last executing test programs: 18m17.905855817s ago: executing program 32 (id=94): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 17m29.608308109s ago: executing program 33 (id=256): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x561e82, 0x64) r0 = socket$kcm(0x10, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mremap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x600000, 0x0, &(0x7f0000a00000/0x600000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='./file3\x00', 0x20) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x2614) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x2c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000280)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x7, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x7, @multicast2, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) socket(0x1f, 0x4, 0x0) sendmsg$inet(r0, 0x0, 0x240040c4) pwritev2(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 17m10.896822193s ago: executing program 4 (id=338): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xffff}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 17m9.764772607s ago: executing program 4 (id=349): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) r2 = epoll_create(0xe) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x10000000}) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x25, &(0x7f00000000c0)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x26, &(0x7f0000000000)={0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) fcntl$lock(r8, 0x26, &(0x7f0000000300)={0x1, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r8, 0x26, &(0x7f0000000140)={0x1, 0x0, 0xb, 0x17}) close_range(r5, 0xffffffffffffffff, 0x0) r9 = mq_open(&(0x7f0000000040)=']\xc4}}^\x00', 0x40, 0x10, &(0x7f0000000080)={0x2, 0x1a12, 0x7ff, 0x4}) mq_timedreceive(r9, &(0x7f00000000c0)=""/50, 0x32, 0x0, 0x0) listen(r4, 0x7) listen(r0, 0x7) 17m9.679562159s ago: executing program 4 (id=350): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xf, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x40080) removexattr(0x0, &(0x7f0000000180)=@random={'system.', '#%)\x00\x9e\x81\xbc,\x02\xaaZ\xf7\xdc\x92\xe0\x194\xb9\xe8\xeae\xdc\xe3\xff\x04xC\xf2\x01~\xf87$\xd5\x80\x97\xba\x1c\xec\xb8\xf7\xb4\xbe\xcf\xae\x0eb\xf2\xc9\xafCn'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000000c0000000b", @ANYRES16=r0], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24004044) recvmsg$unix(0xffffffffffffffff, 0x0, 0x6320) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x81041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fchdir(0xffffffffffffffff) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 17m9.261908688s ago: executing program 4 (id=354): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000000)='2', 0x1, 0x4fed0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x58, &(0x7f0000000080)}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r2) perf_event_open(&(0x7f00000004c0)={0x3, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x4e93, 0x18445, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000200), 0x1}, 0x8080, 0x4, 0x80000000, 0x5, 0x400000a5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x90, &(0x7f0000000740), 0x1, 0x7b2, &(0x7f00000009c0)="$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") mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = epoll_create1(0x80000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)) 17m8.580611273s ago: executing program 4 (id=357): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380), 0x3d}, 0x38) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$getflags(r5, 0x401) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000757e80500"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0xffffffffffffff2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, 0x0}, 0x20) 17m5.756653003s ago: executing program 4 (id=368): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xffff}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 17m5.545671158s ago: executing program 34 (id=368): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xffff}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) 16m46.216552895s ago: executing program 2 (id=473): r0 = socket(0x2, 0x805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f00000001c0)={0x0, @in={{0xa, 0x4, @rand_addr=0x64010102}}, 0xffff, 0x4}, 0x90) connect$pppl2tp(r0, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2}, 0xffffffff, 0x0, 0x1}}, 0x2e) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x18c, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x9}, 0x15144, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f000006f000/0x2000)=nil, 0x2000, 0x3000003, 0x11, r2, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x38, 0x0, 0x3, 0x1d459d, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000140), 0x8}, 0xc0, 0x91d, 0x6, 0x0, 0x6, 0x1, 0x9001, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r4 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x4000}, &(0x7f0000000240), &(0x7f0000000480), &(0x7f0000000000)) io_uring_enter(r4, 0x448e, 0x96c9, 0x41, 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r4, 0x21, &(0x7f0000000440), 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendto$inet6(r1, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffff0}, 0x1c) r5 = perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x2, 0x2, 0xa, 0x1, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xffffffffffffffff, 0x9, 0x0, 0x2000000, 0x145d, 0x7fff, 0x0, 0x2, 0x0, 0x100}, 0x0, 0xb, 0xffffffffffffffff, 0x0) r6 = perf_event_open(0x0, 0x0, 0x4000000000, r2, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x2400, 0x9) read(r5, &(0x7f0000000600)=""/208, 0xd0) r7 = socket$inet(0x2, 0xa, 0xb51) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0x6, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0xff, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x4) r9 = syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x26f5, &(0x7f0000000500)={0x0, 0x67bb, 0x800, 0x3, 0x333, 0x0, r4}) ptrace(0x10, r9) ptrace$getregset(0x4205, r9, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) r10 = semget$private(0x0, 0x2, 0x10) semctl$SETVAL(r10, 0x1, 0x8, 0x0) 16m44.908332243s ago: executing program 2 (id=479): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x84, 0x9, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102}]}]}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 16m40.484923019s ago: executing program 2 (id=491): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000001740)={0x1, 0x0, 0x1f, 0xb, 0x112, &(0x7f0000001340)}) listen(r2, 0xb7) socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000280)=ANY=[@ANYRESHEX], 0x10) write$9p(r3, &(0x7f0000000100)="d5", 0x1) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x3], 0x0, 0x0, 0x1, 0x1}}, 0x40) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) close(0x3) r5 = fsmount(r1, 0x0, 0x5) fchdir(r5) close_range(r0, 0xffffffffffffffff, 0x0) 16m40.341246062s ago: executing program 2 (id=493): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x2800c895}, 0x20040854) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x0, 0xffff}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x34000, 0x4004815, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x1000000, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 16m38.803080355s ago: executing program 2 (id=500): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) setuid(0xee00) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x1000, 0x0, 0x80fd}) 16m38.56450127s ago: executing program 2 (id=501): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x84, 0x9, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102}]}]}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 16m23.436008167s ago: executing program 35 (id=501): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200)=0xfffffffd, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00'}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x68180, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x7, 0x3}, 0x8000, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCFLSH(r1, 0x540b, 0x1) syz_emit_ethernet(0x82, &(0x7f0000000100)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x84, 0x9, @dev={0xac, 0x14, 0x14, 0xc}, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010102}]}]}}}}}}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 16m16.996468066s ago: executing program 7 (id=601): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000005200000428bd7000ffdbdf250a08000200030000000800020005000000000000b2ad8d4f56c283c62f1546da87dcedbc7d5deca24c6e00c3175faff3a200316b17183a8f9ec698e56139a0d608c2fc878e045a319c73d3cf875447497590c2f5d5e8ae58d58b1f7c6ce3425bdb6ec6fadf5141d3365d9751fb6834b2dc4e05189d753acb137ac39a58b04d3224b242ef6a78b841b96ca71a660e2fa12a3b70d59148ac68c784253527e3c8"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x80) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[@ANYBLOB="0180c200000028cefbaa222986dd605d000000283aff20010000000000000000000000000002ff020000000000000000000000000001"], 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={&(0x7f0000000500)}, 0x10aeca, 0x1224, 0xfffffffb, 0x5, 0x40fa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80000054eb20d78ee079025a165439c3807988a195c5e9da978992641d9a95ee2d46e69f5fa6d85020808e39cdb774faad5bf0f82a191d8a532568e4b8f41d7a0a486b29852035517c7147030ef58acbb59f058ad6e4b2d755a594e976b449339c7148ec59ee9441fe17910bc2ddb83b16677c9f59ed8098400c68942e253877cbf8b01ff493674dfab23be4426390e1e53f15c45de80d176b9bc9fbc51e3a8c6907d1560a15cdef782f6e954ecc9bbe2fb91ef8c2f9bae1a85a6bc0b7f9cd73d6826f788b90f805ce1f78761e3100fd752a98f6df451bd4f6d610aac6f9f93d2bc1c752a6fed0655af74f5b4c72e51b82a06c99fa1f3848541655ab3358f2d86fdc5cc2acb15513a6bdf73d245586cb94a37c602aa2756f8497f9ca746187680142c2b4d81c7d1e7ef938ed66ae51f2", 0x159}], 0x1}, 0x6400000c) r3 = syz_open_dev$rtc(&(0x7f0000000000), 0x53bb613a, 0xc2000) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0xb, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) ioctl$RTC_AIE_OFF(r3, 0x7002) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000700)={0x0, @llc={0x1a, 0x339, 0x2, 0x1, 0x3, 0x21, @broadcast}, @hci={0x1f, 0x3}, @sco={0x1f, @none}, 0x1000, 0x0, 0x0, 0x0, 0x100, &(0x7f0000000440)='veth1_to_team\x00', 0x6a}) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000780)={@remote, r5}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4b, r5}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030426bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYRES64=r7, @ANYRES32], 0x48}}, 0x440088c4) 16m15.434735259s ago: executing program 7 (id=612): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f) accept4(r0, 0x0, 0x0, 0x400000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r3, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 16m14.92009094s ago: executing program 7 (id=613): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$kcm(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) 16m13.925202792s ago: executing program 7 (id=622): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x44, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0423, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004, 0x4, @perf_config_ext={0x4, 0x7f}, 0x2012, 0x0, 0x7ffff, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xa}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macsec0\x00'}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x11, r0) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) mremap(&(0x7f00005ca000/0x2000)=nil, 0x2000, 0x1000, 0x4, &(0x7f0000023000/0x1000)=nil) 16m13.647880918s ago: executing program 7 (id=623): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe8672696}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}}], 0xf00, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) rt_sigtimedwait(&(0x7f0000000040)={[0x1]}, &(0x7f0000000140), &(0x7f00000001c0), 0x8) shutdown(r2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') sendmsg$tipc(r4, &(0x7f00000003c0)={&(0x7f0000000280)=@id={0x1e, 0x3, 0x3, {0x4e23}}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000380)="81d5f3d2e5576032bc9c8fa78e87c35a8f7d", 0x12, 0x24000050}, 0x20000080) 16m10.334194069s ago: executing program 7 (id=632): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') io_uring_setup(0x1fae, &(0x7f0000000200)={0x0, 0x2bf1, 0x10, 0x2, 0x317}) preadv(r1, &(0x7f00000025c0)=[{0x0}, {&(0x7f0000000100)=""/50, 0x32}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/235, 0xeb}, {0x0}, {&(0x7f00000024c0)=""/230, 0xe6}], 0x9, 0x1, 0x401) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000800)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) timer_getoverrun(r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) 15m55.313112284s ago: executing program 36 (id=632): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0xb80a7000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000000)=0x5, 0x4) unshare(0x6020400) acct(&(0x7f0000000040)='./file0\x00') io_uring_setup(0x1fae, &(0x7f0000000200)={0x0, 0x2bf1, 0x10, 0x2, 0x317}) preadv(r1, &(0x7f00000025c0)=[{0x0}, {&(0x7f0000000100)=""/50, 0x32}, {0x0}, {&(0x7f00000001c0)=""/71, 0x47}, {&(0x7f0000000840)=""/137, 0x89}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/235, 0xeb}, {0x0}, {&(0x7f00000024c0)=""/230, 0xe6}], 0x9, 0x1, 0x401) r3 = gettid() bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x33, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r5 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000800)=0x1, 0x4) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03000000", 0x4}], 0x2}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) timer_getoverrun(r0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x880, 0x0) 15m15.580080391s ago: executing program 6 (id=921): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/89, 0x59}, {&(0x7f0000000580)=""/43, 0x2b}], 0x4}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x40, 0x6, 0x0, 0x0, 0x0, 0x103, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_config_ext={0x1, 0x193}, 0x1a1ed, 0x0, 0x8, 0x2, 0x4, 0x5, 0x4, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) r2 = dup3(r0, r1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000003c0)={r6, 0x6, 0x7, 0x7}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 15m13.712751501s ago: executing program 6 (id=938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x300, 0x0, 0x10040003}, 0x0) 15m13.394526658s ago: executing program 6 (id=940): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket(0xf, 0x5, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x40080) removexattr(0x0, &(0x7f0000000180)=@random={'system.', '#%)\x00\x9e\x81\xbc,\x02\xaaZ\xf7\xdc\x92\xe0\x194\xb9\xe8\xeae\xdc\xe3\xff\x04xC\xf2\x01~\xf87$\xd5\x80\x97\xba\x1c\xec\xb8\xf7\xb4\xbe\xcf\xae\x0eb\xf2\xc9\xafCn'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="05000000040000000c0000000b", @ANYRES16=r0], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x24004044) recvmsg$unix(0xffffffffffffffff, 0x0, 0x6320) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x81041, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) socket$inet_icmp(0x2, 0x2, 0x1) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x1}, 0x18) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/route\x00') fchdir(r4) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', &(0x7f0000000140)={0x5750c0}, 0x18) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) 15m10.339640714s ago: executing program 6 (id=943): r0 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x209d}, 0x10) write(r0, &(0x7f00000000c0)="1800000016005f0214fffffffffffff881ff000001000000", 0x18) 15m10.195294787s ago: executing program 6 (id=947): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe8672696}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$unix(0x1, 0x2, 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) symlink(&(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00') 15m7.025707136s ago: executing program 6 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48810) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4c000) fcntl$setstatus(r1, 0x4, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x6, 0x7fff, 0x0, 0x0, 0x0, 0x7}, r6, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000070a0300cf2971fb0be12e550000000000000000050000000c000580080001400000002b0800094000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) recvfrom(r4, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xed1b}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x4840) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f0000000300)) 14m51.942733471s ago: executing program 37 (id=954): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}}, &(0x7f0000000140)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x48810) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4c0c8) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0xc, &(0x7f0000000000)=0x201, 0x4) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r1, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4c000) fcntl$setstatus(r1, 0x4, 0x2000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x6, 0x7fff, 0x0, 0x0, 0x0, 0x7}, r6, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r7, 0x9, 0x0) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="28000000070a0300cf2971fb0be12e550000000000000000050000000c000580080001400000002b0800094000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) recvfrom(r4, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0xfffd}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xed1b}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x4840) fsconfig$FSCONFIG_CMD_RECONFIGURE(r7, 0x7, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r7, 0x40085511, &(0x7f0000000300)) 1m33.080237185s ago: executing program 0 (id=10729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}}, 0x0) 1m32.669316984s ago: executing program 0 (id=10735): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000040)) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x0, r2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x60000010}) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r2, 0x40047211, &(0x7f0000000000)=0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000002c0)={0xa0000013}) close(r2) 1m32.589811805s ago: executing program 0 (id=10738): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000019200)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ID={0x8, 0x6, 0xf2}]}, 0x28}, 0x1, 0x0, 0x0, 0x404cc83}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x80310, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3648, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x8, "00b300"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000080)={0x3, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) dup3(r2, r1, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100), 0x4) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x4c81, 0xfffffffffffffffe) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4004010) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000005c0)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "11cba021ab00d7c3d795bc8741153034523fb8ca053ba1a69ecb02d499b8503ce487d03abab1b53320f25c724fe0d32fce049bf65bdef89efbd833d173b77087ea4ea3a853df466fa7859f68e3de5c95"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 1m31.706476264s ago: executing program 0 (id=10744): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x42385355a5e488d, &(0x7f00000001c0)="75281273c6269df42e0d4c6d7219f7031ee2a9961a7a6c3887242f87a52e3db423a734a17192d05f7a6b175685f6485a15ce2665d4361537682648efae169331c91418ca", 0x44) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={0xffffffffffffffff, &(0x7f0000000300)="93161bba5501f0e34b11b48a562612b6bd8c815a344e4d051e7348dba75e92d86c4ce89fd002e323c7278237c13e14da88d484f6876a841aae5784e50c819ba2d098862f1ecb1b889acf94ee5e3feed2c57e5d4423dc89738dba", &(0x7f0000001580)=""/80}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000040000000100000080"], 0x1b) bpf$BPF_MAP_FREEZE(0x16, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018200000", @ANYRES32=r2, @ANYBLOB="0000000000000000690300000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_mount_image$msdos(&(0x7f00000008c0), &(0x7f0000000000)='.\x02\x00', 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB="646973636172642c646f74732c646f74732c6e6f646f74732c636865636b3d7374726963742c646f74732c0080fcdc5c3dd34a5bee25f099008bade73ed878442a18112f260a6de8f9de23ca03128aff6e012a1d950f746fd8a192b6e048d4bcb62d5ee3a79d7ff9522014e3c0881f4cdda0cd5c0458cae665", @ANYRES32=0x0, @ANYRESHEX=0x0], 0x1, 0x11f0, &(0x7f0000001b00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='.\x02/file0\x00', 0x115840, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0xa, 0x4}, 0xc) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') linkat(r4, &(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) r5 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="040400000000201b0000000000002e9b55a20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) r7 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x969, 0x4}, 0x8092, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$getregset(0x4204, r8, 0x202, &(0x7f00000004c0)={&(0x7f00000003c0)=""/208, 0xd0}) perf_event_open(0x0, r8, 0x9, r7, 0x8) r9 = openat(0xffffffffffffff9c, 0x0, 0x204000, 0x0) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000801, 0x0, &(0x7f0000000140)={0x7fc, 0xb, 0x800000000000a, 0x0, 0x80, 0x40000000000003, 0x35, 0x0, 0x404}) perf_event_open(&(0x7f0000000580)={0x3, 0x80, 0x9d, 0x7, 0x3, 0x2, 0x0, 0xd857, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x8, 0x2}, 0x10, 0x8, 0x7, 0x7, 0x80, 0xf2e, 0xe536, 0x0, 0x800, 0x0, 0x7}, r8, 0xd, r9, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x9, 0x20, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000004000000000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b703000000003cec921c5bbe0e2210e969fabeab05e800008500000083000000bf090900000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000110000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000820000009500000000000000852000000200000085100000020000008520000005000000185d00000f0000000000000000000000181b0000", @ANYRES32, @ANYBLOB="0000000000000000bf000000850000000b90ee42b7000000000000009500"/48, @ANYRES16=r9], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x7, &(0x7f0000000480)=""/7, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0xa, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0xc, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, r4, r5, r6, r9], 0x0, 0x10, 0x800007}, 0x94) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0xfb}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d", 0x6d}], 0x1}}], 0x2, 0x2090) 1m31.317079533s ago: executing program 0 (id=10748): r0 = syz_io_uring_setup(0xb32, &(0x7f0000000600)={0x0, 0x10086f3, 0x200, 0x0, 0x2df}, 0x0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xc, 0x0, 0x0) recvmmsg(r1, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4}}, 0x26) io_uring_enter(r0, 0x0, 0x0, 0x4b, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) write$vga_arbiter(r4, &(0x7f0000000200)=@other={'trylock', ' ', 'none'}, 0xd) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0xfcb3ae1e0968818a}, 0x8006) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="1c00000019008111e0020f060d8107040a60090000bed7f95c0255a12a0009", 0x1f}], 0x1}, 0x0) 1m31.042672819s ago: executing program 0 (id=10756): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 1m30.97213678s ago: executing program 38 (id=10756): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000740)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000040)=0xd62, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvfrom(r0, 0x0, 0x9400, 0x10132, 0x0, 0x0) 3.621817682s ago: executing program 1 (id=11397): socket$inet6(0x10, 0x2, 0x0) (async) socket$inet6(0x10, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpgid(r0) (async) r1 = getpgid(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x0, 0x5}, 0x5018, 0x2000000, 0x3, 0x0, 0x94b, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x4}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c10}, 0x4008840) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x4680, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x2}, 0x4680, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x2, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9, 0x0) (async) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x101, 0x9, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000540)={'bond0\x00', 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)='4', 0x1}, {&(0x7f0000000040)="dfb00e76a3eff866a7356c2c6f055ee138a03d4c54bc9ea1968feb70b946fe2755724a0b84fe905dc24b7a1db5cd3c98c8699a74775c48b45b1e41348a3620b4b07eb10c9dbc9aa7fdc7dbc6c99a6817fa8a708c0cd44c942e6a6bfe27ad3bc2826e19e3f93a361baae2e24d286561cfb09b244939e904", 0x77}], 0x2) removexattr(&(0x7f0000000140)='./cgroup\x00', &(0x7f0000000180)=@known='user.syz\x00') prctl$PR_SET_VMA(0x4f, 0x15, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) 3.492534315s ago: executing program 1 (id=11399): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x131482, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c400000019000100ffffffff000000007f000021000000000000988e03e10e3883e32abc268baedc639291ffbcc1000000000000200100"/70, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffffffffff7f00000000000000000008010000000000000000000000000007000000000000000000000000000000fbffffffffffffff0000000000000000040000000000000000000000000000020000000000000000000000000000000000010102000000000c0015005a07350000100000"], 0xc4}}, 0x2c000010) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001900674c0000000000000000ff010000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000ffffffffffffff7f00000000000000000000000000000000020000000000000000000000000000000000008000000000ffffffffffffffff00"/112], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e0000002000000000000000000000000000000000000000000000000000000000041373e17000006000000000a001080", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b56b6e000000030200000000"], 0xb8}}, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) rt_sigqueueinfo(0x0, 0x41, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet_sctp(r6, &(0x7f0000000780)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000840800000600"/24], 0x18, 0x4040010}, 0x4000000) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000400)) setns(r5, 0x66020000) socket$kcm(0x10, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000980)='.\x00', 0x0, 0x104000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7, 0x3, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80, 0x8, 0x5, 0x9}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x4, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7}, 0x94) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_emit_ethernet(0x144b, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0) 3.408384087s ago: executing program 9 (id=11401): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000940)='./bus\x00', 0x1200040, &(0x7f0000000980)=ANY=[], 0x0, 0x39a, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x61) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = semget$private(0x0, 0x20000000102, 0x0) semop(r3, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) semctl$GETNCNT(r3, 0x3, 0xe, &(0x7f0000000680)=""/200) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) close(r5) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_JOIN_IBSS(r5, 0x0, 0x20000000) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x10) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00', 0x7) clock_getres(0x8, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r7, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f00000001c0)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c00"], 0x40}, 0x20008024) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/610], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r1], 0x4c}}, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) 3.172028622s ago: executing program 3 (id=11404): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x174, r1, 0x5eae78d9c54e9d3f, 0x2, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x158, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xe8, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x100}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfdeb}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x523}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2bcf873a8dddefd99e1d77f3c95fecb2"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.065871724s ago: executing program 3 (id=11405): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x0, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200f}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000003000000040008801c00048005000300010000001800030000000000050003000100000008000100"], 0x44}}, 0x400c800) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x1094000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x11, 0xbaf, &(0x7f0000002f00)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x18) setregid(0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0xc0000001) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 2.931183307s ago: executing program 3 (id=11406): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x14, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fcffffff00000000800000af18010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000000600000095"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (fail_nth: 1) 2.852650979s ago: executing program 9 (id=11407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x6002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x100008}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66962000) msgsnd(0x0, &(0x7f0000000500)={0x1, "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"}, 0xaf9, 0x800) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=@RTM_DELMDB={0x38, 0x55, 0x1, 0x70bd2a, 0x25dfdbfc, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x3, 0x3, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x20000084) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, 0x0, 0x0) 2.835256619s ago: executing program 9 (id=11409): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x0, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000001f0000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) syz_read_part_table(0x105b, &(0x7f0000001080)="$eJzsz7FtwzAUBNCTRIRUFW2ghdKmywSZIukyS9Yw4MKdt3EnwzIE2AMYdvFew8OR/MAPTzX2LRnTSkre1qa2JF9le1C3cPjIqa1pSv52y/v1btrPXbr173JMKffj53x3qf1N0/8Ow+Wo+cnw+f/4DQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9Z0DAAD//w9tCqs=") 2.566512395s ago: executing program 3 (id=11412): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f) accept4(r0, 0x0, 0x0, 0x400000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) socket$inet(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r9, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 2.566120095s ago: executing program 1 (id=11413): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) 2.506261456s ago: executing program 9 (id=11414): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) creat(0x0, 0xc2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x3) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000000c0)=0x6) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f0000000200)=@v3={0x3000000, [{0x2, 0x9158}, {0x2a99, 0x101}], 0xee01}, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) 1.694045744s ago: executing program 1 (id=11416): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x0, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200f}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000003000000040008801c00048005000300010000001800030000000000050003000100000008000100"], 0x44}}, 0x400c800) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x1094000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x11, 0xbaf, &(0x7f0000002f00)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x18) setregid(0xffffffffffffffff, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 1.355007331s ago: executing program 9 (id=11417): setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) close(0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") open$dir(0x0, 0x12c40, 0x11a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.298649812s ago: executing program 1 (id=11418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000005a80)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="331ced1e4bb118c47eec1050d54ada48d1136a320daea6954df610aa74c3ba1e3ec3344d4639f9082b96d9db33729a9662e9a743ab0d019e4c0f9a00a649b64cde77dccbb2329aaecc945f6a25", 0x4d}, {&(0x7f0000003800)="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", 0xf7d}], 0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 1.036535388s ago: executing program 5 (id=11422): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x0, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200f}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000003000000040008801c00048005000300010000001800030000000000050003000100000008000100"], 0x44}}, 0x400c800) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x1094000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x11, 0xbaf, &(0x7f0000002f00)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x18) setregid(0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0xc0000001) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 855.276082ms ago: executing program 5 (id=11423): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x0, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200f}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000003000000040008801c00048005000300010000001800030000000000050003000100000008000100"], 0x44}}, 0x400c800) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x1094000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x11, 0xbaf, &(0x7f0000002f00)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x18) setregid(0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0xc0000001) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 838.513632ms ago: executing program 8 (id=11424): unshare(0x2a020480) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310007000008000a40fffffffc14000000110001"], 0x64}}, 0x24000000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000014000000000000000000100000aa8000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000d6400128014000180090001006c61737400000000040002804c000180090001006d657461000000003c000280080001400000001408000240000000100800034000000014f761014000000014070b03400000000e080001400000000808000140000000000800034000000134"], 0xd0}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) socket(0x1, 0x2, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20044045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket(0x26, 0x3, 0xfffffe00) r4 = syz_clone(0x10800000, &(0x7f0000000100)="dd5a8dba8380442abd3e793fcb9c8170278e400d550711f033c8763343eaf6f85c80635b991a6821b6b8cf765739bdfea4d4483ab1684c7f072414d6d195a8b452209c642483d7a350b124374618f7e48bd02275ee69b7ac49ca072a0be12e44ff4ef24d9e8feff0303ed6d59542c048ff0b3c9c016d4fdd3bcef7c71e24fd14617b18de0a1fb32e241b6d33c367", 0x8e, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f00000002c0)="b45d9dc43c0d3454edcafaaec36f5faa1e0d9ee115fb70d3854391363a357b74bf11f26266375947d48d5a52f4d754bd11504c523a5b531bedd8") r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x2, 0xd7, 0x1, 0x0, 0x0, 0x0, 0xc, 0x0, 0x8}, 0xe) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000140)={r6, 0x9, 0x10}, 0xc) process_vm_writev(r4, &(0x7f0000000500)=[{&(0x7f0000000980)=""/166, 0xa6}, {&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000a40)=""/202, 0xca}], 0x3, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000900)=""/74, 0x4a}], 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8018000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x50, 0x0, 0x8, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8864}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004081}, 0x81) r7 = accept4$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000040)=0x10, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000280)={0x8, 0x2, 0x9}, 0xffffffffffffff9d) 651.755236ms ago: executing program 3 (id=11425): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaabb0007000000000800907800000100ac1414aae000907800000000"], 0x0) (async) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_route(0x10, 0x3, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000000000000400"/20, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000090000000000000000000000000000001800000000000038e02bfc825498d728d3c0b0078031475d07df370953debabaaf9c5c7753b2ea5ca3bbc0d91928a9f2c89a0aa87c0101d0ef47a63d4ff7aed0f2d2759409ee53ef66a76ea6060f061b0126cea471"], 0x50) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) r8 = socket$inet(0x2, 0x3, 0x2) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r9) sendmsg$NFC_CMD_DEP_LINK_UP(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010029bd7000ffdbdf2504000000080001"], 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000180)={@loopback, @remote, @remote}, 0xc) 570.334698ms ago: executing program 3 (id=11426): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@setneightbl={0x24, 0x43, 0x21dd8154769435ff, 0x70bd2d, 0x25dfdbfe, {0x2}, [@NDTA_NAME={0xe, 0x1, 'ip6erspan\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000854}, 0x4000000) close(r0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r3, 0x400, 0x1) r4 = memfd_create(&(0x7f0000000500)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\xe7\x1fX \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xe8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0h\xdb\x9f]#\xf1\xd7I\xb0\x9a\xd8Q\b!f', 0x0) write$binfmt_script(r4, &(0x7f0000000380)={'#! ', './file0', [{0x20, '[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0'}]}, 0x13e) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 569.908588ms ago: executing program 5 (id=11427): alarm(0xfd48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4002, 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r4) r6 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) write(r6, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) syz_genetlink_get_family_id$team(&(0x7f0000000140), r6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00'}) 529.014249ms ago: executing program 1 (id=11428): setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) close(0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") open$dir(0x0, 0x12c40, 0x11a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 352.918683ms ago: executing program 9 (id=11429): setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x1b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) recvfrom$unix(r0, 0x0, 0x0, 0x40010002, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1e, 0x0, 0x2, 0xff}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0) socket(0x2, 0x80805, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) close(0x3) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}}, 0x94) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") open$dir(0x0, 0x12c40, 0x11a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fa056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160040fa0a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 291.577894ms ago: executing program 8 (id=11430): r0 = socket(0x1e, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) (fail_nth: 1) 290.564184ms ago: executing program 5 (id=11431): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 261.610955ms ago: executing program 8 (id=11432): r0 = socket(0x1e, 0x1, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000200)) 261.112665ms ago: executing program 5 (id=11433): sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, 0x0, 0x40800) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x7}, 0x204, 0x0, 0x101, 0x0, 0x6, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200f}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0702000000000000000003000000040008801c00048005000300010000001800030000000000050003000100000008000100"], 0x44}}, 0x400c800) syz_mount_image$ext4(&(0x7f0000000b80)='ext3\x00', &(0x7f0000000bc0)='./file0\x00', 0x1094000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x9}}]}, 0x11, 0xbaf, &(0x7f0000002f00)="$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") r2 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8, 0xffff7fff, 0xc, 0x9, 0x101}) pwritev2(r2, &(0x7f0000000140)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2000, 0x0, 0x18) setregid(0xffffffffffffffff, 0x0) socket(0x11, 0x3, 0xc0000001) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 240.354315ms ago: executing program 8 (id=11434): close(0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xb}, {0x4, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x18, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0xfffb, 0x0, 0xffd, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, &(0x7f00000007c0)=0x1, 0x278, 0x3) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x12}, @TCA_FLOWER_KEY_ENC_IP_TOS_MASK={0x5, 0x51, 0x4e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 173.260886ms ago: executing program 5 (id=11435): r0 = socket$tipc(0x1e, 0x5, 0x0) listen(r0, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000280)=0x521f) accept4(r0, 0x0, 0x0, 0x400000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c72, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0xfffffffd, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) socket$inet(0x2, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32=r6, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fd"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r9, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) sendto(r9, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 466.9µs ago: executing program 8 (id=11436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040014) (fail_nth: 1) 0s ago: executing program 8 (id=11437): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1008205, &(0x7f0000000000), 0x1, 0x631, &(0x7f0000000c40)="$eJzs3c9rG1ceAPDvjCzHTrzrZFnCJuyyhj0ksMQ/smHT9pT00hwCDTSHUnqIG9upiZyY2IEmDdSBHlJooZReS8ml/0DvJfTaa6HtredCWkpKD22Jyow0jrAlW3GsH4k+Hzzymzczeu+r8dO80fhpAhhYE9lDGnEoIi4kEeMNy8aitnCivt6Dn29dzKYkqtVXfkoiiRiJiIvF+g/rv/dlD0n+k/tbaXO5KzduXp6tVGveiZhaXVqeWrlx89ji0uyl+UvzV2aOP3fi5PTzMydmdiXOIq4zZ1/+5wfvvvn/ha8rx5I4FefLb89FPbZdKajBREzEw3qIjflDEXEySzR5XZ42RQhJj+vBzpTqf4/liDgY41GKPevLxmPx/Z5WDuioaimi+vjSnWwE9JtkvSmXe1sRoMuKfkBxbt+J8+B+NnS6dgK0Of6h2mcjMZKfG+19kOTnSYXsfHf/LpSflfHHrcOfZFO0+BxiaBfKaWXtdkT8o1n8SV63/flHPFn8aaQN22Xp6YgYrr8W6Q7Ln9gw3+2/v8eJv3E/ZPGeqv/O8l/cvqg7zTJ7HT8Ag+ne6fqBfC2be3T8y3qGRf8nmvR/xpocu3ai18e/+y37f8XxfiT/jDzd0A/L+jznmj9leWPG9++d+ahV+Y39v2zKyi/6gt1w/3bE4Q3x30mzbl2yvv+TJvs/ez0utFnGS9/8eKbVsl7HX70bcaTp+c+jK1pZamp1abnI23B9cmphsTI/XXtsWsYXX73+Wavyex1/tv+jRfxb7f8sb7nNMj4/d3ep1bKxbeNPfxhOzuep4XrOW7Orq9dmIoaTs/VVGvKPr2/Y9O2pWKd4jiz+o/9p3v63iD/f0Wttxr/86uUHtdTmq6Rt7/9N7yq5h9U269BKFv/cDvf/h22W8etr1/+1IWu0SGwV/+jmp0rafc0BAAAAAABgEKX5NdgknVxPp+nkZG0M799jb1q5urL634Wr16/MRRzN/x+ynBZXusdr80k2P1P/f9hi/viG+f9FxIGI+Lg0ms9PXrxamet18AAAAAAAAAAAAAAAAAAAANAn9tXH/xf3qf6lVBv/35bVgx2uHdBxnbzBHNDftH8YXHn7b+cOrm90vi5Adzn+w+DS/mFwaf8wuLR/GFzaPwwu7R8Gl/YPg0v7BwAAAIBn0oF/3/suiYi1F0bzKTNcX1buac2ATmts4yNtbTHRsboA3VXq6mZAP1m/9N/O8H/gmdLWOf5v9S8H7Hx1gB5ImmXmnYPq1o3/XtMtAQAAAAAAAAAAAIAOOHLI+H8YVGl82esqAD3yBAP5fQcAPOV89T8MLuf4wHaj+Ft+N6Dx/wAAAAAAAAAAAADQNWP5lKST9VuAjkWaTk5G/CUi9kc5WViszE9HxF8j4ttSeU82P9PrSgMAAAAAAAAAAAAAAAAAAMAzZuXGzcuzlcr8tcbE75tyOpwo7i7Wzsot6vwkieIuqN0Mud1EJN0vdDQi+iH2ziSGGnKSiLVsz/dFxa6tRF9UI82r0cM3JQAAAAAAAAAAAAAAAAAAGFANY4+bO/xpl2sEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN336P7/O08k2zxPr2MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5OfwYAAP//dd8upg==") (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040), 0x4) kernel console output (not intermixed with test programs): bitmap block 3 in block_group 0 [ 1018.020521][T28419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1018.277251][T28693] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1019.337178][ T1426] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1019.347061][ T1459] loop8: detected capacity change from 0 to 1024 [ 1019.353833][ T1459] EXT4-fs: Ignoring removed nobh option [ 1019.359464][ T1459] EXT4-fs: Ignoring removed i_version option [ 1021.412185][ T1459] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 1021.412825][ T1459] EXT4-fs: failed to create workqueue [ 1021.429045][ T1459] EXT4-fs (loop8): mount failed [ 1021.480492][ T1474] xt_hashlimit: size too large, truncated to 1048576 [ 1021.542147][ T28] audit: type=1400 audit(2000000917.260:2369): avc: denied { watch } for pid=1473 comm="syz.0.10435" path="/349/file0" dev="tmpfs" ino=1839 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1021.797895][ T1485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1021.906523][ T1485] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10438'. [ 1021.917885][ T1476] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10433'. [ 1022.015265][ T1487] loop8: detected capacity change from 0 to 1024 [ 1022.034380][ T1487] EXT4-fs: Ignoring removed nobh option [ 1022.041408][ T1487] EXT4-fs: Ignoring removed i_version option [ 1022.143784][ T1487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1022.258499][ T1487] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1022.486408][ T1488] loop9: detected capacity change from 0 to 512 [ 1022.535597][ T1488] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1022.550837][ T1488] EXT4-fs error (device loop9): ext4_get_branch:178: inode #13: block 1024: comm syz.9.10433: invalid block [ 1022.564856][ T1488] loop9: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1022.571660][ T1488] EXT4-fs (loop9): 1 truncate cleaned up [ 1022.581295][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1022.581311][ C1] EXT4-fs (loop9): initial error at time 2000000918: ext4_get_branch:178: inode 13: block 1024 [ 1022.581348][ C1] EXT4-fs (loop9): last error at time 2000000918: ext4_get_branch:178: inode 13: block 1024 [ 1022.954104][ T1488] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.203537][ T1507] syzkaller0: entered promiscuous mode [ 1023.227907][ T1507] syzkaller0: entered allmulticast mode [ 1023.494045][ T1491] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1024.993396][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.455459][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.656334][ T1523] xt_hashlimit: max too large, truncated to 1048576 [ 1025.712134][ T1524] batadv_slave_0: entered promiscuous mode [ 1025.781618][ T1524] netlink: 112 bytes leftover after parsing attributes in process `syz.5.10451'. [ 1025.883026][ T1522] batadv_slave_0: left promiscuous mode [ 1026.533575][ T1552] loop8: detected capacity change from 0 to 512 [ 1026.621958][ T1552] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.10447: corrupted inode contents [ 1026.635118][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.636141][ T1552] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #16: comm syz.8.10447: mark_inode_dirty error [ 1026.645727][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 1026.645838][ C1] EXT4-fs (loop8): initial error at time 2000000922: ext4_do_update_inode:5742: inode 16 [ 1026.646006][ C1] EXT4-fs (loop8): last error at time 2000000922: ext4_do_update_inode:5742: inode 16 [ 1026.685423][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.693651][ T1552] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.10447: corrupted inode contents [ 1026.716268][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.718482][ T1552] EXT4-fs error (device loop8): __ext4_ext_dirty:207: inode #16: comm syz.8.10447: mark_inode_dirty error [ 1026.740353][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.741340][ T1552] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.10447: corrupted inode contents [ 1026.762499][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.763976][ T1552] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 1026.781961][ T1552] loop8: lost filesystem error report for type 5 error -117 [ 1026.782450][ T1552] EXT4-fs error (device loop8): ext4_do_update_inode:5742: inode #16: comm syz.8.10447: corrupted inode contents [ 1026.801796][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.802281][ T1552] EXT4-fs error (device loop8): ext4_truncate:4691: inode #16: comm syz.8.10447: mark_inode_dirty error [ 1026.822712][ T1552] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1026.823378][ T1552] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 1026.843488][ T1552] loop8: lost filesystem error report for type 5 error -117 [ 1026.853285][ T1552] EXT4-fs (loop8): 1 truncate cleaned up [ 1026.878710][ T1552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1026.893442][ T1552] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.306735][T24539] Quota error (device loop8): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1027.307224][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1027.357173][T24539] EXT4-fs error (device loop8): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 1 [ 1027.487948][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.375137][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1028.397051][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.458922][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1029.469166][ T28] audit: type=1400 audit(2000000925.080:2370): avc: denied { remount } for pid=1583 comm="syz.3.10463" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1029.909844][ T3391] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.110706][ T1595] xt_hashlimit: size too large, truncated to 1048576 [ 1030.144300][ T1596] netlink: 'syz.0.10464': attribute type 10 has an invalid length. [ 1030.244036][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1030.281280][ T1597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1030.322558][ T1598] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10464'. [ 1030.764173][ T1571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1030.884496][T10988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1030.927833][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.114673][ T1627] loop8: detected capacity change from 0 to 4096 [ 1032.123660][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1032.160761][ T1623] syzkaller0: entered promiscuous mode [ 1032.170299][ T1623] syzkaller0: entered allmulticast mode [ 1033.135377][ T1627] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1033.149317][ T28] audit: type=1400 audit(2000000928.870:2371): avc: denied { write } for pid=1609 comm="syz.8.10470" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1033.174114][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1033.786262][ T1652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.830174][ T1652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.858175][ T1658] erspan0: entered promiscuous mode [ 1033.985463][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.857374][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1035.625191][ T1663] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1036.095899][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1036.699378][ T1667] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1036.727308][ T1667] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1037.187100][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.200309][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.240804][ T1657] erspan0: left promiscuous mode [ 1037.343144][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1037.452454][ T28] audit: type=1400 audit(2000000933.160:2372): avc: denied { write } for pid=1681 comm="syz.9.10492" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1037.479601][ T1685] program syz.5.10493 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.523532][ T1685] sctp: [Deprecated]: syz.5.10493 (pid 1685) Use of int in max_burst socket option. [ 1037.523532][ T1685] Use struct sctp_assoc_value instead [ 1037.547171][ T28] audit: type=1400 audit(2000000933.170:2373): avc: denied { create } for pid=1684 comm="syz.5.10493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1037.581836][ T1695] loop0: detected capacity change from 0 to 2048 [ 1037.591953][ T28] audit: type=1400 audit(2000000933.170:2374): avc: denied { ioctl } for pid=1684 comm="syz.5.10493" path="socket:[118814]" dev="sockfs" ino=118814 ioctlcmd=0x48d5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1037.651149][ T1695] GPT:first_usable_lbas don't match. [ 1037.657182][ T1695] GPT:34 != 290 [ 1037.660827][ T1695] GPT: Use GNU Parted to correct GPT errors. [ 1037.782610][ T1695] loop0: p1 p2 p3 [ 1037.802306][ T1695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.812943][ T1695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.784548][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.795368][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.817697][T30851] bridge_slave_1: left allmulticast mode [ 1038.828213][ T28] audit: type=1400 audit(2000000934.550:2375): avc: denied { write } for pid=1694 comm="syz.0.10496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1038.928018][T30851] bridge_slave_1: left promiscuous mode [ 1038.933827][T30851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.947746][T30851] bridge_slave_0: left allmulticast mode [ 1038.953981][T30851] bridge_slave_0: left promiscuous mode [ 1038.961725][T30851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.009780][T30851] bond2 (unregistering): (slave erspan1): Releasing active interface [ 1039.024645][T30851] erspan1 (unregistering): left promiscuous mode [ 1039.041408][T30851] bond3 (unregistering): (slave gretap1): Releasing active interface [ 1039.049761][T30851] gretap1 (unregistering): left allmulticast mode [ 1039.071288][T30851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.081578][T30851] bond0 (unregistering): Released all slaves [ 1039.097750][T30851] bond1 (unregistering): Released all slaves [ 1039.116808][T30851] bond2 (unregistering): Released all slaves [ 1039.132579][T30851] bond3 (unregistering): Released all slaves [ 1039.251270][T30851] tipc: Left network mode [ 1039.276766][T30851] hsr_slave_0: left promiscuous mode [ 1039.294005][T30851] hsr_slave_1: left promiscuous mode [ 1039.331094][T30851] veth1_macvtap: left promiscuous mode [ 1039.353457][ T28] audit: type=1400 audit(2000000935.070:2376): avc: denied { audit_write } for pid=1725 comm="syz.9.10506" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 1039.375155][T30851] veth0_macvtap: left promiscuous mode [ 1039.393074][T30851] veth1_vlan: left promiscuous mode [ 1039.398407][T30851] veth0_vlan: left promiscuous mode [ 1039.403935][ T28] audit: type=1107 audit(2000000935.070:2377): pid=1725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='śüą±n„2.QŪųÕčwąkA˜—×;ƒÆĒ[“øŗų˜ļ9ƾ钞)R󵎔X“VlsšKnTO#Ė|……ęļĻ“ÅM' [ 1039.574624][ T1726] loop9: detected capacity change from 0 to 512 [ 1039.601409][ T1726] EXT4-fs error (device loop9): __ext4_iget:5533: inode #11: block 1: comm syz.9.10506: invalid block [ 1039.612492][ T1726] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1039.612982][ T1726] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.10506: couldn't read orphan inode 11 (err -117) [ 1039.634133][ T1726] loop9: lost filesystem error report for type 5 error -117 [ 1039.636528][ T1726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1039.658597][ T28] audit: type=1400 audit(2000000935.290:2378): avc: denied { setattr } for pid=1725 comm="syz.9.10506" path="/104/file0" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.691325][ T1726] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 1039.710306][ T1726] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 216 vs 220 free clusters [ 1039.726193][ T28] audit: type=1400 audit(2000000935.410:2379): avc: denied { mac_admin } for pid=1725 comm="syz.9.10506" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1039.760746][ T28] audit: type=1400 audit(2000000935.430:2380): avc: denied { relabelto } for pid=1725 comm="syz.9.10506" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 1039.795641][ T28] audit: type=1400 audit(2000000935.470:2381): avc: denied { accept } for pid=1725 comm="syz.9.10506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1039.815720][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.833765][ T1740] EXT4-fs error (device loop9): __ext4_add_entry:2412: inode #2: comm syz.9.10506: Directory hole found for htree leaf block 0 [ 1039.858615][ T28] audit: type=1400 audit(2000000935.550:2382): avc: denied { write } for pid=1725 comm="syz.9.10506" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.903260][ T28] audit: type=1400 audit(2000000935.550:2383): avc: denied { create } for pid=1725 comm="syz.9.10506" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1039.982672][ T28] audit: type=1400 audit(2000000935.700:2384): avc: denied { write } for pid=1725 comm="syz.9.10506" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1040.145169][ T1742] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10508'. [ 1040.217322][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.251868][ T1744] loop0: detected capacity change from 0 to 512 [ 1040.357861][ T1744] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1040.366459][ T1744] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.10508: invalid block [ 1040.378085][ T1744] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1040.382350][ T1744] EXT4-fs (loop0): 1 truncate cleaned up [ 1040.391519][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1040.391534][ C1] EXT4-fs (loop0): initial error at time 2000000936: ext4_get_branch:178: inode 13: block 1024 [ 1040.391578][ C1] EXT4-fs (loop0): last error at time 2000000936: ext4_get_branch:178: inode 13: block 1024 [ 1040.424984][ T1744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.687232][ T1736] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1040.707400][ T1736] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1040.877046][T30851] team0 (unregistering): Port device team_slave_1 removed [ 1040.888185][T30851] team0 (unregistering): Port device team_slave_0 removed [ 1040.923026][ T1740] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1040.938364][ T1740] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1040.981762][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1041.157111][ T1742] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1042.579632][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1042.982113][T28419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.525578][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.974354][ T407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1044.119651][ T1774] loop9: detected capacity change from 0 to 512 [ 1044.132715][ T1774] EXT4-fs: Ignoring removed oldalloc option [ 1044.201442][ T1774] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1044.250553][ T1774] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 1044.266166][ T1784] loop5: detected capacity change from 0 to 2048 [ 1044.297935][ T1774] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1044.314643][ T1784] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 1044.342339][ T1686] udevd[1686]: incorrect ext4 checksum on /dev/loop5 [ 1044.353671][ T1774] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.10514: bad orphan inode 267 [ 1044.416719][ T1686] udevd[1686]: incorrect ext4 checksum on /dev/loop5 [ 1044.452473][ T1774] loop9: lost filesystem error report for type 5 error -117 [ 1044.466414][ T1774] EXT4-fs (loop9): Remounting filesystem read-only [ 1044.480713][ T1774] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1044.521512][ T1793] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10520'. [ 1044.767494][ T1811] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10523'. [ 1044.787135][ T1809] syzkaller0: entered promiscuous mode [ 1044.803035][ T1809] syzkaller0: entered allmulticast mode [ 1044.983052][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.664816][ T1774] EXT4-fs warning (device loop9): dx_probe:861: inode #2: comm syz.9.10514: dx entry: limit 0 != root limit 125 [ 1045.845862][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10535'. [ 1045.867445][ T1774] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.10514: Corrupt directory, running e2fsck is recommended [ 1046.061828][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1046.132680][ T1860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10541'. [ 1046.147144][ T3384] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1046.157387][ T1861] x_tables: duplicate underflow at hook 1 [ 1046.181120][ T1863] program syz.0.10542 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1046.315940][ T1871] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10546'. [ 1046.355032][ T1874] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10547'. [ 1046.365099][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 1046.365112][ T28] audit: type=1400 audit(2000000942.090:2391): avc: denied { setopt } for pid=1866 comm="syz.0.10544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1046.670724][ T1883] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1883 comm=syz.8.10551 [ 1046.703878][ T1883] loop8: detected capacity change from 0 to 128 [ 1046.727282][ T1883] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1046.739792][ T1883] ext4 filesystem being mounted at /185/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.823199][T31142] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1046.833075][ T28] audit: type=1400 audit(2000000942.510:2392): avc: denied { write } for pid=1882 comm="syz.8.10551" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1046.854976][ T28] audit: type=1400 audit(2000000942.530:2393): avc: denied { write } for pid=1882 comm="syz.8.10551" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1046.876717][ T28] audit: type=1400 audit(2000000942.530:2394): avc: denied { create } for pid=1882 comm="syz.8.10551" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 1047.013324][ T28] audit: type=1400 audit(2000000942.730:2395): avc: denied { watch_reads } for pid=1893 comm="syz.3.10555" path="/442/file1" dev="tmpfs" ino=2310 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 1047.524300][ T1906] loop8: detected capacity change from 0 to 512 [ 1047.671178][ T1906] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.10552: iget: bad i_size value: 38620345925642 [ 1047.849642][ T1906] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1047.851581][ T1906] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.10552: couldn't read orphan inode 15 (err -117) [ 1047.860948][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1047.860965][ C0] EXT4-fs (loop8): initial error at time 2000000943: ext4_orphan_get:1399: inode 15 [ 1047.861004][ C0] EXT4-fs (loop8): last error at time 2000000943: ext4_orphan_get:1399: inode 15 [ 1047.958120][ T1906] loop8: lost filesystem error report for type 5 error -117 [ 1047.966692][ T1906] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1047.994646][ T1922] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10565'. [ 1048.006713][ T1917] loop5: detected capacity change from 0 to 736 [ 1048.052483][ T1917] rock: directory entry would overflow storage [ 1048.070408][ T1917] rock: sig=0x3b10, size=4, remaining=3 [ 1048.194434][ T1940] team0: Device bond0 is up. Set it down before adding it as a team port [ 1048.404266][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1048.505321][ T1948] loop8: detected capacity change from 0 to 736 [ 1048.539941][ T1948] rock: directory entry would overflow storage [ 1048.546274][ T1948] rock: sig=0x3b10, size=4, remaining=3 [ 1048.879179][ T1959] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10578'. [ 1048.889646][ T28] audit: type=1400 audit(2000000944.590:2396): avc: denied { name_bind } for pid=1958 comm="syz.0.10578" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1048.943713][ T1959] syzkaller0: entered promiscuous mode [ 1048.970702][ T28] audit: type=1400 audit(2000000944.680:2397): avc: denied { cpu } for pid=1956 comm="syz.9.10577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1049.155451][ T1959] syzkaller0: entered allmulticast mode [ 1049.194651][ T1961] tipc: Enabled bearer , priority 0 [ 1049.215524][ T1958] tipc: Resetting bearer [ 1049.385480][ T1958] tipc: Disabling bearer [ 1049.453131][ T1972] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10583'. [ 1050.513332][ T1992] SELinux: policydb table sizes (8,-1) do not match mine (8,7) [ 1050.521183][ T28] audit: type=1400 audit(2000000946.230:2398): avc: denied { load_policy } for pid=1991 comm="syz.8.10591" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1050.675762][ T1992] SELinux: failed to load policy [ 1050.782227][ T1999] loop8: detected capacity change from 0 to 1024 [ 1050.802746][ T1999] EXT4-fs: Ignoring removed nobh option [ 1050.815614][ T1999] EXT4-fs: Ignoring removed bh option [ 1050.827350][ T1999] EXT4-fs: Ignoring removed nobh option [ 1050.839734][ T1999] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 1050.858734][ T1999] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1050.987601][ T28] audit: type=1400 audit(2000000946.700:2399): avc: denied { write } for pid=1998 comm="syz.8.10593" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1051.029014][ T28] audit: type=1400 audit(2000000946.710:2400): avc: denied { write } for pid=1998 comm="syz.8.10593" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1051.264058][ T2014] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10597'. [ 1051.378080][ T2018] xt_limit: Overflow, try lower: 0/0 [ 1051.786263][ T2042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10609'. [ 1051.893147][ T2044] loop5: detected capacity change from 0 to 1024 [ 1051.901172][ T2044] EXT4-fs: dax option not supported [ 1053.186965][ T2050] syzkaller0: entered promiscuous mode [ 1053.194678][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1053.213811][ T2050] syzkaller0: entered allmulticast mode [ 1054.456504][ T2081] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1054.704357][ T2087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10622'. [ 1055.041177][ T2097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10626'. [ 1055.098700][ T2097] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1055.152820][ T2095] syzkaller0: entered promiscuous mode [ 1055.161311][ T2095] syzkaller0: entered allmulticast mode [ 1055.199775][ T2101] netlink: 'syz.5.10628': attribute type 1 has an invalid length. [ 1055.223322][ T2101] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1055.286351][ T2107] xt_hashlimit: size too large, truncated to 1048576 [ 1055.387514][ T2113] netlink: 'syz.0.10629': attribute type 10 has an invalid length. [ 1055.504973][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1055.545934][ T2113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1055.593641][ T2114] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10629'. [ 1055.709132][ T2119] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10633'. [ 1055.813178][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 1055.813198][ T28] audit: type=1400 audit(2000000951.530:2402): avc: denied { connect } for pid=2125 comm="syz.8.10636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1056.026953][ T2134] syzkaller0: entered promiscuous mode [ 1056.032506][ T2134] syzkaller0: entered allmulticast mode [ 1057.204909][ T2149] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10643'. [ 1057.268623][ T2150] loop9: detected capacity change from 0 to 512 [ 1057.281321][ T2150] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1057.289770][ T2150] EXT4-fs (loop9): 1 truncate cleaned up [ 1057.295918][ T2150] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1057.397183][ T2152] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1057.411220][ T2152] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1058.197602][ T2158] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10647'. [ 1058.199995][ T2160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10646'. [ 1058.229469][ T2162] xt_hashlimit: size too large, truncated to 1048576 [ 1058.282547][ T2165] netlink: 'syz.5.10648': attribute type 10 has an invalid length. [ 1058.537688][ T2168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10649'. [ 1058.586536][ T2168] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 1058.630356][ T2168] loop0: detected capacity change from 0 to 512 [ 1058.701051][ T2168] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1058.712029][ T2168] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 1024: comm syz.0.10649: invalid block [ 1058.723547][ T2168] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1058.724127][ T2168] EXT4-fs (loop0): 1 truncate cleaned up [ 1058.739495][ T2168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1058.815675][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1058.996806][ T2165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1059.061501][ T2171] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10648'. [ 1059.074558][ T2179] loop9: detected capacity change from 0 to 512 [ 1059.143019][ T2179] EXT4-fs error (device loop9): ext4_iget_extra_inode:5180: inode #15: comm syz.9.10651: corrupted in-inode xattr: e_value out of bounds [ 1059.298093][ T2179] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1059.298356][ T2179] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.10651: couldn't read orphan inode 15 (err -117) [ 1059.307564][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1059.307598][ C1] EXT4-fs (loop9): initial error at time 2000000955: ext4_iget_extra_inode:5180: inode 15 [ 1059.307625][ C1] EXT4-fs (loop9): last error at time 2000000955: ext4_iget_extra_inode:5180: inode 15 [ 1060.213240][ T2179] loop9: lost filesystem error report for type 5 error -117 [ 1060.213826][ T2179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.466525][T28419] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.529216][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.540470][ T2196] loop5: detected capacity change from 0 to 256 [ 1060.555639][ T2196] vfat: Unknown parameter './file2' [ 1060.687802][ T2196] random: crng reseeded on system resumption [ 1060.745390][ T2210] syzkaller0: entered promiscuous mode [ 1060.750985][ T2210] syzkaller0: entered allmulticast mode [ 1060.762595][ T2204] erspan0: entered promiscuous mode [ 1060.796568][ T2202] erspan0: left promiscuous mode [ 1060.927562][ T2224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10665'. [ 1060.979033][ T2224] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10665'. [ 1061.002087][ T28] audit: type=1400 audit(2000000956.720:2403): avc: denied { unmount } for pid=2222 comm="syz.5.10665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1061.921446][ T2234] xt_hashlimit: size too large, truncated to 1048576 [ 1062.135571][ T2237] netlink: 'syz.9.10667': attribute type 10 has an invalid length. [ 1063.144654][ T2243] loop8: detected capacity change from 0 to 1024 [ 1063.151521][ T2243] EXT4-fs: Ignoring removed nobh option [ 1063.157198][ T2243] EXT4-fs: Ignoring removed i_version option [ 1063.270505][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10667'. [ 1063.912655][ T2237] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10667'. [ 1064.256153][ T2246] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10667'. [ 1064.830675][ T2243] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.856206][ T2240] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000. [ 1065.059858][ T28] audit: type=1400 audit(2000000960.780:2404): avc: denied { getopt } for pid=2254 comm="syz.3.10671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1065.175323][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.192943][ T2260] ip6t_srh: unknown srh invflags 4000 [ 1065.221465][ T2260] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10672'. [ 1065.241353][ T2260] netlink: 'syz.3.10672': attribute type 28 has an invalid length. [ 1065.255928][ T2260] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10672'. [ 1065.294755][ T2269] FAULT_INJECTION: forcing a failure. [ 1065.294755][ T2269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1065.309207][ T2269] CPU: 1 UID: 0 PID: 2269 Comm: syz.8.10675 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1065.309251][ T2269] Tainted: [W]=WARN [ 1065.309261][ T2269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1065.309278][ T2269] Call Trace: [ 1065.309285][ T2269] [ 1065.309293][ T2269] __dump_stack+0x1d/0x30 [ 1065.309360][ T2269] dump_stack_lvl+0x95/0xd0 [ 1065.309381][ T2269] dump_stack+0x15/0x1b [ 1065.309400][ T2269] should_fail_ex+0x25e/0x270 [ 1065.309439][ T2269] should_fail+0xb/0x20 [ 1065.309471][ T2269] should_fail_usercopy+0x1a/0x20 [ 1065.309521][ T2269] _copy_from_user+0x1c/0xb0 [ 1065.309556][ T2269] ___sys_sendmsg+0xc1/0x1e0 [ 1065.309663][ T2269] ? terminate_walk+0x1d5/0x200 [ 1065.309803][ T2269] __sys_sendmmsg+0x185/0x320 [ 1065.309854][ T2269] __x64_sys_sendmmsg+0x57/0x70 [ 1065.309889][ T2269] x64_sys_call+0x27aa/0x3020 [ 1065.309990][ T2269] do_syscall_64+0x136/0x3c0 [ 1065.310073][ T2269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.310114][ T2269] RIP: 0033:0x7f1aec7fde59 [ 1065.310156][ T2269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1065.310179][ T2269] RSP: 002b:00007f1aeb236028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1065.310199][ T2269] RAX: ffffffffffffffda RBX: 00007f1aeca86090 RCX: 00007f1aec7fde59 [ 1065.310215][ T2269] RDX: 0000000000000002 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 1065.310270][ T2269] RBP: 00007f1aeb236090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.310284][ T2269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.310297][ T2269] R13: 00007f1aeca86128 R14: 00007f1aeca86090 R15: 00007ffcf42c99a8 [ 1065.310322][ T2269] [ 1065.707172][ T2293] loop8: detected capacity change from 0 to 512 [ 1065.719099][ T2293] EXT4-fs: Ignoring removed bh option [ 1065.750184][ T2293] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1065.770264][ T2293] EXT4-fs (loop8): 1 truncate cleaned up [ 1065.776550][ T2293] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1065.902186][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1066.914138][ T2311] ucma_write: process 376 (syz.9.10682) changed security contexts after opening file descriptor, this is not allowed. [ 1069.071113][ T2325] loop0: detected capacity change from 0 to 256 [ 1069.090505][ T2325] vfat: Unknown parameter './file2' [ 1070.079736][ T28] audit: type=1400 audit(2000000965.180:2405): avc: denied { map } for pid=2324 comm="syz.0.10692" path="socket:[120378]" dev="sockfs" ino=120378 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1071.343535][ T2350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10699'. [ 1071.412612][ T2352] loop0: detected capacity change from 0 to 256 [ 1071.468937][ T2352] vfat: Unknown parameter './file2' [ 1071.621475][ T28] audit: type=1400 audit(2000000967.310:2406): avc: denied { bind } for pid=2356 comm="syz.9.10702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1071.641355][ T28] audit: type=1400 audit(2000000967.310:2407): avc: denied { getopt } for pid=2356 comm="syz.9.10702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1071.861953][ T28] audit: type=1400 audit(2000000967.570:2408): avc: denied { accept } for pid=2368 comm="syz.5.10707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1072.300090][ T2384] loop8: detected capacity change from 0 to 512 [ 1072.332089][ T2384] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.10712: corrupted in-inode xattr: e_value out of bounds [ 1072.346425][ T2384] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1072.346984][ T2384] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.10712: couldn't read orphan inode 15 (err -117) [ 1072.368142][ T2384] loop8: lost filesystem error report for type 5 error -117 [ 1072.370065][ T2384] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1073.115679][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1073.608466][ T2415] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1074.290545][ T2433] tipc: Enabling of bearer rejected, failed to enable media [ 1074.335319][ T2443] FAULT_INJECTION: forcing a failure. [ 1074.335319][ T2443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1074.348694][ T2443] CPU: 1 UID: 0 PID: 2443 Comm: syz.8.10732 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1074.348727][ T2443] Tainted: [W]=WARN [ 1074.348735][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1074.348777][ T2443] Call Trace: [ 1074.348786][ T2443] [ 1074.348797][ T2443] __dump_stack+0x1d/0x30 [ 1074.348906][ T2443] dump_stack_lvl+0x95/0xd0 [ 1074.348933][ T2443] dump_stack+0x15/0x1b [ 1074.348959][ T2443] should_fail_ex+0x25e/0x270 [ 1074.348997][ T2443] should_fail+0xb/0x20 [ 1074.349144][ T2443] should_fail_usercopy+0x1a/0x20 [ 1074.349215][ T2443] copy_folio_from_iter_atomic+0x24b/0x10a0 [ 1074.349257][ T2443] ? shmem_write_begin+0xfc/0x1f0 [ 1074.349289][ T2443] ? shmem_write_begin+0x135/0x1f0 [ 1074.349324][ T2443] generic_perform_write+0x2c4/0x490 [ 1074.349431][ T2443] shmem_file_write_iter+0xc5/0xf0 [ 1074.349471][ T2443] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1074.349540][ T2443] vfs_write+0x57d/0x990 [ 1074.349567][ T2443] ksys_write+0xdc/0x1a0 [ 1074.349615][ T2443] __x64_sys_write+0x40/0x50 [ 1074.349634][ T2443] x64_sys_call+0x27e1/0x3020 [ 1074.349665][ T2443] do_syscall_64+0x136/0x3c0 [ 1074.349751][ T2443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1074.349786][ T2443] RIP: 0033:0x7f1aec7fde59 [ 1074.349807][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1074.349850][ T2443] RSP: 002b:00007f1aeb257028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1074.349870][ T2443] RAX: ffffffffffffffda RBX: 00007f1aeca85fa0 RCX: 00007f1aec7fde59 [ 1074.349885][ T2443] RDX: 0000000000001006 RSI: 0000200000000180 RDI: 0000000000000003 [ 1074.349962][ T2443] RBP: 00007f1aeb257090 R08: 0000000000000000 R09: 0000000000000000 [ 1074.349977][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1074.349993][ T2443] R13: 00007f1aeca86038 R14: 00007f1aeca85fa0 R15: 00007ffcf42c99a8 [ 1074.350077][ T2443] [ 1074.561527][ T2445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10731'. [ 1074.584436][ T2436] loop9: detected capacity change from 0 to 1024 [ 1074.591257][ T2436] EXT4-fs: Ignoring removed oldalloc option [ 1074.599140][ T2436] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1074.611147][ T2436] JBD2: no valid journal superblock found [ 1074.617102][ T2436] EXT4-fs (loop9): Could not load journal inode [ 1074.799612][ T28] audit: type=1400 audit(2000000970.520:2409): avc: denied { mount } for pid=2456 comm="syz.9.10737" name="/" dev="rpc_pipefs" ino=120974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 1075.259123][ T2465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.272665][ T2465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.746623][ T2481] loop0: detected capacity change from 0 to 8192 [ 1076.001320][T28419] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1076.038241][T28419] FAT-fs (loop0): Filesystem has been set read-only [ 1076.069297][T28419] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1076.259917][T25304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.318247][T25304] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.656801][T25304] team0: Port device netdevsim2 removed [ 1076.673297][T25304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1076.834218][T25304] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.182297][ T2505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10752'. [ 1077.238590][T25304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.348285][T25304] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.437602][ T28] audit: type=1400 audit(2000000972.600:2410): avc: denied { read } for pid=2520 comm="syz.8.10760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1077.514013][T25304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1077.537885][T25304] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.749300][T25304] bridge_slave_1: left allmulticast mode [ 1077.771634][T25304] bridge_slave_1: left promiscuous mode [ 1077.790884][T25304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.817288][T25304] bridge_slave_0: left allmulticast mode [ 1077.823130][T25304] bridge_slave_0: left promiscuous mode [ 1077.837001][T25304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.862695][ T2553] loop9: detected capacity change from 0 to 512 [ 1077.879247][ T2500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2500 comm=syz.3.10752 [ 1077.893472][ T2553] EXT4-fs: Ignoring removed bh option [ 1077.900003][ T2553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c02c, mo2=0002] [ 1077.908023][ T2553] System zones: 1-12 [ 1077.912506][ T2553] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.10768: error while reading EA inode 32 err=-116 [ 1077.925025][ T2553] loop9: lost filesystem error report for type 5 error -117 [ 1077.930492][ T2553] EXT4-fs (loop9): Remounting filesystem read-only [ 1077.954646][ T2553] EXT4-fs warning (device loop9): ext4_evict_inode:270: couldn't mark inode dirty (err -30) [ 1077.964853][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1077.964872][ C1] EXT4-fs (loop9): initial error at time 2000000973: ext4_xattr_inode_iget:446 [ 1077.964893][ C1] EXT4-fs (loop9): last error at time 2000000973: ext4_xattr_inode_iget:446 [ 1078.003380][ T2553] EXT4-fs (loop9): 1 orphan inode deleted [ 1078.066129][ T2553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1078.137517][T25304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1078.152928][T25304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1078.163424][T25304] bond0 (unregistering): Released all slaves [ 1078.787364][ T28] audit: type=1400 audit(2000000974.500:2411): avc: denied { write } for pid=2561 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.927703][ T28] audit: type=1400 audit(2000000974.650:2412): avc: denied { write } for pid=2576 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1078.989358][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1079.155810][T25304] tipc: Left network mode [ 1079.180245][ T28] audit: type=1400 audit(2000000974.900:2413): avc: denied { write } for pid=2579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.222064][T25304] hsr_slave_0: left promiscuous mode [ 1079.239161][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1079.255744][T25304] hsr_slave_1: left promiscuous mode [ 1079.264989][ T2594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10771'. [ 1079.293382][T25304] veth1_macvtap: left promiscuous mode [ 1079.300620][ T28] audit: type=1400 audit(2000000974.950:2414): avc: denied { write } for pid=2591 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1079.325254][ T2595] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10771'. [ 1079.337146][T25304] veth0_macvtap: left promiscuous mode [ 1079.348317][T25304] veth1_vlan: left promiscuous mode [ 1079.361945][T25304] veth0_vlan: left promiscuous mode [ 1079.383242][ T28] audit: type=1400 audit(2000000975.080:2415): avc: denied { mounton } for pid=2592 comm="syz.5.10771" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1079.467147][ T28] audit: type=1400 audit(2000000975.100:2416): avc: denied { unmount } for pid=2592 comm="syz.5.10771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 1079.631297][T25304] team0 (unregistering): Port device team_slave_1 removed [ 1079.652913][T25304] team0 (unregistering): Port device team_slave_0 removed [ 1079.810078][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1079.869794][ T2510] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.879360][ T2510] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.892851][ T2510] bridge_slave_0: entered allmulticast mode [ 1079.905864][ T2510] bridge_slave_0: entered promiscuous mode [ 1079.928824][ T2510] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.951408][ T2510] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.988174][ T2510] bridge_slave_1: entered allmulticast mode [ 1080.016251][ T2510] bridge_slave_1: entered promiscuous mode [ 1080.090369][ T2611] netlink: 104 bytes leftover after parsing attributes in process `syz.3.10775'. [ 1080.141245][ T2510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1080.186155][ T2510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.206621][ T2510] team0: Port device team_slave_0 added [ 1080.213270][ T2510] team0: Port device team_slave_1 added [ 1080.231637][ T2510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.238768][ T2510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.264785][ T2510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.278068][ T2510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.285130][ T2510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1080.333799][ T2623] loop8: detected capacity change from 0 to 128 [ 1080.350602][ T2510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.393372][ T2623] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1080.412148][ T28] audit: type=1400 audit(2000000976.130:2417): avc: denied { write } for pid=2606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1080.439227][ T2623] ext4 filesystem being mounted at /221/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.450737][ T28] audit: type=1400 audit(2000000976.170:2418): avc: denied { read } for pid=2622 comm="syz.8.10778" name="file2" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1080.609076][ T28] audit: type=1400 audit(2000000976.170:2419): avc: denied { open } for pid=2622 comm="syz.8.10778" path="/221/file2" dev="tmpfs" ino=1179 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1080.622258][ T2510] hsr_slave_0: entered promiscuous mode [ 1080.660016][ T2510] hsr_slave_1: entered promiscuous mode [ 1080.716724][ T2638] loop9: detected capacity change from 0 to 1024 [ 1080.724807][ T2638] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1080.752695][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1080.876986][ T2638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1081.300245][ T2647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=2647 comm=syz.5.10780 [ 1081.954252][T31142] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1081.963576][ T2646] lo: entered allmulticast mode [ 1081.977138][ T2646] lo: left allmulticast mode [ 1081.992503][ T2647] dvmrp8: entered allmulticast mode [ 1082.289375][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.363764][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 1083.363782][ T28] audit: type=1400 audit(2000000979.080:2423): avc: denied { write } for pid=2654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.491938][ T28] audit: type=1400 audit(2000000979.210:2424): avc: denied { write } for pid=2677 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1083.767212][ T2690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.777581][ T2690] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.792128][ T2694] loop8: detected capacity change from 0 to 164 [ 1083.932121][ T2690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1083.942479][ T2690] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.970508][ T2700] tipc: Enabled bearer , priority 10 [ 1084.083132][ T2510] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1084.212437][ T2510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1084.561971][ T2690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.598121][ T2690] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.612597][ T2510] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1084.624676][ T2510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1084.636334][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1084.646001][ T2510] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1084.656432][ T2510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1084.664369][ T2510] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1084.692757][ T28] audit: type=1400 audit(2000000980.410:2425): avc: denied { ioctl } for pid=2716 comm="syz.5.10799" path="socket:[122163]" dev="sockfs" ino=122163 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1084.777513][ T2510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1084.849175][ T2690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1084.899920][ T2690] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1084.967998][ T2723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10800'. [ 1084.986039][ T2723] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10800'. [ 1085.030637][ T49] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.042993][ T49] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.061876][ T49] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.090318][ T49] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.134904][ T3411] tipc: Node number set to 2428787097 [ 1085.142235][ T311] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.161407][ T311] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.194715][ T28] audit: type=1400 audit(2000000980.910:2426): avc: denied { write } for pid=2730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.218042][ T311] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1085.244144][ T311] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.305674][ T2510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1085.326249][ T28] audit: type=1400 audit(2000000981.040:2427): avc: denied { write } for pid=2743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1085.376518][ T2510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1085.409063][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.416256][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.460886][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.468034][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.199642][ T2763] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10803'. [ 1086.248396][ T2763] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1086.257104][ T2763] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1086.266017][ T2763] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1086.274668][ T2763] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1086.317213][ T2763] loop9: detected capacity change from 0 to 512 [ 1086.399655][ T2763] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 1086.415447][ T2763] EXT4-fs (loop9): 1 truncate cleaned up [ 1086.432797][ T2763] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1086.898447][ T2767] loop8: detected capacity change from 0 to 256 [ 1087.033645][ T2767] FAT-fs (loop8): data area starts beyond volume (32 > 0) [ 1087.040870][ T2767] FAT-fs (loop8): Can't find a valid FAT filesystem [ 1087.504140][ T28] audit: type=1400 audit(2000000983.220:2428): avc: denied { write } for pid=2747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.738627][ T28] audit: type=1400 audit(2000000983.400:2429): avc: denied { getattr } for pid=2802 comm="syz.5.10814" path="socket:[122537]" dev="sockfs" ino=122537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1087.785514][ T2798] loop8: detected capacity change from 0 to 512 [ 1087.805863][ T2798] EXT4-fs: Ignoring removed bh option [ 1087.849410][ T2798] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 1087.859478][ T2803] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10814'. [ 1087.887653][ T28] audit: type=1400 audit(2000000983.550:2430): avc: denied { write } for pid=2804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1087.935816][ T2798] EXT4-fs (loop8): 1 truncate cleaned up [ 1087.965556][ T2798] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1088.158101][ T2510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.201384][ T2818] netlink: 'syz.3.10816': attribute type 10 has an invalid length. [ 1088.265306][ T2815] xt_hashlimit: size too large, truncated to 1048576 [ 1088.317768][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.413682][ T2818] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10816'. [ 1088.443868][ T2510] veth0_vlan: entered promiscuous mode [ 1088.461485][ T2510] veth1_vlan: entered promiscuous mode [ 1088.478195][ T28] audit: type=1400 audit(2000000984.200:2431): avc: denied { write } for pid=2813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.516546][ T2510] veth0_macvtap: entered promiscuous mode [ 1088.532351][ T2510] veth1_macvtap: entered promiscuous mode [ 1088.549579][ T28] audit: type=1400 audit(2000000984.270:2432): avc: denied { write } for pid=2843 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.578401][ T2510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1088.600591][ T2510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1088.615067][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.625671][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.641676][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.650652][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.675746][ T28] audit: type=1400 audit(2000000984.390:2433): avc: denied { mount } for pid=2510 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1088.828167][ T28] audit: type=1400 audit(2000000984.550:2434): avc: denied { write } for pid=2846 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1088.889725][ T28] audit: type=1400 audit(2000000984.610:2435): avc: denied { write } for pid=2866 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.078495][ T2839] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10818'. [ 1089.116972][ T28] audit: type=1400 audit(2000000984.820:2436): avc: denied { write } for pid=2868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.160948][ T28] audit: type=1400 audit(2000000984.880:2437): avc: denied { write } for pid=2886 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.346071][ T28] audit: type=1400 audit(2000000985.060:2438): avc: denied { write } for pid=2894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.445606][T32260] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1089.475678][ T2833] loop8: detected capacity change from 0 to 4096 [ 1089.482914][ T2833] EXT4-fs: Ignoring removed bh option [ 1089.583646][ T28] audit: type=1400 audit(2000000985.300:2439): avc: denied { write } for pid=2907 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1089.606529][ T2833] EXT4-fs (loop8): stripe (13) is not aligned with cluster size (16), stripe is disabled [ 1089.644090][ T2833] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1089.718672][ T28] audit: type=1400 audit(2000000985.440:2440): avc: denied { write } for pid=2832 comm="syz.8.10818" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1089.781640][ T2833] EXT4-fs error (device loop8): ext4_get_first_dir_block:3557: inode #12: block 80: comm syz.8.10818: bad entry in directory: directory entry overrun - offset=12, inode=6, rec_len=4096, size=4096 fake=0 [ 1089.824849][ T2833] EXT4-fs (loop8): Remounting filesystem read-only [ 1089.832133][ T2929] loop1: detected capacity change from 0 to 256 [ 1089.864254][ T2929] vfat: Unknown parameter './file2' [ 1089.966667][ T2932] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10829'. [ 1090.010814][ T2932] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10829'. [ 1090.183222][T31142] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1090.194259][ T2940] random: crng reseeded on system resumption [ 1090.688823][ T2957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10833'. [ 1090.737741][ T2957] netlink: 104 bytes leftover after parsing attributes in process `syz.5.10833'. [ 1090.805728][ T2977] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10834'. [ 1091.012298][ T3002] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10837'. [ 1091.065826][ T3008] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10838'. [ 1091.146523][ T3008] netlink: 104 bytes leftover after parsing attributes in process `syz.9.10838'. [ 1091.738104][ T3074] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10842'. [ 1091.823086][ T3069] xt_hashlimit: size too large, truncated to 1048576 [ 1091.939795][ T3080] netlink: 'syz.3.10840': attribute type 10 has an invalid length. [ 1092.396482][ T3080] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10840'. [ 1092.421170][ T3099] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10845'. [ 1093.452810][ T3157] loop1: detected capacity change from 0 to 256 [ 1094.087758][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 1094.087773][ T28] audit: type=1400 audit(2000000989.810:2464): avc: denied { write } for pid=3125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.180371][ T28] audit: type=1400 audit(2000000989.890:2465): avc: denied { write } for pid=3170 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1094.547845][ T3192] 9p: Bad value for 'rfdno' [ 1094.623155][ T28] audit: type=1400 audit(2000000990.340:2466): avc: denied { read } for pid=3188 comm="syz.1.10863" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1094.771504][ T3202] netlink: 'syz.8.10868': attribute type 30 has an invalid length. [ 1094.860467][ T3214] netlink: 'syz.5.10869': attribute type 2 has an invalid length. [ 1094.981228][ T3222] xt_hashlimit: size too large, truncated to 1048576 [ 1095.127273][ T28] audit: type=1400 audit(2000000990.840:2467): avc: denied { write } for pid=3219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.209746][ T3222] netlink: 'syz.5.10872': attribute type 10 has an invalid length. [ 1095.240883][ T28] audit: type=1400 audit(2000000990.960:2468): avc: denied { write } for pid=3247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1095.275343][ T3222] __nla_validate_parse: 7 callbacks suppressed [ 1095.275404][ T3222] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10872'. [ 1095.512993][ T3262] netlink: 260 bytes leftover after parsing attributes in process `syz.3.10881'. [ 1095.881975][ T3276] erspan0: entered promiscuous mode [ 1096.076798][ T3286] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10888'. [ 1096.627633][ T3302] xt_hashlimit: size too large, truncated to 1048576 [ 1096.815526][ T3275] erspan0: left promiscuous mode [ 1096.855621][ T3306] netlink: 'syz.5.10893': attribute type 10 has an invalid length. [ 1096.989325][ T28] audit: type=1400 audit(2000000992.710:2469): avc: denied { ioctl } for pid=3311 comm="syz.9.10896" path="socket:[123193]" dev="sockfs" ino=123193 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1097.018946][ T3304] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10893'. [ 1097.054972][ T28] audit: type=1400 audit(2000000992.770:2470): avc: denied { map } for pid=3311 comm="syz.9.10896" path="socket:[123197]" dev="sockfs" ino=123197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1097.177007][ T28] audit: type=1400 audit(2000000992.890:2471): avc: denied { lock } for pid=3319 comm="syz.9.10897" path="socket:[123204]" dev="sockfs" ino=123204 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1097.219921][ T28] audit: type=1400 audit(2000000992.930:2472): avc: denied { map } for pid=3319 comm="syz.9.10897" path="socket:[123205]" dev="sockfs" ino=123205 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1097.310417][ T28] audit: type=1400 audit(2000000992.930:2473): avc: denied { lock } for pid=3319 comm="syz.9.10897" path="socket:[123203]" dev="sockfs" ino=123203 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1097.808218][ T3340] loop1: detected capacity change from 0 to 512 [ 1097.830447][ T3340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1097.872789][ T3340] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.10906: iget: bad i_size value: 38620345925642 [ 1097.885973][ T3340] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1097.886203][ T3340] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.10906: couldn't read orphan inode 15 (err -117) [ 1097.907930][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1097.908448][ C0] EXT4-fs (loop1): initial error at time 2000000993: ext4_orphan_get:1399: inode 15 [ 1097.908660][ C0] EXT4-fs (loop1): last error at time 2000000993: ext4_orphan_get:1399: inode 15 [ 1097.914047][ T3346] xt_hashlimit: size too large, truncated to 1048576 [ 1097.965794][ T3347] netlink: 'syz.3.10908': attribute type 10 has an invalid length. [ 1097.977733][ T3340] loop1: lost filesystem error report for type 5 error -117 [ 1097.979944][ T3340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.002045][ T3340] EXT4-fs (loop1): shut down requested (2) [ 1098.036385][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.082030][ T3356] loop1: detected capacity change from 0 to 512 [ 1098.088552][ T3357] bridge1: entered promiscuous mode [ 1098.088575][ T3357] bridge1: entered allmulticast mode [ 1098.204031][ T3346] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10908'. [ 1098.397289][ T3386] loop1: detected capacity change from 0 to 1764 [ 1098.404202][ T3386] iso9660: Bad value for 'uid' [ 1098.409270][ T3386] iso9660: Bad value for 'uid' [ 1098.529987][ T3395] loop1: detected capacity change from 0 to 2048 [ 1098.549884][ T3395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1098.563403][ T3395] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz.1.10923: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 1098.580283][ T3395] EXT4-fs (loop1): Remounting filesystem read-only [ 1098.591796][ T3395] xt_hashlimit: size too large, truncated to 1048576 [ 1098.736902][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1098.776653][ T3404] loop1: detected capacity change from 0 to 512 [ 1098.783916][ T3404] msdos: Unknown parameter 'sys' [ 1098.902921][ T3412] xt_hashlimit: size too large, truncated to 1048576 [ 1098.947409][ T3415] netlink: 'syz.9.10928': attribute type 10 has an invalid length. [ 1099.020630][ T3424] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10928'. [ 1099.183306][ T3430] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10934'. [ 1099.212677][ T3430] netlink: 104 bytes leftover after parsing attributes in process `syz.8.10934'. [ 1099.479865][ T3441] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10937'. [ 1101.284120][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1101.284139][ T28] audit: type=1400 audit(2000000997.000:2476): avc: denied { write } for pid=3445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.338122][ T3476] sctp: [Deprecated]: syz.8.10944 (pid 3476) Use of int in max_burst socket option. [ 1101.338122][ T3476] Use struct sctp_assoc_value instead [ 1101.406388][ T28] audit: type=1400 audit(2000000997.100:2477): avc: denied { write } for pid=3484 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1101.531628][ T3495] netlink: 'syz.5.10947': attribute type 10 has an invalid length. [ 1101.542882][ T3488] xt_hashlimit: size too large, truncated to 1048576 [ 1101.641398][ T3495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10947'. [ 1102.614959][ T3500] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10947'. [ 1102.636129][ T3495] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10947'. [ 1103.021418][ T28] audit: type=1400 audit(2000000998.720:2478): avc: denied { write } for pid=3514 comm="syz.1.10953" name="file0" dev="tmpfs" ino=241 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1103.077603][ T3525] FAULT_INJECTION: forcing a failure. [ 1103.077603][ T3525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1103.101758][ T3526] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10952'. [ 1103.132059][ T28] audit: type=1400 audit(2000000998.850:2479): avc: denied { write } for pid=3494 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1103.163698][ T3525] CPU: 0 UID: 0 PID: 3525 Comm: syz.1.10954 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1103.163791][ T3525] Tainted: [W]=WARN [ 1103.163801][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.163819][ T3525] Call Trace: [ 1103.163828][ T3525] [ 1103.163837][ T3525] __dump_stack+0x1d/0x30 [ 1103.163866][ T3525] dump_stack_lvl+0x95/0xd0 [ 1103.164033][ T3525] dump_stack+0x15/0x1b [ 1103.164059][ T3525] should_fail_ex+0x25e/0x270 [ 1103.164095][ T3525] should_fail+0xb/0x20 [ 1103.164164][ T3525] should_fail_usercopy+0x1a/0x20 [ 1103.164194][ T3525] strncpy_from_user+0x27/0x250 [ 1103.164223][ T3525] do_getname+0x59/0x1c0 [ 1103.164255][ T3525] __se_sys_linkat+0x2f/0x1d0 [ 1103.164281][ T3525] __x64_sys_linkat+0x67/0x80 [ 1103.164380][ T3525] x64_sys_call+0x20e4/0x3020 [ 1103.164404][ T3525] do_syscall_64+0x136/0x3c0 [ 1103.164443][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.164510][ T3525] RIP: 0033:0x7f9927ccde59 [ 1103.164527][ T3525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.164546][ T3525] RSP: 002b:00007f9926727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 1103.164643][ T3525] RAX: ffffffffffffffda RBX: 00007f9927f55fa0 RCX: 00007f9927ccde59 [ 1103.164657][ T3525] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffffffffffffff [ 1103.164704][ T3525] RBP: 00007f9926727090 R08: 0000000000001000 R09: 0000000000000000 [ 1103.164722][ T3525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.164735][ T3525] R13: 00007f9927f56038 R14: 00007f9927f55fa0 R15: 00007ffd29c9b9e8 [ 1103.164798][ T3525] [ 1103.354212][ T28] audit: type=1400 audit(2000000999.070:2480): avc: denied { write } for pid=3530 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1105.539199][ T3545] xt_hashlimit: size too large, truncated to 1048576 [ 1106.502487][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10966'. [ 1107.287657][ T28] audit: type=1400 audit(2000001003.010:2481): avc: denied { write } for pid=3590 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1107.356490][ T28] audit: type=1400 audit(2000001003.070:2482): avc: denied { write } for pid=3614 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.006879][ T3647] Cannot find map_set index 135 as target [ 1108.074750][T31142] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 1108.116256][T31142] CPU: 1 UID: 0 PID: 31142 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1108.116390][T31142] Tainted: [W]=WARN [ 1108.116412][T31142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1108.116425][T31142] Call Trace: [ 1108.116433][T31142] [ 1108.116444][T31142] __dump_stack+0x1d/0x30 [ 1108.116476][T31142] dump_stack_lvl+0x95/0xd0 [ 1108.116522][T31142] dump_stack+0x15/0x1b [ 1108.116542][T31142] dump_header+0x80/0x240 [ 1108.116602][T31142] oom_kill_process+0x295/0x350 [ 1108.116646][T31142] out_of_memory+0x981/0xbc0 [ 1108.116764][T31142] try_charge_memcg+0x621/0xa00 [ 1108.116815][T31142] charge_memcg+0x6d/0x120 [ 1108.116917][T31142] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 1108.116952][T31142] swap_cache_alloc_folio+0x47b/0x5e0 [ 1108.116992][T31142] swap_cluster_readahead+0x2b1/0x460 [ 1108.117110][T31142] swapin_readahead+0xd8/0x8a0 [ 1108.117167][T31142] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 1108.117246][T31142] ? hrtimer_start_range_ns+0x108/0x120 [ 1108.117293][T31142] ? __rcu_read_unlock+0x4e/0x70 [ 1108.117327][T31142] ? swap_cache_get_folio+0x1f7/0x200 [ 1108.117415][T31142] do_swap_page+0x2a2/0x1ec0 [ 1108.117453][T31142] ? __schedule+0x799/0xd10 [ 1108.117524][T31142] ? __rcu_read_lock+0x36/0x50 [ 1108.117549][T31142] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 1108.117624][T31142] handle_mm_fault+0xb3c/0x2da0 [ 1108.117669][T31142] do_user_addr_fault+0x634/0x1060 [ 1108.117702][T31142] ? trace_page_fault_user+0x1f/0xa0 [ 1108.117796][T31142] exc_page_fault+0x62/0xa0 [ 1108.117864][T31142] asm_exc_page_fault+0x26/0x30 [ 1108.117887][T31142] RIP: 0033:0x7f1aec7b8fd7 [ 1108.117906][T31142] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1108.118006][T31142] RSP: 002b:00007ffcf42c9ca0 EFLAGS: 00010202 [ 1108.118028][T31142] RAX: 0000000000000000 RBX: 0000555557b72500 RCX: 00007f1aec7b8fd7 [ 1108.118046][T31142] RDX: 00007ffcf42c9ce0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1108.118120][T31142] RBP: 00007ffcf42c9d4c R08: 0000000000000000 R09: 0000000000000000 [ 1108.118138][T31142] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 1108.118153][T31142] R13: 00000000000927c0 R14: 000000000010e67f R15: 00007ffcf42c9da0 [ 1108.118178][T31142] [ 1108.642867][T31142] memory: usage 133544kB, limit 307200kB, failcnt 952 [ 1108.656291][T31142] memory+swap: usage 101972kB, limit 9007199254740988kB, failcnt 0 [ 1108.673573][T31142] kmem: usage 58736kB, limit 9007199254740988kB, failcnt 0 [ 1108.707488][T31142] Memory cgroup stats for /syz8: [ 1108.707698][T31142] cache 0 [ 1108.715659][T31142] rss 8192 [ 1108.718700][T31142] shmem 0 [ 1108.721668][T31142] mapped_file 1642496 [ 1108.725704][T31142] dirty 0 [ 1108.728664][T31142] writeback 0 [ 1108.736817][T31142] workingset_refault_anon 43 [ 1108.741640][T31142] workingset_refault_file 0 [ 1108.746444][T31142] swap 413696 [ 1108.750114][T31142] swapcached 25784320 [ 1108.754354][T31142] pgpgin 749405 [ 1108.758050][T31142] pgpgout 749401 [ 1108.762004][T31142] pgfault 996726 [ 1108.765936][T31142] pgmajfault 17 [ 1108.769690][T31142] inactive_anon 0 [ 1108.773717][T31142] active_anon 8192 [ 1108.777715][T31142] inactive_file 0 [ 1108.781861][T31142] active_file 0 [ 1108.785878][T31142] unevictable 0 [ 1108.793141][T31142] hierarchical_memory_limit 314572800 [ 1108.798975][T31142] hierarchical_memsw_limit 9223372036854771712 [ 1108.805388][T31142] total_cache 0 [ 1108.809199][T31142] total_rss 8192 [ 1108.812994][T31142] total_shmem 0 [ 1108.816680][T31142] total_mapped_file 1642496 [ 1108.822152][T31142] total_dirty 0 [ 1108.825952][T31142] total_writeback 0 [ 1108.830925][T31142] total_workingset_refault_anon 43 [ 1108.836423][T31142] total_workingset_refault_file 0 [ 1108.850241][T31142] total_swap 413696 [ 1108.869309][T31142] total_swapcached 25784320 [ 1108.878659][T31142] total_pgpgin 749405 [ 1108.885165][T31142] total_pgpgout 749401 [ 1108.894618][T31142] total_pgfault 996726 [ 1108.908911][T31142] total_pgmajfault 17 [ 1108.922898][ T28] audit: type=1400 audit(2000001004.640:2483): avc: denied { write } for pid=3649 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1108.951160][T31142] total_inactive_anon 0 [ 1108.965547][T31142] total_active_anon 8192 [ 1108.979657][T31142] total_inactive_file 0 [ 1108.990642][T31142] total_active_file 0 [ 1109.003588][T31142] total_unevictable 0 [ 1109.018456][T31142] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.10979,pid=3623,uid=0 [ 1109.034114][ T28] audit: type=1400 audit(2000001004.730:2484): avc: denied { write } for pid=3661 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1109.089581][T31142] Memory cgroup out of memory: OOM victim 3623 (syz.8.10979) is already exiting. Skip killing the task [ 1109.353807][ T3672] bridge0: port 2(bridge_slave_1) entered disabled state [ 1109.361129][ T3672] bridge0: port 1(bridge_slave_0) entered disabled state [ 1109.368995][ T3672] bridge0: entered allmulticast mode [ 1109.609733][ T3677] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10989'. [ 1109.743057][ T3692] netlink: 'syz.5.10995': attribute type 1 has an invalid length. [ 1109.762092][ T3692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1109.819720][ T3692] bond3: (slave veth0_to_bond): making interface the new active one [ 1109.829441][ T3698] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3698 comm=syz.5.10995 [ 1109.841965][ T3692] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1109.859288][ T3692] sctp: [Deprecated]: syz.5.10995 (pid 3692) Use of int in maxseg socket option. [ 1109.859288][ T3692] Use struct sctp_assoc_value instead [ 1109.898173][ T3700] netlink: 'syz.5.10997': attribute type 5 has an invalid length. [ 1109.911984][ T3700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10997'. [ 1109.932401][ T3694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10991'. [ 1109.986576][ T3702] loop1: detected capacity change from 0 to 512 [ 1109.998820][ T3702] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1110.009744][ T3702] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.10991: invalid block [ 1110.021429][ T3702] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1110.026327][ T3702] EXT4-fs (loop1): 1 truncate cleaned up [ 1110.041742][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1110.072813][ T3696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10996'. [ 1110.082944][ T3696] tipc: Enabling of bearer rejected, failed to enable media [ 1110.113632][ T3707] 9pnet_fd: Insufficient options for proto=fd [ 1110.396498][ T3716] sch_tbf: burst 0 is lower than device lo mtu (1294) ! [ 1110.473008][ T3704] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1110.488025][ T3704] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1110.546174][ T3713] netlink: 'syz.9.11001': attribute type 1 has an invalid length. [ 1110.669228][ T3725] vlan0: entered promiscuous mode [ 1111.211223][ T28] audit: type=1400 audit(2000001006.930:2485): avc: denied { create } for pid=3758 comm="syz.9.11018" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1111.269195][ T3764] sctp: [Deprecated]: syz.9.11020 (pid 3764) Use of int in max_burst socket option. [ 1111.269195][ T3764] Use struct sctp_assoc_value instead [ 1111.392529][ T3773] team0: No ports can be present during mode change [ 1111.525171][ T3783] netlink: 'syz.9.11026': attribute type 1 has an invalid length. [ 1111.533694][ T3783] netlink: 'syz.9.11026': attribute type 2 has an invalid length. [ 1111.571047][ T3785] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11027'. [ 1111.777188][ T28] audit: type=1400 audit(2000001007.490:2486): avc: denied { create } for pid=3800 comm="syz.8.11033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 1111.828438][ T3812] xt_hashlimit: size too large, truncated to 1048576 [ 1111.884836][ T3815] netlink: 'syz.5.11037': attribute type 10 has an invalid length. [ 1111.945062][ T3814] xt_hashlimit: size too large, truncated to 1048576 [ 1112.000871][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1112.010222][ T3812] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1112.020216][ T3812] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11037'. [ 1112.041926][ T3817] netlink: 'syz.3.11038': attribute type 10 has an invalid length. [ 1112.116989][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11038'. [ 1112.130906][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11038'. [ 1112.742855][ T28] audit: type=1400 audit(2000001008.460:2487): avc: denied { getopt } for pid=3833 comm="syz.3.11043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1114.684321][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1114.709591][ T3846] xt_hashlimit: size too large, truncated to 1048576 [ 1115.654802][ T3868] __nla_validate_parse: 2 callbacks suppressed [ 1115.655534][ T3868] netlink: 36 bytes leftover after parsing attributes in process `syz.9.11056'. [ 1115.713239][ T3868] netlink: 68 bytes leftover after parsing attributes in process `syz.9.11056'. [ 1115.791159][ T3876] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11057'. [ 1115.951484][ T3881] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11059'. [ 1116.055799][ T3881] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11059'. [ 1116.091882][ T28] audit: type=1400 audit(2000001011.810:2488): avc: denied { validate_trans } for pid=3886 comm="syz.1.11062" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1116.112602][ T3888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11062'. [ 1116.731544][ T3909] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11067'. [ 1116.987729][ T3915] netlink: 'syz.1.11069': attribute type 74 has an invalid length. [ 1117.190655][ T3925] netlink: 'syz.3.11073': attribute type 5 has an invalid length. [ 1117.326272][ T3929] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14385 sclass=netlink_route_socket pid=3929 comm=syz.8.11075 [ 1117.519476][ T28] audit: type=1400 audit(2000001013.230:2489): avc: denied { create } for pid=3928 comm="syz.8.11075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1117.750358][ T28] audit: type=1326 audit(2000001013.470:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1117.843574][ T28] audit: type=1326 audit(2000001013.470:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1117.934437][ T3925] netlink: 64 bytes leftover after parsing attributes in process `syz.3.11073'. [ 1119.036422][ T28] audit: type=1326 audit(2000001013.500:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1119.062282][ T28] audit: type=1326 audit(2000001013.500:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1119.938546][ T28] audit: type=1326 audit(2000001013.500:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1120.167781][ T28] audit: type=1326 audit(2000001013.500:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1120.193815][ T28] audit: type=1326 audit(2000001013.500:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1120.970313][ T28] audit: type=1326 audit(2000001013.500:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1121.221738][ T28] audit: type=1326 audit(2000001013.500:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1121.264160][ T28] audit: type=1326 audit(2000001013.500:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3935 comm="syz.5.11076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf5249de59 code=0x7ffc0000 [ 1122.920898][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 1122.920919][ T28] audit: type=1326 audit(2000001018.570:2562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.8.11081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1aec7be68e code=0x7ffc0000 [ 1122.978088][ T28] audit: type=1326 audit(2000001018.570:2563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.8.11081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f1aec7fde59 code=0x7ffc0000 [ 1123.059528][ T28] audit: type=1326 audit(2000001018.570:2564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3950 comm="syz.8.11081" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1aec7be68e code=0x7ffc0000 [ 1123.207841][ T3966] netlink: 'syz.8.11085': attribute type 1 has an invalid length. [ 1123.215414][ T28] audit: type=1400 audit(2000001018.690:2565): avc: denied { listen } for pid=3958 comm="syz.8.11084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1123.249893][ T3966] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1123.345223][ T3971] loop1: detected capacity change from 0 to 512 [ 1123.400643][ T3986] xt_hashlimit: size too large, truncated to 1048576 [ 1123.414564][ T3971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.427129][ T3971] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1123.553394][ T4000] netlink: 'syz.3.11091': attribute type 10 has an invalid length. [ 1123.758949][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1123.768214][ T3986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1123.777962][ T3986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1123.791983][ T3986] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1123.840143][ T4000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11091'. [ 1124.705800][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1124.771744][ T4016] xt_hashlimit: size too large, truncated to 1048576 [ 1124.797254][ T28] audit: type=1400 audit(2000001020.520:2566): avc: denied { getopt } for pid=4013 comm="syz.5.11098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1124.897730][ T4020] netlink: 'syz.1.11097': attribute type 10 has an invalid length. [ 1124.913539][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.922987][ T4020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.943631][ T4022] netlink: 'syz.5.11101': attribute type 5 has an invalid length. [ 1124.968542][ T4020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1124.981900][ T4020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.012810][ T4023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1125.024819][ T4024] netlink: 64 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1125.064042][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1125.074838][ T4023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11097'. [ 1125.135068][T24539] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.158073][T24539] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.195548][T24539] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.224428][T24539] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.518556][ T4033] tipc: Failed to remove unknown binding: 66,0,0/0:3134481426/3134481427 [ 1125.529764][ T4033] tipc: Failed to remove unknown binding: 66,0,0/0:3134481426/3134481427 [ 1125.703819][ T4048] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4048 comm=syz.5.11109 [ 1125.829960][ T28] audit: type=1400 audit(2000001021.550:2567): avc: denied { cmd } for pid=4055 comm="syz.3.11112" path="socket:[126025]" dev="sockfs" ino=126025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 1126.068677][ T4067] loop1: detected capacity change from 0 to 1024 [ 1126.104364][ T4067] EXT4-fs: quotafile must be on filesystem root [ 1126.399777][ T4067] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1126.455910][ T4077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11116'. [ 1126.845970][ T4096] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1126.864457][ T4097] random: crng reseeded on system resumption [ 1126.870743][ T3411] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1126.980985][ T4097] netlink: 'syz.1.11124': attribute type 7 has an invalid length. [ 1127.007903][ T4097] netlink: 'syz.1.11124': attribute type 8 has an invalid length. [ 1127.045766][ T4097] dummy0: entered promiscuous mode [ 1127.052340][ T4097] team0: entered promiscuous mode [ 1127.057451][ T4097] team_slave_0: entered promiscuous mode [ 1127.063325][ T4097] team_slave_1: entered promiscuous mode [ 1127.076700][ T4097] dummy0: left promiscuous mode [ 1127.082385][ T4097] team0: left promiscuous mode [ 1127.087182][ T4097] team_slave_0: left promiscuous mode [ 1127.092739][ T4097] team_slave_1: left promiscuous mode [ 1127.447144][ T3411] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1127.874669][ T4116] FAULT_INJECTION: forcing a failure. [ 1127.874669][ T4116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.891627][ T4116] CPU: 0 UID: 0 PID: 4116 Comm: syz.1.11134 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1127.891751][ T4116] Tainted: [W]=WARN [ 1127.891761][ T4116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1127.891777][ T4116] Call Trace: [ 1127.891785][ T4116] [ 1127.891795][ T4116] __dump_stack+0x1d/0x30 [ 1127.891826][ T4116] dump_stack_lvl+0x95/0xd0 [ 1127.891850][ T4116] dump_stack+0x15/0x1b [ 1127.891893][ T4116] should_fail_ex+0x25e/0x270 [ 1127.891924][ T4116] should_fail+0xb/0x20 [ 1127.892009][ T4116] should_fail_usercopy+0x1a/0x20 [ 1127.892048][ T4116] _copy_from_user+0x1c/0xb0 [ 1127.892071][ T4116] __se_sys_mbind+0x446/0xdd0 [ 1127.892100][ T4116] ? __fget_files+0x184/0x1c0 [ 1127.892203][ T4116] ? mutex_lock+0x57/0x90 [ 1127.892234][ T4116] ? mutex_unlock+0x4e/0x90 [ 1127.892319][ T4116] ? fput+0x8f/0xc0 [ 1127.892354][ T4116] __x64_sys_mbind+0x78/0x90 [ 1127.892386][ T4116] x64_sys_call+0x2b72/0x3020 [ 1127.892537][ T4116] do_syscall_64+0x136/0x3c0 [ 1127.892657][ T4116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.892688][ T4116] RIP: 0033:0x7f9927ccde59 [ 1127.892709][ T4116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1127.892784][ T4116] RSP: 002b:00007f9926727028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1127.892812][ T4116] RAX: ffffffffffffffda RBX: 00007f9927f55fa0 RCX: 00007f9927ccde59 [ 1127.892902][ T4116] RDX: 0000000000006002 RSI: 0000000000001000 RDI: 0000200000ffe000 [ 1127.892917][ T4116] RBP: 00007f9926727090 R08: 000000000000000f R09: 0000000000000000 [ 1127.892978][ T4116] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.892991][ T4116] R13: 00007f9927f56038 R14: 00007f9927f55fa0 R15: 00007ffd29c9b9e8 [ 1127.893017][ T4116] [ 1127.956729][ T4120] netlink: 'syz.9.11135': attribute type 1 has an invalid length. [ 1128.147192][ T4127] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 1128.148793][ T28] audit: type=1400 audit(2000001023.840:2568): avc: denied { relabelfrom } for pid=4106 comm="syz.5.11129" name="NETLINK" dev="sockfs" ino=125145 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1128.181262][ T28] audit: type=1400 audit(2000001023.840:2569): avc: denied { relabelto } for pid=4106 comm="syz.5.11129" name="NETLINK" dev="sockfs" ino=125145 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 1128.183668][ T4121] bond1 (unregistering): Released all slaves [ 1128.383039][ T4145] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4145 comm=syz.1.11141 [ 1128.486716][ T4157] erspan0: entered promiscuous mode [ 1128.549061][ T28] audit: type=1400 audit(2000001024.200:2570): avc: denied { create } for pid=4144 comm="syz.1.11141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 1129.526970][ T4169] __nla_validate_parse: 7 callbacks suppressed [ 1129.526991][ T4169] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11148'. [ 1129.870766][ T4156] erspan0: left promiscuous mode [ 1131.026963][ T4176] netlink: 'syz.5.11151': attribute type 14 has an invalid length. [ 1131.078334][ T4176] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4176 comm=syz.5.11151 [ 1131.175920][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11154'. [ 1131.201002][ T4185] sctp: [Deprecated]: syz.8.11153 (pid 4185) Use of int in max_burst socket option. [ 1131.201002][ T4185] Use struct sctp_assoc_value instead [ 1132.924259][ T4262] netlink: 'syz.1.11178': attribute type 3 has an invalid length. [ 1133.016882][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11178'. [ 1134.033085][ T4271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11180'. [ 1134.118588][ T4271] loop1: detected capacity change from 0 to 512 [ 1134.149485][T24539] ip6_tunnel: mĖ xmit: Local address not yet configured! [ 1134.171757][ T4271] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 1134.180787][ T4271] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.11180: invalid block [ 1134.192317][ T4271] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 1134.193531][ T4271] EXT4-fs (loop1): 1 truncate cleaned up [ 1134.209530][ T4271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1134.491611][ T4285] lo: entered allmulticast mode [ 1134.502343][ T4284] lo: left allmulticast mode [ 1134.567186][ T4275] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1134.581596][ T4275] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0 [ 1134.910827][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11181'. [ 1134.921766][ T4273] netlink: 20 bytes leftover after parsing attributes in process `syz.9.11181'. [ 1135.139957][ T4301] netlink: 92 bytes leftover after parsing attributes in process `syz.8.11190'. [ 1135.319510][ T4306] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11192'. [ 1135.414955][ T4306] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1135.495292][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1135.847896][ T4313] netlink: 'syz.3.11195': attribute type 1 has an invalid length. [ 1135.988100][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1136.044724][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.051964][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.192565][ T68] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.201985][ T68] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.211243][ T68] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.220415][ T68] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.229584][ T68] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.240870][ T68] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.254372][ T68] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1136.264493][ T68] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1136.447097][ T4354] xt_hashlimit: size too large, truncated to 1048576 [ 1136.488828][ T4355] netlink: 'syz.8.11202': attribute type 10 has an invalid length. [ 1136.554579][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1136.563587][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1136.572903][ T4355] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1136.581925][ T4355] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1136.592819][ T4355] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11202'. [ 1137.072865][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.181274][ T4362] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 1137.194890][ T4362] macvlan2: entered promiscuous mode [ 1137.204873][ T4362] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11203'. [ 1137.354330][ T4370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1137.418061][ T4376] netlink: 'syz.8.11209': attribute type 5 has an invalid length. [ 1137.548408][ T28] audit: type=1400 audit(2000001033.240:2571): avc: denied { read } for pid=4385 comm="syz.3.11213" path="socket:[125501]" dev="sockfs" ino=125501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1137.574120][ T4386] batadv_slave_1: entered promiscuous mode [ 1137.581026][ T4386] batadv_slave_1 (unregistering): left promiscuous mode [ 1137.596293][ T4382] loop1: detected capacity change from 0 to 512 [ 1137.620265][ T4382] EXT4-fs: inline encryption not supported [ 1137.651102][ T4382] EXT4-fs (loop1): unable to read superblock [ 1138.287111][ C0] ip6_tunnel: mĖ xmit: Local address not yet configured! [ 1138.840529][ T4429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4429 comm=syz.9.11227 [ 1138.869905][ T4429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4429 comm=syz.9.11227 [ 1139.139858][ T4451] erspan0: entered promiscuous mode [ 1139.247934][ T4453] netlink: 'syz.3.11234': attribute type 5 has an invalid length. [ 1140.206193][ T4449] erspan0: left promiscuous mode [ 1140.366894][ T4464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4464 comm=syz.8.11238 [ 1140.392001][ T4464] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4464 comm=syz.8.11238 [ 1140.871754][ T4476] netlink: 'syz.5.11243': attribute type 39 has an invalid length. [ 1141.641176][ T4481] __nla_validate_parse: 12 callbacks suppressed [ 1141.641321][ T4481] netlink: 100 bytes leftover after parsing attributes in process `syz.3.11241'. [ 1141.742858][ T4487] loop1: detected capacity change from 0 to 1024 [ 1141.798578][ T4487] EXT4-fs: Ignoring removed bh option [ 1141.902116][ T4487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1141.922775][ T28] audit: type=1400 audit(2000001293.641:2572): avc: denied { write } for pid=4486 comm="syz.1.11244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1142.036795][ T4503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4503 comm=syz.8.11249 [ 1142.050948][ T4503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4503 comm=syz.8.11249 [ 1142.136055][ T28] audit: type=1400 audit(2000001293.851:2573): avc: denied { append } for pid=4486 comm="syz.1.11244" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1142.216388][ T4519] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11256'. [ 1142.238828][ T4519] netlink: 20 bytes leftover after parsing attributes in process `syz.8.11256'. [ 1142.266955][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1142.340483][ T4530] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11257'. [ 1142.362943][ T4530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11257'. [ 1142.577095][ T4532] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11255'. [ 1142.686156][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4556 comm=syz.5.11262 [ 1142.699860][ T4556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12288 sclass=netlink_route_socket pid=4556 comm=syz.5.11262 [ 1142.814762][ T4561] netlink: 'syz.5.11264': attribute type 30 has an invalid length. [ 1143.126694][ T4567] netlink: 44 bytes leftover after parsing attributes in process `syz.3.11266'. [ 1143.135913][ T4567] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11266'. [ 1143.177861][ T4574] x_tables: duplicate underflow at hook 2 [ 1143.367683][ T28] audit: type=1400 audit(2000001295.091:2574): avc: denied { name_connect } for pid=4583 comm="syz.9.11272" dest=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 1143.703645][ T4603] netlink: 'syz.8.11277': attribute type 74 has an invalid length. [ 1144.343905][ T4620] netlink: 'syz.8.11283': attribute type 7 has an invalid length. [ 1144.352258][ T4620] netlink: 148 bytes leftover after parsing attributes in process `syz.8.11283'. [ 1145.111027][ T4646] netlink: 'syz.8.11291': attribute type 5 has an invalid length. [ 1145.232702][ T4650] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11291'. [ 1145.257339][ T28] audit: type=1400 audit(2000001296.971:2575): avc: denied { execute } for pid=4651 comm="syz.5.11293" path="/blkio.bfq.io_wait_time" dev="ramfs" ino=126709 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 1146.687199][ C0] ip6_tunnel: mĖ xmit: Local address not yet configured! [ 1146.766649][ T4687] netlink: 'syz.8.11304': attribute type 10 has an invalid length. [ 1146.865893][ T4686] xt_hashlimit: size too large, truncated to 1048576 [ 1146.903341][ T4690] lo: entered allmulticast mode [ 1147.076904][ T4693] __nla_validate_parse: 2 callbacks suppressed [ 1147.084207][ T4693] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11304'. [ 1147.122861][ T4693] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11304'. [ 1147.150642][ T4696] netlink: 40 bytes leftover after parsing attributes in process `syz.8.11304'. [ 1147.525226][ T4699] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11306'. [ 1150.310512][ T4728] netlink: 56 bytes leftover after parsing attributes in process `syz.5.11317'. [ 1150.650878][ T4717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11311'. [ 1150.868978][ T4732] netlink: 'syz.9.11319': attribute type 5 has an invalid length. [ 1150.906245][ T4732] netlink: 64 bytes leftover after parsing attributes in process `syz.9.11319'. [ 1151.459336][ T4744] erspan0: entered promiscuous mode [ 1152.135721][ T28] audit: type=1326 audit(2000001559.857:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.584028][ T4743] erspan0: left promiscuous mode [ 1152.607341][ T28] audit: type=1326 audit(2000001559.857:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.678291][ T28] audit: type=1326 audit(2000001559.887:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.706448][ T28] audit: type=1326 audit(2000001559.887:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.843108][ T28] audit: type=1326 audit(2000001559.897:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.871432][ T28] audit: type=1326 audit(2000001559.897:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1152.906507][ T4766] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11328'. [ 1153.089751][ T4341] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1153.232213][ T28] audit: type=1326 audit(2000001559.897:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1153.424276][ T4339] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1153.436354][ T28] audit: type=1326 audit(2000001559.897:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1153.720957][ T28] audit: type=1326 audit(2000001559.897:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1153.749418][ T28] audit: type=1326 audit(2000001559.897:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4756 comm="syz.1.11326" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9927ccde59 code=0x7ffc0000 [ 1155.385094][ T4795] netlink: 'syz.8.11338': attribute type 5 has an invalid length. [ 1155.468656][ T4796] netlink: 64 bytes leftover after parsing attributes in process `syz.8.11338'. [ 1156.033321][ T4817] loop1: detected capacity change from 0 to 512 [ 1156.061208][ T4817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1156.109147][ T4817] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1156.769858][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1156.931045][ T4847] tmpfs: Bad value for 'mpol' [ 1156.951033][ T4832] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.963428][ T4832] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.970966][ T4832] bridge_slave_0: entered allmulticast mode [ 1156.977876][ T4832] bridge_slave_0: entered promiscuous mode [ 1156.985333][ T4832] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.992554][ T4832] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.000036][ T4832] bridge_slave_1: entered allmulticast mode [ 1157.006699][ T4832] bridge_slave_1: entered promiscuous mode [ 1157.052591][ T4832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.064668][ T4832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.092492][ T4832] team0: Port device team_slave_0 added [ 1157.099432][ T4832] team0: Port device team_slave_1 added [ 1157.116583][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.123822][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.150656][ T4832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.162277][ T4832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.170152][ T4832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.201237][ T4832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.241214][ T4832] hsr_slave_0: entered promiscuous mode [ 1157.247591][ T4832] hsr_slave_1: entered promiscuous mode [ 1157.253607][ T4832] debugfs: 'hsr0' already exists in 'hsr' [ 1157.259810][ T4832] Cannot create hsr debugfs directory [ 1157.612205][ T4832] team0: Port device netdevsim2 removed [ 1157.849109][ T4832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1157.864732][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1157.874722][ T4832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1157.905556][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1157.940769][ T4832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1157.952517][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1157.969680][ T4832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1157.982461][ T4832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1158.010484][ T3058] bridge_slave_1: left allmulticast mode [ 1158.021450][ T3058] bridge_slave_1: left promiscuous mode [ 1158.045913][ T3058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1161.012573][ T3058] bridge_slave_0: left allmulticast mode [ 1161.018560][ T3058] bridge_slave_0: left promiscuous mode [ 1161.024333][ T3058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1161.081509][ T3058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1161.091198][ T3058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.103228][ T3058] bond0 (unregistering): Released all slaves [ 1161.167386][ T3058] tipc: Left network mode [ 1161.177525][ T4832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1161.196294][ T3058] hsr_slave_0: left promiscuous mode [ 1161.202157][ T3058] hsr_slave_1: left promiscuous mode [ 1161.235176][ T3058] team0 (unregistering): Port device team_slave_1 removed [ 1161.245390][ T3058] team0 (unregistering): Port device team_slave_0 removed [ 1161.292145][ T4832] 8021q: adding VLAN 0 to HW filter on device team0 [ 1161.315209][ T4917] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11367'. [ 1161.317399][T26206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1161.326205][ T4917] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11367'. [ 1161.331480][T26206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1161.373611][ T4919] loop1: detected capacity change from 0 to 512 [ 1161.385770][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1161.392911][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1161.424968][ T4919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1161.439199][ T4919] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1161.520670][ T4937] kernel read not supported for file /!selinuxw (pid: 4937 comm: syz.9.11370) [ 1161.542781][ T28] kauditd_printk_skb: 140 callbacks suppressed [ 1161.542801][ T28] audit: type=1400 audit(2000001569.267:2726): avc: denied { nlmsg_read } for pid=4941 comm="syz.8.11371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 1161.662629][ T4832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.729032][ T4832] veth0_vlan: entered promiscuous mode [ 1161.736841][ T4832] veth1_vlan: entered promiscuous mode [ 1161.752456][ T4832] veth0_macvtap: entered promiscuous mode [ 1161.759709][ T4832] veth1_macvtap: entered promiscuous mode [ 1161.777900][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1161.809841][ T4832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1161.839064][T26206] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.848453][T26206] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.858339][T26206] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.870181][T26206] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1161.900834][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.9.11377'. [ 1161.910523][ T4974] netlink: 104 bytes leftover after parsing attributes in process `syz.9.11377'. [ 1162.098905][ T2510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.853549][ T5010] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11388'. [ 1162.882400][ T5010] netlink: 104 bytes leftover after parsing attributes in process `syz.8.11388'. [ 1163.020211][ T4995] Cannot find map_set index 135 as target [ 1163.259624][ T5027] loop1: detected capacity change from 0 to 512 [ 1163.337114][ C0] ip6_tunnel: mĖ xmit: Local address not yet configured! [ 1163.341774][ T5027] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 1163.365271][ T5027] EXT4-fs: error: could not find journal device path [ 1163.401864][ T5033] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11395'. [ 1163.656332][ T5038] 9p: Bad value for 'wfdno' [ 1163.862909][ T5054] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1163.910098][ T5054] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11399'. [ 1163.941304][ T5058] FAULT_INJECTION: forcing a failure. [ 1163.941304][ T5058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.000353][ T5058] CPU: 1 UID: 0 PID: 5058 Comm: syz.3.11402 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1164.000399][ T5058] Tainted: [W]=WARN [ 1164.000489][ T5058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.000583][ T5058] Call Trace: [ 1164.000591][ T5058] [ 1164.000601][ T5058] __dump_stack+0x1d/0x30 [ 1164.000633][ T5058] dump_stack_lvl+0x95/0xd0 [ 1164.000655][ T5058] dump_stack+0x15/0x1b [ 1164.000734][ T5058] should_fail_ex+0x25e/0x270 [ 1164.000769][ T5058] should_fail+0xb/0x20 [ 1164.000839][ T5058] should_fail_usercopy+0x1a/0x20 [ 1164.000887][ T5058] _copy_from_user+0x1c/0xb0 [ 1164.000910][ T5058] ___sys_sendmsg+0xc1/0x1e0 [ 1164.000980][ T5058] ? terminate_walk+0x1d5/0x200 [ 1164.001033][ T5058] __sys_sendmmsg+0x185/0x320 [ 1164.001121][ T5058] __x64_sys_sendmmsg+0x57/0x70 [ 1164.001151][ T5058] x64_sys_call+0x27aa/0x3020 [ 1164.001313][ T5058] do_syscall_64+0x136/0x3c0 [ 1164.001349][ T5058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.001408][ T5058] RIP: 0033:0x7fdeddd7de59 [ 1164.001424][ T5058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.001443][ T5058] RSP: 002b:00007fdedc7d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1164.001463][ T5058] RAX: ffffffffffffffda RBX: 00007fdede005fa0 RCX: 00007fdeddd7de59 [ 1164.001478][ T5058] RDX: 0000000000000001 RSI: 00002000000034c0 RDI: 0000000000000003 [ 1164.001496][ T5058] RBP: 00007fdedc7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.001540][ T5058] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.001553][ T5058] R13: 00007fdede006038 R14: 00007fdede005fa0 R15: 00007ffe72d27318 [ 1164.001573][ T5058] [ 1164.008663][ T28] audit: type=1400 audit(2000001571.727:2727): avc: denied { getopt } for pid=5064 comm="syz.5.11403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1164.258864][ T5073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11405'. [ 1164.286945][ T5073] loop3: detected capacity change from 0 to 4096 [ 1164.434344][ T5078] FAULT_INJECTION: forcing a failure. [ 1164.434344][ T5078] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1164.483431][ T5078] CPU: 0 UID: 0 PID: 5078 Comm: syz.3.11406 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1164.483472][ T5078] Tainted: [W]=WARN [ 1164.483481][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1164.483520][ T5078] Call Trace: [ 1164.483529][ T5078] [ 1164.483539][ T5078] __dump_stack+0x1d/0x30 [ 1164.483608][ T5078] dump_stack_lvl+0x95/0xd0 [ 1164.483648][ T5078] dump_stack+0x15/0x1b [ 1164.483732][ T5078] should_fail_ex+0x25e/0x270 [ 1164.483761][ T5078] should_fail+0xb/0x20 [ 1164.483786][ T5078] should_fail_usercopy+0x1a/0x20 [ 1164.483886][ T5078] _copy_from_user+0x1c/0xb0 [ 1164.483912][ T5078] __sys_bpf+0x1e2/0xc30 [ 1164.483952][ T5078] ? get_pid_task+0x92/0xc0 [ 1164.484036][ T5078] ? vfs_write+0x7f0/0x990 [ 1164.484089][ T5078] __x64_sys_bpf+0x69/0x80 [ 1164.484130][ T5078] x64_sys_call+0x10cb/0x3020 [ 1164.484163][ T5078] do_syscall_64+0x136/0x3c0 [ 1164.484273][ T5078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1164.484302][ T5078] RIP: 0033:0x7fdeddd7de59 [ 1164.484323][ T5078] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1164.484355][ T5078] RSP: 002b:00007fdedc7d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1164.484380][ T5078] RAX: ffffffffffffffda RBX: 00007fdede005fa0 RCX: 00007fdeddd7de59 [ 1164.484397][ T5078] RDX: 0000000000000048 RSI: 0000200000000500 RDI: 000000000000000a [ 1164.484410][ T5078] RBP: 00007fdedc7d7090 R08: 0000000000000000 R09: 0000000000000000 [ 1164.484478][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1164.484495][ T5078] R13: 00007fdede006038 R14: 00007fdede005fa0 R15: 00007ffe72d27318 [ 1164.484522][ T5078] [ 1166.489452][ T5133] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11424'. [ 1167.089679][ T5165] xt_hashlimit: size too large, truncated to 1048576 [ 1167.303197][ T5178] ================================================================== [ 1167.311338][ T5178] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 1167.318921][ T5178] [ 1167.321264][ T5178] write to 0xffff888104bdc000 of 8 bytes by task 5177 on cpu 0: [ 1167.328913][ T5178] mas_wmb_replace+0x22e/0x1770 [ 1167.333814][ T5178] mas_wr_store_entry+0x54a7/0x5a90 [ 1167.339131][ T5178] mas_store_prealloc+0x421/0x670 [ 1167.344189][ T5178] vma_complete+0x3c7/0x850 [ 1167.348745][ T5178] __split_vma+0x592/0x640 [ 1167.353188][ T5178] vma_modify+0xb29/0xc80 [ 1167.357549][ T5178] vma_modify_flags+0x182/0x210 [ 1167.362430][ T5178] mprotect_fixup+0x3a2/0x680 [ 1167.367164][ T5178] do_mprotect_pkey+0x69e/0x950 [ 1167.372039][ T5178] __x64_sys_mprotect+0x48/0x60 [ 1167.376921][ T5178] x64_sys_call+0x2768/0x3020 [ 1167.381621][ T5178] do_syscall_64+0x136/0x3c0 [ 1167.386273][ T5178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.392201][ T5178] [ 1167.394549][ T5178] read to 0xffff888104bdc000 of 8 bytes by task 5178 on cpu 1: [ 1167.402111][ T5178] mtree_range_walk+0x35a/0x480 [ 1167.406984][ T5178] mas_walk+0x1ac/0x340 [ 1167.411186][ T5178] lock_vma_under_rcu+0xc9/0x210 [ 1167.416324][ T5178] do_user_addr_fault+0x237/0x1060 [ 1167.421507][ T5178] exc_page_fault+0x62/0xa0 [ 1167.426039][ T5178] asm_exc_page_fault+0x26/0x30 [ 1167.430911][ T5178] [ 1167.433248][ T5178] value changed: 0xffff88811a329c41 -> 0xffff888104bdc000 [ 1167.440454][ T5178] [ 1167.442795][ T5178] Reported by Kernel Concurrency Sanitizer on: [ 1167.448964][ T5178] CPU: 1 UID: 0 PID: 5178 Comm: syz.8.11437 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 1167.459922][ T5178] Tainted: [W]=WARN [ 1167.463741][ T5178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1167.473819][ T5178] ==================================================================