHAFTI9R+60mp+17+Gha0bI4xqCht1o+SFiLKQboh4FNaoUPWZCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDP+CQAA//9Chukd") r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000740)={@random="a46e8d1d593d", @link_local, @val={@val={0x88a8, 0x3}, {0x8100, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xfd, 0x2f, 0x0, @private, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0xb2}}}}}}}}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000000) sendmsg$rds(r7, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000280)=[{0x0}, {&(0x7f00000000c0)=""/23, 0x17}], 0x2, 0x0, 0x0, 0x4c880}, 0x8000) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r7, 0x84, 0x8, &(0x7f0000000180), &(0x7f0000000500)=0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="78000000390009fffe0f0f000000000003"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x814) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6012000800103afffe80000000000000000000000000007dff0200000000000000000000000000018600907800"/70], 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280c9c60e995da8b4eb0103475be53b930ae1cbb246016ace2049f1db715c5192a29b256ef1f8d75b57e1104b3d2259c0bfd5858dcd"], 0x34}}, 0x0) 20m14.425041337s ago: executing program 4 (id=467): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r1, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 20m14.072334346s ago: executing program 4 (id=470): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x40) r1 = socket(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x2218, 0x7721, 0x12, 0x0, 0x4c) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x20000, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000a0200000a20000000000a05000000000000c7e61be93c10f80000000100fffc0900010073797a300000000034000000030a010100000000000000000100e7be283e030073797a310000000008000b4000001400000011000100"/124], 0x7c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 20m13.780354475s ago: executing program 4 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r6) sendmsg$NLBL_MGMT_C_ADD(r6, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r10 = getpid() fcntl$lock(r9, 0x25, &(0x7f0000000100)={0x1, 0x0, 0x9, 0x10000000000000, r10}) ioctl$sock_inet_SIOCGIFPFLAGS(r9, 0x8935, &(0x7f0000000200)={'veth0_to_bridge\x00'}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000017c0)=@urb_type_control={0x2, {}, 0x2000006, 0xc1, &(0x7f00000002c0)={0x9a, 0x8, 0x9, 0x7}, 0x8, 0x1ec, 0xa, 0x0, 0x313, 0x3, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000900)=@filter={'filter\x00', 0x4, 0x4, 0x470, 0xffffffff, 0x0, 0x0, 0x268, 0xfeffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x35, {0x3}}}}, {{@uncond, 0x0, 0x130, 0x178, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x8, 0x5, 0x7, 0x1, 0x80, 0x200}}, @common=@inet=@hashlimit1={{0x58}, {'sit0\x00', {0x52, 0x3, 0xfffffffc, 0x7, 0x80000001, 0x9, 0x5d, 0x8, 0x20}, {0x9}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x10}}}}, {{@ipv6={@private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xfb, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x8, 0x1, [0x3, 0x5b, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 20m13.420893515s ago: executing program 4 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "edff"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg$unix(r2, 0x0, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00bc6be794008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x33, 0x0, @val=@target_btf_id=r6}, 0xfffffffffffffff4) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x80) fchdir(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) 20m13.39451186s ago: executing program 32 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x4e20, @broadcast}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "edff"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg$unix(r2, 0x0, 0x40) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00bc6be794008000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x1, 0x0}, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, 0xffffffffffffffff, 0x33, 0x0, @val=@target_btf_id=r6}, 0xfffffffffffffff4) r7 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x80) fchdir(r8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) 20m7.674296986s ago: executing program 5 (id=520): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x400001fd}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x34, 0x0, 0xfffffffe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) dup2(r8, r5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @remote, 0x7, 0x8000, 0x3b, 0x500, 0x5, 0x18c0012}) 20m6.240252696s ago: executing program 5 (id=525): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FITHAW(r0, 0xc0045878) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x20}}, 0x4000000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2feba69f", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf25250000000c009900ffff000015000000130034009f0eeb727dd4a7e27574721a24e7580004000b000a0006005050505050500000080037000100000016003400c3353d349b6574e74e40dfebaaec0506326600000c00508004000500040006000a000600ffffffffffff0000050018013800000008002600b8150000050018012800000008009f00040000000800a100e600000008002700020000000a00060008021100000000000c0050800800030005ac0f000a000600ffffffffffff000004002800"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_nanosleep(0x9, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 20m5.777475503s ago: executing program 5 (id=531): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) r1 = syz_open_dev$loop(&(0x7f0000000300), 0xc1d, 0x42e82) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0642, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r2], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x0) 20m5.643870585s ago: executing program 5 (id=532): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$caif_seqpacket(0x25, 0x5, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x40) r1 = socket(0xa, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000300)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, 0x0, &(0x7f0000000140)) io_uring_enter(0xffffffffffffffff, 0x2218, 0x7721, 0x12, 0x0, 0x4c) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1400000010000100000000000000000a0200000a20000000000a05000000000000c7e61be93c10f80000000100fffc0900010073797a300000000034000000030a010100000000000000000100e7be283e030073797a310000000008000b4000001400000011000100"/124], 0x7c}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 20m5.570084767s ago: executing program 5 (id=533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000000800000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b13000000000000240012800b00010067656e657665000014000280080001000100000005000800010000009b65e5c1ab3b21b0a5304e8267ea582a5cc38a7ad8905f25bb25282614730b4a588fa19ab2a8557def97c54e80b6720da2fccfb36c797c477feaf1a7c262d770b0dacd2397f409007a2c29fa8e557bc1db12f2152114ce3d74b42b20d6eb93a0a8b60b3e043f2a63ff0258e40348c789fc2cd7"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x40800) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x20000000000000}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x27) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000008000000760000000000000027e400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xe, 0x4a718, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0xffe}, 0x104b18, 0x6, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) 20m5.31290728s ago: executing program 5 (id=535): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x400001fd}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x34, 0x0, 0xfffffffe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) dup2(r8, r5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @remote, 0x7, 0x8000, 0x3b, 0x500, 0x5, 0x18c0012}) 20m5.293229853s ago: executing program 33 (id=535): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x9, 0x6}, 0x8000, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a300000000005000500050000000500010006000000140007800600044000000000060005"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x4800) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r7, 0x6, 0x0) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x400001fd}) fcntl$lock(r7, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES64=r4], 0x0, 0x34, 0x0, 0xfffffffe}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) dup2(r8, r5) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r9, 0x890c, &(0x7f0000000180)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x81, 0x0}, @remote, 0x7, 0x8000, 0x3b, 0x500, 0x5, 0x18c0012}) 13m13.143510631s ago: executing program 2 (id=3445): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'dummy0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FITHAW(r0, 0xc0045878) sendmsg$NL80211_CMD_SET_BEACON(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000002c0)={0x20, r5, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x4, 0xe}]}, 0x20}}, 0x4000000) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2feba69f", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf25250000000c009900ffff000015000000130034009f0eeb727dd4a7e27574721a24e7580004000b000a0006005050505050500000080037000100000016003400c3353d349b6574e74e40dfebaaec0506326600000c00508004000500040006000a000600ffffffffffff0000050018013800000008002600b8150000050018012800000008009f00040000000800a100e600000008002700020000000a00060008021100000000000c0050800800030005ac0f000a000600ffffffffffff000004002800"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x24000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = open(&(0x7f00000000c0)='.\x00', 0x20000, 0x80) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) getdents64(r6, &(0x7f0000000fc0)=""/224, 0xe0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08000200", @ANYRES32=r1], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getdents64(0xffffffffffffffff, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r7, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f4}) gettid() syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2002) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) clock_nanosleep(0x9, 0xca9a3b, &(0x7f0000000000)={0x0, 0x989680}, 0x0) 13m12.323470489s ago: executing program 2 (id=3451): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f00000001c0)=@xdp={0x2c, 0x0, r6, 0x1c}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5ea9a141bffc6e29a5789796eec81944d7dff184d3319ce9dfb5c1fcd66e67b91a916a67ece64299573503cbc7e27133c4e5ed68c7a9b407a275bcff3432a487ebef21275b91d386164b443c1dfdf63831812e0471639a99b97a9923e4659cd5d", 0x9a}, {&(0x7f0000001300)="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", 0xc9c}, {&(0x7f0000000700)="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", 0x157}, {&(0x7f0000000440)="3ea19d23fdff85b98167afea622d36dd6e11d4df65aece0cffbb361fd19ec08ddad9340531b1c05e106ea2b36a41070b0be2be119aa8c7d8444f4341cccd89faa6253e1ee49e9132f015fd9988ae0b16c886cf6c2f29efe80b9278733906d142aff5d2926a9a0f79bc832754fc4c564b", 0x70}], 0x4}, 0x8bb3a301eb085f) 13m12.000044032s ago: executing program 2 (id=3455): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f000001ac80), 0x1, 0x0) write$binfmt_register(r0, &(0x7f000001acc0)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x400, 0x3a, 'GPL\x00', 0x3a, '\\', 0x3a, './file1'}, 0x2c) 13m11.863446585s ago: executing program 2 (id=3456): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x150, &(0x7f00000001c0)="$eJzs27GKE1EUBuAzJmqiTWqxGLCxCuoTKBJBHFCUFFopRJtEAqYZrfIovqAgqdJdibNks9ksbJFJws73NTnwk+Hc5p65M8znh9/Ho+ns2/TdIjpZFu3nkccyi17cilZU5gEA3CTLlOJvSindnUf3d6SUjt0RAFA38x8Amsf8B4Dmuf78bx+2MQCgNh8+fnrzoigG7/O8E/FnXg7LYfVb5a9eF4Mn+X+9838tynLYWudPqzy/mN+Oe2f5s535nXj8qMpX2cu3xVZ+P0b1Lx8AAAAaoZ+v7Tzf9/tX5VW18Xxg6/zejgdeGQDASZr9/DX+Mpl8/aFQ7LmILGKfF1zdkZ7CuppRHHtnAuq2sVvv0D18QwAAAAAAAAAAAAAAwCUH+Q4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATsy/AAAA//8EP06q") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() io_uring_setup(0x5ee6, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x8, 0xff92, &(0x7f00000003c0)=""/180, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x22) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r6 = fsopen(&(0x7f0000000340)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) pwrite64(r5, &(0x7f0000000180)="2d30734bb17023753242109b4efaa7fae06cea", 0x13, 0x5) r7 = fsmount(r6, 0x0, 0x86) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r8, r8, 0x0, 0xe3aa6ea) 13m11.705119832s ago: executing program 2 (id=3460): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4044, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/uevent_seqnum', 0x0, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000000), 0x0, 0x0, 0x1) fgetxattr(r2, &(0x7f0000000000)=ANY=[], 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="123c000000007ef6b5743814aefb000000", @ANYRES32=r0, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008844) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000001100)={0x0, 0x9, 0x5}, 0xc) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001240)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/../file0\x00') mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x6403dc095b1ff466, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0xfffffffd, 0x2000000, 0x8, 0xffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) r6 = socket(0xa, 0x1, 0x0) setitimer(0x2, &(0x7f00000001c0)={{0x0, 0xea60}, {0x0, 0x2710}}, 0x0) getitimer(0x2, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001c00070c2ee4a4bd7000fedbdf250200", @ANYRES32=r8, @ANYBLOB="400010021400010000000000000000000000ffff640101000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x20024090) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @rand_addr, @local}, &(0x7f0000000940)=0xc) sendmmsg$inet(r3, &(0x7f00000003c0), 0x0, 0x24000010) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) 13m11.588943801s ago: executing program 2 (id=3462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e20, @remote}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r10, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x33, &(0x7f0000000200)=0x6, 0x4) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/248, 0xf8}, 0x22) socket(0x10, 0x1, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0xfb, 0x53, 0x20083, 0x35, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0xe3de, 0xcfe}}) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 13m11.508950954s ago: executing program 34 (id=3462): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x1c, r1, 0x83625fc5352ba305, 0x70bd2b, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e20, @remote}, 0x2, 0x0, 0x4}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r10, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r3, &(0x7f0000000080)={0x1d, r10, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180001a08001b"], 0x28}}, 0x800) sendmsg$can_j1939(r3, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x14, 0x4) syz_init_net_socket$llc(0x1a, 0x801, 0x0) r12 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r12, 0x29, 0x33, &(0x7f0000000200)=0x6, 0x4) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/248, 0xf8}, 0x22) socket(0x10, 0x1, 0x9) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x2f, 0xfb, 0x53, 0x20083, 0x35, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8, 0x40, 0xe3de, 0xcfe}}) bind$inet6(r12, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 10m27.666319318s ago: executing program 0 (id=4773): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250) 10m27.59171111s ago: executing program 0 (id=4777): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x5, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8006, 0x6}, 0x0, 0x10001, 0xd9, 0x5, 0xc31bc7e, 0x20005, 0xa, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/vlan/vlan0\x00') r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x9, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000090a010400000000000000000100000208000a400000000008000640ffffff000900010073797a3000000000080005400000001c0900020073797a3200000000080003400000008c"], 0xa0}, 0x1, 0x0, 0x0, 0x44044850}, 0x8001) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @local, 0x8}, 0x1c) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$int_in(r4, 0x5452, &(0x7f0000000d80)=0x97b7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ddee4fca9b8f6bc51c9f59812f144fdfbb7d0972cf5ec41b4352e339343c9c85ecf305a49131628628e20ab14ac8c2f27aade66e96839c5be17d9c4fc4d6dffaea4f257124f843442c3f375d03ffa1e02719c01e2ba353c289fb84b3f1edda0006ccf6a00b53b8866dc21babb82ee4128eccf92952d5bf7cad559563827d132fd5"], 0x44}, 0x1, 0x0, 0x0, 0x20004002}, 0x24040004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x3, &(0x7f0000000140)=""/224, &(0x7f0000000100)=0xe0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000180)={[{@discard}, {@errors_continue}, {@nogrpid}]}, 0x1, 0x532, &(0x7f0000001200)="$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") perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x10e200, 0x10004, 0x30da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0x1, 0xffffffffffffffff, 0xb) creat(0x0, 0x6b) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c010000100013070000000000000004e0000001000000000000000000070000000000000000000000000000000000aa4e2200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d233000000fe8000000000000000000000000000aa00000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000104000000000000575c00000000000000000000000000000000000000000000000000000a00000600000000000000004c001400636d61632861657329000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000"], 0x13c}}, 0x0) ppoll(&(0x7f0000001940)=[{r4, 0x27}], 0x1, 0x0, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000180)={'ip6_vti0\x00', 0x8, 0x89ed}) 10m27.47167503s ago: executing program 0 (id=4778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5b67000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCVHANGUP(r5, 0x5437, 0xfffffdfd) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="78000000000801040000000000000000100000010c0004800800084000000fff05000300840000002c000480080001407fffffff08000140000000040800014000000006080001400000000808000140000000000600024000f8000006000240001b00000900010073797a30000000000600024088"], 0x78}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sync() r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x298, 0x0, 0x0, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x11, 0x6, 0x3, 0x1100, 0x4]}, {0x0, [0x5, 0x0, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) 10m26.475005587s ago: executing program 0 (id=4787): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/if_inet6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/71, 0x47}], 0x1, 0x10, 0x9) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r1 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000100)={0x9, 0x9, 0x0, 0x8001, 0x3}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2a05004, 0x0) write$eventfd(r0, &(0x7f00000001c0)=0x3ff, 0x8) 10m26.405232039s ago: executing program 0 (id=4789): r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) semget$private(0x0, 0x0, 0x20) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1000000000000000}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nombcache}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x401) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0xa00010, &(0x7f0000000000)=ANY=[], 0x0, 0x2d7, &(0x7f0000000d40)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 10m25.812984628s ago: executing program 0 (id=4799): io_uring_setup(0x1781, &(0x7f00000192c0)={0x0, 0x5dda, 0x40, 0x3, 0x12a}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000019100)=[{&(0x7f0000019080)="5c00000014006b05c84e21000ab16d6e23923904a50675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdd70000", 0xa3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x6}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x0, 0xc, &(0x7f0000019180)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setresgid(0x0, 0x0, 0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xb7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, 0x0) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) 10m25.730296901s ago: executing program 35 (id=4799): io_uring_setup(0x1781, &(0x7f00000192c0)={0x0, 0x5dda, 0x40, 0x3, 0x12a}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000019100)=[{&(0x7f0000019080)="5c00000014006b05c84e21000ab16d6e23923904a50675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdd70000", 0xa3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x6}, 0x10) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x0, 0xc, &(0x7f0000019180)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setresgid(0x0, 0x0, 0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xb7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r7, 0x8918, 0x0) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r6) 9m58.813185752s ago: executing program 3 (id=5052): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x4) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2b, 0x13, 0x0, 0x2, 0xb, 0xa9, 0x5, 0x2, 0x1}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="2c0000002d000100000000000000000008", @ANYRES32, @ANYBLOB='\b\x00', @ANYRES32=0xee00], 0x2c}], 0x1}, 0x0) 9m57.556452132s ago: executing program 3 (id=5063): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x174}, 0x1, 0x0, 0x0, 0x80}, 0x0) 9m57.525708217s ago: executing program 3 (id=5064): r0 = syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xd, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') pread64(r2, &(0x7f0000000100)=""/83, 0x53, 0x100) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195", @ANYRES8=r0, @ANYRES64=r0, @ANYRES8=r1, @ANYRES16=r1, @ANYRES64=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb6, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0xe50c1700, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1008402, &(0x7f00000012c0)={[{@bsdgroups}, {@data_err_abort}, {@noblock_validity}, {@i_version}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b2}}, {@data_err_ignore}, {@nouid32}, {@quota}, {@user_xattr}, {@noacl}, {@init_itable}]}, 0x1, 0x564, &(0x7f00000009c0)="$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") sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) close(0x3) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, r5) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000180)=0x2, 0x4) ioctl$sock_proto_private(r6, 0x89e0, &(0x7f0000001080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x2140c8, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000140)={[{@nr_inodes={'nr_inodes', 0x3d, [0x65]}}]}) 9m57.285195727s ago: executing program 3 (id=5065): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x80890a, &(0x7f00000003c0)={[{@debug}, {@nodioread_nolock}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@debug}, {@nojournal_checksum}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x5, 0x7b5, &(0x7f0000000540)="$eJzs3c9rHNcdAPDvrH7ZslurUKjdi3VqDcYr21XtFgqV6aEUajC059pitRaqVlqjXRlL6BATAoEQkpgcEpJLzvnh3HINyTl/Qy4hBBsnkU0ccggbZn9IK620+mHtyrY+HxjpvZk3+953Z+fN253HbgAH1nD6JxNxIiJeTyKO1dcnEdFXTfVGjNXKPV5eyqVLEpXKf75LqmUeLS/lommf1JF65nhEfPZSxOlMa72lhcXp8UIhP1fPj5RnboyUFhbPTM2MT+Yn87MXzo2Onr/454sX9i7WH75YPHr/jX/+8aOxn1783d1XP09iLI7WtzXHsVeGY7j+nPSlT+Ea/9jryvZZst8NYFfSU7OndpbHiTgWPdUUAPA8S6//FQDggElc/wHggGl8DvBoeSnXWPb3E4nuenApIklq8Tfub9a29Nbv2R2q3gcdfJREb/2OaOzh/a7hiHj3k/99kC7RofuQABt54XZEXBsabu3/k5Y5Czt1dhtlhtfl9X/QPZ9eioi/bDT+y6yMf2Jl/LNqYINzdzeGI/qb863nf+behjv+fQ8qr4///lab25YG2jT+W5m0NtRTz/0qzZyMiKlCPu3bfh0Rp6Jv4PpUIX+uTR2nHv78cLNtzeO/7+/8//20/vT/aonMvd6BtftMjJfHnyTmZg9uR/y+d3Vu3+OW/v9Qday7/vin6660e+CTq8l//fXldzYrlsafxttYWuPvrMp7EX+IjeNvSNrOTxxJD//Z2t+N6/j4q7cGN6u/+finS1p/471AN6THf7B9/ENJ83zN0t7Wv3X8G7/++5P/VtONzuPWeLk8dy6iP/l36/rzq/s28o3yafy1SNfHn2n7+k/fCV7bZoy997/9cPfxr+jIFMs0/okdHf+dJ+4+nu7Zffzp8R+tpk7V12yn/yvk+2M7DXyS5w4AAAAAAAAAAAAAAAAAAAAAAAAAtisTEUcjyWRX0plMNlv7De/fxmCmUCyVT18vzs9ORPW3soeiL9P4qsvGdyw2vv90qLY9SfPn1+X/FBG/iYg3Bw5X89lcsTCxz7EDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMORTX7/P/XNQJsdk95uNREA6IRDW5Z4mF+TrVQqlQ62BwDovK2v/63efq0DDQEAuqbN9f9wN9sBAHTPbt7/AwDPNtd/ADh4XP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosCuXL6dL5cflpVyan7i5MD9dvHlmIl+azs7M57K54tyN7GSxOFnIZ3PFma0er1As3hiN2flbI+V8qTxSWli8OlOcny1fnZoZn8xfzfd1JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JnSwuL0eKGQn3suEq9ExNo1laejYU+eSOKpaMa+JL4+8+XxdmXubPEyHnsqonjGEvvdMwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8G34JAAD//7M8Jlw=") r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000300)={0x6, 0xffffffff, 0x4, 0x610}) r1 = syz_clone(0xa8200780, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='status\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x10, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}}) write$P9_RVERSION(r9, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x91dd, 0x8, '9P2000.L'}, 0x15) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6}, 0x90) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r4, 0x10, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xbc}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3ff}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}]}, 0x68}, 0x1, 0x0, 0x0, 0x8005}, 0x4) write$binfmt_elf64(r2, &(0x7f0000001140)={{0x7f, 0x45, 0x4c, 0x46, 0xb7, 0x10, 0x81, 0x3, 0xe, 0x2, 0x3e, 0x1ff, 0x2a9, 0x40, 0x364, 0x40, 0xb, 0x38, 0x3, 0x6, 0x401}, [{0x5, 0x1, 0xe8, 0x3, 0x5, 0x5, 0x7, 0x2ec}, {0x6474e551, 0x8, 0x77, 0xf8, 0x4, 0x5, 0x7fff, 0x7}, {0x5, 0x7ff, 0x80000000, 0x0, 0x6, 0x7, 0x6, 0x6}], "9bfddf93f766958b9bbb02379b937f04cc9ac9ebc8f190c4d7b3d182ce2c658818d597ad9e8cb6d07a1f8f3315f85dbbe41eaf85399f98071da139c879aa6d3316cba889a5f5083bc5b4919b1a9539f6f07dbdba5db593ec235f64ec8ecf29d2383c7646695f7940eaa7de4f0096872b5503f0120427dc6c9cf36c635b7912a3b158ea413fcdaad5373ab3e73e560ca86b5942dd354d030348b85b3b674243", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x987) ptrace(0x10, r1) 9m56.399747385s ago: executing program 3 (id=5074): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @tick=0x65757100, 0x3, {0x1, 0xfc}}) 9m55.926483274s ago: executing program 3 (id=5077): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x20005, 0xffffff}, 0x3, {0x1, 0xfc}}) 9m55.870960394s ago: executing program 36 (id=5077): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x20005, 0xffffff}, 0x3, {0x1, 0xfc}}) 10.673803024s ago: executing program 7 (id=9054): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000002740)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001180)="1b", 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) 9.792998011s ago: executing program 7 (id=9065): sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create(0x1ff) recvmmsg(0xffffffffffffffff, &(0x7f0000003f00), 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mount(0x0, 0x0, 0x0, 0x44021, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfe1d, @loopback={0xe0}, 0x1848ade0}, 0x1c) listen(r0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) 9.778928124s ago: executing program 9 (id=9066): prlimit64(0x0, 0x9, &(0x7f0000000280)={0x4f59, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x3263, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10004, 0x8000, 0x1, 0x8, 0x20005, 0xfffc, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000018000000324900008200000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000100)={r3, &(0x7f0000002740), 0x0}, 0x20) connect$unix(r1, &(0x7f0000000100)=@file={0x0, './bus\x00'}, 0x5f) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000000f40000000010000000000000000000080002009ea60002"], 0x24}, 0x1, 0x0, 0x0, 0x44840}, 0x40080) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e20, @private=0xa010102}, 0x10) sendmmsg$inet(r5, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)="1c2b", 0x2}], 0x1}}], 0x1, 0x8101) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000780)={&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/237, 0xed, 0x0, 0x0}, &(0x7f0000000800)=0x40) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @local}, 0x4, 0x0, 0x804}}, 0x2e) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) close(r6) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) 9.675670751s ago: executing program 7 (id=9067): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r2, 0x0, 0xc8) write$binfmt_aout(r2, 0x0, 0xc8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000102000aac14140ce000036a49e832f0", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.50125721s ago: executing program 7 (id=9068): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/4086, 0xff6}], 0x1, 0x176, 0x402) 9.485425003s ago: executing program 7 (id=9069): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0x7, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x0, 0x8, 0x4ac, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x21) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)=0x20) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r0, 0x0) fsync(r1) 9.423969273s ago: executing program 9 (id=9070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) io_setup(0xbf3, &(0x7f0000000000)=0x0) io_pgetevents(r6, 0x8000023, 0x800000000000087, &(0x7f00000001c0), &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100)={&(0x7f00000002c0), 0x8}) mount$9p_fd(0x0, 0x0, &(0x7f0000000380), 0x21c400, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002"], 0x80}, 0x1, 0x0, 0x0, 0x20044091}, 0x20048000) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x110c230000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff010000000000000000000000000001fc02000000000000000000000000000000000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011000a010102000000000000000000000073ff3552331bca293b7910d179f42a00"], 0xa0}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x203, 0xe1, &(0x7f0000000200)=""/225, 0x0, 0x5}, 0x94) 9.359436033s ago: executing program 7 (id=9071): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket(0x22, 0x2, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000080)={0x28, 0x21, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x400, 0x0, 0x0, @str='\x00\x00\x00\x01\x01b'}, @nested={0xc, 0x11, 0x0, 0x1, [@typed={0x8, 0xdd, 0x0, 0x0, @pid}]}]}, 0x28}], 0x1}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x3, 0x4000000000007ffe, 0x100000b860}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0xda8d) accept4$inet(r4, 0x0, 0x0, 0x800) socket$nl_sock_diag(0x10, 0x3, 0x4) close(r1) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000000, 0x80010, r0, 0x0) r5 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x4, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, {0x0, r9}}) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r11, 0x5, &(0x7f00000005c0)='fd', 0x0, r10) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r11, 0x0, 0x2) fchdir(r12) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) 7.057776209s ago: executing program 1 (id=9088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000240), 0x3af4701e) ppoll(&(0x7f0000000d40)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(0xffffffffffffffff, 0x4008941a, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x10e, &(0x7f0000000780)={[{@bsdgroups}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000010) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs={0x1, 0x0, 0x400000}, 0x6e) r2 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000180)={r2}, &(0x7f00000001c0)={'enc=', 'pkcs1', ' hash=', {'sha512-arm\x00'}}, 0x0, &(0x7f0000000380)) getpgid(0xffffffffffffffff) r3 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x389040, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsync(r4) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fd060025050048abbbc4560aab00001800018014000200755ceea396dab87cd3648fbc2a3973797a5f74756e00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.309098342s ago: executing program 8 (id=9091): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x0, 0x0, 0x0}, 0x94) r0 = syz_io_uring_setup(0x5373, 0x0, 0x0, &(0x7f0000000140), 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f00000001c0)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000002740)=[{{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f0000001080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000014c0)=[{&(0x7f0000001180)="1b", 0x1}], 0x1}}], 0x2, 0x4000800) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r5, 0x8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x5, 0x8, 0x43, 0x42}, 0x50) 4.657393421s ago: executing program 1 (id=9092): ioprio_set$uid(0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2a402b, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e0600000e"]) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = openat$incfs(0xffffffffffffff9c, 0x0, 0x1c10c1, 0x9c37611dc13d0db7) fchown(r5, 0x0, 0xee01) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x9b, 0x8, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x7, 0x6c7}, 0x2, 0x0, 0x10ffe, 0x9, 0xffffffffffffffff, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000012000000000000000000", @ANYRESHEX, @ANYRES64=r5], &(0x7f0000000140)='syzkaller\x00', 0x3}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x10008001) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) 3.40764408s ago: executing program 8 (id=9094): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, r0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x24000810) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000040)={{r5}, "187379a08d6a2cb13fec7213254de7594759c21fe471c1de610d145d240b0b4c62aa3f34ad0af9b475668064cbf0d39ed0545fb86eec135afa3f72532dd5fb61cfe3e33ea23b4f08d0485d68a041b49e9c0095425c5900548065822d65a1383186a480e0dc5c796338f028f85f2b8adaf7a91a8e96a6257759b3c9f23fc5ea2f9f2d5924d0051674174eafbc76a6c7aceb1a970a837ebad54c8fdc8b6f66d7491e5a6b7969c3ecfe484a2ee23b67d8abbe00b7a09bc9fe84f9def3dcfb10cfb8e040bba9159daff4b2583d99e721480972de981c571c5dde85e3ac5dd06e662f8292c65bd5db997aaf7d2b46a9470cc9b1b4c175348dc82e3a6d71ba2f4be51631ab953a153d85895b31f7987036793a1000acae52994beb1e976e0f220980625948247f7013c1031f769a1c729d9a004b9781a788fe1e779420884bea9b72d5325f6ca67d600a9f1897ef854979acabb227be3f4e229d90b04ed258246bd5d13a118b950af31b92865b670450d804000e571e5b1d3fceb0f36f6bdebeaed9df7dccf4c1861e676bb9322e07f2eee150e7e4396064b59323afa7cbad78b9f8e27d57c293f173c2b3d45c2269800412c263f78492dae1f043e8b578b82db2f22c0b689c24237fa76ba1f0b93b243ba8686b2a4da443009647a973f611771277898a54f25a8bbbcbca79cb8ffec494e31036c9084f660e59b064c17f844e213620526a3e417beef5d252faea6624aa644ddc85cee3e0db1351ec09a970c32eb08e763eedd5b6f183fb56d389fa1a89c239dc9faf49cdb3ae4205f831f2a4106c0ec6297c307f8e4d3864d67616922038e9f0f97a5230611121d9d5cc0461ed99c41f2bc74ca97bd3dc7c2261f8a60bc51c2bfc316f06cbd27da09bb88c105b2466ab4d8bcb6516f3431773d336ce914da934dc8462ad997862aa2c855bddee4fb134ca22dc9bb3be636c0c0f6cef2d5795e3129a1eecf2c843185689880bb8369866e4d760ef5445293310add7e4b88cead626f632ca49f6011e6ae2f9010f6a4896c44e1da95a75ae96592f6db73ebe63a3215e75d9459117595557ff659cde016ba2427212530ca1fb93a4bbec26cdf5210a0bda0b7a72eeb046d7e577f362458d972fe4808fcfc5a92aa391920b37236d0e5b45f114d009df0331596980b844cca2fa8424662e5ec0303fdb3ab0d91dc2889eb1bd48bc87a5d591a66178376a9485338f8fb6eb6c52d06d3d3bdb27aac5ccda1ae5f566f174eb328301276e1f654f7ca283c8cff1f33ab72b29aa5c70fe2df514c9848d88649fbfbed241677f08a08301c3b83991f99ab1ced5899a01d8f20a71fe38436eb23f6534d8c4ff91a66ea8a41207844e9f805bda600fb944f08440f5a0be0438989eef6b85bd980ab6cae77d5032b4b0334d72d5e7e360522cd025b3d33d7d24566207a826b0203cbb66b450e99cf965747cbed703785e42f9ef341d540296f457734bd16dde53d85dbd2e2e59b3e614df6982fc21205bcd6fda3c73e417d67839a03b1aa40a94c2775f69e601bdde49d56e01f6ee4c91ef0ed4f261927e16921f40b58dfc71d12c8801ca1a9fb31a0f818f3cb550c5c513ef6368136aa208d776fc41306ceb6a9ee9b2a1900c69f1bcc5fde54c0dc4604bbe14994956320bd4ea252d5b3c95b9239a7a5d74a216bcf15edbb552de0b2a577982f2b363d4da1267c69e12bc6f4eb92da03eb3ecd214c09113370c409de12a8ed8deaf70e58425e9580c6b36857665917b4fa60b94011cac6bd5bdfdd266cce63a2d9517c9945fdcb9a94fc33694941c4facc06691a0ea3066cef6d67e45044f5584a042b1e012bcfe04c98f3910c427d1502372992bc905054a2f89fac829ff54f0f87850b4057fc163840b8c68f192bef8e6cd59c56dd2690df358626d38e4d6d4432c92d4379f2c6d6792cd4efc91514704b49f201126c3fba2b4ca67f23694dbd59412a2ca555975b4a8b30b53ab1f47e9a23a68b101198dd33ba40ed7ad44f893a4dc73d0c0f6564eccc6082cedb999beaf8490cb052900680c16b37cab392b1bbd5e9e61c7f08116ca1575beddad12826a4e412ce3d403daede319138608ba24a952c488abc3973933aebd467a0a7b627840d67860a184361692f674928690192a991c66bb6b2aa7fe64526e6c6a3bf04e515b8df98e887fd85d386d8626c0abf9aaff5229969aa7bbd50fec72f7fa97a8c700809217d865d9487d004967c6f0e177d2c368f470d0ed21047ff3e7d2412a2c00e753f1974a676cde94c2b771cb234b7d1ccfd91134a3799f299e9926bee025f749b45e0370dff10f47ebc66f9c074a9478857194698007a3c5b064c334887b268134d85597d404817b2ee8922b0179b2a1523d3431ddd0678636162bf9518226483fc1ec459b5eb51701e01a2c3dc617b00cbab7fddade423c7d7553cbced76d20f104a6d2dc9029652246c07d257226b728250570c5588103c62898c68d9b0f8985910fa4fd93f97b5b1354d2948314c19e8efdc1cbcfb590eff0fb3230e68b7b4170bd08b229bbcbf15f1d9ec42863c25398a144ee2717660dc5daac7d0e6b906660a2db459d009dc451a66a7c2decead99f830eea4fad0f7c990dd285e3937e2f3db26ea353edebb9217de90bbf8cdda0fc415b81fc00fbe46e78d85cc435ae829ed0e8b2e87eee7e2339696fc038b347b82893aaf0b636183ceae1363214997dd0a11d634930a21aa05d3b843d80a543975c61233cf6143927ce5f85c7e6850b60308d944b094b5c0b5a578b26bac675ad297f12ea5a476848e4cfcb5dd83d73075c6cc742d179d0584be8de70a2c37967b84f86e8e3d484693063b78d2428d0b5f84114d42f2e47bfbb3ca3006ccf80dce0dc6a06bfe735f5d10456254f19eb9ff70ad77f4c61c91b0cb890ce48536cc387881e28e7997903e288ed0554479757728f28083a9d6ec8e983ff42961654fd99d58902e47aa840b31eaa53a64d8b5dd599a0e0c340950cb2376ba14a4eea59e4b0d2f5c25a55f511cb3a664c856c287b1ab8ba698721a51972835c175e441c458cbec1d4f0e678bae2306f41cacb1f1d01db27f1ff9edf2dcb5808f67c8eeea08f3f68c92489ece288688524d497dae2c3cd01d1b8ccabf2f2aa02e3b55e1c94d4063474a7e483ca3a7d836f6f24791e09712232460dd8e5ec195fd55daf0870dd736b0781de938dd46304f1d69bcefe8c54076312bd169531dd6a2f776505e7d6127c5a664573b80cbfca49ab916d227b3a201dc0c750210eca6ed55bd4a29dd1e81abbc9d61ce6da90feef3a5712966418488e0adf398007fb13bd7d6c9dc838e7a90b01c5078f771f0ecb1ca863a29669837d3f8dfc1248a2bf1444db891fa1695671b331913fe21ef71d8bbfa86297da8ec1b3b97394d6f49e29a01e0e6c6a41d020774dfc529780eeed7dbee6f78a29be5f99428ce336101d591a6a4f2d085089366d99abb1b2afeb8725b9405c44e22c54824506d6ed47f463c5d0d83563bfcefdb52744844fb6dfb165542f0546bc8522f3cb1eec39fbb637b6284c0cc8f928594b82f7b91b1e2df9522e5126d427a40d22223bce1211e4aa356ef83021c94a1b9c398b761af9c3ef3ad796927c221bc7b6729fcb44327a90be58baed356695678609ac1fec6ca3ac4962310e6414b9938b222205c44a32c268a10f611c4cfc1d12730f9d37941f3b8e3365dfdd0c17d853c0814433788bde4cf988400d9d286bb3345f00696df1d9ffe4d293f620b5b73ace3d4acfb1674a894f463081c0c1273ab69cfb81db48e6c1f8909d95727c6e8f3f368051d91705417b58bc818c0e3908d9f5ab8e89b66be4783fe9cee914cacc7a4be31d54f939717f9ef12e39a486aa7857d21054947ad0ed4cf2ee1d29551e5b40b607accd3ef58299bbc3089175096c85001da83c8003d5464ee8f0ea28f72aafc3122315a98840cfe0653df0c9970e04c3379736b8410f51bcfd239a03e7482c7e211ddc794d576b6a99b097c3ab3a3cda49c7a2e9b53777c45e5898db755eef98394c42005c51d30f82d01c3b711faff668c93c095e379f9cb523af0eda2908417aa1c496a1931a3cf159677d1ec6798e03fec2366fba1c047b2dbae93304566ecbd7434cada281a47b11dc7f8e57b417dacea0a1a19be5aa49c94ecc067437a3f69598c6525fc0c9853e7d7d3496cfae9f60a533ada51eef25050a4ec704ec3d4d4e9dfb466d97e152255ac7fc5eb92e02147185f81ae235cbbcfb57401d0c2dc6af7e3598de5ab633be3ea0a21badd837f6994bfcdc7a23e582682ab79550bc103b0156eb52034e9e722758c1a2db6273fdaa3b63c99c13c39291730f9ee4f20b2bfbfb891a45b47ccb20502b2ccc7b3401ce42cd7d5cb2271ed38a8ec92775d5ffff581202443fbd86b1e35e6c180ab76746942fad77a83726dd3e5dadeec1084d7371785667c165003f4c4866a0223a3e91fe6e3825975e0d201df0bd91bdc17e8e808f2aa7516a109541f3df2343db6e848cafdfb1e6b835a468a1b15c79620c900942b1fd01f746e6613f16116f3816d127f9b83e9ed69c17d13db5da02262a3ef12d35e62b8c4e70bd83260555ab3f279ddf19018d0208dc959539a989df695ffad53f4b63f68de4350edc198e090f95402d297cef28b02ccde0d99bfeb14efbdbc65499fbaff3bc7004ad41df45c7a6e6cf2b3bd137b33cf3d30c86f8b66c371cbb01bacb4c67193beb6670f5469fa6cbe8d60c34d2a5213fab6ce3d427023fc4c5673920bbb894dcf714ca451e1280022e58502c30a8aea90d0e302a2ecd11ced5fe8edde528f0744c617125593e06b581c91365e5ff04279474e4c13f17b8de55d9a2bf47f5d0cc582c98db85636844b807ef06aa03ec0aa0e2785d8f1d6fe0de83ee33b6d470168750a7c5439f16ef41e24db225a654c18b48578c11fcad73ba14f42ff73d1a3597b644de00e861aeab4a3a61594638a3c1d995d12cee8cd54061be7d9ede886bec4a518358800b0095baea942d4459eaa946801023a2d5e79feef2012ea62d6164af883a5f5681a981e443be01b9428375f0eb8f2de3c2ed54660c8ef6927b39528c3a880d27f230369d37868847bf5959f89437a4c5d43eaa438c40f21045c45a59441acbc14d3ba13f8a1ea323e34c7247d0db801f696b5431a6ee9e57016f4ce970a328d90874977211516f769bff1331547c5154398fcfc77d8f31054f2f5361ef19c20e5a865cb28ccadd1a805f967fa26eda84bb7a46fd46ad8d5be64a76b8ed30c4d5b29e8e552b265a9413cdc37612b013b7118e46a9a3b2b365f39c272b6a92caa2fa1babe0ab523d175b0af32974055d8f69f1d9539ba572ee882b83e51c703fb17b3cb4f14777b24346291c49c4b490e98a4db293bce1da14a59901bbb5b826f5c9cf9fdd8cc89e45776b163fb2ae659e48afdf6710d00d7177c5aa7b4596cf5480a20755f40e97d3271172fb161af26c22c76f81002d146c7dce3672869d47390502672632b5f01fde259ef558f568c79c14903a3b3a125f94e8f9b42615a2270638969003dea2db4bd47cd2e226105ff5c375523e5eb988b2876684269a1cf7202265dcfb50345345fb9b3736171c01d21fed95d2478371f7777360c4c0815a87e9d2962977553b04f458a7e31bfdd6a3889d1d33104e4a085f2f349c6bee196c9257590e88b2b78c87110cecaaa9828150f44e9ff2480de4b3378b04f969c5d422f8c85946a85ef8280efc43ac8daf9159bf"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, 0x0, 0x0) 3.011975316s ago: executing program 8 (id=9095): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x2000000, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 3.006415597s ago: executing program 6 (id=9096): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', 0x0}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$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") setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000310000/0x1000)=nil, 0x1000, 0x1000000, 0x20011, r2, 0xa025f000) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000024000480050003ff80000000050003f5000000000500030080ff000005000300020000000800020003000000080001000003"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) sendfile(r5, r4, 0x0, 0x7fffffff) r7 = openat(r1, &(0x7f0000019040)='./file0\x00', 0x200000, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$rds(r1, &(0x7f000001bd40)={0x0, 0x0, 0x0, 0x0, &(0x7f000001bbc0)=[@rdma_args={0x48, 0x114, 0x1, {{0xb, 0x5}, {&(0x7f0000019780)=""/4096, 0x1000}, &(0x7f000001b8c0)=[{&(0x7f000001a780)=""/4096, 0x1000}], 0x1, 0x4d, 0x9}}, @fadd={0x58, 0x114, 0x6, {{0x800, 0x10000}, 0x0, 0x0, 0x1, 0x6, 0x9, 0x200, 0x14, 0x3}}, @rdma_map={0x30, 0x114, 0x3, {{0x0}, &(0x7f000001ba80), 0x4c}}, @fadd={0x58, 0x114, 0x6, {{0x9, 0x2}, 0x0, 0x0, 0x0, 0x3, 0xffff, 0x7, 0x20}}], 0x128, 0x8004}, 0x80c0) ioctl$F2FS_IOC_GET_FEATURES(r7, 0x8004f50c, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r8, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964ded28f79c862e674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a9786cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25ade162ba3c91bb844aaf6fd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e57060", 0x1000}}, 0x1006) semget$private(0x0, 0x5, 0x38) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x10, r8, 0x0) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) 2.986922s ago: executing program 1 (id=9097): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) pipe2$9p(&(0x7f0000000700)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000006c0), 0x1000010, &(0x7f0000000740)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c6e6f00000000000000004c455f43484510842c00"]) sendmmsg(r0, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000004) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000006000/0x2000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ff6000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x1, 0xf3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@deltfilter={0x8, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x4004, @fd_index=0x4, 0x718a, 0x0, 0x0, 0x12, 0x1, {0x2}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)) sendto$inet(0xffffffffffffffff, &(0x7f0000000800)="30056e244af3cf2a50c08f1cbec657967305966c45d3e51f9da3d2c5c9c2de32868f2b9ad9c21490ba5a41f967892239d3d81c7cc2e8d0ea8d65f9b8d13e632a678eea842ed90df0e964f4", 0x4b, 0x4005, 0x0, 0x0) 2.437920852s ago: executing program 8 (id=9098): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000940)=0x707987cd) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @dev}, {0x2, 0x4e24, @remote}, {0x2, 0x0, @multicast1}, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x200}) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x12) 2.397245799s ago: executing program 1 (id=9099): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000008200)={0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r1) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.077006713s ago: executing program 6 (id=9100): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c00028005000100000000000400"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.03341828s ago: executing program 6 (id=9101): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd2101000000000007010000f8ffffffb502020008000000b703000000000000850000001200000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000) socket$isdn(0x22, 0x3, 0x23) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000001740), 0x12) r4 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1.9741876s ago: executing program 6 (id=9102): socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) mount$9p_fd(0x0, &(0x7f0000000c40)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}}) 1.931593717s ago: executing program 9 (id=9103): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) read$rfkill(r0, &(0x7f00000000c0), 0x8) setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x3000c000) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x100000000], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e0000eb1cdf16662c415719082abd70"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec749000000000018450000010000000000000000000000850000007800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 1.923474148s ago: executing program 6 (id=9104): io_uring_setup(0x1781, &(0x7f00000192c0)={0x0, 0x5dda, 0x40, 0x3, 0x12a}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000019100)=[{&(0x7f0000019080)="5c00000014006b05c84e21000ab16d6e23923904a50675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdd70000", 0xa3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x6}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000019140)='net/ip6_mr_vif\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030007002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) socket(0x80000000000000a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000019340)={0x0, 0xc, &(0x7f0000019180)=ANY=[@ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) setresgid(0x0, 0x0, 0xee00) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xb7f, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x128, 0x1f8, 0x490, 0x0, 0x128, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x5, 0x21, 0x2}}, @common=@inet=@length={{0x28}, {0x7, 0xb0, 0x81}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@ah={{0x30}, {[0x4d6, 0x4d4], 0xfffffff7, 0x5, 0x3}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv6=@private1, 0x2, 0x78}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x2]}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0xcb, 0x9}}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}, {0xfffffffc, 0x0, 0x0, [0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffe]}}, @common=@dst={{0x48}, {0x0, 0x4, 0x0, [0x6, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe], 0xff}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@loopback, 0x4e24}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000002c0)) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, 0x0) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r7) 1.463863685s ago: executing program 8 (id=9105): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001400190126bd7000f5d3df250a0819fe", @ANYRES32=r1, @ANYRESOCT=r0], 0x40}}, 0x8004) r2 = socket$inet6(0xa, 0x80000, 0x100000c) r3 = getpid() socket(0x5, 0xa, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRESDEC=r2], &(0x7f0000005bc0)=""/239, 0x37, 0xef, 0x9, 0x200}, 0x28) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x1000}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x1, 0x9}, 0x48) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/192, 0xc0}, {&(0x7f0000000300)=""/137, 0x89}], 0x2, &(0x7f0000000880)=[@mask_cswp={0x58, 0x114, 0x9, {{0x18, 0x1}, &(0x7f0000000400)=0x7d5b, &(0x7f0000000440)=0xd, 0x6, 0x7, 0x1, 0x5, 0x3, 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/166, 0xa6}, &(0x7f00000006c0), 0x2a}}, @cswp={0x58, 0x114, 0x7, {{0xf, 0x7fff}, &(0x7f0000000700)=0x100, &(0x7f0000000740)=0xffffffffffffff80, 0x2, 0x6, 0x1, 0x9, 0x0, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5, 0x7f}, &(0x7f0000000780)=0x4, &(0x7f00000007c0)=0x1, 0x80, 0xffffffffffffffc0, 0x7, 0xffffffff, 0x4}}, @cswp={0x58, 0x114, 0x7, {{0x4, 0x2}, &(0x7f0000000800)=0x8, &(0x7f0000000840)=0x6, 0xfffffffffffffa4c, 0x7, 0x6, 0x3, 0x76, 0x2}}], 0x190, 0x4000}, 0x4004000) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$sock_ifreq(r7, 0x8919, &(0x7f0000000480)={'bridge_slave_1\x00', @ifru_mtu=0x6}) syz_io_uring_setup(0x893, &(0x7f0000000140)={0x0, 0xaee4, 0x0, 0x2, 0x322}, 0x0, 0x0, 0x0) futex_waitv(&(0x7f0000000580)=[{0x9f, &(0x7f0000000100)=0x9f, 0x2}], 0x1, 0x0, &(0x7f0000000740)={0x77359400}, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r5, r6}, 0xc) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) setsockopt$inet6_buf(r2, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_pauseparam={0x12, 0xffffe1b2, 0x400, 0x37}}) r8 = open(&(0x7f0000000a80)='./file0\x00', 0x0, 0x8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000ac0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r8, 0x40182103, &(0x7f0000000b40)={r9, 0x3, r5, 0x7fff}) write$P9_RGETLOCK(r2, &(0x7f0000000080)=ANY=[], 0xffffffffffffff73) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x2, 0x5004) 1.331450988s ago: executing program 1 (id=9106): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) close_range(0xffffffffffffffff, r0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40) r1 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x2e8}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000100)={0x2, 0x2, 0x0, 0xc2c6d7ed92c4ca45, 0x4}) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x94}}, 0x24000810) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000040)={{r5}, "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"}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x7, 0x0, 0x0) 731.006728ms ago: executing program 9 (id=9107): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="f4b48dad4e3abf0e10dcb67fb8d982dc8efc4b8bde43ed8857c0ad42052746d55437ff969287341c8d29d0adc4751f2235969ae53ecb2863a48b0ed9f46b5c82529aa43fcde38d4474cde7a0af255b227817ea3fd1ef4caebfb2d02fe4341eef3e729b1b813e271996281c0c4c8aa096082336bd2d2af629490e7cebccf381fd0bf1b0496245eadc1210fa84388aa2c84cedd8e10cb543aa07", @ANYRESDEC=r1, @ANYRES8=r1], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008844) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000001100)={0x0, 0x9, 0x5}, 0xc) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000001240)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/../file0\x00') mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x6403dc095b1ff466, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0xfffffffd, 0x2000000, 0x8, 0xffffffff}) socket$inet6(0xa, 0x6, 0x80000000) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, 0x0) r5 = socket(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'lo\x00'}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x404c945}, 0x4024014) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000900)={0x0, @rand_addr, @local}, &(0x7f0000000940)=0xc) sendmmsg$inet(r4, &(0x7f0000000a40)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r7, @ANYRESHEX=r2, @ANYRESDEC=r4, @ANYRESHEX=r4, @ANYRES16=r2, @ANYRESDEC], 0x168}}, {{&(0x7f0000000180)={0x2, 0x4e25, @broadcast}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000240)="0db270ff77", 0x5}], 0x1, &(0x7f00000005c0)=ANY=[], 0x110}}, {{&(0x7f0000000440)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000500)="4457f39a40be85921fcadc6c0160502236b1e14eaa1fe06c263d27e5b1e499334c12d8ea71dea33f7b6af92a98815f06713a2a0ddf621146786d73231da23c18c8a0f13902b5ca69000000000000002b8c8ac83124266aeda6cf3a3cf1d86c1dd785f8325ffe5bc800e108ee8ad48f211e1191313b93ee7b624852ccfadc15adeab5596daf8b598d6e68c690a7558ad871882b021fbaf920a4ab2bc9e38b2361c4bfdba7b1cf008db294fa3000f2604a22b682be7623e9ad6f6a", 0xba}, {0x0}, {&(0x7f0000000800)="7693edb6a029d954920d9a2f4c4cb8f5846a857483470af784bc3cd2424508d1e420ac6350b3939895a8b033e4fa3cf778be7d2a28fca374ac645b12f891b26ff2b5139bed46bae793af78e069ded381f17a755e36d25453d3545b7d10", 0x5d}, {&(0x7f0000000880)}], 0x4, &(0x7f00000029c0)=ANY=[@ANYBLOB="806ed237976ee492fcd9797d61ce7eca7769537897992adf210e08ef6c12ffffffffd28a07", @ANYBLOB="7ffe720bce9c3cee34cc77132e23", @ANYRES32=r6, @ANYRESDEC=r2, @ANYBLOB="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", @ANYBLOB="da6cfb063ef5", @ANYRES32=r5], 0x150}}], 0x3, 0x28000095) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x4000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000003c0)={'ipvlan0\x00', &(0x7f0000000380)=@ethtool_sfeatures={0x3b, 0x11}}) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = socket(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.net/syz0\x00', 0x200002, 0x0) connect$l2tp6(r10, &(0x7f0000000140)={0xa, 0x0, 0x7, @mcast1, 0x5, 0x2}, 0x20) openat$cgroup_ro(r8, &(0x7f0000000400)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) write$UHID_INPUT(r9, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 700.877503ms ago: executing program 1 (id=9108): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x10507e, 0xa6) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0xfffffffffffffdef, 0x0, 0x2000000, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff}]) 537.192081ms ago: executing program 9 (id=9109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xee94}, &(0x7f00000000c0)=0xc) 536.27023ms ago: executing program 8 (id=9110): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4b, &(0x7f0000003540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60ff00f500150600fe800000000000000000000000000034fe8000000000000000000000000000aa00024e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='P'], 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000001800)=ANY=[], 0xfb, 0x1236, &(0x7f0000000600)="$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") timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ftruncate(r2, 0x6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0x1a, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x3736, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mknodat$loop(r3, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) 449.618795ms ago: executing program 9 (id=9111): prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(0x0, r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x3528cf3b9c8d8f1b, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40054}, 0x20004004) socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000008000000911193000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x13, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0xbf}]}}}]}, 0x40}}, 0x24000410) sendto$packet(r2, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fb", 0x31, 0x40, &(0x7f0000000540)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=9112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e0000000000101040000000000000000020000001c00188008000140a080000008000240000000020820034000000002240001801400018008000100e000000108000200e00000010c00028005000100000000000400"], 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): .0: USB hub found [ 1210.100459][T31842] hub 8-0:1.0: 8 ports detected [ 1210.118187][T31842] netlink: 'syz.1.8378': attribute type 36 has an invalid length. [ 1210.135978][T31842] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1210.147040][T31842] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1210.260885][T31842] netlink: 'syz.1.8378': attribute type 10 has an invalid length. [ 1210.460192][T31847] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1210.551537][T31852] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1210.865213][T31863] loop9: detected capacity change from 0 to 128 [ 1210.892940][T31863] loop9: detected capacity change from 0 to 512 [ 1210.910549][T31863] EXT4-fs: Ignoring removed mblk_io_submit option [ 1210.925952][T31863] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1210.955584][T31863] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1210.963863][T31863] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1210.979310][T31863] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8383: bg 0: block 361: padding at end of block bitmap is not set [ 1210.993908][T31863] loop9: lost filesystem error report for type 5 error -117 [ 1210.995680][T31863] EXT4-fs (loop9): Remounting filesystem read-only [ 1211.012853][T31863] EXT4-fs (loop9): 1 truncate cleaned up [ 1211.019068][T31863] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1211.043337][T31870] __nla_validate_parse: 4 callbacks suppressed [ 1211.043369][T31870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8386'. [ 1211.075617][T31863] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8383'. [ 1211.093323][T31863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8383'. [ 1211.103326][T31863] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8383'. [ 1211.112588][T31863] netlink: 'syz.9.8383': attribute type 3 has an invalid length. [ 1211.120455][T31870] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8386'. [ 1211.139022][T31863] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8383'. [ 1211.230115][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1211.240280][T31878] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8390'. [ 1212.213006][T31906] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1212.275842][T31915] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1212.544766][T31927] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8407'. [ 1214.422667][ T28] audit: type=1400 audit(1776358974.465:6264): avc: denied { watch watch_reads } for pid=31940 comm="syz.7.8410" path="/syzcgroup/cpu/syz7/cgroup.procs" dev="cgroup" ino=543 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 1214.743039][T31953] lo speed is unknown, defaulting to 1000 [ 1215.274572][T31942] loop9: detected capacity change from 0 to 1024 [ 1215.291268][T31964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1215.315767][T31942] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1215.352234][T31964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1215.364240][T31942] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1215.407411][T31942] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1215.435324][T31942] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1215.456471][T31942] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.8409: Freeing blocks not in datazone - block = 0, count = 4096 [ 1215.497458][T31942] loop9: lost filesystem error report for type 5 error -117 [ 1215.497678][T31942] EXT4-fs (loop9): 1 orphan inode deleted [ 1215.505339][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1215.505365][ C0] EXT4-fs (loop9): initial error at time 1776358975: ext4_free_blocks:6724 [ 1215.505395][ C0] EXT4-fs (loop9): last error at time 1776358975: ext4_free_blocks:6724 [ 1215.629556][T31942] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1215.654490][T31967] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1216.399952][T31990] 9p: Bad value for 'wfdno' [ 1216.441111][T31990] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1216.450406][T31990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1216.459538][T31990] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1216.606743][T31990] netlink: 'syz.6.8424': attribute type 3 has an invalid length. [ 1216.626046][T31990] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8424'. [ 1216.666915][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1217.899872][ T28] audit: type=1400 audit(1776358977.927:6265): avc: denied { accept } for pid=32010 comm="syz.8.8431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1218.365801][ T28] audit: type=1326 audit(1776358978.377:6266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.396115][ T28] audit: type=1326 audit(1776358978.377:6267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.451573][ T28] audit: type=1326 audit(1776358978.377:6268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.552011][ T28] audit: type=1326 audit(1776358978.377:6269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.579693][ T28] audit: type=1326 audit(1776358978.377:6270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.603272][ T28] audit: type=1326 audit(1776358978.377:6271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.721769][ T28] audit: type=1326 audit(1776358978.377:6272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.745385][ T28] audit: type=1326 audit(1776358978.377:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32017 comm="syz.6.8433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f927e0ec819 code=0x7ffc0000 [ 1218.897415][T32024] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8435'. [ 1219.091599][T32026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8436'. [ 1219.481149][T32038] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8438'. [ 1219.490422][T32038] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8438'. [ 1219.499644][T32029] 9pnet_fd: Insufficient options for proto=fd [ 1219.598747][T32042] tmpfs: Too small a size for current use [ 1219.616442][T32042] lo speed is unknown, defaulting to 1000 [ 1219.966833][T32052] lo: Caught tx_queue_len zero misconfig [ 1219.973672][T32052] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1220.436404][T32054] loop8: detected capacity change from 0 to 1024 [ 1220.445807][T32054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1220.457938][T32054] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1220.491940][T32054] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1220.545485][T32064] hub 8-0:1.0: USB hub found [ 1220.551515][T32064] hub 8-0:1.0: 8 ports detected [ 1220.571620][T32064] netlink: 'syz.9.8446': attribute type 36 has an invalid length. [ 1220.587822][T32064] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1220.598981][T32064] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1220.623516][T32064] netlink: 'syz.9.8446': attribute type 10 has an invalid length. [ 1220.650925][T32054] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1220.673214][T32054] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.8444: Freeing blocks not in datazone - block = 0, count = 4096 [ 1220.708608][T32054] loop8: lost filesystem error report for type 5 error -117 [ 1220.709058][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1220.723046][ C1] EXT4-fs (loop8): initial error at time 1776358980: ext4_free_blocks:6724 [ 1220.731796][ C1] EXT4-fs (loop8): last error at time 1776358980: ext4_free_blocks:6724 [ 1220.826091][T32054] EXT4-fs (loop8): 1 orphan inode deleted [ 1220.853112][T32054] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1222.001480][T32087] netlink: 131740 bytes leftover after parsing attributes in process `syz.7.8452'. [ 1222.069662][T32087] netlink: zone id is out of range [ 1222.075026][T32087] netlink: zone id is out of range [ 1222.080194][T32087] netlink: zone id is out of range [ 1222.085521][T32087] netlink: zone id is out of range [ 1222.100094][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1222.154601][T32087] netlink: zone id is out of range [ 1222.160347][T32087] netlink: zone id is out of range [ 1222.165656][T32087] netlink: zone id is out of range [ 1222.170938][T32087] netlink: zone id is out of range [ 1222.176286][T32087] netlink: zone id is out of range [ 1222.181698][T32087] netlink: zone id is out of range [ 1222.391032][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1222.391051][ T28] audit: type=1400 audit(1776358982.439:6293): avc: denied { ioctl } for pid=32095 comm="syz.7.8454" path="mnt:[4026532407]" dev="nsfs" ino=4026532407 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1222.560417][T32098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8455'. [ 1222.601237][T32098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8455'. [ 1223.324018][T32105] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8456'. [ 1223.367417][T32105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8456'. [ 1224.323731][T32122] loop9: detected capacity change from 0 to 1024 [ 1224.431047][T32122] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1224.484408][T32122] System zones: 0-1, 3-36 [ 1224.496825][T32122] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.8461: bad orphan inode 134217728 [ 1224.512540][ T28] audit: type=1400 audit(1776358984.561:6294): avc: denied { relabelfrom } for pid=32126 comm="syz.8.8463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1224.548111][T32122] loop9: lost filesystem error report for type 5 error -117 [ 1224.548819][T32122] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1224.574878][ T28] audit: type=1400 audit(1776358984.561:6295): avc: denied { relabelto } for pid=32126 comm="syz.8.8463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 1224.666224][T32133] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8465'. [ 1224.675292][ T28] audit: type=1400 audit(1776358984.621:6296): avc: denied { write } for pid=32126 comm="syz.8.8463" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1224.875523][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1224.888480][T32143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8468'. [ 1224.951650][T32143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8468'. [ 1225.151220][T32159] syz_tun: entered allmulticast mode [ 1225.166680][T32159] syz_tun: left allmulticast mode [ 1225.189233][T32165] FAULT_INJECTION: forcing a failure. [ 1225.189233][T32165] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.203494][T32165] CPU: 1 UID: 0 PID: 32165 Comm: syz.8.8475 Tainted: G W syzkaller #0 PREEMPT(full) [ 1225.203556][T32165] Tainted: [W]=WARN [ 1225.203562][T32165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1225.203574][T32165] Call Trace: [ 1225.203581][T32165] [ 1225.203589][T32165] __dump_stack+0x1d/0x30 [ 1225.203615][T32165] dump_stack_lvl+0x95/0xd0 [ 1225.203659][T32165] dump_stack+0x15/0x1b [ 1225.203679][T32165] should_fail_ex+0x263/0x280 [ 1225.203704][T32165] ? io_manage_buffers_legacy+0x188/0x6a0 [ 1225.203741][T32165] should_failslab+0x8c/0xb0 [ 1225.203770][T32165] __kmalloc_cache_noprof+0x5f/0x400 [ 1225.203799][T32165] io_manage_buffers_legacy+0x188/0x6a0 [ 1225.203828][T32165] __io_issue_sqe+0xfd/0x2d0 [ 1225.203859][T32165] io_issue_sqe+0x206/0xba0 [ 1225.203966][T32165] ? io_provide_buffers_prep+0x1c7/0x1f0 [ 1225.204023][T32165] io_submit_sqes+0x7e0/0x1170 [ 1225.204047][T32165] __se_sys_io_uring_enter+0x255/0xfb0 [ 1225.204066][T32165] ? mutex_lock+0x57/0x90 [ 1225.204101][T32165] ? mutex_unlock+0x4e/0x90 [ 1225.204129][T32165] ? fput+0x8f/0xc0 [ 1225.204149][T32165] __x64_sys_io_uring_enter+0x78/0x90 [ 1225.204168][T32165] x64_sys_call+0x1e16/0x3020 [ 1225.204204][T32165] do_syscall_64+0x12c/0x3b0 [ 1225.204227][T32165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.204247][T32165] RIP: 0033:0x7f4f640cc819 [ 1225.204318][T32165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.204406][T32165] RSP: 002b:00007f4f62b27028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1225.204424][T32165] RAX: ffffffffffffffda RBX: 00007f4f64345fa0 RCX: 00007f4f640cc819 [ 1225.204534][T32165] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000003 [ 1225.204545][T32165] RBP: 00007f4f62b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.204557][T32165] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000002 [ 1225.204568][T32165] R13: 00007f4f64346038 R14: 00007f4f64345fa0 R15: 00007fff27016368 [ 1225.204595][T32165] [ 1226.440024][T32180] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8477'. [ 1226.450147][T32180] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8477'. [ 1226.608669][ T28] audit: type=1400 audit(1776358986.652:6297): avc: denied { create } for pid=32191 comm="syz.1.8481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1226.677197][T32192] bond12: invalid ARP target 0.0.0.0 specified for addition [ 1226.714128][T32192] bond12: option arp_ip_target: invalid value (0) [ 1226.751555][T32192] bond12 (unregistering): Released all slaves [ 1227.462304][T32224] __nla_validate_parse: 1 callbacks suppressed [ 1227.462321][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8489'. [ 1227.495829][T32224] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8489'. [ 1227.528548][T32224] loop8: detected capacity change from 0 to 512 [ 1227.547546][T32224] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1227.573827][T32224] EXT4-fs (loop8): 1 truncate cleaned up [ 1227.586704][T32224] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1227.667149][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.185874][T32240] syzkaller0: entered promiscuous mode [ 1229.428045][T32264] loop9: detected capacity change from 0 to 512 [ 1229.438011][T32264] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1229.449910][T32264] EXT4-fs (loop9): 1 truncate cleaned up [ 1229.475716][T32264] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1229.526989][ T28] audit: type=1400 audit(1776358989.583:6298): avc: denied { create } for pid=32265 comm="syz.6.8500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1229.613414][T32260] FAULT_INJECTION: forcing a failure. [ 1229.613414][T32260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1229.637481][ T28] audit: type=1400 audit(1776358989.623:6299): avc: denied { listen } for pid=32262 comm="syz.9.8498" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1229.647454][T32260] CPU: 0 UID: 0 PID: 32260 Comm: syz.1.8497 Tainted: G W syzkaller #0 PREEMPT(full) [ 1229.647596][T32260] Tainted: [W]=WARN [ 1229.647620][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1229.647658][T32260] Call Trace: [ 1229.647680][T32260] [ 1229.647705][T32260] __dump_stack+0x1d/0x30 [ 1229.647850][T32260] dump_stack_lvl+0x95/0xd0 [ 1229.647929][T32260] dump_stack+0x15/0x1b [ 1229.648084][T32260] should_fail_ex+0x263/0x280 [ 1229.648176][T32260] should_fail+0xb/0x20 [ 1229.648255][T32260] should_fail_usercopy+0x1a/0x20 [ 1229.648430][T32260] _copy_from_user+0x1c/0xb0 [ 1229.648563][T32260] __sys_bpf+0x183/0x7e0 [ 1229.648798][T32260] __x64_sys_bpf+0x41/0x50 [ 1229.648910][T32260] x64_sys_call+0x10cb/0x3020 [ 1229.649017][T32260] do_syscall_64+0x12c/0x3b0 [ 1229.649131][T32260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.649220][T32260] RIP: 0033:0x7f5c4c2fc819 [ 1229.649274][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.649363][T32260] RSP: 002b:00007f5c4ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1229.649433][T32260] RAX: ffffffffffffffda RBX: 00007f5c4c575fa0 RCX: 00007f5c4c2fc819 [ 1229.649479][T32260] RDX: 000000000000004c RSI: 0000200000000640 RDI: 000000000000000a [ 1229.649590][T32260] RBP: 00007f5c4ad4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.649634][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.649675][T32260] R13: 00007f5c4c576038 R14: 00007f5c4c575fa0 R15: 00007ffc5a05aec8 [ 1229.649742][T32260] [ 1229.850355][T32275] tipc: Started in network mode [ 1229.877308][T32275] tipc: Node identity , cluster identity 4711 [ 1229.911730][T32275] tipc: Failed to obtain node identity [ 1229.917428][T32275] tipc: Enabling of bearer rejected, failed to enable media [ 1229.929288][T32273] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32273 comm=syz.6.8501 [ 1230.043050][T32281] FAULT_INJECTION: forcing a failure. [ 1230.043050][T32281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1230.075379][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1230.105162][T32281] CPU: 1 UID: 0 PID: 32281 Comm: syz.1.8502 Tainted: G W syzkaller #0 PREEMPT(full) [ 1230.105249][T32281] Tainted: [W]=WARN [ 1230.105256][T32281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1230.105272][T32281] Call Trace: [ 1230.105280][T32281] [ 1230.105290][T32281] __dump_stack+0x1d/0x30 [ 1230.105325][T32281] dump_stack_lvl+0x95/0xd0 [ 1230.105439][T32281] dump_stack+0x15/0x1b [ 1230.105468][T32281] should_fail_ex+0x263/0x280 [ 1230.105582][T32281] should_fail+0xb/0x20 [ 1230.105606][T32281] should_fail_usercopy+0x1a/0x20 [ 1230.105724][T32281] _copy_from_user+0x1c/0xb0 [ 1230.105764][T32281] do_tcp_getsockopt+0xc8/0x1b90 [ 1230.105817][T32281] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 1230.105844][T32281] ? do_user_addr_fault+0xb9d/0x1050 [ 1230.105939][T32281] ? raw_irqentry_exit_cond_resched+0x3d/0x60 [ 1230.106019][T32281] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 1230.106047][T32281] ? irqentry_exit+0x7d/0x5b0 [ 1230.106072][T32281] tcp_getsockopt+0x6e/0xe0 [ 1230.106122][T32281] sock_common_getsockopt+0x60/0x70 [ 1230.106151][T32281] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1230.106179][T32281] do_sock_getsockopt+0x2f5/0x570 [ 1230.106214][T32281] __x64_sys_getsockopt+0x11d/0x1a0 [ 1230.106248][T32281] x64_sys_call+0x2dcf/0x3020 [ 1230.106345][T32281] do_syscall_64+0x12c/0x3b0 [ 1230.106370][T32281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1230.106398][T32281] RIP: 0033:0x7f5c4c2fc819 [ 1230.106417][T32281] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1230.106440][T32281] RSP: 002b:00007f5c4ad4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1230.106496][T32281] RAX: ffffffffffffffda RBX: 00007f5c4c575fa0 RCX: 00007f5c4c2fc819 [ 1230.106511][T32281] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 1230.106523][T32281] RBP: 00007f5c4ad4f090 R08: 0000200000000180 R09: 0000000000000000 [ 1230.106536][T32281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1230.106548][T32281] R13: 00007f5c4c576038 R14: 00007f5c4c575fa0 R15: 00007ffc5a05aec8 [ 1230.106582][T32281] [ 1230.710990][T32287] netlink: 36 bytes leftover after parsing attributes in process `syz.9.8503'. [ 1230.722331][T32287] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8503'. [ 1230.838338][T32289] syzkaller0: entered promiscuous mode [ 1230.984813][T32263] kexec: Could not allocate control_code_buffer [ 1231.213451][T32294] 9p: Bad value for 'wfdno' [ 1231.282391][T32294] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1231.414590][T32294] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1231.424495][T32294] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1231.433664][T32294] netlink: 'syz.6.8508': attribute type 3 has an invalid length. [ 1231.448013][T32294] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8508'. [ 1231.465425][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8505'. [ 1231.474946][T32301] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8505'. [ 1231.658775][T32310] FAULT_INJECTION: forcing a failure. [ 1231.658775][T32310] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.671843][T32310] CPU: 0 UID: 0 PID: 32310 Comm: syz.7.8511 Tainted: G W syzkaller #0 PREEMPT(full) [ 1231.671876][T32310] Tainted: [W]=WARN [ 1231.671883][T32310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1231.671896][T32310] Call Trace: [ 1231.671905][T32310] [ 1231.671917][T32310] __dump_stack+0x1d/0x30 [ 1231.671981][T32310] dump_stack_lvl+0x95/0xd0 [ 1231.672008][T32310] dump_stack+0x15/0x1b [ 1231.672046][T32310] should_fail_ex+0x263/0x280 [ 1231.672154][T32310] should_failslab+0x8c/0xb0 [ 1231.672187][T32310] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1231.672229][T32310] ? sctp_get_port_local+0x438/0xae0 [ 1231.672268][T32310] sctp_get_port_local+0x438/0xae0 [ 1231.672326][T32310] sctp_do_bind+0x398/0x4b0 [ 1231.672384][T32310] sctp_connect_new_asoc+0x153/0x3a0 [ 1231.672417][T32310] sctp_sendmsg+0xfff/0x1d60 [ 1231.672454][T32310] ? selinux_socket_sendmsg+0x192/0x1c0 [ 1231.672540][T32310] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1231.672683][T32310] inet_sendmsg+0xc5/0xd0 [ 1231.672777][T32310] ? __pfx_inet_sendmsg+0x10/0x10 [ 1231.672815][T32310] ____sys_sendmsg+0x519/0x5b0 [ 1231.672884][T32310] ___sys_sendmsg+0x195/0x1e0 [ 1231.673002][T32310] __x64_sys_sendmsg+0xd4/0x160 [ 1231.673046][T32310] x64_sys_call+0x194c/0x3020 [ 1231.673084][T32310] do_syscall_64+0x12c/0x3b0 [ 1231.673116][T32310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.673182][T32310] RIP: 0033:0x7fdd2ef7c819 [ 1231.673203][T32310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.673228][T32310] RSP: 002b:00007fdd2d9cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1231.673281][T32310] RAX: ffffffffffffffda RBX: 00007fdd2f1f5fa0 RCX: 00007fdd2ef7c819 [ 1231.673406][T32310] RDX: 0000000004000890 RSI: 0000200000000140 RDI: 000000000000000c [ 1231.673423][T32310] RBP: 00007fdd2d9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.673439][T32310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.673454][T32310] R13: 00007fdd2f1f6038 R14: 00007fdd2f1f5fa0 R15: 00007fff2af37ec8 [ 1231.673493][T32310] [ 1232.292952][T32328] loop8: detected capacity change from 0 to 128 [ 1232.330770][T32328] syz.8.8515: attempt to access beyond end of device [ 1232.330770][T32328] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1233.036875][T32381] __nla_validate_parse: 4 callbacks suppressed [ 1233.036893][T32381] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8524'. [ 1233.120140][ T28] audit: type=1400 audit(1776358993.175:6300): avc: denied { remount } for pid=32385 comm="syz.1.8525" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1233.327462][T32395] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8529'. [ 1233.386247][T32398] syzkaller0: entered promiscuous mode [ 1233.496212][T32400] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8531'. [ 1233.794726][T32408] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1234.484866][T32425] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8540'. [ 1234.680463][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8541'. [ 1234.742970][T32431] tipc: Enabled bearer , priority 0 [ 1234.745549][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8541'. [ 1234.808677][T32433] syzkaller0: entered promiscuous mode [ 1234.988176][T32437] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1235.029352][T32442] netlink: 68 bytes leftover after parsing attributes in process `syz.7.8549'. [ 1235.127542][T32454] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1235.157336][T32451] bond0: (slave syz_tun): Releasing backup interface [ 1235.176126][T32451] net_ratelimit: 8 callbacks suppressed [ 1235.176146][T32451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1235.219325][ T28] audit: type=1400 audit(1776358995.267:6301): avc: denied { load_policy } for pid=32438 comm="syz.8.8547" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1235.240927][T32439] SELinux: failed to load policy [ 1235.304301][T32461] tipc: Started in network mode [ 1235.310972][T32461] tipc: Node identity , cluster identity 4711 [ 1235.329539][T32461] tipc: Failed to obtain node identity [ 1235.341945][T32461] tipc: Enabling of bearer rejected, failed to enable media [ 1235.448453][T32462] syzkaller0: entered promiscuous mode [ 1235.582416][T32439] loop8: detected capacity change from 0 to 32768 [ 1235.642864][T32439] loop8: p1 p3 < > [ 1235.750200][T32471] FAULT_INJECTION: forcing a failure. [ 1235.750200][T32471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.773641][T32473] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1235.794713][T32471] CPU: 1 UID: 0 PID: 32471 Comm: syz.7.8559 Tainted: G W syzkaller #0 PREEMPT(full) [ 1235.794754][T32471] Tainted: [W]=WARN [ 1235.794764][T32471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1235.794781][T32471] Call Trace: [ 1235.794790][T32471] [ 1235.794801][T32471] __dump_stack+0x1d/0x30 [ 1235.794910][T32471] dump_stack_lvl+0x95/0xd0 [ 1235.794990][T32471] dump_stack+0x15/0x1b [ 1235.795020][T32471] should_fail_ex+0x263/0x280 [ 1235.795056][T32471] should_fail+0xb/0x20 [ 1235.795101][T32471] should_fail_usercopy+0x1a/0x20 [ 1235.795150][T32471] _copy_to_user+0x20/0xa0 [ 1235.795190][T32471] simple_read_from_buffer+0xb5/0x130 [ 1235.795217][T32471] proc_fail_nth_read+0x10e/0x150 [ 1235.795323][T32471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1235.795361][T32471] vfs_read+0x1ab/0x7f0 [ 1235.795398][T32471] ? __rcu_read_unlock+0x4e/0x70 [ 1235.795428][T32471] ? __fget_files+0x184/0x1c0 [ 1235.795463][T32471] ? mutex_lock+0x57/0x90 [ 1235.795568][T32471] ksys_read+0xdc/0x1a0 [ 1235.795606][T32471] __x64_sys_read+0x40/0x50 [ 1235.795694][T32471] x64_sys_call+0x2886/0x3020 [ 1235.795739][T32471] do_syscall_64+0x12c/0x3b0 [ 1235.795803][T32471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.795837][T32471] RIP: 0033:0x7fdd2ef3d04e [ 1235.795858][T32471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1235.795882][T32471] RSP: 002b:00007fdd2d9cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1235.795907][T32471] RAX: ffffffffffffffda RBX: 00007fdd2d9cf6c0 RCX: 00007fdd2ef3d04e [ 1235.795925][T32471] RDX: 000000000000000f RSI: 00007fdd2d9cf0a0 RDI: 0000000000000005 [ 1235.795969][T32471] RBP: 00007fdd2d9cf090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.795986][T32471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.796020][T32471] R13: 00007fdd2f1f6038 R14: 00007fdd2f1f5fa0 R15: 00007fff2af37ec8 [ 1235.796046][T32471] [ 1236.010650][T31582] tipc: Node number set to 2886997162 [ 1236.045429][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8561'. [ 1236.081134][T32476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8561'. [ 1236.116972][T32482] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8563'. [ 1236.222395][T32485] bond0: (slave syz_tun): Releasing backup interface [ 1236.238511][T32485] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1236.290770][T31582] syz1: Port: 1 Link DOWN [ 1236.483159][T32490] loop9: detected capacity change from 0 to 1024 [ 1236.515925][T32490] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1236.554481][T32490] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1236.683933][T32490] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1236.698045][T32490] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1236.726369][T32490] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.8566: Freeing blocks not in datazone - block = 0, count = 4096 [ 1236.762427][T32490] loop9: lost filesystem error report for type 5 error -117 [ 1236.762656][T32490] EXT4-fs (loop9): 1 orphan inode deleted [ 1236.770525][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1236.770551][ C1] EXT4-fs (loop9): initial error at time 1776358996: ext4_free_blocks:6724 [ 1236.770580][ C1] EXT4-fs (loop9): last error at time 1776358996: ext4_free_blocks:6724 [ 1237.078491][T32490] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1237.377559][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.430796][T32514] syzkaller0: entered promiscuous mode [ 1237.528111][T32519] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1238.035524][T32531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1238.056903][T32528] loop8: detected capacity change from 0 to 128 [ 1238.157643][T32539] netlink: 'syz.6.8581': attribute type 1 has an invalid length. [ 1238.384498][T32544] hub 8-0:1.0: USB hub found [ 1238.390585][T32544] hub 8-0:1.0: 8 ports detected [ 1238.403399][T32544] netlink: 'syz.7.8580': attribute type 36 has an invalid length. [ 1238.419377][T32544] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1238.429728][T32544] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1238.453197][T32544] netlink: 'syz.7.8580': attribute type 10 has an invalid length. [ 1238.935137][T32549] loop8: detected capacity change from 0 to 4096 [ 1239.014353][T32549] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.027956][T32552] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1239.051935][T32557] __nla_validate_parse: 4 callbacks suppressed [ 1239.051995][T32557] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8583'. [ 1239.082764][T32556] syzkaller0: entered promiscuous mode [ 1239.125826][T32562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8587'. [ 1239.187101][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.353994][T32569] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8588'. [ 1239.525042][T32568] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8590'. [ 1239.537926][T32568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8590'. [ 1239.697839][T32581] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1239.856760][T32588] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1240.095333][T32596] syzkaller0: entered promiscuous mode [ 1240.325169][T32602] netlink: 'syz.7.8601': attribute type 10 has an invalid length. [ 1240.356447][T32602] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1240.404826][T32602] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1240.506826][T32603] bond1: (slave macvlan3): Enslaving as a backup interface with an up link [ 1240.637668][T32606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8603'. [ 1240.658719][T32606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8603'. [ 1240.963427][T32614] netlink: 'syz.1.8604': attribute type 36 has an invalid length. [ 1240.980331][T32614] bridge18: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1240.990609][T32614] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1241.012710][T32614] netlink: 'syz.1.8604': attribute type 10 has an invalid length. [ 1241.157587][T32618] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8606'. [ 1241.493903][T32621] netlink: 'syz.7.8607': attribute type 10 has an invalid length. [ 1241.612432][T32621] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1241.656507][T32626] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1241.714129][T32631] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1241.740071][T32630] syzkaller0: entered promiscuous mode [ 1241.770614][T32630] 0: reclassify loop, rule prio 0, protocol 800 [ 1241.904003][T32643] FAULT_INJECTION: forcing a failure. [ 1241.904003][T32643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1241.934910][T32643] CPU: 1 UID: 0 PID: 32643 Comm: syz.1.8613 Tainted: G W syzkaller #0 PREEMPT(full) [ 1241.935026][T32643] Tainted: [W]=WARN [ 1241.935034][T32643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1241.935050][T32643] Call Trace: [ 1241.935059][T32643] [ 1241.935068][T32643] __dump_stack+0x1d/0x30 [ 1241.935099][T32643] dump_stack_lvl+0x95/0xd0 [ 1241.935132][T32643] dump_stack+0x15/0x1b [ 1241.935156][T32643] should_fail_ex+0x263/0x280 [ 1241.935190][T32643] should_fail+0xb/0x20 [ 1241.935261][T32643] should_fail_usercopy+0x1a/0x20 [ 1241.935297][T32643] _copy_to_user+0x20/0xa0 [ 1241.935406][T32643] simple_read_from_buffer+0xb5/0x130 [ 1241.935436][T32643] proc_fail_nth_read+0x10e/0x150 [ 1241.935476][T32643] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1241.935536][T32643] vfs_read+0x1ab/0x7f0 [ 1241.935572][T32643] ? __rcu_read_unlock+0x4e/0x70 [ 1241.935604][T32643] ? __fget_files+0x184/0x1c0 [ 1241.935679][T32643] ? mutex_lock+0x57/0x90 [ 1241.935741][T32643] ksys_read+0xdc/0x1a0 [ 1241.935770][T32643] __x64_sys_read+0x40/0x50 [ 1241.935807][T32643] x64_sys_call+0x2886/0x3020 [ 1241.935901][T32643] do_syscall_64+0x12c/0x3b0 [ 1241.935951][T32643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.935972][T32643] RIP: 0033:0x7f5c4c2bd04e [ 1241.935988][T32643] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1241.936008][T32643] RSP: 002b:00007f5c4ad2dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1241.936055][T32643] RAX: ffffffffffffffda RBX: 00007f5c4ad2e6c0 RCX: 00007f5c4c2bd04e [ 1241.936071][T32643] RDX: 000000000000000f RSI: 00007f5c4ad2e0a0 RDI: 0000000000000003 [ 1241.936087][T32643] RBP: 00007f5c4ad2e090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.936104][T32643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.936197][T32643] R13: 00007f5c4c576128 R14: 00007f5c4c576090 R15: 00007ffc5a05aec8 [ 1241.936218][T32643] [ 1242.172240][T32645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1242.184341][T32645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8614'. [ 1242.313935][T32648] netlink: 'syz.1.8615': attribute type 1 has an invalid length. [ 1242.566083][ T28] audit: type=1326 audit(1776359002.621:6302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.594676][ T28] audit: type=1326 audit(1776359002.621:6303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.620217][ T28] audit: type=1326 audit(1776359002.651:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.646044][ T28] audit: type=1326 audit(1776359002.651:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.685399][ T28] audit: type=1326 audit(1776359002.651:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.751123][T32665] geneve1: entered promiscuous mode [ 1242.753084][ T28] audit: type=1326 audit(1776359002.651:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.811230][ T28] audit: type=1326 audit(1776359002.651:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.866475][ T28] audit: type=1326 audit(1776359002.681:6309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.916545][ T28] audit: type=1326 audit(1776359002.681:6311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1242.958620][T32663] loop8: detected capacity change from 0 to 128 [ 1242.986184][ T28] audit: type=1326 audit(1776359002.681:6310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32660 comm="syz.8.8621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f640cc819 code=0x7ffc0000 [ 1243.015860][T32663] syz.8.8622: attempt to access beyond end of device [ 1243.015860][T32663] loop8: rw=0, sector=121, nr_sectors = 920 limit=128 [ 1243.184423][T32679] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1243.277529][T32681] lo speed is unknown, defaulting to 1000 [ 1243.394067][T32688] netlink: 'syz.7.8633': attribute type 4 has an invalid length. [ 1243.414217][T32691] netlink: 'syz.6.8634': attribute type 10 has an invalid length. [ 1243.425151][T32691] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1243.441412][T32691] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1244.183475][T32718] __nla_validate_parse: 8 callbacks suppressed [ 1244.183495][T32718] netlink: 76 bytes leftover after parsing attributes in process `syz.8.8645'. [ 1244.550697][T32729] netlink: 'syz.6.8649': attribute type 10 has an invalid length. [ 1244.560982][T32731] FAULT_INJECTION: forcing a failure. [ 1244.560982][T32731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1244.590685][T32729] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1244.592199][T32731] CPU: 0 UID: 0 PID: 32731 Comm: syz.8.8647 Tainted: G W syzkaller #0 PREEMPT(full) [ 1244.592303][T32731] Tainted: [W]=WARN [ 1244.592326][T32731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1244.592371][T32731] Call Trace: [ 1244.592394][T32731] [ 1244.592426][T32731] __dump_stack+0x1d/0x30 [ 1244.592546][T32731] dump_stack_lvl+0x95/0xd0 [ 1244.592650][T32731] dump_stack+0x15/0x1b [ 1244.592750][T32731] should_fail_ex+0x263/0x280 [ 1244.592867][T32731] should_fail+0xb/0x20 [ 1244.592946][T32731] should_fail_usercopy+0x1a/0x20 [ 1244.593054][T32731] _copy_from_user+0x1c/0xb0 [ 1244.593156][T32731] ___sys_sendmsg+0xc1/0x1e0 [ 1244.593409][T32731] __x64_sys_sendmsg+0xd4/0x160 [ 1244.593506][T32731] x64_sys_call+0x194c/0x3020 [ 1244.593604][T32731] do_syscall_64+0x12c/0x3b0 [ 1244.593692][T32731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.593810][T32731] RIP: 0033:0x7f4f640cc819 [ 1244.593866][T32731] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.593992][T32731] RSP: 002b:00007f4f62b27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1244.594079][T32731] RAX: ffffffffffffffda RBX: 00007f4f64345fa0 RCX: 00007f4f640cc819 [ 1244.594134][T32731] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1244.594176][T32731] RBP: 00007f4f62b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.594221][T32731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.594257][T32731] R13: 00007f4f64346038 R14: 00007f4f64345fa0 R15: 00007fff27016368 [ 1244.594379][T32731] [ 1244.790311][T32735] loop8: detected capacity change from 0 to 1024 [ 1244.810734][T32735] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1244.823881][T32727] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 1244.833916][T32735] System zones: 0-1, 3-36 [ 1244.849393][T32735] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.8650: bad orphan inode 134217728 [ 1244.876577][T32727] netlink: 76 bytes leftover after parsing attributes in process `syz.7.8648'. [ 1244.898684][T32735] loop8: lost filesystem error report for type 5 error -117 [ 1244.899249][T32735] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.999566][T32739] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8651'. [ 1245.019340][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.114433][T32747] sctp: [Deprecated]: syz.7.8655 (pid 32747) Use of int in max_burst socket option. [ 1245.114433][T32747] Use struct sctp_assoc_value instead [ 1245.163598][T32749] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1246.007372][T32758] netlink: 132 bytes leftover after parsing attributes in process `syz.7.8658'. [ 1246.167123][ T300] FAULT_INJECTION: forcing a failure. [ 1246.167123][ T300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1246.210615][ T300] CPU: 0 UID: 0 PID: 300 Comm: syz.8.8661 Tainted: G W syzkaller #0 PREEMPT(full) [ 1246.210650][ T300] Tainted: [W]=WARN [ 1246.210659][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1246.210676][ T300] Call Trace: [ 1246.210685][ T300] [ 1246.210695][ T300] __dump_stack+0x1d/0x30 [ 1246.210739][ T300] dump_stack_lvl+0x95/0xd0 [ 1246.210770][ T300] dump_stack+0x15/0x1b [ 1246.210798][ T300] should_fail_ex+0x263/0x280 [ 1246.210837][ T300] should_fail+0xb/0x20 [ 1246.210906][ T300] should_fail_usercopy+0x1a/0x20 [ 1246.210949][ T300] _copy_from_user+0x1c/0xb0 [ 1246.211036][ T300] kvmemdup_bpfptr_noprof+0x86/0xf0 [ 1246.211075][ T300] map_update_elem+0x4b6/0x6d0 [ 1246.211116][ T300] __sys_bpf+0x5e1/0x7e0 [ 1246.211219][ T300] __x64_sys_bpf+0x41/0x50 [ 1246.211251][ T300] x64_sys_call+0x10cb/0x3020 [ 1246.211350][ T300] do_syscall_64+0x12c/0x3b0 [ 1246.211409][ T300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.211460][ T300] RIP: 0033:0x7f4f640cc819 [ 1246.211481][ T300] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.211505][ T300] RSP: 002b:00007f4f62b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1246.211530][ T300] RAX: ffffffffffffffda RBX: 00007f4f64345fa0 RCX: 00007f4f640cc819 [ 1246.211624][ T300] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000002 [ 1246.211640][ T300] RBP: 00007f4f62b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.211657][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.211723][ T300] R13: 00007f4f64346038 R14: 00007f4f64345fa0 R15: 00007fff27016368 [ 1246.211747][ T300] [ 1246.711143][ T311] loop8: detected capacity change from 0 to 512 [ 1246.843041][ T314] netlink: 'syz.8.8666': attribute type 10 has an invalid length. [ 1246.913044][ T314] team0 (unregistering): Port device macvlan1 removed [ 1246.987414][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1247.003550][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1248.090562][ T346] loop8: detected capacity change from 0 to 1024 [ 1248.150151][ T346] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1248.195007][ T346] System zones: 0-1, 3-36 [ 1248.207140][ T346] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.8676: bad orphan inode 134217728 [ 1248.244745][ T346] loop8: lost filesystem error report for type 5 error -117 [ 1248.246004][ T346] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.393883][T31582] SELinux: failure in sel_netif_sid_slow(), invalid network interface (92) [ 1248.426240][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1248.553710][T31582] SELinux: failure in sel_netif_sid_slow(), invalid network interface (121) [ 1248.738863][ T363] loop8: detected capacity change from 0 to 1024 [ 1248.751584][ T363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1248.767968][ T363] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1248.785708][ T363] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1248.799498][ T363] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1248.807626][ T363] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.8681: Freeing blocks not in datazone - block = 0, count = 4096 [ 1248.824572][ T363] loop8: lost filesystem error report for type 5 error -117 [ 1248.824861][ T363] EXT4-fs (loop8): 1 orphan inode deleted [ 1248.838611][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1248.838638][ C1] EXT4-fs (loop8): initial error at time 1776359008: ext4_free_blocks:6724 [ 1248.838673][ C1] EXT4-fs (loop8): last error at time 1776359008: ext4_free_blocks:6724 [ 1248.897888][ T363] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1248.976172][T25075] bond7 (unregistering): (slave bridge12): Releasing backup interface [ 1249.370821][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1249.420917][T25075] bond0 (unregistering): Released all slaves [ 1249.429806][T25075] bond1 (unregistering): Released all slaves [ 1249.440263][T25075] bond2 (unregistering): Released all slaves [ 1249.452362][T25075] bond3 (unregistering): Released all slaves [ 1249.462893][T25075] bond4 (unregistering): Released all slaves [ 1249.473766][T25075] bond5 (unregistering): Released all slaves [ 1249.483527][T25075] bond6 (unregistering): Released all slaves [ 1249.495279][T25075] bond7 (unregistering): Released all slaves [ 1249.506793][T25075] bond8 (unregistering): Released all slaves [ 1249.516988][T25075] bond9 (unregistering): Released all slaves [ 1249.526961][T25075] bond10 (unregistering): Released all slaves [ 1249.537812][T25075] bond11 (unregistering): Released all slaves [ 1249.547775][T25075] bond12 (unregistering): Released all slaves [ 1249.560060][ T362] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 1249.565075][ T379] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1249.618218][ T349] lo speed is unknown, defaulting to 1000 [ 1249.629489][ T383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8687'. [ 1249.678309][T25075] hsr_slave_0: left promiscuous mode [ 1249.696204][T25075] hsr_slave_1: left promiscuous mode [ 1249.698894][ T385] loop9: detected capacity change from 0 to 128 [ 1249.729392][ T388] netlink: 'syz.7.8689': attribute type 10 has an invalid length. [ 1249.740170][T25075] veth1_macvtap: left promiscuous mode [ 1249.747490][T25075] veth0_macvtap: left allmulticast mode [ 1249.754723][T25075] veth0_macvtap: left promiscuous mode [ 1249.764324][ T389] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8690'. [ 1249.775301][T25075] veth1_vlan: left promiscuous mode [ 1249.781927][T25075] veth0_vlan: left promiscuous mode [ 1249.827337][ T391] loop9: detected capacity change from 0 to 512 [ 1249.843168][ T391] EXT4-fs: Ignoring removed mblk_io_submit option [ 1249.851410][ T391] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1249.934990][T25075] team0 (unregistering): Port device macvlan1 removed [ 1250.001950][ T391] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1250.022899][ T391] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1250.031623][ T391] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8688: bg 0: block 361: padding at end of block bitmap is not set [ 1250.082173][ T391] loop9: lost filesystem error report for type 5 error -117 [ 1250.082726][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1250.096889][ C0] EXT4-fs (loop9): initial error at time 1776359010: ext4_validate_block_bitmap:441 [ 1250.106443][ C0] EXT4-fs (loop9): last error at time 1776359010: ext4_validate_block_bitmap:441 [ 1250.126919][ T391] EXT4-fs (loop9): Remounting filesystem read-only [ 1250.134142][ T391] EXT4-fs (loop9): 1 truncate cleaned up [ 1250.357967][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 1250.358066][ T28] audit: type=1400 audit(1776359010.425:6350): avc: denied { read } for pid=396 comm="syz.8.8691" path="socket:[110260]" dev="sockfs" ino=110260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1250.395464][ T397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59426 sclass=netlink_route_socket pid=397 comm=syz.8.8691 [ 1250.493896][ T28] audit: type=1400 audit(1776359010.455:6351): avc: denied { write } for pid=396 comm="syz.8.8691" path="socket:[110260]" dev="sockfs" ino=110260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1251.003766][ T391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1251.025176][ T391] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8688'. [ 1251.115829][ T391] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8688'. [ 1251.124955][ T391] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8688'. [ 1251.134615][ T391] netlink: 'syz.9.8688': attribute type 3 has an invalid length. [ 1251.203413][ T391] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8688'. [ 1251.215677][ T390] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1251.496088][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1251.999396][ T413] hub 8-0:1.0: USB hub found [ 1252.006709][ T413] hub 8-0:1.0: 8 ports detected [ 1252.029481][ T413] netlink: 'syz.1.8697': attribute type 36 has an invalid length. [ 1252.047048][ T413] bridge19: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1252.059202][ T413] bridge19: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1252.084185][ T413] netlink: 'syz.1.8697': attribute type 10 has an invalid length. [ 1252.207894][T25075] IPVS: stop unused estimator thread 0... [ 1252.578425][ T425] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1252.855675][ T430] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8703'. [ 1252.924062][ T442] netlink: 'syz.1.8706': attribute type 10 has an invalid length. [ 1252.936262][ T442] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1253.320224][ T28] audit: type=1400 audit(1776359013.377:6352): avc: denied { cmd } for pid=454 comm="syz.1.8709" path="socket:[109278]" dev="sockfs" ino=109278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1253.365332][ T28] audit: type=1400 audit(1776359013.427:6353): avc: denied { read } for pid=454 comm="syz.1.8709" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1253.408042][ T28] audit: type=1400 audit(1776359013.427:6354): avc: denied { open } for pid=454 comm="syz.1.8709" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1253.677014][ T464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1253.976429][ T467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8712'. [ 1255.069142][ T483] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8717'. [ 1256.711713][ T476] loop9: detected capacity change from 0 to 1024 [ 1256.751004][ T476] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1256.805467][ T476] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1256.882383][ T476] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1256.924729][ T476] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1256.960243][ T476] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.8715: Freeing blocks not in datazone - block = 0, count = 4096 [ 1257.006348][ T476] loop9: lost filesystem error report for type 5 error -117 [ 1257.008281][ T476] EXT4-fs (loop9): 1 orphan inode deleted [ 1257.015810][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1257.015833][ C1] EXT4-fs (loop9): initial error at time 1776359017: ext4_free_blocks:6724 [ 1257.015890][ C1] EXT4-fs (loop9): last error at time 1776359017: ext4_free_blocks:6724 [ 1257.132788][ T476] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1257.172255][ T28] audit: type=1400 audit(1776359017.239:6355): avc: denied { read append } for pid=509 comm="syz.1.8724" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1257.198016][ T28] audit: type=1400 audit(1776359017.259:6356): avc: denied { open } for pid=509 comm="syz.1.8724" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1257.260425][ T28] audit: type=1400 audit(1776359017.319:6357): avc: denied { ioctl } for pid=509 comm="syz.1.8724" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 1257.352778][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1257.876359][ T518] loop9: detected capacity change from 0 to 128 [ 1257.905903][ T518] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1258.071837][ T518] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1258.223237][ T518] EXT4-fs warning (device loop9): ext4_dirblock_csum_verify:375: inode #2: comm syz.9.8725: No space for directory leaf checksum. Please run e2fsck -D. [ 1258.348475][ T518] EXT4-fs error (device loop9): htree_dirblock_to_tree:1051: inode #2: comm syz.9.8725: Directory block failed checksum [ 1258.368766][ T529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8728'. [ 1258.535374][T30318] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1258.719839][ T536] netlink: 'syz.6.8731': attribute type 10 has an invalid length. [ 1258.821679][ T544] netlink: 20 bytes leftover after parsing attributes in process `syz.7.8735'. [ 1258.970849][ T548] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8736'. [ 1258.980040][ T548] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8736'. [ 1258.989543][ T548] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8736'. [ 1258.998617][ T548] netlink: 'syz.7.8736': attribute type 3 has an invalid length. [ 1259.006466][ T548] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8736'. [ 1260.563568][ T568] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8742'. [ 1260.925668][ T579] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8746'. [ 1261.339234][ T587] syzkaller0: entered promiscuous mode [ 1261.340889][ T590] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8750'. [ 1261.360017][ T587] 0: reclassify loop, rule prio 0, protocol 800 [ 1261.591846][ T580] loop9: detected capacity change from 0 to 1024 [ 1261.602438][ T580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1261.695438][ T580] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1261.816772][ T580] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1261.837107][ T580] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1262.237652][ T580] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.8744: Freeing blocks not in datazone - block = 0, count = 4096 [ 1262.319656][ T580] loop9: lost filesystem error report for type 5 error -117 [ 1262.320941][ T580] EXT4-fs (loop9): 1 orphan inode deleted [ 1262.328584][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1262.328614][ C1] EXT4-fs (loop9): initial error at time 1776359022: ext4_free_blocks:6724 [ 1262.328644][ C1] EXT4-fs (loop9): last error at time 1776359022: ext4_free_blocks:6724 [ 1262.623350][ T580] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1262.760842][ T619] netlink: 'syz.7.8758': attribute type 10 has an invalid length. [ 1262.801820][ T580] 9pnet_fd: Insufficient options for proto=fd [ 1262.889199][ T621] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8759'. [ 1264.003387][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1264.100189][ T639] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8764'. [ 1264.296536][ T644] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=644 comm=syz.6.8766 [ 1264.361829][ T646] loop9: detected capacity change from 0 to 128 [ 1264.488006][ T646] loop9: detected capacity change from 0 to 512 [ 1264.494649][ T646] EXT4-fs: Ignoring removed mblk_io_submit option [ 1264.531896][ T646] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1264.589804][ T646] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1264.689888][ T646] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1264.703884][ T646] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8767: bg 0: block 361: padding at end of block bitmap is not set [ 1264.718530][ T646] loop9: lost filesystem error report for type 5 error -117 [ 1264.735188][ T646] EXT4-fs (loop9): Remounting filesystem read-only [ 1264.766887][ T646] EXT4-fs (loop9): 1 truncate cleaned up [ 1264.773321][ T646] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1264.809601][ T646] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8767'. [ 1264.818921][ T646] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8767'. [ 1264.827953][ T646] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8767'. [ 1264.911019][ T646] netlink: 'syz.9.8767': attribute type 3 has an invalid length. [ 1264.938550][ T646] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8767'. [ 1265.139020][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1266.019615][ T685] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8779'. [ 1266.249697][ T697] FAULT_INJECTION: forcing a failure. [ 1266.249697][ T697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.283321][ T696] loop8: detected capacity change from 0 to 128 [ 1266.337324][ T697] CPU: 1 UID: 0 PID: 697 Comm: syz.9.8782 Tainted: G W syzkaller #0 PREEMPT(full) [ 1266.337363][ T697] Tainted: [W]=WARN [ 1266.337371][ T697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1266.337390][ T697] Call Trace: [ 1266.337397][ T697] [ 1266.337463][ T697] __dump_stack+0x1d/0x30 [ 1266.337498][ T697] dump_stack_lvl+0x95/0xd0 [ 1266.337528][ T697] dump_stack+0x15/0x1b [ 1266.337646][ T697] should_fail_ex+0x263/0x280 [ 1266.337679][ T697] should_fail+0xb/0x20 [ 1266.337771][ T697] should_fail_usercopy+0x1a/0x20 [ 1266.337802][ T697] _copy_from_user+0x1c/0xb0 [ 1266.337881][ T697] snd_seq_ioctl+0x11c/0x2d0 [ 1266.337995][ T697] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1266.338108][ T697] __se_sys_ioctl+0xce/0x140 [ 1266.338140][ T697] __x64_sys_ioctl+0x43/0x50 [ 1266.338169][ T697] x64_sys_call+0x1563/0x3020 [ 1266.338205][ T697] do_syscall_64+0x12c/0x3b0 [ 1266.338239][ T697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.338267][ T697] RIP: 0033:0x7fa9fc96c819 [ 1266.338292][ T697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1266.338312][ T697] RSP: 002b:00007fa9fb3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1266.338337][ T697] RAX: ffffffffffffffda RBX: 00007fa9fcbe6090 RCX: 00007fa9fc96c819 [ 1266.338355][ T697] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003 [ 1266.338372][ T697] RBP: 00007fa9fb3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.338440][ T697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.338459][ T697] R13: 00007fa9fcbe6128 R14: 00007fa9fcbe6090 R15: 00007fffb1224908 [ 1266.338484][ T697] [ 1266.595518][ T700] loop8: detected capacity change from 0 to 512 [ 1266.602812][ T700] EXT4-fs: Ignoring removed mblk_io_submit option [ 1266.704047][ T700] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1266.771768][ T700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1266.845092][ T700] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1267.091890][ T700] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8783: bg 0: block 361: padding at end of block bitmap is not set [ 1267.172339][ T700] loop8: lost filesystem error report for type 5 error -117 [ 1267.172505][ T700] EXT4-fs (loop8): Remounting filesystem read-only [ 1267.180271][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1267.180290][ C1] EXT4-fs (loop8): initial error at time 1776359027: ext4_validate_block_bitmap:441 [ 1267.180323][ C1] EXT4-fs (loop8): last error at time 1776359027: ext4_validate_block_bitmap:441 [ 1267.387204][ T700] EXT4-fs (loop8): 1 truncate cleaned up [ 1267.434568][ T700] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1267.585553][ T700] netlink: 56 bytes leftover after parsing attributes in process `syz.8.8783'. [ 1267.673899][ T700] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8783'. [ 1267.683482][ T700] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8783'. [ 1267.693233][ T700] netlink: 'syz.8.8783': attribute type 3 has an invalid length. [ 1267.783081][ T720] netlink: 68 bytes leftover after parsing attributes in process `syz.6.8790'. [ 1267.792386][ T700] netlink: 43 bytes leftover after parsing attributes in process `syz.8.8783'. [ 1268.099460][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1268.175111][ T730] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg2, syncid = 1, id = 0 [ 1268.302955][ T733] syzkaller0: entered promiscuous mode [ 1268.313508][ T733] 0: reclassify loop, rule prio 0, protocol 800 [ 1269.361014][ T743] netlink: 'syz.1.8797': attribute type 10 has an invalid length. [ 1270.067325][ T749] hub 8-0:1.0: USB hub found [ 1270.073472][ T749] hub 8-0:1.0: 8 ports detected [ 1270.092828][ T749] netlink: 'syz.7.8796': attribute type 36 has an invalid length. [ 1270.145398][ T752] netlink: 'syz.7.8796': attribute type 10 has an invalid length. [ 1270.162908][ T749] bridge14: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1270.174109][ T749] bridge14: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1270.427032][ T762] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8802'. [ 1270.545220][ T768] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8804'. [ 1270.608016][ T765] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8803'. [ 1270.622528][ T765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8803'. [ 1270.631614][ T765] netlink: 'syz.1.8803': attribute type 3 has an invalid length. [ 1270.840958][ T780] bond0: (slave syz_tun): Releasing backup interface [ 1270.964428][ T780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1271.106415][ T792] hub 8-0:1.0: USB hub found [ 1271.112494][ T792] hub 8-0:1.0: 8 ports detected [ 1271.128075][ T792] netlink: 'syz.1.8810': attribute type 36 has an invalid length. [ 1271.150750][ T792] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1271.161255][ T792] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1271.183085][ T792] netlink: 'syz.1.8810': attribute type 10 has an invalid length. [ 1271.882676][ T798] netlink: 'syz.7.8813': attribute type 10 has an invalid length. [ 1271.909461][ T798] bond1: (slave macvlan4): Error -98 calling set_mac_address [ 1272.034283][ T808] __nla_validate_parse: 2 callbacks suppressed [ 1272.034300][ T808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8815'. [ 1272.448806][ T838] hub 8-0:1.0: USB hub found [ 1272.454894][ T838] hub 8-0:1.0: 8 ports detected [ 1272.468572][ T838] netlink: 'syz.8.8825': attribute type 36 has an invalid length. [ 1272.484434][ T838] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1272.495711][ T838] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1272.512048][ T838] netlink: 'syz.8.8825': attribute type 10 has an invalid length. [ 1273.192914][ T845] netlink: 'syz.8.8828': attribute type 10 has an invalid length. [ 1273.203904][ T845] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1273.221275][ T845] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1273.989065][ T855] bond0: (slave syz_tun): Releasing backup interface [ 1274.015551][ T855] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1274.991529][ T28] audit: type=1400 audit(1776359035.069:6358): avc: denied { ioctl } for pid=864 comm="syz.1.8836" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x940e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1275.098075][ T816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1275.202138][ T884] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8843'. [ 1275.297154][ T887] hub 8-0:1.0: USB hub found [ 1275.303199][ T887] hub 8-0:1.0: 8 ports detected [ 1275.316214][ T887] netlink: 'syz.9.8838': attribute type 36 has an invalid length. [ 1275.332826][ T887] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1275.343846][ T887] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1275.358311][ T887] netlink: 'syz.9.8838': attribute type 10 has an invalid length. [ 1278.038969][ T913] loop8: detected capacity change from 0 to 1024 [ 1278.064896][ T913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1278.075345][ T913] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1278.088748][ T913] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 1278.097012][ T913] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1278.104135][ T913] EXT4-fs error (device loop8): ext4_free_blocks:6724: comm syz.8.8844: Freeing blocks not in datazone - block = 0, count = 4096 [ 1278.117891][ T913] loop8: lost filesystem error report for type 5 error -117 [ 1278.118115][ T913] EXT4-fs (loop8): 1 orphan inode deleted [ 1278.131370][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1278.131393][ C1] EXT4-fs (loop8): initial error at time 1776359038: ext4_free_blocks:6724 [ 1278.131419][ C1] EXT4-fs (loop8): last error at time 1776359038: ext4_free_blocks:6724 [ 1278.160401][ T889] 9pnet_fd: Insufficient options for proto=fd [ 1278.168812][ T913] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1278.297165][ T28] audit: type=1400 audit(1776359038.371:6359): avc: denied { listen } for pid=922 comm="syz.9.8850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1278.317632][ T28] audit: type=1400 audit(1776359038.401:6360): avc: denied { accept } for pid=922 comm="syz.9.8850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1278.354507][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1278.372332][ T924] FAULT_INJECTION: forcing a failure. [ 1278.372332][ T924] name failslab, interval 1, probability 0, space 0, times 0 [ 1278.386678][ T924] CPU: 1 UID: 0 PID: 924 Comm: syz.9.8850 Tainted: G W syzkaller #0 PREEMPT(full) [ 1278.386727][ T924] Tainted: [W]=WARN [ 1278.386735][ T924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1278.386751][ T924] Call Trace: [ 1278.386758][ T924] [ 1278.386767][ T924] __dump_stack+0x1d/0x30 [ 1278.386861][ T924] dump_stack_lvl+0x95/0xd0 [ 1278.386887][ T924] dump_stack+0x15/0x1b [ 1278.386989][ T924] should_fail_ex+0x263/0x280 [ 1278.387063][ T924] ? __xdp_reg_mem_model+0x173/0x3e0 [ 1278.387102][ T924] should_failslab+0x8c/0xb0 [ 1278.387157][ T924] __kmalloc_cache_noprof+0x5f/0x400 [ 1278.387219][ T924] __xdp_reg_mem_model+0x173/0x3e0 [ 1278.387248][ T924] xdp_reg_mem_model+0x22/0x40 [ 1278.387273][ T924] bpf_test_run_xdp_live+0x1ec/0x1360 [ 1278.387322][ T924] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1278.387448][ T924] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1278.387479][ T924] ? mutex_unlock+0x4e/0x90 [ 1278.387552][ T924] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1278.387574][ T924] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1278.387634][ T924] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1278.387663][ T924] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1278.387712][ T924] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1278.387849][ T924] ? __rcu_read_unlock+0x4e/0x70 [ 1278.387887][ T924] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1278.388000][ T924] bpf_prog_test_run+0x204/0x340 [ 1278.388035][ T924] __sys_bpf+0x52e/0x7e0 [ 1278.388107][ T924] __x64_sys_bpf+0x41/0x50 [ 1278.388140][ T924] x64_sys_call+0x10cb/0x3020 [ 1278.388177][ T924] do_syscall_64+0x12c/0x3b0 [ 1278.388260][ T924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.388288][ T924] RIP: 0033:0x7fa9fc96c819 [ 1278.388309][ T924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1278.388331][ T924] RSP: 002b:00007fa9fb3a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1278.388415][ T924] RAX: ffffffffffffffda RBX: 00007fa9fcbe6090 RCX: 00007fa9fc96c819 [ 1278.388433][ T924] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1278.388446][ T924] RBP: 00007fa9fb3a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.388459][ T924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.388474][ T924] R13: 00007fa9fcbe6128 R14: 00007fa9fcbe6090 R15: 00007fffb1224908 [ 1278.388501][ T924] [ 1278.901589][ T943] netlink: 56 bytes leftover after parsing attributes in process `syz.7.8855'. [ 1278.910616][ T943] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8855'. [ 1278.921199][ T943] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8855'. [ 1278.930555][ T943] netlink: 'syz.7.8855': attribute type 3 has an invalid length. [ 1278.938467][ T943] netlink: 43 bytes leftover after parsing attributes in process `syz.7.8855'. [ 1279.015473][ T951] hub 8-0:1.0: USB hub found [ 1279.020482][ T951] hub 8-0:1.0: 8 ports detected [ 1279.032213][ T951] netlink: 'syz.8.8856': attribute type 36 has an invalid length. [ 1279.048939][ T951] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1279.060027][ T951] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1279.075139][ T951] netlink: 'syz.8.8856': attribute type 10 has an invalid length. [ 1281.670904][ T985] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1282.094894][ T998] loop9: detected capacity change from 0 to 128 [ 1282.732503][ T1001] tipc: Enabling of bearer rejected, failed to enable media [ 1282.865141][ T1008] loop9: detected capacity change from 0 to 512 [ 1282.871800][ T1008] EXT4-fs: Ignoring removed mblk_io_submit option [ 1282.886149][ T1008] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1282.920111][ T1008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1282.948797][ T1008] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1282.955682][ T1008] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8869: bg 0: block 361: padding at end of block bitmap is not set [ 1282.973151][ T1001] syzkaller0: entered promiscuous mode [ 1282.992740][ T1001] syzkaller0: entered allmulticast mode [ 1283.007249][ T1008] loop9: lost filesystem error report for type 5 error -117 [ 1283.014432][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1283.028501][ C1] EXT4-fs (loop9): initial error at time 1776359043: ext4_validate_block_bitmap:441 [ 1283.038384][ C1] EXT4-fs (loop9): last error at time 1776359043: ext4_validate_block_bitmap:441 [ 1283.073075][ T1008] EXT4-fs (loop9): Remounting filesystem read-only [ 1283.089616][ T1008] EXT4-fs (loop9): 1 truncate cleaned up [ 1283.096022][ T1008] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1283.125303][ T1016] syzkaller0: entered promiscuous mode [ 1283.147462][ T1016] 0: reclassify loop, rule prio 0, protocol 800 [ 1283.278561][ T1008] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8869'. [ 1283.292820][ T1008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8869'. [ 1283.312411][ T1008] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8869'. [ 1283.331906][ T1008] netlink: 'syz.9.8869': attribute type 3 has an invalid length. [ 1283.340478][ T1008] netlink: 43 bytes leftover after parsing attributes in process `syz.9.8869'. [ 1283.361602][ T1025] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8877'. [ 1283.593395][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1285.479006][ T1070] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8890'. [ 1285.912606][ T1081] hub 8-0:1.0: USB hub found [ 1285.918606][ T1081] hub 8-0:1.0: 8 ports detected [ 1285.934993][ T1081] netlink: 'syz.9.8893': attribute type 36 has an invalid length. [ 1285.950893][ T1081] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1285.962397][ T1081] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1285.977896][ T1081] netlink: 'syz.9.8893': attribute type 10 has an invalid length. [ 1287.829632][ T1108] netlink: 68 bytes leftover after parsing attributes in process `syz.9.8901'. [ 1288.094975][ T1116] netlink: 'syz.9.8904': attribute type 10 has an invalid length. [ 1288.143911][ T1116] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1288.213538][ T1121] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1290.043504][ T1158] lo speed is unknown, defaulting to 1000 [ 1290.492627][ T1156] loop9: detected capacity change from 0 to 1024 [ 1290.509431][ T1156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1290.531245][ T1156] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1290.542341][ T1156] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1290.550683][ T1156] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1290.557163][ T1156] EXT4-fs error (device loop9): ext4_free_blocks:6724: comm syz.9.8913: Freeing blocks not in datazone - block = 0, count = 4096 [ 1290.570630][ T1156] loop9: lost filesystem error report for type 5 error -117 [ 1290.572269][ T1156] EXT4-fs (loop9): 1 orphan inode deleted [ 1290.580897][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1290.580916][ C1] EXT4-fs (loop9): initial error at time 1776359050: ext4_free_blocks:6724 [ 1290.580935][ C1] EXT4-fs (loop9): last error at time 1776359050: ext4_free_blocks:6724 [ 1290.614818][ T1156] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1290.639655][ T1153] 9pnet_fd: Insufficient options for proto=fd [ 1290.693709][ T1176] FAULT_INJECTION: forcing a failure. [ 1290.693709][ T1176] name failslab, interval 1, probability 0, space 0, times 0 [ 1290.715650][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.8.8920 Tainted: G W syzkaller #0 PREEMPT(full) [ 1290.715691][ T1176] Tainted: [W]=WARN [ 1290.715701][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1290.715715][ T1176] Call Trace: [ 1290.715722][ T1176] [ 1290.715730][ T1176] __dump_stack+0x1d/0x30 [ 1290.715771][ T1176] dump_stack_lvl+0x95/0xd0 [ 1290.715796][ T1176] dump_stack+0x15/0x1b [ 1290.715825][ T1176] should_fail_ex+0x263/0x280 [ 1290.715927][ T1176] should_failslab+0x8c/0xb0 [ 1290.715963][ T1176] __kvmalloc_node_noprof+0x155/0x640 [ 1290.716030][ T1176] ? bpf_test_run_xdp_live+0x17e/0x1360 [ 1290.716076][ T1176] bpf_test_run_xdp_live+0x17e/0x1360 [ 1290.716176][ T1176] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1290.716209][ T1176] ? __static_call_update+0x343/0x380 [ 1290.716296][ T1176] ? __SCT__tp_func_azx_runtime_resume+0x8/0x8 [ 1290.716337][ T1176] ? mutex_unlock+0x4e/0x90 [ 1290.716427][ T1176] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1290.716448][ T1176] ? bpf_dispatcher_change_prog+0x6ec/0x7f0 [ 1290.716532][ T1176] ? bpf_dispatcher_xdp+0x800/0x1000 [ 1290.716643][ T1176] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1290.716675][ T1176] bpf_prog_test_run_xdp+0x57b/0xa10 [ 1290.716718][ T1176] ? __rcu_read_unlock+0x4e/0x70 [ 1290.716795][ T1176] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1290.716827][ T1176] bpf_prog_test_run+0x204/0x340 [ 1290.716858][ T1176] __sys_bpf+0x52e/0x7e0 [ 1290.716925][ T1176] __x64_sys_bpf+0x41/0x50 [ 1290.716963][ T1176] x64_sys_call+0x10cb/0x3020 [ 1290.717009][ T1176] do_syscall_64+0x12c/0x3b0 [ 1290.717038][ T1176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1290.717060][ T1176] RIP: 0033:0x7f4f640cc819 [ 1290.717076][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1290.717162][ T1176] RSP: 002b:00007f4f62b27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1290.717185][ T1176] RAX: ffffffffffffffda RBX: 00007f4f64345fa0 RCX: 00007f4f640cc819 [ 1290.717263][ T1176] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1290.717276][ T1176] RBP: 00007f4f62b27090 R08: 0000000000000000 R09: 0000000000000000 [ 1290.717288][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1290.717328][ T1176] R13: 00007f4f64346038 R14: 00007f4f64345fa0 R15: 00007fff27016368 [ 1290.717350][ T1176] [ 1291.219444][ T1191] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1291.240961][ T1191] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1291.256221][ T1191] netlink: 52 bytes leftover after parsing attributes in process `syz.6.8926'. [ 1291.316664][ T1186] syz.7.8925 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1291.338891][ T28] audit: type=1400 audit(1776359051.418:6361): avc: denied { map } for pid=1194 comm="syz.6.8927" path="/439/file0" dev="tmpfs" ino=2344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 1291.342977][ T1186] CPU: 1 UID: 0 PID: 1186 Comm: syz.7.8925 Tainted: G W syzkaller #0 PREEMPT(full) [ 1291.343153][ T1186] Tainted: [W]=WARN [ 1291.343176][ T1186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1291.343219][ T1186] Call Trace: [ 1291.343286][ T1186] [ 1291.343317][ T1186] __dump_stack+0x1d/0x30 [ 1291.343445][ T1186] dump_stack_lvl+0x95/0xd0 [ 1291.343523][ T1186] dump_stack+0x15/0x1b [ 1291.343602][ T1186] dump_header+0x80/0x240 [ 1291.343755][ T1186] oom_kill_process+0x295/0x350 [ 1291.343875][ T1186] out_of_memory+0x97d/0xb80 [ 1291.343993][ T1186] try_charge_memcg+0x62f/0xa10 [ 1291.344115][ T1186] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 1291.344268][ T1186] __swap_cache_prepare_and_add+0x69/0x4a0 [ 1291.344429][ T1186] ? alloc_pages_mpol+0x217/0x260 [ 1291.344525][ T1186] swap_cache_alloc_folio+0xa2/0x120 [ 1291.344636][ T1186] swap_cluster_readahead+0x25f/0x3c0 [ 1291.344784][ T1186] swapin_readahead+0xde/0x840 [ 1291.344947][ T1186] ? _raw_spin_unlock+0x9/0x30 [ 1291.345037][ T1186] ? swap_put_entries_cluster+0x46c/0x490 [ 1291.345160][ T1186] ? __rcu_read_unlock+0x4e/0x70 [ 1291.345255][ T1186] ? swap_cache_get_folio+0x1e0/0x1f0 [ 1291.345372][ T1186] do_swap_page+0x31e/0x2180 [ 1291.345460][ T1186] ? css_rstat_updated+0xbb/0x280 [ 1291.345548][ T1186] ? __rcu_read_lock+0x36/0x50 [ 1291.345688][ T1186] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1291.345775][ T1186] handle_mm_fault+0xb2e/0x2e70 [ 1291.345919][ T1186] ? vma_start_read+0x1c7/0x2c0 [ 1291.346007][ T1186] do_user_addr_fault+0x62f/0x1050 [ 1291.346142][ T1186] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 1291.346306][ T1186] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 1291.346396][ T1186] ? trace_page_fault_user+0x1f/0xa0 [ 1291.346536][ T1186] exc_page_fault+0x62/0xa0 [ 1291.346603][ T1186] asm_exc_page_fault+0x26/0x30 [ 1291.346646][ T1186] RIP: 0033:0x7fdd2ef37943 [ 1291.346661][ T1186] Code: 25 00 03 00 00 e8 9d 50 06 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 53 49 89 ca 64 48 8b 1c 25 10 00 00 00 8b 83 08 03 00 00 <80> 3d 6e 5d 29 00 00 75 44 a8 01 75 40 a8 10 75 3c 41 51 4c 8d 9b [ 1291.346679][ T1186] RSP: 002b:00007fff2af37fc0 EFLAGS: 00010246 [ 1291.346751][ T1186] RAX: 0000000000000000 RBX: 0000555579507500 RCX: 0000000000000000 [ 1291.346794][ T1186] RDX: 00007fff2af38000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1291.346838][ T1186] RBP: 00007fdd2f1f7da0 R08: 0000000000000000 R09: 0000000000000000 [ 1291.346905][ T1186] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000013b698 [ 1291.346949][ T1186] R13: 00007fdd2f1f609c R14: 000000000013b3c9 R15: 00007fdd2f1f6090 [ 1291.347091][ T1186] [ 1291.368033][ T1186] memory: usage 307200kB, limit 307200kB, failcnt 2456 [ 1291.720734][ T1186] memory+swap: usage 307984kB, limit 9007199254740988kB, failcnt 0 [ 1291.730793][ T1186] kmem: usage 307060kB, limit 9007199254740988kB, failcnt 0 [ 1291.733805][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1291.750948][ T1186] Memory cgroup stats for /syz7: [ 1291.751266][ T1186] cache 8192 [ 1291.780812][ T1186] rss 4096 [ 1291.889567][ T1186] shmem 0 [ 1291.897397][ T1186] mapped_file 0 [ 1291.917089][ T1186] dirty 0 [ 1291.935122][ T1186] writeback 8192 [ 1291.951436][ T1186] workingset_refault_anon 405 [ 1291.972303][ T1186] workingset_refault_file 1728 [ 1291.991264][ T1186] swap 802816 [ 1292.003908][ T1186] swapcached 22261760 [ 1292.018276][ T1186] pgpgin 758938 [ 1292.034951][ T1186] pgpgout 758904 [ 1292.047453][ T1186] pgfault 894313 [ 1292.058381][ T1186] pgmajfault 254 [ 1292.068987][ T1186] inactive_anon 126976 [ 1292.078160][ T1186] active_anon 4096 [ 1292.091896][ T1186] inactive_file 0 [ 1292.103642][ T1186] active_file 8192 [ 1292.116459][ T1186] unevictable 0 [ 1292.141466][ T1186] hierarchical_memory_limit 314572800 [ 1292.160755][ T1186] hierarchical_memsw_limit 9223372036854771712 [ 1292.181664][ T1186] total_cache 8192 [ 1292.190869][ T1186] total_rss 4096 [ 1292.194533][ T1186] total_shmem 0 [ 1292.198025][ T1186] total_mapped_file 0 [ 1292.202032][ T1186] total_dirty 0 [ 1292.205584][ T1186] total_writeback 8192 [ 1292.209677][ T1186] total_workingset_refault_anon 405 [ 1292.214982][ T1186] total_workingset_refault_file 1728 [ 1292.220300][ T1186] total_swap 802816 [ 1292.224284][ T1186] total_swapcached 22261760 [ 1292.228921][ T1186] total_pgpgin 758938 [ 1292.232924][ T1186] total_pgpgout 758904 [ 1292.237019][ T1186] total_pgfault 894313 [ 1292.241279][ T1186] total_pgmajfault 254 [ 1292.360494][ T1186] total_inactive_anon 126976 [ 1292.365291][ T1186] total_active_anon 4096 [ 1292.369644][ T1186] total_inactive_file 0 [ 1292.373823][ T1186] total_active_file 8192 [ 1292.378344][ T1186] total_unevictable 0 [ 1292.382495][ T1186] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.8925,pid=1186,uid=0 [ 1292.441607][ T1186] Memory cgroup out of memory: Killed process 1186 (syz.7.8925) total-vm:96212kB, anon-rss:1228kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1292.756888][ T1235] hub 8-0:1.0: USB hub found [ 1292.761956][ T1235] hub 8-0:1.0: 8 ports detected [ 1292.782515][ T1235] netlink: 'syz.8.8937': attribute type 36 has an invalid length. [ 1292.835372][ T1235] bridge7: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1292.846455][ T1235] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1292.871071][ T1235] netlink: 'syz.8.8937': attribute type 10 has an invalid length. [ 1292.917574][ T1232] 9p: Bad value for 'wfdno' [ 1292.984087][ T1232] netlink: 56 bytes leftover after parsing attributes in process `syz.6.8938'. [ 1293.045060][ T1232] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8938'. [ 1293.137698][ T1232] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8938'. [ 1293.207648][ T1232] netlink: 'syz.6.8938': attribute type 3 has an invalid length. [ 1293.279180][ T1232] netlink: 43 bytes leftover after parsing attributes in process `syz.6.8938'. [ 1293.461603][ T1238] lo speed is unknown, defaulting to 1000 [ 1293.610620][ T1238] chnl_net:caif_netlink_parms(): no params data found [ 1293.732143][ T1238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.739355][ T1238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.746933][ T1238] bridge_slave_0: entered allmulticast mode [ 1293.753787][ T1238] bridge_slave_0: entered promiscuous mode [ 1293.761044][ T1238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.768181][ T1238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.777104][ T1238] bridge_slave_1: entered allmulticast mode [ 1293.783995][ T1238] bridge_slave_1: entered promiscuous mode [ 1293.804929][ T1238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.816571][ T1238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.842447][ T1238] team0: Port device team_slave_0 added [ 1293.852173][ T1238] team0: Port device team_slave_1 added [ 1293.880663][ T1238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.892359][ T1238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1293.958380][ T1238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.008587][ T1238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.041944][ T1238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1294.129568][ T1238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.213340][ T1238] hsr_slave_0: entered promiscuous mode [ 1294.228782][ T1238] hsr_slave_1: entered promiscuous mode [ 1294.241946][ T1238] debugfs: 'hsr0' already exists in 'hsr' [ 1294.254264][ T1238] Cannot create hsr debugfs directory [ 1294.401441][ T1238] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.433391][ T1238] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.499445][ T1290] netlink: 2008 bytes leftover after parsing attributes in process `syz.6.8947'. [ 1294.510882][ T1238] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.522411][ T1238] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.612768][ T1295] netlink: 56 bytes leftover after parsing attributes in process `syz.9.8949'. [ 1294.703275][ T1238] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1294.723175][ T1238] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.814611][ T1304] netlink: 436 bytes leftover after parsing attributes in process `syz.7.8948'. [ 1295.981148][ T1238] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1295.998273][ T1238] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.345691][ T1238] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1297.369191][ T1238] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1297.384025][ T1238] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1297.418468][ T1238] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1297.426214][ T1238] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1297.449453][ T1325] loop9: detected capacity change from 0 to 512 [ 1297.461243][ T1238] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1297.474252][ T1325] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1297.483355][ T1238] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1297.496524][ T1325] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 1297.516228][ T1238] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1297.525366][ T1329] netlink: 2008 bytes leftover after parsing attributes in process `syz.7.8960'. [ 1297.640071][ T1348] netlink: 'syz.9.8965': attribute type 10 has an invalid length. [ 1297.667063][ T1238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1298.606692][ T1348] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1298.689105][ T1238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1298.809511][ T1238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1298.821593][ T1238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1298.843085][ T7857] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.850520][ T7857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1298.879444][ T7857] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.886607][ T7857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1298.900870][ T1369] loop9: detected capacity change from 0 to 128 [ 1299.276571][ T28] audit: type=1400 audit(1776359059.342:6362): avc: denied { create } for pid=1365 comm="syz.8.8968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1299.662509][ T28] audit: type=1400 audit(1776359059.352:6363): avc: denied { create } for pid=1365 comm="syz.8.8968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1299.690139][ T28] audit: type=1400 audit(1776359059.352:6364): avc: denied { ioctl } for pid=1365 comm="syz.8.8968" path="socket:[113150]" dev="sockfs" ino=113150 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 1299.693170][ T1238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.799679][ T1391] lo speed is unknown, defaulting to 1000 [ 1300.234916][ T28] audit: type=1400 audit(1776359059.442:6365): avc: denied { recv } for pid=1365 comm="syz.8.8968" saddr=10.128.0.163 src=30036 daddr=10.128.1.105 dest=49270 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1300.267275][ T28] audit: type=1400 audit(1776359059.742:6366): avc: denied { egress } for pid=25080 comm="kworker/u8:18" daddr=ff02::1:ffaa:aa1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 1300.295805][ T28] audit: type=1400 audit(1776359059.742:6367): avc: denied { sendto } for pid=25080 comm="kworker/u8:18" daddr=ff02::1:ffaa:aa1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 1300.386507][ T28] audit: type=1400 audit(1776359060.023:6368): avc: denied { create } for pid=1380 comm="syz.6.8972" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1300.416041][ T28] audit: type=1400 audit(1776359060.033:6369): avc: denied { getopt } for pid=1380 comm="syz.6.8972" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1300.468336][ T28] audit: type=1400 audit(1776359060.153:6370): avc: denied { module_request } for pid=1238 comm="syz-executor" kmod="netdev-virt_wifi0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 1300.546088][ T28] audit: type=1400 audit(1776359060.403:6371): avc: denied { sys_module } for pid=1238 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1300.600077][ T1405] netlink: 2008 bytes leftover after parsing attributes in process `syz.7.8976'. [ 1300.626526][ T1238] veth0_vlan: entered promiscuous mode [ 1300.637345][ T1238] veth1_vlan: entered promiscuous mode [ 1300.661627][ T1238] veth0_macvtap: entered promiscuous mode [ 1300.670512][ T1238] veth1_macvtap: entered promiscuous mode [ 1300.686415][ T1238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.699174][ T1238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.713007][ T306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.751024][ T306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.772274][ T306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.786645][ T306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.797627][ T1410] netlink: 'syz.7.8978': attribute type 1 has an invalid length. [ 1301.784685][ T1420] netlink: 36 bytes leftover after parsing attributes in process `syz.8.8977'. [ 1301.795308][ T1420] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8977'. [ 1302.755520][ T1426] loop9: detected capacity change from 0 to 512 [ 1302.977175][ T1426] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1302.991553][ T1426] ext4 filesystem being mounted at /179/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1303.766192][ T1433] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1303.862159][ T1444] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8981'. [ 1303.898865][ T1433] bond1 (unregistering): Released all slaves [ 1303.918559][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1303.939650][ T1448] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8981'. [ 1303.961650][ T1448] netlink: 1644 bytes leftover after parsing attributes in process `syz.1.8981'. [ 1303.991885][ T1440] veth3: entered promiscuous mode [ 1303.999689][ T1443] pim6reg: entered allmulticast mode [ 1304.021736][ T1434] syz.7.8982 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 1304.035888][ T1434] CPU: 0 UID: 0 PID: 1434 Comm: syz.7.8982 Tainted: G W syzkaller #0 PREEMPT(full) [ 1304.035930][ T1434] Tainted: [W]=WARN [ 1304.035939][ T1434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1304.035957][ T1434] Call Trace: [ 1304.035966][ T1434] [ 1304.035975][ T1434] __dump_stack+0x1d/0x30 [ 1304.036068][ T1434] dump_stack_lvl+0x95/0xd0 [ 1304.036100][ T1434] dump_stack+0x15/0x1b [ 1304.036195][ T1434] dump_header+0x80/0x240 [ 1304.036219][ T1434] oom_kill_process+0x295/0x350 [ 1304.036254][ T1434] out_of_memory+0x97d/0xb80 [ 1304.036342][ T1434] try_charge_memcg+0x62f/0xa10 [ 1304.036390][ T1434] __memcg_kmem_charge_page+0x139/0x2b0 [ 1304.036423][ T1434] __alloc_frozen_pages_noprof+0x18a/0x350 [ 1304.036452][ T1434] alloc_pages_mpol+0xb3/0x260 [ 1304.036546][ T1434] alloc_pages_noprof+0x8f/0x140 [ 1304.036591][ T1434] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 1304.036635][ T1434] __kvmalloc_node_noprof+0x3d4/0x640 [ 1304.036658][ T1434] ? futex_hash_allocate+0x190/0x9a0 [ 1304.036677][ T1434] ? futex_hash_allocate+0x190/0x9a0 [ 1304.036711][ T1434] futex_hash_allocate+0x190/0x9a0 [ 1304.036746][ T1434] ? cap_task_prctl+0x13f/0x6b0 [ 1304.036779][ T1434] futex_hash_prctl+0xd8/0xf0 [ 1304.036852][ T1434] __se_sys_prctl+0x4f4/0x1400 [ 1304.036885][ T1434] __x64_sys_prctl+0x67/0x80 [ 1304.036922][ T1434] x64_sys_call+0x2533/0x3020 [ 1304.036965][ T1434] do_syscall_64+0x12c/0x3b0 [ 1304.037000][ T1434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.037073][ T1434] RIP: 0033:0x7fdd2ef7c819 [ 1304.037096][ T1434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.037137][ T1434] RSP: 002b:00007fdd2d9cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1304.037164][ T1434] RAX: ffffffffffffffda RBX: 00007fdd2f1f5fa0 RCX: 00007fdd2ef7c819 [ 1304.037180][ T1434] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1304.037207][ T1434] RBP: 00007fdd2f012c91 R08: 0000000000000000 R09: 0000000000000000 [ 1304.037224][ T1434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1304.037240][ T1434] R13: 00007fdd2f1f6038 R14: 00007fdd2f1f5fa0 R15: 00007fff2af37ec8 [ 1304.037320][ T1434] [ 1304.037327][ T1434] memory: usage 307200kB, limit 307200kB, failcnt 2513 [ 1304.046253][ T1446] netlink: 52 bytes leftover after parsing attributes in process `syz.8.8984'. [ 1304.121107][ T1434] memory+swap: usage 299904kB, limit 9007199254740988kB, failcnt 0 [ 1304.145985][ T1446] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1304.191254][ T1434] kmem: usage 280480kB, limit 9007199254740988kB, failcnt 0 [ 1304.326224][ T1434] Memory cgroup stats for /syz7: [ 1304.326542][ T1434] cache 8192 [ 1304.338142][ T1446] loop8: detected capacity change from 0 to 512 [ 1304.341708][ T1434] rss 20480 [ 1304.439737][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1304.439757][ T28] audit: type=1400 audit(1776359064.535:6433): avc: denied { getopt } for pid=1456 comm="syz.6.8987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1304.443565][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.478857][ T28] audit: type=1400 audit(1776359064.575:6434): avc: denied { create } for pid=1454 comm="syz.1.8986" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1304.497895][ T1434] shmem 0 [ 1304.516719][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.527551][ T28] audit: type=1400 audit(1776359064.575:6435): avc: denied { create } for pid=1456 comm="syz.6.8987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1304.527975][ T1434] mapped_file 0 [ 1304.559561][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.595275][ T28] audit: type=1400 audit(1776359064.605:6436): avc: denied { cmd } for pid=1454 comm="syz.1.8986" path="socket:[113351]" dev="sockfs" ino=113351 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1304.606606][ T1434] dirty 0 [ 1304.624901][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.657163][ T1434] writeback 0 [ 1304.657870][ T28] audit: type=1400 audit(1776359064.605:6437): avc: denied { read } for pid=1454 comm="syz.1.8986" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1304.662549][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.698277][ T1434] workingset_refault_anon 438 [ 1304.703852][ T1459] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8988'. [ 1304.712757][ T1434] workingset_refault_file 1728 [ 1304.729735][ T1434] swap 761856 [ 1304.730668][ T28] audit: type=1400 audit(1776359064.605:6438): avc: denied { open } for pid=1454 comm="syz.1.8986" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1304.739479][ T1434] swapcached 22523904 [ 1304.779539][ T28] audit: type=1400 audit(1776359064.655:6439): avc: denied { create } for pid=1460 comm="syz.6.8989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1304.801071][ T1434] pgpgin 775711 [ 1304.813845][ T1434] pgpgout 775666 [ 1304.833389][ T1434] pgfault 913191 [ 1304.845777][ T1434] pgmajfault 264 [ 1304.854439][ T1434] inactive_anon 126976 [ 1304.860138][ T28] audit: type=1400 audit(1776359064.665:6440): avc: denied { setopt } for pid=1460 comm="syz.6.8989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1304.895902][ T1434] active_anon 49152 [ 1304.907029][ T1434] inactive_file 0 [ 1304.918173][ T1434] active_file 8192 [ 1304.926494][ T1434] unevictable 0 [ 1304.935698][ T28] audit: type=1400 audit(1776359064.725:6441): avc: denied { map } for pid=1460 comm="syz.6.8989" path="socket:[113360]" dev="sockfs" ino=113360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1304.971801][ T1434] hierarchical_memory_limit 314572800 [ 1304.999875][ T1434] hierarchical_memsw_limit 9223372036854771712 [ 1305.027363][ T1434] total_cache 8192 [ 1305.042456][ T1434] total_rss 20480 [ 1305.057203][ T1434] total_shmem 0 [ 1305.072488][ T1434] total_mapped_file 0 [ 1305.076628][ T1434] total_dirty 0 [ 1305.080122][ T1434] total_writeback 0 [ 1305.115674][ T1434] total_workingset_refault_anon 438 [ 1305.132904][ T1434] total_workingset_refault_file 1728 [ 1305.140358][ T1434] total_swap 761856 [ 1305.145567][ T1434] total_swapcached 22523904 [ 1305.150423][ T1434] total_pgpgin 775711 [ 1305.161108][ T1434] total_pgpgout 775666 [ 1305.181346][ T1434] total_pgfault 913191 [ 1305.247284][ T1434] total_pgmajfault 264 [ 1305.299918][ T1434] total_inactive_anon 126976 [ 1305.328226][ T1434] total_active_anon 49152 [ 1305.354027][ T1434] total_inactive_file 0 [ 1305.383009][ T1434] total_active_file 8192 [ 1305.413699][ T1434] total_unevictable 0 [ 1305.438903][ T1434] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.8982,pid=1432,uid=0 [ 1305.518164][ T1434] Memory cgroup out of memory: Killed process 1434 (syz.7.8982) total-vm:96344kB, anon-rss:1348kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 1305.668334][ T28] audit: type=1400 audit(1776359064.725:6442): avc: denied { read } for pid=1460 comm="syz.6.8989" path="socket:[113360]" dev="sockfs" ino=113360 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1305.699793][ T1484] bond0: (slave syz_tun): Releasing backup interface [ 1305.724287][ T1484] bridge_slave_0: left allmulticast mode [ 1305.730664][ T1484] bridge_slave_0: left promiscuous mode [ 1305.738495][ T1484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.804034][ T1491] netlink: 'syz.7.8996': attribute type 21 has an invalid length. [ 1305.819333][ T1491] IPv6: NLM_F_CREATE should be specified when creating new route [ 1305.827684][ T1484] bridge_slave_1: left allmulticast mode [ 1305.833475][ T1484] bridge_slave_1: left promiscuous mode [ 1305.834947][ T1491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1305.839472][ T1484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.846327][ T1491] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.860650][ T1491] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.867931][ T1491] IPv6: NLM_F_CREATE should be set when creating new route [ 1305.876780][ T1484] bond0: (slave bond_slave_0): Releasing backup interface [ 1305.885809][ T1484] bond0: (slave bond_slave_1): Releasing backup interface [ 1305.894983][ T1484] team0: Port device team_slave_0 removed [ 1305.901652][ T1484] team0: Port device team_slave_1 removed [ 1305.907662][ T1484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.915436][ T1484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.929523][ T1484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1305.971779][ T1496] wg0: Caught tx_queue_len zero misconfig [ 1306.014578][ T1495] lo speed is unknown, defaulting to 1000 [ 1306.097554][ T1500] netlink: 'syz.9.8999': attribute type 10 has an invalid length. [ 1306.113408][ T1500] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1306.144056][ T1500] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1306.284257][ T1505] loop9: detected capacity change from 0 to 128 [ 1306.314531][ T1505] loop9: detected capacity change from 0 to 512 [ 1306.323477][ T1505] EXT4-fs: Ignoring removed mblk_io_submit option [ 1306.338454][ T1505] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1306.355272][ T1505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e028, mo2=0002] [ 1306.367392][ T1505] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1306.379605][ T1505] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.9001: bg 0: block 361: padding at end of block bitmap is not set [ 1306.394094][ T1505] loop9: lost filesystem error report for type 5 error -117 [ 1306.394286][ T1505] EXT4-fs (loop9): Remounting filesystem read-only [ 1306.408506][ T1505] EXT4-fs (loop9): 1 truncate cleaned up [ 1306.414600][ T1505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1306.430702][ T1505] netlink: 'syz.9.9001': attribute type 3 has an invalid length. [ 1306.504637][T30318] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1306.590739][ T1508] lo speed is unknown, defaulting to 1000 [ 1307.083251][ T1531] netlink: 'syz.9.9010': attribute type 10 has an invalid length. [ 1307.118630][ T1531] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1307.795107][ T1566] netlink: 'syz.6.9018': attribute type 36 has an invalid length. [ 1307.807419][ T1566] bridge12: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1307.817783][ T1566] bridge12: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1307.829731][ T1566] netlink: 'syz.6.9018': attribute type 10 has an invalid length. [ 1308.564169][ T1571] netlink: 'syz.6.9021': attribute type 10 has an invalid length. [ 1308.596958][ T1571] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1308.654563][ T1573] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1309.485616][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 1309.485632][ T28] audit: type=1400 audit(1776359069.578:6469): avc: denied { read write } for pid=1584 comm="syz.9.9024" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1309.621237][ T28] audit: type=1400 audit(1776359069.578:6470): avc: denied { open } for pid=1584 comm="syz.9.9024" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 1309.676520][ T1586] __nla_validate_parse: 12 callbacks suppressed [ 1309.676539][ T1586] netlink: 4 bytes leftover after parsing attributes in process `syz.9.9024'. [ 1310.004929][ T1598] lo speed is unknown, defaulting to 1000 [ 1310.247234][ T28] audit: type=1400 audit(1776359070.338:6471): avc: denied { write } for pid=1603 comm="syz.9.9029" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1310.357337][ T28] audit: type=1400 audit(1776359070.378:6472): avc: denied { open } for pid=1603 comm="syz.9.9029" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1310.538629][ T1613] hub 8-0:1.0: USB hub found [ 1310.544684][ T1613] hub 8-0:1.0: 8 ports detected [ 1310.557322][ T1613] netlink: 'syz.9.9031': attribute type 36 has an invalid length. [ 1310.574457][ T1613] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1310.585714][ T1613] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1310.602875][ T1613] netlink: 'syz.9.9031': attribute type 10 has an invalid length. [ 1311.940166][ T1633] netlink: 'syz.8.9037': attribute type 10 has an invalid length. [ 1312.706587][ T28] audit: type=1400 audit(1776359072.750:6473): avc: denied { setopt } for pid=1629 comm="syz.6.9036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1312.744762][ T1639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1313.706501][ T1650] loop8: detected capacity change from 0 to 1024 [ 1313.782096][ T1650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.795266][ T1650] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.819023][ T1650] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.9041: bg 0: block 112: padding at end of block bitmap is not set [ 1313.843078][ T28] audit: type=1400 audit(1776359073.870:6474): avc: denied { add_name } for pid=1647 comm="syz.8.9041" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1313.864101][ T28] audit: type=1400 audit(1776359073.870:6475): avc: denied { create } for pid=1647 comm="syz.8.9041" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1313.913037][ T1650] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 1313.926728][ T1650] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1313.926728][ T1650] [ 1313.937997][ T1650] EXT4-fs (loop8): Total free blocks count 0 [ 1313.944392][ T1650] EXT4-fs (loop8): Free/Dirty block details [ 1313.950421][ T1650] EXT4-fs (loop8): free_blocks=0 [ 1313.955596][ T1650] EXT4-fs (loop8): dirty_blocks=64 [ 1313.960838][ T1650] EXT4-fs (loop8): Block reservation details [ 1313.966870][ T1650] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 1314.175458][ T28] audit: type=1400 audit(1776359073.870:6476): avc: denied { write } for pid=1647 comm="syz.8.9041" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1314.220236][ T1658] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9044'. [ 1314.293196][ T28] audit: type=1400 audit(1776359073.870:6477): avc: denied { open } for pid=1647 comm="syz.8.9041" path="/261/file1/file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1314.362878][ T28] audit: type=1400 audit(1776359074.010:6478): avc: denied { read } for pid=1647 comm="syz.8.9041" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1315.245634][T29159] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 1315.259834][ T1681] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1315.269595][ T1681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9050'. [ 1315.300358][T29159] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1315.438226][ T1690] netlink: 'syz.8.9051': attribute type 10 has an invalid length. [ 1315.471466][ T1690] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1315.506840][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1315.506859][ T28] audit: type=1400 audit(1776359075.541:6481): avc: denied { mount } for pid=1694 comm="syz.6.9056" name="/" dev="autofs" ino=114930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1315.564604][ T28] audit: type=1400 audit(1776359075.661:6482): avc: denied { create } for pid=1696 comm="syz.8.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1315.757080][ T28] audit: type=1400 audit(1776359075.661:6483): avc: denied { setopt } for pid=1696 comm="syz.8.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1315.776700][ T28] audit: type=1400 audit(1776359075.801:6484): avc: denied { bind } for pid=1696 comm="syz.8.9057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1315.845119][ T28] audit: type=1400 audit(1776359075.921:6485): avc: denied { ioctl } for pid=1702 comm="syz.9.9059" path="socket:[114503]" dev="sockfs" ino=114503 ioctlcmd=0x586d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 1315.957251][ T28] audit: type=1400 audit(1776359075.921:6486): avc: denied { write } for pid=1702 comm="syz.9.9059" lport=17 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1315.978349][ T28] audit: type=1400 audit(1776359076.051:6487): avc: denied { shutdown } for pid=1698 comm="syz.6.9058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1316.030763][ T28] audit: type=1400 audit(1776359076.111:6488): avc: denied { ioctl } for pid=1713 comm="syz.6.9061" path="socket:[114525]" dev="sockfs" ino=114525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1316.083193][ T28] audit: type=1400 audit(1776359076.182:6489): avc: denied { bind } for pid=1713 comm="syz.6.9061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1316.132685][ T1720] netlink: 140 bytes leftover after parsing attributes in process `syz.9.9062'. [ 1316.153922][ T1720] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9062'. [ 1316.284748][ T1727] netlink: 'syz.7.9065': attribute type 10 has an invalid length. [ 1316.308976][ T1727] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1316.419424][ T28] audit: type=1400 audit(1776359076.522:6490): avc: denied { read write } for pid=1732 comm="syz.7.9067" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 1316.475713][ T1729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1729 comm=syz.9.9066 [ 1316.495023][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9066'. [ 1316.849111][ T1746] SELinux: failed to load policy [ 1317.173685][ T1755] netlink: 140 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1317.224380][ T1755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9076'. [ 1317.232148][ T1752] netlink: 36 bytes leftover after parsing attributes in process `syz.9.9070'. [ 1317.273139][ T1752] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9070'. [ 1317.463169][ T1761] syzkaller0: entered promiscuous mode [ 1317.485625][ T1761] 0: reclassify loop, rule prio 0, protocol 800 [ 1317.630339][ T1763] FAULT_INJECTION: forcing a failure. [ 1317.630339][ T1763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1317.657744][ T1763] CPU: 1 UID: 0 PID: 1763 Comm: syz.1.9079 Tainted: G W syzkaller #0 PREEMPT(full) [ 1317.657862][ T1763] Tainted: [W]=WARN [ 1317.657872][ T1763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1317.657890][ T1763] Call Trace: [ 1317.657900][ T1763] [ 1317.657910][ T1763] __dump_stack+0x1d/0x30 [ 1317.657948][ T1763] dump_stack_lvl+0x95/0xd0 [ 1317.658039][ T1763] dump_stack+0x15/0x1b [ 1317.658061][ T1763] should_fail_ex+0x263/0x280 [ 1317.658090][ T1763] should_fail+0xb/0x20 [ 1317.658140][ T1763] should_fail_usercopy+0x1a/0x20 [ 1317.658211][ T1763] _copy_to_user+0x20/0xa0 [ 1317.658253][ T1763] simple_read_from_buffer+0xb5/0x130 [ 1317.658309][ T1763] proc_fail_nth_read+0x10e/0x150 [ 1317.658350][ T1763] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1317.658450][ T1763] vfs_read+0x1ab/0x7f0 [ 1317.658488][ T1763] ? __rcu_read_unlock+0x4e/0x70 [ 1317.658600][ T1763] ? __fget_files+0x184/0x1c0 [ 1317.658629][ T1763] ? mutex_lock+0x57/0x90 [ 1317.658703][ T1763] ksys_read+0xdc/0x1a0 [ 1317.658736][ T1763] __x64_sys_read+0x40/0x50 [ 1317.658793][ T1763] x64_sys_call+0x2886/0x3020 [ 1317.658829][ T1763] do_syscall_64+0x12c/0x3b0 [ 1317.658864][ T1763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.658930][ T1763] RIP: 0033:0x7fa97f9bd04e [ 1317.658946][ T1763] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1317.658965][ T1763] RSP: 002b:00007fa97e456fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1317.658985][ T1763] RAX: ffffffffffffffda RBX: 00007fa97e4576c0 RCX: 00007fa97f9bd04e [ 1317.659002][ T1763] RDX: 000000000000000f RSI: 00007fa97e4570a0 RDI: 0000000000000004 [ 1317.659019][ T1763] RBP: 00007fa97e457090 R08: 0000000000000000 R09: 0000000000000000 [ 1317.659085][ T1763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1317.659098][ T1763] R13: 00007fa97fc76038 R14: 00007fa97fc75fa0 R15: 00007ffc65e9ee38 [ 1317.659123][ T1763] [ 1320.395846][ T1789] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1320.471318][ T1793] netlink: 'syz.6.9087': attribute type 36 has an invalid length. [ 1320.482539][ T1793] bridge13: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1320.492564][ T1793] bridge13: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1320.506032][ T1793] netlink: 'syz.6.9087': attribute type 10 has an invalid length. [ 1320.718741][ T1797] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9090'. [ 1320.755660][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 1320.755675][ T28] audit: type=1400 audit(1776359080.864:6510): avc: denied { connect } for pid=1796 comm="syz.6.9090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1320.922728][ T1789] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9088'. [ 1322.745989][ T1809] hub 8-0:1.0: USB hub found [ 1322.750929][ T1809] hub 8-0:1.0: 8 ports detected [ 1322.767239][ T1809] netlink: 'syz.1.9092': attribute type 36 has an invalid length. [ 1322.784382][ T1809] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1322.795752][ T1809] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1322.817810][ T1809] netlink: 'syz.1.9092': attribute type 10 has an invalid length. [ 1322.840434][ T1809] macvlan1: entered allmulticast mode [ 1322.850137][ T1809] veth1_vlan: entered allmulticast mode [ 1322.860135][ T1809] team0: Port device macvlan1 added [ 1323.950259][ T1830] netlink: 136 bytes leftover after parsing attributes in process `syz.6.9100'. [ 1323.973096][ T1830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9100'. [ 1324.099719][ T1834] 9p: Bad value for 'wfdno' [ 1324.143599][ T1837] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9104'. [ 1324.231503][ T1838] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9103'. [ 1324.639372][ T1842] netlink: 40 bytes leftover after parsing attributes in process `syz.8.9105'. [ 1324.725727][ T28] audit: type=1400 audit(1776359084.826:6511): avc: denied { create } for pid=1841 comm="syz.8.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 1324.894594][ T28] audit: type=1400 audit(1776359084.906:6512): avc: denied { write } for pid=1841 comm="syz.8.9105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1325.035047][ T28] audit: type=1400 audit(1776359084.906:6513): avc: denied { ioctl } for pid=1841 comm="syz.8.9105" path="socket:[115244]" dev="sockfs" ino=115244 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1325.567850][ T1856] xt_hashlimit: size too large, truncated to 1048576 [ 1325.709221][ T1858] loop8: detected capacity change from 0 to 8192 [ 1325.812944][ T28] audit: type=1400 audit(1776359085.907:6514): avc: denied { mount } for pid=1855 comm="syz.8.9110" name="/" dev="loop8" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1326.076722][ T1865] netlink: 136 bytes leftover after parsing attributes in process `syz.6.9112'. [ 1326.097280][ T1865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9112'. [ 1326.145492][ T1863] ================================================================== [ 1326.153865][ T1863] BUG: KCSAN: data-race in __dentry_kill / lookup_fast [ 1326.161035][ T1863] [ 1326.163449][ T1863] write to 0xffff888107a25540 of 4 bytes by task 1858 on cpu 1: [ 1326.171296][ T1863] __dentry_kill+0xa8/0x460 [ 1326.175949][ T1863] finish_dput+0x2b/0x200 [ 1326.180396][ T1863] dput+0x52/0x60 [ 1326.184065][ T1863] lookup_one_qstr_excl+0x22f/0x240 [ 1326.189396][ T1863] filename_create+0x155/0x220 [ 1326.194283][ T1863] filename_mknodat+0x13e/0x450 [ 1326.199255][ T1863] __se_sys_mknodat+0x38/0xf0 [ 1326.204161][ T1863] __x64_sys_mknodat+0x55/0x70 [ 1326.209232][ T1863] x64_sys_call+0x312/0x3020 [ 1326.214064][ T1863] do_syscall_64+0x12c/0x3b0 [ 1326.218885][ T1863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.224891][ T1863] [ 1326.227234][ T1863] read to 0xffff888107a25540 of 4 bytes by task 1863 on cpu 0: [ 1326.234853][ T1863] lookup_fast+0xf0/0x320 [ 1326.239223][ T1863] path_openat+0x436/0x2050 [ 1326.243756][ T1863] do_file_open+0x16c/0x290 [ 1326.248318][ T1863] do_sys_openat2+0x94/0x130 [ 1326.252959][ T1863] __x64_sys_openat+0xf2/0x120 [ 1326.257765][ T1863] x64_sys_call+0x1e39/0x3020 [ 1326.262557][ T1863] do_syscall_64+0x12c/0x3b0 [ 1326.267274][ T1863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1326.273299][ T1863] [ 1326.275737][ T1863] value changed: 0x00040007 -> 0x00004007 [ 1326.281486][ T1863] [ 1326.283840][ T1863] Reported by Kernel Concurrency Sanitizer on: [ 1326.290213][ T1863] CPU: 0 UID: 0 PID: 1863 Comm: syz.8.9110 Tainted: G W syzkaller #0 PREEMPT(full) [ 1326.301194][ T1863] Tainted: [W]=WARN [ 1326.305350][ T1863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1326.315619][ T1863] ==================================================================