last executing test programs: 6m25.096005416s ago: executing program 3 (id=1213): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @multicast2}}) ioctl$sock_inet_SIOCSARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x4e22, @dev}, {0x0, @multicast}, 0x38, {0x2, 0x2, @broadcast}, 'syz_tun\x00'}) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x200, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0xb) r4 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000180)='cpu<=0||!') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a740000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000480003801c0000800c00018006000100d10300000c000440000000002df31ab3240000800c0004400000000000000005080003"], 0x9c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd7000fbd9df250f0000002c0007800c"], 0x44}, 0x1, 0x0, 0x0, 0x2805}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x2c}}, 0x0) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r7, &(0x7f00000001c0)={0xa, 0x4e1f, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x33}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) 6m24.920401012s ago: executing program 3 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0xc, 0xffffffffffffffff, &(0x7f0000000080)=0x17) setresuid(0x0, 0xee00, 0xee01) keyctl$restrict_keyring(0xf, 0xfffffffffffffffc, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020605000000000000000000000000000e0003006269746d61703a697000000005000400000000000900020073797a310000000018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) listen(r0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x34008005}, 0x4000050) 6m24.777470486s ago: executing program 3 (id=1218): munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB="bc150000", @ANYRES16=r3, @ANYBLOB="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"], 0x15bc}}, 0x0) munlock(&(0x7f0000975000/0x3000)=nil, 0x3000) connect$can_bcm(r1, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) listen(0xffffffffffffffff, 0x3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x200000, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$SG_IO(r8, 0x2285, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r10, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r9, 0x0}]) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000100)={0x0, 'veth1_to_batadv\x00', {0x4}, 0x26}) 6m24.538704613s ago: executing program 3 (id=1221): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x1f81ca7, 0x0, 0x85, 0x0, &(0x7f0000000080)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f00000000c0)={[{@grpid}, {@grpquota}, {@resuid}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000002480)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x88bc56, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1000) renameat2(0xffffffffffffff9c, &(0x7f0000002240)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f0000000980)='./file0\x00', 0x4) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000140)=0x3ff, 0x4) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='htcp', 0x4) mount_setattr(r2, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20) 6m23.882165813s ago: executing program 3 (id=1224): getpid() openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = epoll_create1(0x0) epoll_pwait(r5, 0x0, 0x0, 0xe, 0x0, 0x0) r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000001c00), 0x12) unshare(0x44040300) 6m23.370236979s ago: executing program 3 (id=1232): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7e) inotify_init1(0x800) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0xb702, 0x9, 0x0, 0x2000002, 0x7, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000000c0)={'wlan0\x00', {0x2, 0x0, @multicast2}}) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x5, 0x6, 0x5e31, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 6m23.35711403s ago: executing program 32 (id=1232): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket(0x2b, 0x80801, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) epoll_create(0x7e) inotify_init1(0x800) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@local, @in=@rand_addr=0x64010100, 0x4e20, 0x0, 0x4e20, 0x80, 0x2, 0xa0, 0xa0, 0x29}, {0x104, 0x5, 0xb702, 0x9, 0x0, 0x2000002, 0x7, 0x4}, {0x401, 0x5, 0x6, 0x2}, 0x0, 0xfffffffe, 0x2, 0x0, 0x2, 0x3}, {{@in6=@remote, 0x4d4, 0x32}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3505, 0x0, 0x1, 0x9, 0x8, 0x0, 0x6}}, 0xe8) r2 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x8210, 0x2, 0x0, 0x42}, &(0x7f00000000c0), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, &(0x7f00000000c0)={'wlan0\x00', {0x2, 0x0, @multicast2}}) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r3, 0x29, 0x40, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x5, 0x6, 0x5e31, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 3m55.414998125s ago: executing program 5 (id=2429): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4000080, 0x0, 0x0) 3m54.109407305s ago: executing program 5 (id=2441): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x8001}], 0x1, 0x0, 0x0, 0xfffffffffffffee5) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000240)=0x3, 0x4) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x84, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e21, 0x3ce9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff5}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x2) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a87080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000080)={r3, 0x10001, 0x2, 0xd7e}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r8, 0x58}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) 3m53.238497352s ago: executing program 5 (id=2451): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4000080, 0x0, 0x0) 3m52.274547982s ago: executing program 5 (id=2464): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0xb, 0x2c, 0x0, @remote, @local, {[], {{0x2c00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3m52.139157096s ago: executing program 5 (id=2466): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) fstat(r0, 0x0) 3m52.069191688s ago: executing program 5 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0xfffffffffffffffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) 3m36.630556081s ago: executing program 33 (id=2467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, 0xfffffffffffffffd) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x83, 0x5, 0x0, 0x0, 0x0, 0x0, 0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xe}, 0x9034, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0xffffffff, 0x6361, 0x7, 0xfffffffd, 0x40000004}}}}]}, 0x4c}}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0xd, 0xb}, {0xffe0, 0xd}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb, 0x4}}}}]}, 0x40}}, 0x4010004) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="f1ff00004ec6"}) 1m48.874368833s ago: executing program 6 (id=3316): renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, 0x0) write$UHID_CREATE(r0, &(0x7f00000005c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/138, 0x8a, 0x5, 0x0, 0x2, 0x1, 0x4}}, 0x120) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r1, 0x4b4b, &(0x7f0000000480)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="1c000000210081044e81f782db44b904020000000080000000021500", 0x1c}], 0x1}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@remote, 0x4e24, 0xfff, 0x4e22, 0x0, 0xa, 0x0, 0x80, 0x2f}, {0x7, 0x400, 0x40, 0xfffffffffffffffd, 0x5, 0x1, 0x5, 0x80000000}, {0xff, 0x65, 0x8000000000000000, 0x100}, 0xb0d0, 0x6e6bb8, 0x2, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2, 0x3, 0x9, 0x3, 0x2, 0x769}}, 0xe8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/arp\x00') preadv(r3, 0x0, 0x0, 0x10000014, 0xcc) 1m48.687650199s ago: executing program 6 (id=3317): sched_setscheduler(0x0, 0x2, 0x0) inotify_init() mkdir(&(0x7f0000000300)='./bus\x00', 0x2c) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}}, 0x24}}, 0x20008001) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1c, 0x16, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_query, @map_idx={0x18, 0x1, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x56f0, 0xfc, &(0x7f00000003c0)=""/252, 0x40f00, 0x4, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x1, 0x6, 0x3}, 0x10, 0x811c, 0xffffffffffffffff, 0x2, &(0x7f0000000540)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f00000005c0)=[{0x3, 0x2, 0x10, 0x5}, {0x5, 0x1, 0x0, 0x4}], 0x10, 0x3}, 0x94) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/diskstats\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={r2, r3, 0x3, 0x0, @void}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r3, 0x20, 0x1, 0x6, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x48844) syz_open_dev$evdev(&(0x7f0000000140), 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xffec}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m48.541081723s ago: executing program 6 (id=3318): socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = socket(0x400000000010, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x5, 0x0, &(0x7f0000000080)) pipe(0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x39, 0x6, 0x0, 0x0, 0x0, 0x0, 0x90281, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99, 0x0, @perf_config_ext={0x4}, 0x0, 0x3e, 0x0, 0x4, 0x2, 0x7ffdfffc, 0x401, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x25) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r5, r2, 0x25, 0x0, @val=@tcx={@void, @value=r5}}, 0x5a) syz_emit_ethernet(0x32, &(0x7f0000005980)=ANY=[], 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r0, r7, 0x25, 0x0, @void}, 0x10) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'team_slave_0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) socket$nl_route(0x10, 0x3, 0x0) 1m47.140711847s ago: executing program 6 (id=3329): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f00000015c0)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESOCT=0x0, @ANYRES64], 0xff, 0x204, &(0x7f0000000300)="$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") openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x2082) ioctl$BLKRRPART(r1, 0x125f, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x1) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) getdents64(r3, &(0x7f00000005c0)=""/4096, 0x1000) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x1986, 0x1000, 0x8, 0xc1, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) utime(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x10001, 0x7}) 1m46.591670384s ago: executing program 6 (id=3336): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, r4, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) syz_genetlink_get_family_id$nl802154(&(0x7f0000001940), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022bbd7000fddbdf250d00000008000d000000000008000d000100000008000d00010000", @ANYRES32=r6, @ANYBLOB="08000d00000000000c000600020000000200000008000300", @ANYRES32=r7, @ANYBLOB="08000d000000000008000300", @ANYRES32=r8, @ANYBLOB="2515e9124e43092b4c2e93097e5da20d1c01db1e2d0c2107ac6f5909384ed24b5d52c3e0864b943342a7b468e641f105cce80960577532b3953fa60747ce4b26b3e71af0e47755681ffeada5fc6df8e01004f677c4a320037505ecd02e7e31218ddaea54e0aee523bef9837a4410f524c6af2a9a3bbb1aa45089c8d627"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000091) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20048a, &(0x7f00000001c0)={[{@grpjquota}, {@noinit_itable}, {@abort}, {@bsdgroups}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r9, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1400000000000000}, {0xffffffff, 0x0, 0x9, 0xa}]}) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r10, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1m45.691288952s ago: executing program 6 (id=3347): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0x7fffffffffffffff, 0x2) sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) unshare(0x40200) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000180)=[0x6, 0x7fff]) unshare(0x40400) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, r7, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m45.532582487s ago: executing program 34 (id=3347): syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') lseek(r0, 0x7fffffffffffffff, 0x2) sendfile(r0, r0, &(0x7f0000000000)=0x6, 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) r3 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) socket$netlink(0x10, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB], 0xd8}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) unshare(0x40200) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r6, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) semctl$SETALL(r6, 0x0, 0x11, &(0x7f0000000180)=[0x6, 0x7fff]) unshare(0x40400) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) quotactl_fd$Q_GETQUOTA(r3, 0xffffffff80000702, r7, &(0x7f0000000080)) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1m41.292964948s ago: executing program 0 (id=3375): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000080)="666417e55af55dfb51950a518bbcba84", 0x10) 1m41.183578821s ago: executing program 0 (id=3376): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000780)=@ethtool_rxnfc={0x32, 0x9, 0x2, {0x11, @hdata="26ccb4cd1d298462d0cab207ad0ab3affe54aff6b1c81fe7e7d2e53579dffda36aab20743a3eb2e35907ae56f1e4d7bf687e6581", {0x0, @broadcast, 0x0, 0x9, [0x401, 0x7]}, @ah_ip6_spec={@loopback, @dev={0xfe, 0x80, '\x00', 0x20}, 0x7, 0x10}, {0x0, @broadcast, 0x6, 0xcf32, [0x23, 0xb]}, 0x5, 0x821}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r3, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000840)=ANY=[@ANYBLOB="8c010500", @ANYRES16=r4, @ANYBLOB="02002cbd7000fddbdf250b0000004c0006804700040067636d28616573290000000000000000000000000000000000000000000000001f0000007412ba07a676869a2abc22be329b26c55260f2f5f713d4556eedd8640a2d71003c000180380004001400010002004e22e00000010000000000000000200002000a004e2300000000fc00000000000000000000000000000119490000680001800d0001007564703a73797a30000000000d0001007564703a73797a31000000000c00028008000300000100001c0002800800040005000000080003000800000008000100040000001c000280080004000100010008000200500d000008000100130000000c0003800800010009000000580002804c00038008000100080000000800010006000000080001000800000008000200020040000800010086df00000800010004000000080002000800000008000200090000000800010009000000080002000900000024000980080001000a0000000800010009000000080001000100000008000100fbffffff"], 0x18c}, 0x1, 0x0, 0x0, 0x44014}, 0x8080) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9887, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x404, 0x0, 0xfff, 0x0, 0x2, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x888) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x9) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000017f000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00004f4000/0x2000)=nil, &(0x7f000012d000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r1}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x9315, 0x1f480, 0x0, 0x39d}) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) creat(&(0x7f00000002c0)='./file0\x00', 0x104) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x6, 0x5}, 0x16120, 0x0, 0xfffffffa, 0x6, 0x6, 0xc9, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, r5, 0x7d691000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 1m40.077287125s ago: executing program 0 (id=3383): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000006f, 0x2, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x40}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') socket$netlink(0x10, 0x3, 0x0) sendfile(r0, r0, 0x0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r3) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000eee46173089f1d54e1d23702e992b99d77a0e1cd7fefcde22488f13180167594b573d1688cb2721b", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x10890) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x0, 0x0) r6 = inotify_init1(0x800) inotify_add_watch(r6, &(0x7f0000000240)='.\x00', 0x60000526) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FIBMAP(r6, 0x1, &(0x7f0000000100)=0x7ff) getdents64(r7, 0x0, 0x22) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r9, 0x0, 0x1, 0x0, 0x12) sendmmsg$inet(r8, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="48000000000000000000000007000000018623ffffffff0606b1bc5bf20202070f804aa6c213afb2d2ef1320b00200068be64a2e8913dd7f00000100000000ac1e01016401010100"], 0x48}}], 0x1, 0x4880) 1m39.92044534s ago: executing program 0 (id=3385): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6401f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x12002, 0x9, 0x43a1bd56, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x1000000000003f}, 0x60) r2 = epoll_create1(0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000140)={[{@grpjquota}, {@noblock_validity}, {@nouid32}, {@jqfmt_vfsv0}, {@nogrpid}, {@nouid32}, {@resuid={'resuid', 0x3d, 0xee00}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0xa383}}, {@noauto_da_alloc}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xff}}]}, 0x0, 0x4f1, &(0x7f0000000b40)="$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") syz_emit_ethernet(0x36, &(0x7f0000001280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010108, @local}, {{0x1, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x5, 0x0, 0x20}}}}}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) clock_getres(0xfffffffffffffff1, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.457068135s ago: executing program 0 (id=3388): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x501201, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) ioctl$TCSETS(r0, 0x5402, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f00000004c0)=0x1, 0x4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffe, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x188}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x90}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffbe}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x9, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23df27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf4, 0xb, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}]}, {0x6d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m37.937197782s ago: executing program 0 (id=3410): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="74040000", @ANYRES16=r3, @ANYBLOB="010028bd7020fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="78020280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f8ffffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000003c00010024000100656e61626c656400000000000000000000004555f1b7000000000000000000000500030006000000040004000800060060c7b1dc9a37d7d0e496cd0791c4c9f8aa465e4244fea654367340268d60c7", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400020007057110000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d80102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x474}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c004) 1m22.810194439s ago: executing program 35 (id=3410): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x11, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x9, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="02011400012918000e1a80009f0001143f11002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206", @ANYBLOB="363d60be312a894a0ad8b1847ecd706f971fd8ba38e2dcccbc09c00700e2aeacc799fc70e1a37aab31c9c653530627fd6245fa47050af6"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000007}, 0x4000) r3 = syz_genetlink_get_family_id$team(&(0x7f0000002a00), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000003d00)={0x0, 0x0, &(0x7f0000003cc0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="74040000", @ANYRES16=r3, @ANYBLOB="010028bd7020fedbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="78020280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400f8ffffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="08000700000000003c00010024000100656e61626c656400000000000000000000004555f1b7000000000000000000000500030006000000040004000800060060c7b1dc9a37d7d0e496cd0791c4c9f8aa465e4244fea654367340268d60c7", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400020007057110000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400020000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d80102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r2, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400dc0000003c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="3c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000"], 0x474}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c004) 1m4.262975173s ago: executing program 2 (id=3671): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x400ffffffffffe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_config_ext={0xa19a, 0x1008}, 0x100000, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t<-&&\t') r1 = socket(0x10, 0x80002, 0x0) sendmsg(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000053c0)=@deltfilter={0xf14, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_cgroup={{0xb}, {0xedc, 0x2, [@TCA_CGROUP_ACT={0xed8, 0x1, [@m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0xaa2, 0x6, 0x101, 0xd187, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x4, 0x8d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x6c, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0x4, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x2, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x6, 0x7, 0x8, 0x8, 0xad38, 0x6}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8000, 0x4, 0x1ff}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xa}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0xc65, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0xc, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x101, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x403}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0x401, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x5, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96c}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x8, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x2, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x41, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x4, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e7, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x6, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xf14}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(0x3) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) listen(r3, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x400, &(0x7f0000000440)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d3c5ed0ade6d75efa4e593b8be034fade99adf9d7a57d636433a979a6cb0cb51482ec8c6de4a29966f72f580de99c06949ebbdf7fb25e3dbf5fdca5a339740c78c5cced60b0db60af8865cb4a194127ceeb0693410dcea57c1d9246b3d3b017389e82e12958d217ea400410312fdd74137c", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',\x00']) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) mount$tmpfs(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='size=G']) 1m3.632484023s ago: executing program 2 (id=3675): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[], 0x10000) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300010000000000fcffff0707000000", @ANYRES32, @ANYBLOB="000000000000000014001a80100004800c000a80"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m3.578034014s ago: executing program 2 (id=3676): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1000006f, 0x2, @perf_bp={0x0, 0xf}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x40}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='mountstats\x00') poll(&(0x7f0000000080)=[{r0, 0x8110}, {r0, 0x38}], 0x2, 0x800) socket$netlink(0x10, 0x3, 0x0) sendfile(r1, r1, 0x0, 0x80000000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000eee46173089f1d54e1d23702e992b99d77a0e1cd7fefcde22488f13180167594b573d1688cb2721b", @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x10890) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000526) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000100)=0x7ff) getdents64(r8, 0x0, 0x22) r9 = socket$inet6(0xa, 0x2, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r10, 0x0, 0x1, 0x0, 0x12) sendmmsg$inet(r9, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="48000000000000000000000007000000018623ffffffff0606b1bc5bf20202070f804aa6c213afb2d2ef1320b00200068be64a2e8913dd7f00000100000000ac1e01016401010100"], 0x48}}], 0x1, 0x4880) 1m3.554927675s ago: executing program 2 (id=3677): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x200000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xc}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000002d40)={0x1, 0x1}, 0x8) close(0x3) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x8001, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x74, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}], 0x1c) 1m2.632540433s ago: executing program 2 (id=3685): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x501201, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000002000000080003"], 0x34}}, 0x884) ioctl$TCSETS(r0, 0x5402, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x31, &(0x7f00000004c0)=0x1, 0x4) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x2050061, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffe, 0x0, @perf_config_ext={0x1, 0x7}, 0x0, 0x2, 0xfffffffe, 0xf, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000100)=0xfffe, 0x4) recvmmsg(r5, &(0x7f0000001440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002002, 0x0) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000080)=0x55b6, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x188}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x10c, r6, 0x10, 0x70bd28, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x90}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x6}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffffffbe}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x5}, {0x5}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x1c4, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x9, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FLAGS={0x8}]}}, @filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x174, 0x1, [@m_simple={0x7c, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4d, 0x6, "d35262dd0c45c89a36560c0300000000000000c4e5b36b25696b1c64c4f2c071726e7e7a6f7e44147f5eedb77cb5622cdc82c44a5868091abd00003861db1e4cc0646efeac3d23df27"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf4, 0xb, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xe, 0x3, ')&%!J*).,\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x3, 0x1, 0x40}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x8, 0x6, 0x3, 0xf}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x1, 0x0, 0x37, 0x80000000}}]}, {0x6d, 0x6, "062ea3098d69d69fd1bc21cfe50b3caaf8681285490084099afa2f054fd0a4e2d05cc838ff7438c1cf1efd2e36c021730a4fb3ee9dad6587ef57c3c71dd2904b85d59a12b59d7e5fd03246558deb333c7f6fd9ca35aa7a9c4c25107289c2b66110cdb18b8dad6c876d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1m0.947458326s ago: executing program 2 (id=3701): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) connect$netlink(r0, &(0x7f0000000080)=@unspec, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff9, 0x401, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0, r0, r0, r0], 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x32, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x5, 0x2, 0x1, 0xc}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ldst={0x3, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffe0, 0x16}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x90000000}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x47c7e539, 0xec, &(0x7f00000003c0)=""/236, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x3, 0x4, 0x3, 0x4}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x1, 0x2, 0x1}, {0x1, 0x1, 0xf, 0x9}], 0x10, 0x8000}, 0x94) sendto$inet6(r0, &(0x7f0000000680)="7ea084034eb6afbdc43d4e6f986b73f0dd", 0x11, 0x890, &(0x7f00000006c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x27}, 0x400}, 0x1c) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x4, &(0x7f0000000700)=[{0x0, 0x10, 0x9, 0x6}, {0xe, 0x4, 0xfa, 0x9}, {0x0, 0x0, 0x4b, 0x2}, {0x6, 0x2, 0x2, 0x5}]}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000780)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xc997, &(0x7f00000008c0)=0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000900)={0xfffffff4, 0xea, 0x4, 0x10000, 0x3}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r1, r3}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a40)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001e00)={&(0x7f0000000a80)={0x27, r4, 0xffffffffffffffff, 0x7, 0x4, 0x4, "44132bba85bad26a348c146156b18f1d959f6c88f098762aeba3f89e1abf072964475f9e6e047325d276c37238c08c5d99af0283d53a592735c8b970a72458", 0x27}, 0x60, &(0x7f0000001cc0)=[{&(0x7f0000000b00)="68a165b039c19588f88914056ff2b9bce2766ff51b5a4cdd634c22ba91910ee02ee001d62bf005156204a932d7e964845df8c1b27e3479c686ca1677267ee12095d18251c0c387ce346992f6376d2b427b16472816dfdca9adfaa81046cd03bfabdd2f641b24eee0cc8ecfdb0c15a9be3b34a72ca2d2cd80f9b5d9bc6cccbc6aa3f6d6aa0f4a54abb64e4c8896fbd9ab91c30aed1d519eca97214cba8fc5186d7bd3d51fa1d40359298f38db0a7ad831838aef8f17a94239a8c8c62da9a8b76a549a1431215c7832f0b56f44666449c42ffdd946329641eb3218cdfc4c4c7f06c659b81b281ca0f75731f270e5c950ee8387fcad58567efc82bfe79ce6bdb37d7265c683d5a08f51546132d0f8b2a5bc36e12ba1eabfa33fa7c2baa0a81b352269c0a2146b958392e1af4a204b0e2f60e3505938d7e29fa95162412507a71fd062cc3f24d40a9ea028f6c2d7c5253e6b7a37297d73b55c7f92bab70387de49d87da2670ee7098ec5254981c10f1d4225633fadf4e72a710496fcefefba0ab3a4bc9fe8ec241eb4e87474bb000ee3d1e1a81bc45ce3d3de9870b222dbc5cb535b43cc2565a6967714c0c1430e807126427df7b27075d1e32cb748fa7703ed1bbb64521348c1bf5127fdd1dd2f4ae13127c60b88a0719e6f6fe1741fa32e616f4fd0a5c516a41635f038f868f3ae38c065983f4c8405461067402f1bb1c1eaceec720120046c8db09014f1a45206e17ae21eb4aadaaf8f254923bf95bfe55908574b5476cb0d72af3cb6d1ad5e984636f5299225e974090488050681c1e4be47efec40ea093b5ab7d90378980adf784e43297b95e4fcd04e17049948a82aa35ea70ddfe7623e083d5509a6bf27f5419a2b4fec98826834e7f111470313531efe71066415d8e4ed3fd4083f2ec7d91f8e119c7d5166219de53ab28aece27fef0466b22b6d841f6aa1120202a95a48f00dcf728bf53c44833f250f69d189dc8431d120ac5cce9464b1b0ba8624068dadac57ef0b7eb51a8e3f4addd68d49fc074bd51d9db597ebc64926be2dfcb69f070d0113da93e36742e0cc1285b2f8b8c6a53b386e5fee5909a039f6790a262b9a1b5177629138adaec65859db1e4dfbbe4ccf7c32e6cc3627c216fe9303fc232e1d3854249ba8614f5ee25483cefaab184dfd4ee1ad4d0614005cbaf777668a35acca77e8ee425fb9573a99ea157ec892f5c1a9efff6a848b21a2783769405ad05f94883881d222e248e417c44767422a6403ecf2010418ecc6c8a15c684f21837ee1c25f9dedba839791374a65366ff8f0f1dddca22670bf3e0e317462b208bd5b7e9ddca8e03a7bea34ccba05313891c98a72d999dd46d348646e902be1a71eaa9410cda144f8066848acaa75df11405168f6d7f8a3d4ce77b4bf99d79b2dcde8f4f1e2f9986bc95fb9d9e108c181f26351cd393f3a79de57a18e55943369df092233eaded5bf3c355782f1f00e1347557fa48aaa52f7ffd6c329360a692e2ce513da04d3586aa696a48a1e37325d937deede1a3a40be973f97dabc777d326b7de63d9b66b394177b418bd5a8385158221fcb98ed5ad00f4a6b2b3e3d1c604274137654c9aefaaad545620ef64e996327abe9ff048e45d11efeb6c522e0ae781f8d9512dc750d1d74cccf221d4d0d68726a22ac69d848725d9a09cf5445aebe3c196d73c09ef6bfd642a7791c8c556665685e853ee7e977d0f3da8ce1fa72d2bd19770b5c01112dc45aac71a37effa58fb0f926a5853137db7187db714ffea052eee5483e1941ba09293eac7c568b32349b1f5e6718030ddc61bc823b50b28fc2d5dcc37584bdb903660b60df70b89bb029cf8fb8733970ecf0dda7f77dbbbf9e448b2240c4e1374ab39ab78007707a0203b0909cbe1eb3cc55d287d4d63a6a9491c871fda2839f64511c8db43044d8a7b6549c89bfbc345072ba96fcd4d26caa99815cd09b089767a4464a8b38daac11f1465d2000d5bdc1d3d8650a1a7cb79b7ccf84a766dea3b4728285bfcdf8fc756e6f435fe3890e792ec34689a782ba32ea5210efc8929facf7851f4e1cd8a480e6086cde452a17624f7911b9775db5faeda1df5860ca315ce7b722f42325d7d5a90b790f75eed8f666b715c1c5017d87511097146009c9c912bbed11e047ee9130ca886eafd87fc83a9ea05e8414e6b1d277c83ea193ed41a91bc1b373e27c1a34ae75a0bc57061e72f73641878e6230c1f670d3b17aa2b9999a538609be0d28951c83c5149359ec094c7153aed5596ff3e6aa2907887d6da636da4956c89dbb62ca08ac7781da41f2a7b0c01e0f4dfadba1337248fbf28bd363aaa5101b27eb4e232bafc89ade5a91db51b4ba65bfc0ecf61ab68aa66c614cf2109868aefaa57a960ac466fd1d3a8e2ff902f23876e2b209d5f6f4fa054f05046c7fda00a4d9fe823f6abfd7dc0ad835c23bae5f4db7f63ad21ad9f0ff5dc45e705f53da8460e4eca56e9d32e83013acda02a39c44646bbbe8ee1d9262a4c688d462ce2e74e7a9fe796f5cd36763d3e21033bf9f8408fea38b26656eafc270b4bb2db3ea794f0f57b6b0271964e11c35fcbc26469f95913f0b77b2ea1c61cae39bb4412d1d1229e89cf605e9551341740ca285a910fc0ede5a9c06ce9d822ab6c8c7dee009f58f514ec22c1465df2929712bfbe58a739725408d693085414c52872079b9c076ca6a5aa7acb9e8e2697a5b2861d0ba6c767163f09100e492f5495b58243567c3717c92d8d43e73c133d3c6e6d2d2428b6eec94ac4705616f561be32946cae02d374f9295b3284b770a9c00405146ab3d5a5b53da73573f815123c1fb155b703efe545ad2f096b1d3362a688adc0b76012f68940b4c40e65bb3986ca7fa9f11b3d3af1bcb782c0b91680c117ce588615f3ab9ed4102fb7f5fe9f2302c0b631f6a106a82d1517dd0fe3b816e328a68e567f0efb0177a59754b983e2a20e1fd1c49a10a4e80658be18218e0a461b6beb46f23c0fcfdffceb268cf2e85ecea733a40c7964d0a748697d821cb144ddcc592db6d5890f0561a560efaebdde50e78ffbf210dc6fce5704ef73982940eafdbea816d3a3e0b214e72817cbd0164e66ff85089fa377884eaeceede669c0a2d7ea45baa1ba69a6152ac19f70e1c1daf708ea55677980b2e2246541707dc013993c5bbce6bc1da91a5b41edbb441115c7932fa61860b1c7451b1d05ca2d77b61d51c5d34180ae5785df8fdc646c2d038d6b1f0973a2dfa096a7a758aad9a5ee07182c4bca9a50fc67d7b1196d58ceb7d8a625fe17924ad19df065895ac2edf8b581b16a5e2855bc151da945cace1c10d0fc8c953955e4d4a638a88f87240cdbc2662880589f96c12c830a70bed43738f2aa65e6d9c3058d06732854bdf62458c6e7c39e452bdb2782348088cdcf9c8385514a2332408b709bafb7244f7a8042bad0d91fe2d8478e601d219dad437d53bcdee146a093043f47762b3f58960860df76b062ee4963e47226d17a4a72e7beb367334acf8ded3afc731d643693a180239e326cb9604023bb36493a69e2855bbf9098f2629126d9479871d9936dca2e117e6a96bc5779d1c59e4a719b7fbfbb0c9998dd9c7f1de24ec1f2bd18d2c95a37b621fdc2ce774006adad1916ed7e029c09eba134f3e583811f586ad9716dd3228c8bcbb355497045860577b56a7443bfc961a6a00b476f2732510bfc537bdcd8310f832e8a1ab8d31be3d20641a3b6ccdda3537215571981e5998b31c6928fcf089e0175ade33544fc71b787b0c6da9abd98ca466240e2f4922848afa0f83311dbd0492e33b83117f0694b06f17890248f6af9c4dadea03c784ebf97f36ed94ef3c11d566063012a7e032e27b754afa4838329c7cee0ac4dffa8ee3b9f40a407d12e18c3de834ed05d62cc1204e489001f904349192e97289aa9d153bacd731a67b77ca643434bc06fa04db9a9bc312d9676fa3a33efc880947c20db5c2287a552443a880615331d006173aedaadb053221b9967437159747bff1d86e6f1074ee7c6d25d52acffeec2fd03aeea8725764222a43c751c9e9b629bcfa52d2091a575acb3374e52dd3ea70eb56819570947e73a8335fe2aa1608a649eabbc3faadef9296dedc311bef142fef6e3f08e6b35e506b5a3c08f7125ba85cc7a65b98c5c5c17f6f2ac2e5600ade7f306bbc1c93f9e7119af03086e69b07ff07f13cd3b064d0fc3895babfb2336e8fd83df3c5183a4daaae05bfd698442c2b1144c002b976811c85592e672e0ce8876bdc812d60541f450595f4f2efe9781b2369247af59e93f831b90a79eb45a385724c10e7a420bae680faa829ac1fbaf08e3b20a8ba7ddf965439e1851ff521ec6a3b31ad5fed8ad13b8653111a62a649807406ac15e858ec4f9a7673c8fbda658f00c42b0a7e7ea2963843be48860ac907179189893e0e8eefbb646e23cd5d4274f54e82d2b3e534922553091af2164278831639ebf69e50d41ad4e215f0da38b7c19becbb4ba9a5e51d35692de59add86841d3a0f7b1b0ca1afd30c5072b323b26fea97945ce02b7f24a0b458851a9d44672889a0a4f219f93b9cbeb7a4d82863212ca9a18a9a071d8e0752de0ccc22ac4266efb6a21b65058d3914265f5fa4a71db169ad92022683a9685eb1519072817a60b24a1d59b12941180571f67d288a3af326c3ec4d2f46dfa30e416f309d05a83aa4d6e1328f4c872abad08d519c6b03851bf1f3af7c124244a565198404a55f45712b71cf170e24bb4016f08f6869cfbc97ae0eec8d7de184e9fd7398f0a13bd8f5d186f54806cb6d00c5438be563a2dba362f1aeb1312eb8ec786b906af8361ec8d8f6f78db4f47884da20095030225e1b6b0caf34c40c306b29d4e1b3a627d20fdb37b9cf7b0fec34565db5d5cc2ff7759f32a55fd3f378bdc3792ead76857805efef27139f6552739ec970711fdad7bc07144c2678dbe6b2c75eeec3e3261cda98332178e44eaaf6660efc3a62b428194d070e76a10d854b6fcfbb274b02b5772f6e127250458ec8688fd0c1de3d97f3ac322ef3a259c7ffa079f5851ac60da48a93e886c5009f5642afff08daf86e52df248be1950c5ec2fefdb863e12b063e91731034d641aa73b24da1f0e1268ca6c64bb7d4ac0316ab2a8e0bb2d28d4ab23541061e46885b6f2ea0f90a3cb1227c168b6c7543aef51a1f7f331920844b9621428702eb12b3d7e29957faa629e47eb662c73314070593e781698ac436cf7403c4f8ffcf3b7ff966043a70b46a52dc8d59d94f08bece35ba6026bded5eb881b3adc1951a38629b8a20bca2a3c4084ab9d423ba38f26f6c66b40ce9f43513c3b3a56421404cbefba2a196a5847f13d72542d807961ab7d7db01eb83be80ef38956913af25751ad5bd22f26e97369a4ad30f9a9196f0fae74e822d142806c737989e4b272f3e187ea479a159a64770ae2f249b0514cc527d630ed2ab4a40e724f5fb89906ece2085225ea15f809395b3d1949993dd3f9f5bc443bf226b41d9d7c41ffde015c50988a1a8b795edc6b40d9f82714dfeea969cdf5e3dfeb37756f95d481ab8fc6d69c5a7711c9f1da59f3c89d0be9a4430b819f1679efd5aec9b0fef8579d657d0471c8376e9d35981cd7d82f05176e153247c6cfef4dbab8c60246283a2e01b75be937845458a60c8021a72615ff3c4d224da071a8bb4d8c28de041b062d7aeb177498c70043c0b53517fcf63da292e70b8e8d084553dcc568fee0edf125417824e0d3491d6b8b2b6f68e6b3bc8e6a2", 0x1000}, {&(0x7f0000001b00)="4eebd068f3103b8939fa223af7e86499b1bef44cef00c3cf4be4c4c40315f1dfdc923c8580c32109e2509d7f53bfc3b98b5f4935607359352b03712b9ef3198f54dd86ed62360ac422e306e9d96c0707eb94049d6002358509f2139f3adcc4a901972dd25cfa6b3ea08808374d9d40d84cde6717f621ca361de829b0c45a3068c360d4feca23e430af990595dbefa36b6692577f24e692615ba75a26d96e7b72ab8f28bc61a33303bf890f97fe3cc3531c6509318dce0876b0cef8e58f1090de13ac5f660eab5f235cfa644b0677a907745e1531debd40434309e376de", 0xdd}, {&(0x7f0000001c00)="caf6fac972dac75543c863aa64ad6a1eec0af509a71f331d48e82f1a12e5b7096e5b4fc4166a37aa3c2cd1e21e043abdfe0a8d742dfb5af45e5cb45b2c6654cb4ebda8e88203c37774b0060511c11194817337c105939a474bba57339a0b", 0x5e}, {&(0x7f0000001c80)}], 0x4, &(0x7f0000001d00)={0xe8, 0x3a, 0x9b7, "b2464c1d23fd81ddd3bc759dd9d454558a18a92da4273acd24551a42de525b6823a3f0d419cca99a633c8d1d03a01aa3e71f8ab258de46bf31a779987ee5e052c665bf559160d6b6c5492de2d47a4a67ae25b4c2c1fdbd568058886febe2f61d1a6325158315b1d38531d60d8195d9a2b25a63bda8e3c766bfcb87f553f8d63750304b7c0cade8e8f31b94a87bbe909a6e125c6f1d79cc30c9bddf3b4726d0c9d4b4ca544a40584a46953f44fe892ad61de0e5a096084395a0ebc84a90d179304fb4e5af8c1885a90b9b1f95b543df41d88abf6636ba"}, 0xe8, 0x8000}, 0x24000880) shutdown(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002200)={r0, 0xe0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000002000)=[{}, {}], 0x10, 0x10, &(0x7f0000002040), &(0x7f0000002080), 0x8, 0x80, 0x8, 0x8, &(0x7f00000020c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000022c0)={'sit0\x00', &(0x7f0000002240)={'gre0\x00', 0x0, 0x7800, 0x40, 0x4, 0x4, {{0x13, 0x4, 0x1, 0x3d, 0x4c, 0x68, 0x0, 0x2, 0x2d, 0x0, @remote, @loopback, {[@cipso={0x86, 0x1b, 0x0, [{0x6, 0x2}, {0x6, 0x7, "15a718b09b"}, {0x1, 0x3, "8e"}, {0x2, 0x9, "440acbca382432"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x2, [{@multicast2, 0x7}]}, @ssrr={0x89, 0xb, 0xee, [@loopback, @private=0xa010102]}, @end]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002300)={@private, @local, 0x0}, &(0x7f0000002340)=0xc) getsockname$packet(r0, &(0x7f0000002380)={0x11, 0x0, 0x0}, &(0x7f00000023c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000002640)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) connect$unix(r5, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 45.905142291s ago: executing program 36 (id=3701): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) connect$netlink(r0, &(0x7f0000000080)=@unspec, 0xc) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x2, 0x5, 0x3}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffff9, 0x401, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[r0, r0, r0, r0], 0x4) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000180)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x32, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x5, 0x2, 0x1, 0xc}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xb}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}, @ldst={0x3, 0x0, 0x6, 0x4, 0x0, 0xffffffffffffffe0, 0x16}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x4}, @map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x90000000}, @exit, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0x47c7e539, 0xec, &(0x7f00000003c0)=""/236, 0x40f00, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000004c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x8, 0x1, 0x400}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000540)=[r0], &(0x7f0000000580)=[{0x3, 0x4, 0x3, 0x4}, {0x4, 0x2, 0x0, 0x7}, {0x3, 0x1, 0x2, 0x1}, {0x1, 0x1, 0xf, 0x9}], 0x10, 0x8000}, 0x94) sendto$inet6(r0, &(0x7f0000000680)="7ea084034eb6afbdc43d4e6f986b73f0dd", 0x11, 0x890, &(0x7f00000006c0)={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x27}, 0x400}, 0x1c) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000740)={0x4, &(0x7f0000000700)=[{0x0, 0x10, 0x9, 0x6}, {0xe, 0x4, 0xfa, 0x9}, {0x0, 0x0, 0x4b, 0x2}, {0x6, 0x2, 0x2, 0x5}]}) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f0000000780)) sendmsg$L2TP_CMD_SESSION_CREATE(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0xc997, &(0x7f00000008c0)=0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000900)={0xfffffff4, 0xea, 0x4, 0x10000, 0x3}) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000940), &(0x7f0000000980)=0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000009c0)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000a00)={r1, r3}, 0xc) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000a40)=0x0) sendmsg$nfc_llcp(r0, &(0x7f0000001e00)={&(0x7f0000000a80)={0x27, r4, 0xffffffffffffffff, 0x7, 0x4, 0x4, "44132bba85bad26a348c146156b18f1d959f6c88f098762aeba3f89e1abf072964475f9e6e047325d276c37238c08c5d99af0283d53a592735c8b970a72458", 0x27}, 0x60, &(0x7f0000001cc0)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000001b00)="4eebd068f3103b8939fa223af7e86499b1bef44cef00c3cf4be4c4c40315f1dfdc923c8580c32109e2509d7f53bfc3b98b5f4935607359352b03712b9ef3198f54dd86ed62360ac422e306e9d96c0707eb94049d6002358509f2139f3adcc4a901972dd25cfa6b3ea08808374d9d40d84cde6717f621ca361de829b0c45a3068c360d4feca23e430af990595dbefa36b6692577f24e692615ba75a26d96e7b72ab8f28bc61a33303bf890f97fe3cc3531c6509318dce0876b0cef8e58f1090de13ac5f660eab5f235cfa644b0677a907745e1531debd40434309e376de", 0xdd}, {&(0x7f0000001c00)="caf6fac972dac75543c863aa64ad6a1eec0af509a71f331d48e82f1a12e5b7096e5b4fc4166a37aa3c2cd1e21e043abdfe0a8d742dfb5af45e5cb45b2c6654cb4ebda8e88203c37774b0060511c11194817337c105939a474bba57339a0b", 0x5e}, {&(0x7f0000001c80)}], 0x4, &(0x7f0000001d00)={0xe8, 0x3a, 0x9b7, "b2464c1d23fd81ddd3bc759dd9d454558a18a92da4273acd24551a42de525b6823a3f0d419cca99a633c8d1d03a01aa3e71f8ab258de46bf31a779987ee5e052c665bf559160d6b6c5492de2d47a4a67ae25b4c2c1fdbd568058886febe2f61d1a6325158315b1d38531d60d8195d9a2b25a63bda8e3c766bfcb87f553f8d63750304b7c0cade8e8f31b94a87bbe909a6e125c6f1d79cc30c9bddf3b4726d0c9d4b4ca544a40584a46953f44fe892ad61de0e5a096084395a0ebc84a90d179304fb4e5af8c1885a90b9b1f95b543df41d88abf6636ba"}, 0xe8, 0x8000}, 0x24000880) shutdown(r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000001e40)={{0x1, 0x1, 0x18, r2, {0x9}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001ec0)=0x0, &(0x7f0000001f00)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002200)={r0, 0xe0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001f40)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9, &(0x7f0000001f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb9, &(0x7f0000002000)=[{}, {}], 0x10, 0x10, &(0x7f0000002040), &(0x7f0000002080), 0x8, 0x80, 0x8, 0x8, &(0x7f00000020c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000022c0)={'sit0\x00', &(0x7f0000002240)={'gre0\x00', 0x0, 0x7800, 0x40, 0x4, 0x4, {{0x13, 0x4, 0x1, 0x3d, 0x4c, 0x68, 0x0, 0x2, 0x2d, 0x0, @remote, @loopback, {[@cipso={0x86, 0x1b, 0x0, [{0x6, 0x2}, {0x6, 0x7, "15a718b09b"}, {0x1, 0x3, "8e"}, {0x2, 0x9, "440acbca382432"}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xab, 0x3, 0x2, [{@multicast2, 0x7}]}, @ssrr={0x89, 0xb, 0xee, [@loopback, @private=0xa010102]}, @end]}}}}}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000002300)={@private, @local, 0x0}, &(0x7f0000002340)=0xc) getsockname$packet(r0, &(0x7f0000002380)={0x11, 0x0, 0x0}, &(0x7f00000023c0)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000002640)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002600)={&(0x7f0000002400)={0x1f8, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) connect$unix(r5, &(0x7f0000002680)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 3.763736884s ago: executing program 7 (id=4091): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x6}, 0x1002, 0x0, 0x0, 0x5, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0x3, 0xffffffffffffffff, 0xa) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@initdev, @in6=@empty}}, {{@in=@broadcast}, 0x0, @in=@initdev}}, &(0x7f0000000440)=0xe8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f0000000180)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x548, &(0x7f00000011c0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 2.794498624s ago: executing program 7 (id=4095): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000280)={&(0x7f0000000100)="08789edb", 0x4}, 0x1, 0x0, 0x0, 0xc040}, 0x4040000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}]}, 0x50}, 0x1, 0xba01}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x8, [@union={0x3, 0x3, 0x0, 0x5, 0x0, 0x1, [{0xc, 0x0, 0x8000}, {0x3, 0x0, 0x6}, {0x3, 0x2, 0x1}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x2e, 0x2e, 0x61, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000200)=""/67, 0x5c, 0x43, 0x1, 0x800}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x7, 0x0}, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{0x1, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f00000004c0)}, 0x20) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$BTRFS_IOC_FS_INFO(r9, 0x8400941f, &(0x7f0000000580)) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)=@generic={&(0x7f0000000540)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xb, &(0x7f0000000040)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x36ca00}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x98, 0x22, &(0x7f0000000140)=""/34, 0x41000, 0xc, '\x00', r2, @cgroup_sock_addr=0xa, r3, 0x8, &(0x7f0000000340)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0x10, 0xd, 0x2}, 0x10, r4, r5, 0x1, &(0x7f00000005c0)=[r7, r8, 0x1, r9, r10], &(0x7f0000000600)=[{0x5, 0x4, 0xe, 0x5}], 0x10, 0x7f}, 0x94) 2.418215846s ago: executing program 1 (id=4098): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020100000800000049000003000000850000002c0000009500000000000000ee34f4f0fee0e25db8bda37b67139942aa69e8790100000077c15af9146b43253374cd90eedcd7f396f8cc0be47cc74c7f46ba6d292ff6e5f7ae802d813b463f68944c4295207a9898726298822348cb7c2da607cfa5fea2812eaeefa7fcf48400ca0ec5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffdea, 0x0, &(0x7f0000000bc0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) 2.403736226s ago: executing program 7 (id=4099): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20004090) r1 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001980)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="3f00000000000000400012800b0001006272696467650000300002800c002e000300000003000000050007000800040008001a00ff0700000500070000000000050026"], 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="d80000001c0081030081f782db44b904021d080201000000040000a118000c000600141a62600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x4004000) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0xfe33) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x40, &(0x7f00000000c0), 0xff, 0x4df, &(0x7f0000010a80)="$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") fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000140)=@nullb, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbee, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0x872}]}}}, @IFLA_LINK={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20020841}, 0x8000) 2.299488359s ago: executing program 4 (id=4101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000140001000000000000080000e00000020000000000000000000000000000000000000000000000000000000000000800100000000a00a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000005000000000000000000000000000f0001000000f6ffffff05000000000000000000000000000000feffffffffffffff00000000bc6b6e000000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x48820}, 0x24044084) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r7, 0x701, 0x0, 0xffffffff, {0x41}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readv(r9, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/64, 0x40}], 0x1) writev(r10, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003380)=@flushpolicy={0x21cc, 0x1d, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@mark={0xc, 0x15, {0x35075d, 0x6c}}, @tmpl={0x104, 0x5, [{{@in6=@empty, 0x4d5, 0x2b}, 0xa, @in=@remote, 0x0, 0x1, 0x3, 0x0, 0xfff, 0x4, 0x7}, {{@in=@rand_addr=0x64010100, 0x4d2, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3505, 0x1, 0x0, 0xa, 0x8, 0x659, 0x2}, {{@in6=@empty, 0x4d3, 0x33}, 0x2, @in=@local, 0x34ff, 0x4, 0x3, 0xfa, 0x3, 0x90, 0x2}, {{@in6=@private2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3504, 0x2, 0x0, 0x2c, 0x7, 0x5, 0xde}]}, @policy_type={0xa, 0x10, {0x1}}, @policy_type={0xa, 0x10, {0x4d6805a72ef023f1}}, @algo_aead={0x104c, 0x12, {{'rfc4106(rfc4106-gcm-aesni)\x00'}, 0x8000, 0xc0, "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"}}, @algo_auth={0x1048, 0x1, {{'sha384-generic\x00'}, 0x8000, "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"}}]}, 0x21cc}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000400)={'gre0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x18, 0x10, 0x800, 0x2, {{0x6, 0x4, 0x3, 0x15, 0x18, 0x64, 0x0, 0xe, 0x2f, 0x0, @local, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0xf0, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xfffffffffffffffe, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}}, 0xf0}}, 0x844) 2.27399007s ago: executing program 1 (id=4102): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.915383721s ago: executing program 1 (id=4103): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x300000, 0x0, 0x0, 0x15, 0x103, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000bc0), 0x6000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000780)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x800) statx(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x6000, 0x20, &(0x7f0000000ac0)) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='$\xad\xe4\\)\xc6\n\x00\x00\x00\x00\x00\x00/r\xfa\xc3\xd7\xff\x0f\xf8\b\x16+g\xcc\xe1\xabs\f\x98v\x98\xd0V\xd0\xf7h\xb9\xf1\xa6\xd9l \xd8\xea\xd7\x8a]k\xb5\xfd(\xa3\xc22MF') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0xa200, 0x0) fcntl$lock(r3, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000003c0)}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 1.846940953s ago: executing program 1 (id=4104): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x3, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x7, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x1, 0xfdfdfffe, 0x7}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000000), 0xb97a, r3}, 0x38) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@map, 0xffffffffffffffff, 0x25, 0x2}, 0x20) syz_genetlink_get_family_id$batadv(0x0, r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x16c5, r6}, 0x38) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040015}, 0x4) preadv(r1, 0x0, 0x0, 0x3, 0x6) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0xb93b3000) ioctl$NS_GET_PARENT(r8, 0xb702, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r5, r4}, 0xc) r9 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x88282, 0x0) write$vga_arbiter(r9, &(0x7f00000000c0)=ANY=[@ANYBLOB='trylock C'], 0x14) ioctl$NILFS_IOCTL_GET_CPINFO(r9, 0x80186e82, &(0x7f0000000340)={&(0x7f00000002c0)=[{0x0, 0x0, 0x6, 0x9, 0xb, 0x6, 0x2fe}, {0x3, 0x0, 0x467, 0x5b88, 0x5df, 0x5, 0x8, 0x3bc9b434}], 0x2, 0x38, 0x0, 0xffffffff}) fcntl$lock(r5, 0x26, 0x0) preadv(r4, &(0x7f0000000100)=[{&(0x7f0000002140)=""/4089, 0xff9}], 0x1, 0x10145, 0x4) 1.62369916s ago: executing program 8 (id=4105): sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x8014) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffd) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4000) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, 0xffffffffffffffff, 0x9dff7ffc}}, 0x4d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 1.62339573s ago: executing program 7 (id=4106): unshare(0x24020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x31, 0x1, 0xffffffffffffffff, @void, @value=r3, @void, @void, r2}, 0x20) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @dev}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex=r4, 0xffffffffffffffff, 0x7, 0x8, 0x0, @void, @value, @void, @void, r2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value, @void, @void, r2}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}}, 0x20004800) unshare(0x24020400) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) (async) fsmount(0xffffffffffffffff, 0x0, 0x0) (async) openat$cgroup_procs(r3, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x31, 0x1, 0xffffffffffffffff, @void, @value=r3, @void, @void, r2}, 0x20) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @private, @dev}, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@ifindex=r4, 0xffffffffffffffff, 0x7, 0x8, 0x0, @void, @value, @void, @void, r2}, 0x20) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r0, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value, @void, @void, r2}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x7}}, 0x14}}, 0x20004800) (async) 1.535187163s ago: executing program 8 (id=4107): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f0000000740)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, 'Z\vB', 0x2c, 0x6, 0x0, @empty, @mcast1, {[], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x3}, 0x1, 0x4}, 0x1}}}}}}}, 0x54) (fail_nth: 12) 1.491188584s ago: executing program 8 (id=4108): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_create1(0x80000) socketpair$unix(0x1, 0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000580)=@file={0x0, './file0\x00'}, 0x6e) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x40813) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, 0x0}, 0x3e8) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.355236509s ago: executing program 7 (id=4110): io_uring_setup(0x5af5, &(0x7f0000000580)={0x0, 0xffffffff, 0x40, 0x2000000, 0xffffffff}) r0 = syz_io_uring_setup(0x5284, &(0x7f0000000100)={0x0, 0xfffffff8, 0x40, 0xfffffffd, 0x5}, &(0x7f00000003c0), &(0x7f0000000000), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f00000010c0)={0x6}, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$evdev(0x0, 0xfffffffffffffffc, 0x822b01) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x80000000000006}, 0x0, 0x5bd20da1, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x20c2, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f00000012c0)={&(0x7f0000001280)={&(0x7f0000001180)="f9319c4185f3e924e2a28b2dbe7f9105e437f7979f374d2dfb241eb508c10d7471b9c73eba764e9edb4dbd7b392d96aceadc425909ddf333b8921d2303fd2c4d6cc3ef6912da547bc71f9fcca602a427d2d5e5b6c45b9cff740bba02ce5e112e5218726ae818335580252cde9f9ed1eb4050f001b26c5399b0ed630f0f4061e84c4df1886642bf40c5bd9e6d73ef7b880d22f8aa8c61b697a593eee2aa78f025e33eb2177869ce05c0bf4cbb1aaaacf0bfc27d81a85ae40391a7e5f3bd913b05e3c0fb2338173914aab5e515f4230cd1de454393297ec37c48774250dffa32d9", 0xe0, 0x0, 0x5, 0x9}, 0x1}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x803e0000, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mq_open(&(0x7f0000000040)=']\x00', 0xdd326361bc84707c, 0x4, 0x0) unlinkat(0xffffffffffffffff, &(0x7f0000001080)='./file0\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000050) unshare(0x600) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0x2, &(0x7f00000007c0)=0x2, 0x4) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], &(0x7f00000005c0), 0x1}, 0x20) 1.350760598s ago: executing program 1 (id=4111): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020100000800000049000003000000850000002c0000009500000000000000ee34f4f0fee0e25db8bda37b67139942aa69e8790100000077c15af9146b43253374cd90eedcd7f396f8cc0be47cc74c7f46ba6d292ff6e5f7ae802d813b463f68944c4295207a9898726298822348cb7c2da607cfa5fea2812eaeefa7fcf48400ca0ec5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffdea, 0x0, &(0x7f0000000bc0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000740)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) unshare(0x60000600) open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) 1.154657255s ago: executing program 4 (id=4112): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020100000800000049000003000000850000002c0000009500000000000000ee34f4f0fee0e25db8bda37b67139942aa69e8790100000077c15af9146b43253374cd90eedcd7f396f8cc0be47cc74c7f46ba6d292ff6e5f7ae802d813b463f68944c4295207a9898726298822348cb7c2da607cfa5fea2812eaeefa7fcf48400ca0ec5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffdea, 0x0, &(0x7f0000000bc0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f00000005c0)={0x0, "3ff4057cbe5924464c439b8f826f00a0b3ab198e40a55462c05d329ad8430d9611dc0ff693dd1367edfa74cf2a6da5f4d68b3cfb2979dc95ee34f9c3da5707ae", 0x34}, 0x48, 0xffffffffffffffff) open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) 1.057909828s ago: executing program 4 (id=4113): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r6, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 761.109407ms ago: executing program 9 (id=4114): perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x300000, 0x0, 0x0, 0x15, 0x103, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000bc0), 0x6000) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000780)) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00), 0x800) statx(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x6000, 0x20, &(0x7f0000000ac0)) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='$\xad\xe4\\)\xc6\n\x00\x00\x00\x00\x00\x00/r\xfa\xc3\xd7\xff\x0f\xf8\b\x16+g\xcc\xe1\xabs\f\x98v\x98\xd0V\xd0\xf7h\xb9\xf1\xa6\xd9l \xd8\xea\xd7\x8a]k\xb5\xfd(\xa3\xc22MF') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x6, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) socket(0x10, 0x3, 0x0) setregid(0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x11, 0x2}) r3 = openat$vcs(0xffffffffffffff9c, 0x0, 0xa200, 0x0) fcntl$lock(r3, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='mounts\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f00000003c0)}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) 760.039887ms ago: executing program 4 (id=4115): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) (fail_nth: 2) 578.858252ms ago: executing program 8 (id=4116): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f0000000100)=""/218, &(0x7f0000000040)=0xda) 577.820013ms ago: executing program 9 (id=4117): sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)}, 0x8014) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0xfffffffffffffffd) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40044}, 0x4000) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4f24, 0x40000, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x2, 0xfff9, 0xc60, @empty, 0x100}, 0xffffffffffffffff, 0x9dff7ffc}}, 0x4d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x0) 431.555977ms ago: executing program 4 (id=4118): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/notes', 0x149a82, 0x0) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYRES16, @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x24000884}, 0x8000) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r11, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r12], 0x5c}}, 0x40) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@getnexthop={0x20, 0x76, 0xb0d, 0x20, 0x25dfdbff, {0x3}, [@NHA_ID={0x8, 0x1, 0x7ffffffe}]}, 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x80) (async) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x884) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000480)={0x7, &(0x7f0000000400)=[{0x3, 0x2, 0x5, 0x1}, {0x4, 0x8, 0x80}, {0x4, 0x7, 0xbe, 0x8}, {0x1ff, 0x10, 0x4, 0x9}, {0x5, 0x9, 0x7f, 0x9}, {0x0, 0x6, 0x8, 0x4}, {0x7, 0x4, 0xf, 0xf}]}) 431.325567ms ago: executing program 8 (id=4119): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0xa14000, &(0x7f0000000080)={[{@journal_checksum}, {@debug}, {@data_ordered}, {@inlinecrypt}]}, 0x0, 0xbac, &(0x7f00000017c0)="$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") r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='numa_maps\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0xbf}, 0x2000, 0x1, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r3) sendmsg$NFC_CMD_FW_DOWNLOAD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010024bd7000fddbdf2515000000150014002f6465762f7669727475616c5f6e6369000000000a0014007770616e2cba"], 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x8000) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x10220d, 0x8000000000000, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000002, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) execveat$binfmt(r1, 0x0, 0x0, &(0x7f0000005740)={[&(0x7f00000056c0)='\x00', &(0x7f0000005700)=':^\x00']}, 0x400) fchownat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1000) preadv(r1, &(0x7f0000000000), 0x0, 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, 0x0, 0x0) listen(r7, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) connect$unix(r8, 0x0, 0x0) fsmount(r0, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 170.580085ms ago: executing program 4 (id=4120): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x400, 0x40000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) poll(&(0x7f00000002c0)=[{r1, 0x10}], 0x1, 0x3ff) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/arp\x00') ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) removexattr(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"]) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x1}, 0x1000, 0x2, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x310) r6 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r6, &(0x7f00000000c0), 0x0, 0x115, 0xffffffff) recvmmsg(r4, &(0x7f0000000400), 0x0, 0x4c42bb4f92, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0xfffffffffffffeb0, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x4, 0x8}, 0x0, 0x1, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xaf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) shutdown(r4, 0x0) flock(r2, 0x8) accept4(r1, 0x0, 0x0, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f0000000140)={&(0x7f00000000c0)="29130670ad86440ebccb35b618d07ca83916c5cfa164a55c51867d5f45864237901e372122dbb7e988d1a746c184d73866", 0x31, &(0x7f0000000100)=""/17, 0x11}) r7 = perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x401, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) 124.343736ms ago: executing program 9 (id=4121): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) 88.203678ms ago: executing program 9 (id=4122): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x87}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x4}, 0x0, 0x40000000, 0x0, 0x1}}, 0xb8}}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="b8000000140001000000000004000000e000000200000000000000000000000000000000000000000000000000000000000000000fff00000a00200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00@'], 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x987a3a9f32358a4c) 60.826788ms ago: executing program 7 (id=4123): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020100000800000049000003000000850000002c0000009500000000000000ee34f4f0fee0e25db8bda37b67139942aa69e8790100000077c15af9146b43253374cd90eedcd7f396f8cc0be47cc74c7f46ba6d292ff6e5f7ae802d813b463f68944c4295207a9898726298822348cb7c2da607cfa5fea2812eaeefa7fcf48400ca0ec5"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffdea, 0x0, &(0x7f0000000bc0), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000010, &(0x7f0000000040)={[{@errors_remount}, {@debug}]}, 0x1, 0x51a, &(0x7f00000001c0)="$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") open(&(0x7f0000000040)='.\x00', 0x511082, 0x0) 59.552338ms ago: executing program 8 (id=4124): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) io_setup(0x400, &(0x7f0000000180)=0x0) r3 = eventfd2(0x1, 0x1) r4 = eventfd(0x6) r5 = eventfd2(0xff, 0x800) io_submit(r2, 0x3, &(0x7f0000000740)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x6, 0x3, r1, &(0x7f00000001c0)="7df77f13bec5fc8b", 0x8, 0x5, 0x0, 0x2, r3}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x6, 0x7ff, r1, &(0x7f00000005c0)="6d3f6531004e68166da91c6cb60bd9fce3b159786c0b5540ffe3df9e0daf6b908939d5ded8a92cbe86071ce199a57069a8ccf1b1ec5f49c2f3b22be3fc16423912e6d10b084a17b958205718fd226ee41d9aad6fdae243ce6bad1efc8cfbc4def17af2d390997249e472a81f5c85e7fe1a761c2820cc895f3d6a61f4cb73978ea214154039a1c88b5a199af26e143b70ca92", 0x92, 0x3ff, 0x0, 0x3, r4}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x8, 0x9, r1, &(0x7f00000006c0), 0x0, 0x5, 0x0, 0x7, r5}]) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) close(0x3) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) write$tun(r6, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r11, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)={0x2c, r10, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000010) 53.606569ms ago: executing program 9 (id=4125): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001000)=@newlink={0x3c, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xb881}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x2d}]}}}]}, 0x3c}, 0x1, 0x2000000, 0x0, 0x24008006}, 0x4040844) 1.06961ms ago: executing program 9 (id=4126): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x701, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000019c0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB, @ANYRES32=r6, @ANYBLOB="08000d00000000000c0006000200000002", @ANYRES32, @ANYBLOB="08000d000000000008000300", @ANYRES32=r7, @ANYBLOB="2515e9124e43092b4c2e93097e5da20d1c01db1e2d0c2107ac6f5909384ed24b5d52c3e0864b943342a7b468e641f105cce80960577532b3953fa60747ce4b26b3e71af0e47755681ffeada5fc6df8e01004f677c4a320037505ecd02e7e31218ddaea54e0aee523bef9837a4410f524c6af2a9a3bbb1aa45089c8d627"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000091) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0, 0x1400000000000000}, {0xffffffff, 0x0, 0x9, 0xa}]}) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r1) sendmsg$NET_DM_CMD_START(r1, &(0x7f0000004c00)={0x0, 0x0, &(0x7f0000004bc0)={&(0x7f0000004b80)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 1 (id=4127): r0 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x0, 0xec2bd, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x7, 0x800000000100}, 0x2402, 0x0, 0x43a1bd78, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffc46f}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xb) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) r5 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x80) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 674] R13: 00007f4c2d576038 R14: 00007f4c2d575fa0 R15: 00007fffb2e87a58 [ 539.645006][T17674] [ 539.833742][T17676] loop2: detected capacity change from 0 to 164 [ 540.033216][T17682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=17682 comm=syz.2.3545 [ 540.277991][T17696] usb usb5: usbfs: process 17696 (syz.7.3550) did not claim interface 0 before use [ 540.419337][ T4547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 540.429279][ T4547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.438803][ T4547] bond0 (unregistering): Released all slaves [ 540.449690][ T3019] 8021q: adding VLAN 0 to HW filter on device eth13 [ 540.490204][ T4547] hsr_slave_0: left promiscuous mode [ 540.496690][ T4547] hsr_slave_1: left promiscuous mode [ 540.507944][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.512966][ T28] audit: type=1400 audit(1779849882.218:3873): avc: denied { ioctl } for pid=17707 comm="syz.1.3552" path="/110/file0" dev="tmpfs" ino=592 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 540.539691][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.547185][T17711] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3553'. [ 540.559505][ T4547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 540.567264][ T4547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 540.578830][ T4547] veth1_macvtap: left promiscuous mode [ 540.587197][ T4547] veth0_macvtap: left promiscuous mode [ 540.592883][ T4547] veth1_vlan: left promiscuous mode [ 540.598202][ T4547] veth0_vlan: left promiscuous mode [ 540.693680][ T4547] team0 (unregistering): Port device team_slave_1 removed [ 540.703986][ T4547] team0 (unregistering): Port device team_slave_0 removed [ 540.772106][T17592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.785646][T17592] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.809663][ T3913] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.816787][ T3913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.827631][ T3913] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.834733][ T3913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.849879][T17592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 540.860490][T17592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.041519][T17592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.160048][ T28] audit: type=1400 audit(1779849882.868:3874): avc: denied { bind } for pid=17743 comm="syz.4.3557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 541.285111][T17764] loop4: detected capacity change from 0 to 256 [ 541.295052][ T28] audit: type=1400 audit(1779849883.008:3875): avc: denied { write } for pid=17741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.334931][T17592] veth0_vlan: entered promiscuous mode [ 541.347933][ T4547] IPVS: stop unused estimator thread 0... [ 541.353962][T17592] veth1_vlan: entered promiscuous mode [ 541.359725][ T28] audit: type=1400 audit(1779849883.068:3876): avc: denied { write } for pid=17767 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.396595][T17592] veth0_macvtap: entered promiscuous mode [ 541.415589][T17592] veth1_macvtap: entered promiscuous mode [ 541.500619][ T3019] 8021q: adding VLAN 0 to HW filter on device eth14 [ 541.518328][T17769] loop7: detected capacity change from 0 to 256 [ 541.546832][T17592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.557374][T17592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.580984][T17769] FAT-fs (loop7): codepage cp852 not found [ 541.771122][T17793] 9pnet_fd: p9_fd_create_unix (17793): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 541.779672][T17793] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 541.883525][ T28] audit: type=1400 audit(1779849883.488:3877): avc: denied { write } for pid=17774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.914298][ T28] audit: type=1400 audit(1779849883.608:3878): avc: denied { write } for pid=17801 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 541.963945][T17802] usb usb5: usbfs: process 17802 (syz.2.3564) did not claim interface 0 before use [ 541.974134][ T3019] 8021q: adding VLAN 0 to HW filter on device eth15 [ 542.012624][T17804] loop8: detected capacity change from 0 to 256 [ 542.151355][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3565'. [ 542.172200][T17809] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3565'. [ 542.330569][ T28] audit: type=1400 audit(1779849884.048:3879): avc: denied { write } for pid=17806 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.354992][T17823] loop7: detected capacity change from 0 to 512 [ 542.395147][T17823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.421021][T17823] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.426312][ T28] audit: type=1400 audit(1779849884.128:3880): avc: denied { write } for pid=17828 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 542.468022][ T3019] 8021q: adding VLAN 0 to HW filter on device eth16 [ 542.573000][ T28] audit: type=1400 audit(1779849884.288:3881): avc: denied { write } for pid=17822 comm="syz.7.3568" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.647240][ T28] audit: type=1400 audit(1779849884.328:3882): avc: denied { ioctl } for pid=17822 comm="syz.7.3568" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=49903 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 542.683641][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.095846][T17866] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3581'. [ 543.151556][T17871] usb usb5: usbfs: process 17871 (syz.4.3580) did not claim interface 0 before use [ 543.312561][T17877] loop2: detected capacity change from 0 to 256 [ 543.470270][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3590'. [ 545.028852][T17931] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3606'. [ 545.145400][T17929] loop4: detected capacity change from 0 to 512 [ 545.229808][T17929] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 545.255101][T17929] System zones: 0-2, 18-18, 34-34 [ 545.276954][T17929] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 545.322188][T17929] EXT4-fs (loop4): Remounting filesystem read-only [ 545.339024][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 545.345474][ C1] EXT4-fs (loop4): initial error at time 1779849887: ext4_mb_generate_buddy:1317 [ 545.354621][ C1] EXT4-fs (loop4): last error at time 1779849887: ext4_mb_generate_buddy:1317 [ 545.378905][T17929] EXT4-fs (loop4): 1 truncate cleaned up [ 545.389676][T17929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 545.402227][ T4547] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 545.426375][ T4547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 545.438556][T17929] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 545.459488][ T4547] Quota error (device loop4): write_blk: dquota write failed [ 545.484965][ T4547] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 545.515090][ T4547] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 545.535242][T17937] FAULT_INJECTION: forcing a failure. [ 545.535242][T17937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.556745][ T4547] Quota error (device loop4): write_blk: dquota write failed [ 545.574212][T17937] CPU: 1 UID: 0 PID: 17937 Comm: syz.1.3600 Not tainted syzkaller #0 PREEMPT(full) [ 545.574290][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.574302][T17937] Call Trace: [ 545.574308][T17937] [ 545.574314][T17937] __dump_stack+0x1d/0x30 [ 545.574353][T17937] dump_stack_lvl+0x95/0xd0 [ 545.574373][T17937] dump_stack+0x15/0x1b [ 545.574400][T17937] should_fail_ex+0x263/0x280 [ 545.574436][T17937] should_fail+0xb/0x20 [ 545.574594][T17937] should_fail_usercopy+0x1a/0x20 [ 545.574632][T17937] _copy_from_user+0x1c/0xb0 [ 545.574671][T17937] ___sys_sendmsg+0xc1/0x1e0 [ 545.574788][T17937] __x64_sys_sendmsg+0xd4/0x160 [ 545.574827][T17937] x64_sys_call+0x194c/0x3020 [ 545.574858][T17937] do_syscall_64+0x12c/0x3b0 [ 545.574898][T17937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.574994][T17937] RIP: 0033:0x7f4c2d2fce59 [ 545.575014][T17937] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.575032][T17937] RSP: 002b:00007f4c2bd57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.575105][T17937] RAX: ffffffffffffffda RBX: 00007f4c2d575fa0 RCX: 00007f4c2d2fce59 [ 545.575152][T17937] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000004 [ 545.575169][T17937] RBP: 00007f4c2bd57090 R08: 0000000000000000 R09: 0000000000000000 [ 545.575190][T17937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.575201][T17937] R13: 00007f4c2d576038 R14: 00007f4c2d575fa0 R15: 00007fffb2e87a58 [ 545.575249][T17937] [ 545.576314][ T4547] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 545.647641][T17940] usb usb5: usbfs: process 17940 (syz.8.3607) did not claim interface 0 before use [ 545.658027][ T28] audit: type=1400 audit(1779849887.318:3883): avc: denied { write } for pid=17928 comm="syz.4.3605" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.771427][ T4547] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 545.818565][T17945] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3609'. [ 545.946227][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.986064][T17943] loop2: detected capacity change from 0 to 512 [ 546.005755][T17943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 546.113978][T17943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 546.126477][T17943] ext4 filesystem being mounted at /98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.225637][T15350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 546.464531][T17975] loop8: detected capacity change from 0 to 256 [ 548.257562][T18001] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3624'. [ 548.644303][T18020] loop1: detected capacity change from 0 to 256 [ 548.785398][T18029] loop7: detected capacity change from 0 to 512 [ 548.810602][T18029] EXT4-fs: Ignoring removed bh option [ 548.823244][T18029] EXT4-fs: Ignoring removed mblk_io_submit option [ 548.850141][T18029] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 548.884646][T18029] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 548.910266][T18029] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 548.935603][T18029] System zones: 0-2, 18-18, 34-35 [ 548.951436][T18029] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.975858][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 548.975873][ T28] audit: type=1400 audit(1779849890.688:3891): avc: denied { write } for pid=18028 comm="syz.7.3622" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.131524][T18070] EXT4-fs error (device loop7): ext4_search_dir:1474: inode #12: block 32: comm syz.7.3622: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 549.186163][T18070] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3622: bg 0: block 353: padding at end of block bitmap is not set [ 549.300235][T18080] usb usb5: usbfs: process 18080 (syz.2.3628) did not claim interface 0 before use [ 549.562891][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.138873][T18099] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 550.195181][T18100] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 550.626270][T18100] loop2: detected capacity change from 0 to 256 [ 550.871327][T18110] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3635'. [ 551.881865][T18116] loop8: detected capacity change from 0 to 256 [ 552.040203][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3637'. [ 552.052253][T18125] tipc: Started in network mode [ 552.058185][T18125] tipc: Node identity 000000000000003a0040ffffe0000001, cluster identity 4711 [ 552.112082][T18125] tipc: Enabling of bearer rejected, failed to enable media [ 552.167272][T18125] loop2: detected capacity change from 0 to 512 [ 552.240508][T18125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.268128][T18125] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.299286][ T28] audit: type=1400 audit(1779849894.018:3892): avc: denied { write } for pid=18124 comm="syz.2.3641" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 552.326867][T18125] ext4: Unknown parameter 'TIPCv2' [ 552.657593][T18138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3645'. [ 552.668921][T18138] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3645'. [ 552.785242][T15350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.062773][ T28] audit: type=1400 audit(1779849894.778:3893): avc: denied { write } for pid=18152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 553.135143][ T28] audit: type=1400 audit(1779849894.848:3894): avc: denied { write } for pid=18168 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.266669][T18175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3653'. [ 554.279598][T18176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3653'. [ 554.342724][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3654'. [ 554.421052][T18180] SELinux: Context X öN 2Å/ÉP—ù/•é!³Ãß6éš †c‚±zÛgÁY±Õ°“¯¼u®F¶Wkëåv®›êM“”œ‚0 is not valid (left unmapped). [ 554.461758][T18180] SELinux: Context À‰d_O(?D•b^(µ‹Ê…"i´ÀQ„3c¼&ms´nO[6žBÜ~`¯¿n is not valid (left unmapped). [ 554.498605][T18180] SELinux: Context Y< [ 554.498605][T18180] ÔkŽ3â¡lkâúÌÿÂT‹D9ž¼ZK0IŸQÂóÑLz…geíw&GŸÏà%‚¯4Ž;ŶwŽM0Öå³XSè«ü”éÛsÎ`Qä¥þEÃ)\'z’8™äæ‚ is not valid (left unmapped). [ 554.549097][ T28] audit: type=1400 audit(1779849896.218:3895): avc: denied { write } for pid=18181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.582628][ T28] audit: type=1400 audit(1779849896.298:3896): avc: denied { write } for pid=18202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.624639][T18203] FAULT_INJECTION: forcing a failure. [ 554.624639][T18203] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.660054][T18203] CPU: 1 UID: 0 PID: 18203 Comm: syz.1.3658 Not tainted syzkaller #0 PREEMPT(full) [ 554.660089][T18203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 554.660152][T18203] Call Trace: [ 554.660158][T18203] [ 554.660165][T18203] __dump_stack+0x1d/0x30 [ 554.660191][T18203] dump_stack_lvl+0x95/0xd0 [ 554.660225][T18203] dump_stack+0x15/0x1b [ 554.660250][T18203] should_fail_ex+0x263/0x280 [ 554.660288][T18203] should_fail+0xb/0x20 [ 554.660406][T18203] should_fail_usercopy+0x1a/0x20 [ 554.660444][T18203] _copy_from_user+0x1c/0xb0 [ 554.660487][T18203] ___sys_sendmsg+0xc1/0x1e0 [ 554.660613][T18203] __x64_sys_sendmsg+0xd4/0x160 [ 554.660651][T18203] x64_sys_call+0x194c/0x3020 [ 554.660682][T18203] do_syscall_64+0x12c/0x3b0 [ 554.660724][T18203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.660752][T18203] RIP: 0033:0x7f4c2d2fce59 [ 554.660843][T18203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.660866][T18203] RSP: 002b:00007f4c2bd57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.660965][T18203] RAX: ffffffffffffffda RBX: 00007f4c2d575fa0 RCX: 00007f4c2d2fce59 [ 554.660979][T18203] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000005 [ 554.661051][T18203] RBP: 00007f4c2bd57090 R08: 0000000000000000 R09: 0000000000000000 [ 554.661069][T18203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.661085][T18203] R13: 00007f4c2d576038 R14: 00007f4c2d575fa0 R15: 00007fffb2e87a58 [ 554.661134][T18203] [ 554.891459][T18213] loop8: detected capacity change from 0 to 512 [ 554.899574][T18213] EXT4-fs: Ignoring removed bh option [ 554.922010][T18213] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 554.934845][T18216] loop1: detected capacity change from 0 to 128 [ 554.968140][T18213] EXT4-fs (loop8): 1 truncate cleaned up [ 554.974222][T18213] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.989929][ T28] audit: type=1400 audit(1779849896.618:3897): avc: denied { write } for pid=18212 comm="syz.8.3659" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 555.092369][T18227] loop2: detected capacity change from 0 to 256 [ 555.099984][ T28] audit: type=1400 audit(1779849896.728:3898): avc: denied { write } for pid=18206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.123058][ T28] audit: type=1400 audit(1779849896.778:3899): avc: denied { write } for pid=18223 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.445761][ T28] audit: type=1400 audit(1779849897.158:3900): avc: denied { write } for pid=18233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.516058][ T28] audit: type=1400 audit(1779849897.228:3901): avc: denied { write } for pid=18244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 555.655182][T18256] FAULT_INJECTION: forcing a failure. [ 555.655182][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 555.674763][T18256] CPU: 1 UID: 0 PID: 18256 Comm: syz.4.3665 Not tainted syzkaller #0 PREEMPT(full) [ 555.674793][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 555.674808][T18256] Call Trace: [ 555.674841][T18256] [ 555.674848][T18256] __dump_stack+0x1d/0x30 [ 555.674870][T18256] dump_stack_lvl+0x95/0xd0 [ 555.674892][T18256] dump_stack+0x15/0x1b [ 555.674913][T18256] should_fail_ex+0x263/0x280 [ 555.674978][T18256] should_fail+0xb/0x20 [ 555.675151][T18256] should_fail_usercopy+0x1a/0x20 [ 555.675182][T18256] _copy_from_user+0x1c/0xb0 [ 555.675210][T18256] ___sys_sendmsg+0xc1/0x1e0 [ 555.675274][T18256] __x64_sys_sendmsg+0xd4/0x160 [ 555.675301][T18256] x64_sys_call+0x194c/0x3020 [ 555.675326][T18256] do_syscall_64+0x12c/0x3b0 [ 555.675385][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.675405][T18256] RIP: 0033:0x7f2011abce59 [ 555.675418][T18256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 555.675437][T18256] RSP: 002b:00007f2010517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 555.675463][T18256] RAX: ffffffffffffffda RBX: 00007f2011d35fa0 RCX: 00007f2011abce59 [ 555.675475][T18256] RDX: 00000000400040c0 RSI: 0000200000000280 RDI: 0000000000000003 [ 555.675536][T18256] RBP: 00007f2010517090 R08: 0000000000000000 R09: 0000000000000000 [ 555.675548][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 555.675559][T18256] R13: 00007f2011d36038 R14: 00007f2011d35fa0 R15: 00007ffdba9f3a18 [ 555.675619][T18256] [ 555.890672][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.914432][T18261] loop1: detected capacity change from 0 to 512 [ 555.952307][T18261] EXT4-fs: Ignoring removed bh option [ 555.980491][T18261] EXT4-fs: Ignoring removed mblk_io_submit option [ 556.008415][T18261] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 556.027474][T18261] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 556.071607][T18261] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 556.090852][T18261] System zones: 0-2, 18-18, 34-35 [ 556.125758][T18261] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.145646][T18269] 9p: Bad value for 'rfdno' [ 556.196988][ T28] audit: type=1400 audit(1779849897.908:3902): avc: denied { write } for pid=18260 comm="syz.1.3668" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 556.301348][T18267] loop4: detected capacity change from 0 to 512 [ 556.342104][T18267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 556.353181][T18261] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #12: block 32: comm syz.1.3668: bad entry in directory: directory entry overrun - offset=24, inode=13, rec_len=2320, size=2048 fake=0 [ 556.374656][T18261] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3668: bg 0: block 353: padding at end of block bitmap is not set [ 556.412550][T18267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 556.441081][T18267] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.456752][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.531406][T18288] loop7: detected capacity change from 0 to 256 [ 556.685442][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 556.699424][ T28] audit: type=1400 audit(1779849898.408:3903): avc: denied { unmount } for pid=15350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 556.722759][T18290] loop1: detected capacity change from 0 to 2048 [ 556.806493][T18290] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.910637][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.954287][T18315] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3681'. [ 556.982859][T18317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3680'. [ 557.302160][ T28] audit: type=1400 audit(1779849899.018:3904): avc: denied { connect } for pid=18309 comm="syz.4.3678" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 557.544031][T18326] loop1: detected capacity change from 0 to 4096 [ 557.662218][T18326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.883804][T18336] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3685'. [ 558.454595][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.571760][T18341] syzkaller0: entered promiscuous mode [ 558.585620][T18342] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3687'. [ 558.592364][T18341] syzkaller0: entered allmulticast mode [ 558.959536][T18347] syzkaller0: entered promiscuous mode [ 558.982390][T18347] syzkaller0: entered allmulticast mode [ 559.097339][T18362] loop8: detected capacity change from 0 to 256 [ 559.127742][T18364] loop1: detected capacity change from 0 to 128 [ 559.142331][T18364] FAT-fs (loop1): Directory bread(block 524322) failed [ 559.151125][T18364] FAT-fs (loop1): Directory bread(block 524323) failed [ 559.159697][T18364] FAT-fs (loop1): Directory bread(block 524324) failed [ 559.166886][T18364] FAT-fs (loop1): Directory bread(block 524325) failed [ 559.173923][T18364] FAT-fs (loop1): Directory bread(block 524326) failed [ 559.180960][T18364] FAT-fs (loop1): Directory bread(block 524327) failed [ 559.187856][T18364] FAT-fs (loop1): Directory bread(block 524328) failed [ 559.195302][T18364] FAT-fs (loop1): Directory bread(block 524329) failed [ 559.294586][T18371] tipc: Started in network mode [ 559.300113][T18371] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 559.309320][T18371] tipc: Enabling of bearer rejected, failed to enable media [ 559.640605][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 559.640620][ T28] audit: type=1326 audit(1779849901.328:3911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.1.3705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2d2fce59 code=0x7ffc0000 [ 559.728621][ T28] audit: type=1326 audit(1779849901.328:3912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.1.3705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4c2d2fce59 code=0x7ffc0000 [ 559.754354][ T28] audit: type=1326 audit(1779849901.328:3913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.1.3705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2d2fce59 code=0x7ffc0000 [ 559.780181][ T28] audit: type=1326 audit(1779849901.328:3914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18386 comm="syz.1.3705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2d2fce59 code=0x7ffc0000 [ 560.051746][ T28] audit: type=1400 audit(1779849901.768:3915): avc: denied { connect } for pid=18408 comm="syz.4.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 560.087101][ T28] audit: type=1400 audit(1779849901.768:3916): avc: denied { bind } for pid=18408 comm="syz.4.3712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 560.124621][T18417] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3713'. [ 560.311756][T18429] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3716'. [ 560.751559][ T28] audit: type=1400 audit(1779849902.458:3917): avc: denied { write } for pid=18406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 560.823146][ T28] audit: type=1326 audit(1779849902.518:3918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18436 comm="syz.7.3717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aa1ace59 code=0x7ffc0000 [ 560.849081][ T28] audit: type=1326 audit(1779849902.518:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18436 comm="syz.7.3717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aa1ace59 code=0x7ffc0000 [ 560.874912][ T28] audit: type=1326 audit(1779849902.518:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18436 comm="syz.7.3717" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3aa1ace59 code=0x7ffc0000 [ 561.117269][T18463] usb usb5: usbfs: process 18463 (syz.7.3719) did not claim interface 0 before use [ 561.224385][T18468] loop1: detected capacity change from 0 to 256 [ 562.367367][T18480] loop8: detected capacity change from 0 to 512 [ 562.412752][T18480] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 562.589735][T18480] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 562.626383][T18480] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.078345][T18495] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3728'. [ 563.287647][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 563.499453][T18501] FAULT_INJECTION: forcing a failure. [ 563.499453][T18501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 563.512744][T18501] CPU: 1 UID: 0 PID: 18501 Comm: syz.8.3730 Not tainted syzkaller #0 PREEMPT(full) [ 563.512790][T18501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 563.512804][T18501] Call Trace: [ 563.512811][T18501] [ 563.512820][T18501] __dump_stack+0x1d/0x30 [ 563.512851][T18501] dump_stack_lvl+0x95/0xd0 [ 563.512879][T18501] dump_stack+0x15/0x1b [ 563.512964][T18501] should_fail_ex+0x263/0x280 [ 563.513060][T18501] should_fail+0xb/0x20 [ 563.513099][T18501] should_fail_usercopy+0x1a/0x20 [ 563.513171][T18501] _copy_to_user+0x20/0xa0 [ 563.513251][T18501] simple_read_from_buffer+0xb5/0x130 [ 563.513289][T18501] proc_fail_nth_read+0x10e/0x150 [ 563.513345][T18501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 563.513419][T18501] vfs_read+0x1ab/0x7f0 [ 563.513450][T18501] ? __rcu_read_unlock+0x4e/0x70 [ 563.513471][T18501] ? __fget_files+0x184/0x1c0 [ 563.513497][T18501] ? mutex_lock+0x57/0x90 [ 563.513592][T18501] ksys_read+0xdc/0x1a0 [ 563.513630][T18501] __x64_sys_read+0x40/0x50 [ 563.513729][T18501] x64_sys_call+0x2886/0x3020 [ 563.513766][T18501] do_syscall_64+0x12c/0x3b0 [ 563.513815][T18501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.513917][T18501] RIP: 0033:0x7f30260ed68e [ 563.513962][T18501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 563.513979][T18501] RSP: 002b:00007f3024b86fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 563.514003][T18501] RAX: ffffffffffffffda RBX: 00007f3024b876c0 RCX: 00007f30260ed68e [ 563.514024][T18501] RDX: 000000000000000f RSI: 00007f3024b870a0 RDI: 0000000000000003 [ 563.514036][T18501] RBP: 00007f3024b87090 R08: 0000000000000000 R09: 0000000000000000 [ 563.514052][T18501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 563.514071][T18501] R13: 00007f30263a6038 R14: 00007f30263a5fa0 R15: 00007fff0f74ec58 [ 563.514115][T18501] [ 564.074816][T18509] loop8: detected capacity change from 0 to 4096 [ 564.121284][T18509] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.533700][T18523] loop7: detected capacity change from 0 to 256 [ 564.957404][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.232946][T18530] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3740'. [ 565.498739][T18543] loop8: detected capacity change from 0 to 256 [ 566.476587][T18557] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3749'. [ 566.589339][T18561] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3752'. [ 566.604934][T18557] loop8: detected capacity change from 0 to 8192 [ 566.622413][T18563] loop1: detected capacity change from 0 to 4096 [ 566.778633][T18563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.796685][ T28] kauditd_printk_skb: 112 callbacks suppressed [ 566.796700][ T28] audit: type=1400 audit(1779849908.488:4033): avc: denied { write } for pid=18562 comm="syz.1.3751" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 566.896036][T18574] loop4: detected capacity change from 0 to 512 [ 566.921394][T18574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 566.934157][T18574] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 566.945854][ T28] audit: type=1400 audit(1779849908.658:4034): avc: denied { write } for pid=18573 comm="syz.4.3755" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.046965][ T28] audit: type=1326 audit(1779849908.758:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18573 comm="syz.4.3755" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x0 [ 567.475431][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.739759][T18587] loop7: detected capacity change from 0 to 512 [ 567.758964][T18587] EXT4-fs: inline encryption not supported [ 567.766249][T18587] EXT4-fs: inline encryption not supported [ 567.776938][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.777012][T18587] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 567.821640][T18587] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 567.858013][T18587] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3758: bg 0: block 248: padding at end of block bitmap is not set [ 567.911300][T18587] loop7: lost filesystem error report for type 5 error -117 [ 567.911682][T18587] Quota error (device loop7): write_blk: dquota write failed [ 567.919066][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 567.919086][ C0] EXT4-fs (loop7): last error at time 1779849909: ext4_validate_block_bitmap:441 [ 567.980123][T18587] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 568.011527][T18587] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.3758: Failed to acquire dquot type 1 [ 568.053318][T18587] loop7: lost filesystem error report for type 5 error -28 [ 568.054089][T18587] EXT4-fs (loop7): 1 truncate cleaned up [ 568.095504][T18587] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 568.228731][T18587] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0008-000000000000 ro. [ 568.484130][ T4538] tipc: Subscription rejected, illegal request [ 568.567363][T18633] loop8: detected capacity change from 0 to 256 [ 570.657511][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 570.771948][ T28] audit: type=1326 audit(1779849912.488:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.4.3766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x7ffc0000 [ 570.851879][ T28] audit: type=1326 audit(1779849912.488:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.4.3766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x7ffc0000 [ 570.909547][T18725] loop7: detected capacity change from 0 to 4096 [ 570.921864][ T28] audit: type=1326 audit(1779849912.488:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.4.3766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x7ffc0000 [ 570.969825][T18725] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.981359][ T28] audit: type=1326 audit(1779849912.488:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.4.3766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f2011abce59 code=0x7ffc0000 [ 571.032353][ T28] audit: type=1326 audit(1779849912.488:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18720 comm="syz.4.3766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x7ffc0000 [ 571.194161][T18738] loop1: detected capacity change from 0 to 512 [ 571.398371][T18746] loop4: detected capacity change from 0 to 256 [ 571.590856][T18748] loop1: detected capacity change from 0 to 2048 [ 571.614246][T18748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 571.636913][T18748] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 571.654534][T18748] EXT4-fs (loop1): Remounting filesystem read-only [ 571.660905][T18753] loop4: detected capacity change from 0 to 256 [ 571.689516][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.718149][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.798288][T18758] loop8: detected capacity change from 0 to 1024 [ 571.806275][T18758] ext3: Unknown parameter 'nouser_xattr' [ 571.821175][T18761] loop7: detected capacity change from 0 to 512 [ 571.838769][T18761] EXT4-fs: Ignoring removed bh option [ 571.856629][T18761] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 571.884063][T18761] EXT4-fs (loop7): 1 truncate cleaned up [ 571.884716][T18761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.886318][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 571.886334][ T28] audit: type=1400 audit(1779849913.598:4220): avc: denied { write } for pid=18759 comm="syz.7.3776" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 571.990372][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.066350][T18758] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3777'. [ 572.125847][T18777] loop1: detected capacity change from 0 to 256 [ 572.191157][T18780] loop7: detected capacity change from 0 to 1024 [ 572.210724][T18780] EXT4-fs: Ignoring removed bh option [ 572.270863][T18780] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.308737][ T28] audit: type=1400 audit(1779849914.018:4221): avc: denied { write } for pid=18779 comm="syz.7.3785" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.437076][T18788] loop8: detected capacity change from 0 to 4096 [ 572.462492][T18788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.486381][T18793] syzkaller0: entered promiscuous mode [ 572.500635][T18793] syzkaller0: entered allmulticast mode [ 572.512764][ T28] audit: type=1400 audit(1779849914.228:4222): avc: denied { write } for pid=18785 comm="syz.8.3786" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 572.776904][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.845270][T18797] syzkaller0: entered promiscuous mode [ 572.859431][T18797] syzkaller0: entered allmulticast mode [ 573.086290][T18803] loop7: detected capacity change from 0 to 512 [ 573.106149][T18803] EXT4-fs: Ignoring removed bh option [ 573.132039][T18803] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 573.276515][T18803] EXT4-fs (loop7): 1 truncate cleaned up [ 573.289654][T18803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 573.313426][ T28] audit: type=1400 audit(1779849915.028:4223): avc: denied { write } for pid=18802 comm="syz.7.3791" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 573.386608][T18810] random: crng reseeded on system resumption [ 573.468465][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.680546][T18812] tipc: Can't bind to reserved service type 0 [ 573.690808][T18809] loop1: detected capacity change from 0 to 8192 [ 573.821156][ T28] audit: type=1400 audit(1779849915.118:4224): avc: denied { map } for pid=18804 comm="syz.4.3792" path="socket:[52350]" dev="sockfs" ino=52350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 573.863443][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.896376][T18809] loop1: p1 < > p2 < > p3 p4 < > [ 573.912076][T18809] loop1: partition table partially beyond EOD, truncated [ 573.930532][T18809] loop1: p1 start 67108864 is beyond EOD, truncated [ 573.945306][T18809] loop1: p3 start 100859904 is beyond EOD, truncated [ 574.077938][T18821] loop7: detected capacity change from 0 to 256 [ 574.221795][T18823] loop8: detected capacity change from 0 to 1024 [ 574.234361][T18823] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 574.244495][T18823] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 574.254170][T18823] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 574.264595][T18823] EXT4-fs error (device loop8): ext4_get_journal_inode:5896: inode #5: comm syz.8.3798: unexpected bad inode w/o EXT4_IGET_BAD [ 574.277850][T18823] loop8: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 574.278099][T18823] EXT4-fs (loop8): no journal found [ 574.292441][T18823] EXT4-fs (loop8): can't get journal size [ 574.299244][T18823] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 574.400446][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.724394][ T4538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.779545][T18833] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.786647][T18833] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.794158][T18833] bridge_slave_0: entered allmulticast mode [ 574.802020][T18833] bridge_slave_0: entered promiscuous mode [ 574.811845][ T4538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.823383][T18833] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.832100][T18833] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.841120][T18833] bridge_slave_1: entered allmulticast mode [ 574.848891][T18833] bridge_slave_1: entered promiscuous mode [ 574.878938][T18833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.908274][T18833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.935937][T18833] team0: Port device team_slave_0 added [ 574.943587][T18833] team0: Port device team_slave_1 added [ 574.965839][T18833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.972978][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 574.999040][T18833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.017657][T18833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.025150][T18833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.052251][T18833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.096896][T18833] hsr_slave_0: entered promiscuous mode [ 575.103661][T18833] hsr_slave_1: entered promiscuous mode [ 575.110472][T18833] debugfs: 'hsr0' already exists in 'hsr' [ 575.116458][T18833] Cannot create hsr debugfs directory [ 575.298634][T18833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 575.312688][ T4538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.348582][T18833] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.362859][ T4543] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.369973][ T4543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.387659][ T4538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.405013][ T4543] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.412130][ T4543] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.455475][T18833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 575.467113][T18833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 575.563960][ T4538] bridge_slave_1: left allmulticast mode [ 575.578705][ T4538] bridge_slave_1: left promiscuous mode [ 575.595603][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.610298][ T4538] bridge_slave_0: left allmulticast mode [ 575.616075][ T4538] bridge_slave_0: left promiscuous mode [ 575.622006][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.976264][T18869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 576.559221][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.576019][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.584883][ T28] audit: type=1326 audit(1779849918.288:4225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.8.3809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302612ce59 code=0x7ffc0000 [ 576.611720][ T4538] bond0 (unregistering): Released all slaves [ 576.613344][ T28] audit: type=1326 audit(1779849918.288:4226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.8.3809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302612ce59 code=0x7ffc0000 [ 576.643648][ T28] audit: type=1326 audit(1779849918.288:4227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.8.3809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302612ce59 code=0x7ffc0000 [ 576.669426][ T28] audit: type=1326 audit(1779849918.288:4228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.8.3809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f302612ce59 code=0x7ffc0000 [ 576.701283][ T28] audit: type=1326 audit(1779849918.288:4229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18878 comm="syz.8.3809" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f302612ce59 code=0x7ffc0000 [ 576.784109][T18883] loop7: detected capacity change from 0 to 4096 [ 576.795111][T18883] EXT4-fs: inline encryption not supported [ 576.803587][ T4538] tipc: Left network mode [ 576.817812][T18883] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 576.853993][ T4538] hsr_slave_0: left promiscuous mode [ 576.857474][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3810'. [ 576.874066][ T4538] hsr_slave_1: left promiscuous mode [ 576.887574][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 576.905754][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.921479][ T4538] veth1_macvtap: left promiscuous mode [ 576.926988][ T4538] veth0_macvtap: left promiscuous mode [ 576.932555][ T4538] veth1_vlan: left promiscuous mode [ 576.937869][ T4538] veth0_vlan: left promiscuous mode [ 576.976162][T18902] loop8: detected capacity change from 0 to 256 [ 576.988109][ T28] kauditd_printk_skb: 99 callbacks suppressed [ 576.988123][ T28] audit: type=1400 audit(1779849918.698:4329): avc: denied { write } for pid=18887 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.058868][ T28] audit: type=1400 audit(1779849918.768:4330): avc: denied { write } for pid=18906 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.124066][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 577.137948][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 577.220813][ T3019] 8021q: adding VLAN 0 to HW filter on device eth18 [ 577.330889][T18833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.340790][T18922] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3816'. [ 577.548896][T18833] veth0_vlan: entered promiscuous mode [ 577.634297][ T28] audit: type=1400 audit(1779849919.348:4331): avc: denied { write } for pid=18917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.677934][ T28] audit: type=1400 audit(1779849919.388:4332): avc: denied { write } for pid=18948 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 577.689856][T18833] veth1_vlan: entered promiscuous mode [ 577.722817][ T3019] 8021q: adding VLAN 0 to HW filter on device eth19 [ 577.774800][T18833] veth0_macvtap: entered promiscuous mode [ 577.813873][T18833] veth1_macvtap: entered promiscuous mode [ 577.839388][T18833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.852313][T18833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 578.125768][T18956] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3819'. [ 578.448301][T18961] loop9: detected capacity change from 0 to 256 [ 578.679235][ T28] audit: type=1400 audit(1779849920.388:4333): avc: denied { write } for pid=18953 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.628462][T18976] loop7: detected capacity change from 0 to 4096 [ 579.655694][T18976] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 579.690504][ T28] audit: type=1400 audit(1779849921.408:4334): avc: denied { write } for pid=18981 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 579.715037][ T28] audit: type=1400 audit(1779849921.418:4335): avc: denied { write } for pid=18975 comm="syz.7.3820" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 579.750285][ T3019] 8021q: adding VLAN 0 to HW filter on device eth20 [ 579.854085][T18988] loop4: detected capacity change from 0 to 4096 [ 579.870803][T18988] EXT4-fs: inline encryption not supported [ 579.894102][T18988] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 579.980380][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3823'. [ 580.037074][ T28] audit: type=1400 audit(1779849921.748:4336): avc: denied { write } for pid=18992 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.112328][ T28] audit: type=1400 audit(1779849921.818:4337): avc: denied { write } for pid=19004 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 580.165693][ T3019] 8021q: adding VLAN 0 to HW filter on device eth17 [ 580.276839][T19018] loop4: detected capacity change from 0 to 512 [ 580.300603][T19018] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 580.404603][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 580.471900][T19018] EXT4-fs (loop4): 1 truncate cleaned up [ 580.488165][T19018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 580.511679][ T28] audit: type=1400 audit(1779849922.228:4338): avc: denied { write } for pid=19017 comm="syz.4.3829" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 580.559825][T19030] usb usb5: usbfs: process 19030 (syz.7.3831) did not claim interface 0 before use [ 580.690911][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.699095][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.705990][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.859415][T19032] infiniband syz2: set down [ 580.864030][T19032] infiniband syz2: added ip6_vti0 [ 580.875435][ T35] ip6_vti0 speed is unknown, defaulting to 1000 [ 580.987747][T19032] RDS/IB: syz2: added [ 580.991872][T19032] smc: adding ib device syz2 with port count 1 [ 580.998146][T19032] smc: ib device syz2 port 1 has no pnetid [ 581.005471][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.027595][T19036] loop8: detected capacity change from 0 to 256 [ 581.055026][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.100871][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.138929][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.177727][T19032] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.656735][T19043] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3833'. [ 581.725350][ T3399] ip6_vti0 speed is unknown, defaulting to 1000 [ 581.811965][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.919544][T19059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3840'. [ 581.928559][T19059] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3840'. [ 581.992239][T19061] loop9: detected capacity change from 0 to 4096 [ 582.030769][T19061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 582.060466][ T28] audit: type=1400 audit(1779849923.778:4339): avc: denied { write } for pid=19060 comm="syz.9.3841" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 582.067842][T19068] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3842'. [ 582.113493][ T28] audit: type=1400 audit(1779849923.828:4340): avc: denied { map } for pid=19065 comm="syz.7.3844" path="socket:[53357]" dev="sockfs" ino=53357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 582.113630][ T28] audit: type=1400 audit(1779849923.828:4341): avc: denied { accept } for pid=19065 comm="syz.7.3844" path="socket:[53357]" dev="sockfs" ino=53357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 582.113955][T19070] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3844'. [ 582.163709][T19070] ip6_vti0 speed is unknown, defaulting to 1000 [ 582.206732][ T28] audit: type=1400 audit(1779849923.898:4342): avc: denied { kexec_image_load } for pid=19063 comm="syz.4.3843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 582.216634][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.481693][T19078] loop1: detected capacity change from 0 to 512 [ 582.484156][T19083] usb usb5: usbfs: process 19083 (syz.9.3845) did not claim interface 0 before use [ 582.497628][T19078] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 582.593363][T19088] loop1: detected capacity change from 0 to 512 [ 582.603764][T19088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.619516][ T28] audit: type=1400 audit(1779849924.338:4343): avc: denied { write } for pid=19087 comm="syz.1.3850" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 582.655486][ T28] audit: type=1400 audit(1779849924.358:4344): avc: denied { create } for pid=19087 comm="syz.1.3850" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 582.706175][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.757114][ T28] audit: type=1400 audit(1779849924.468:4345): avc: denied { setopt } for pid=19092 comm="syz.4.3853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 582.782673][T19095] loop1: detected capacity change from 0 to 256 [ 583.348344][T19105] random: crng reseeded on system resumption [ 583.610944][T19103] loop7: detected capacity change from 0 to 4096 [ 583.717240][T19103] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.813350][ T28] audit: type=1400 audit(1779849925.528:4346): avc: denied { write } for pid=19100 comm="syz.7.3855" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 584.132213][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.509955][T19120] loop4: detected capacity change from 0 to 512 [ 584.688296][T19120] ------------[ cut here ]------------ [ 584.695366][T19120] EA inode 11 i_nlink=2 [ 584.695507][T19120] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#0: syz.4.3862/19120 [ 584.712099][T19120] Modules linked in: [ 584.716416][T19120] CPU: 0 UID: 0 PID: 19120 Comm: syz.4.3862 Not tainted syzkaller #0 PREEMPT(full) [ 584.726476][T19120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 584.736946][T19120] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 584.743895][T19120] Code: f4 52 98 ff 4c 8d 2d 2d 61 5c 05 49 8d 7e 40 e8 d4 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 08 11 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 6f 36 d8 03 66 66 66 66 66 66 2e [ 584.763856][T19120] RSP: 0018:ffffc90006ba7778 EFLAGS: 00010246 [ 584.770136][T19120] RAX: ffff88815df8ad00 RBX: ffff88811a211a38 RCX: ffffffff81c0e0d8 [ 584.778436][T19120] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d41f0 [ 584.786656][T19120] RBP: 000000000000000b R08: 000188811a2119eb R09: 0000000000000000 [ 584.795394][T19120] R10: ffffc90006ba76a8 R11: 0001c90006ba76a8 R12: ffff88811a2119e8 [ 584.799165][ T28] audit: type=1400 audit(1779849926.358:4347): avc: denied { node_bind } for pid=19123 comm="syz.1.3864" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 584.804626][T19120] R13: ffffffff871d41f0 R14: ffff88811a2119a0 R15: 0000000000000001 [ 584.832392][T19120] FS: 00007f20104f66c0(0000) GS:ffff8882ae8f7000(0000) knlGS:0000000000000000 [ 584.841341][T19120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.847954][T19120] CR2: 000000110c242115 CR3: 0000000168736000 CR4: 00000000003506f0 [ 584.855971][T19120] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 584.863990][T19120] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 584.871992][T19120] Call Trace: [ 584.875362][T19120] [ 584.878501][T19120] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 584.884585][T19120] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 584.890095][T19120] ? ext4_truncate+0x89f/0xa10 [ 584.894904][T19120] ext4_evict_inode+0xb16/0xe30 [ 584.899851][T19120] ? __pfx_ext4_evict_inode+0x10/0x10 [ 584.906306][T19120] evict+0x2af/0x510 [ 584.910599][T19120] ? __dquot_initialize+0x146/0x7c0 [ 584.916246][T19120] iput+0x41a/0x580 [ 584.920704][T19120] ext4_process_orphan+0x1a9/0x1c0 [ 584.926116][T19120] ext4_orphan_cleanup+0x69c/0x9f0 [ 584.932088][T19120] ext4_fill_super+0x3408/0x37c0 [ 584.937894][T19120] ? set_blocksize+0x14c/0x270 [ 584.943167][T19120] ? setup_bdev_super+0x30e/0x370 [ 584.948716][T19120] ? __pfx_ext4_fill_super+0x10/0x10 [ 584.955017][T19120] get_tree_bdev_flags+0x291/0x300 [ 584.960737][T19120] ? __pfx_ext4_fill_super+0x10/0x10 [ 584.966312][T19120] get_tree_bdev+0x1f/0x30 [ 584.970979][T19120] ext4_get_tree+0x1c/0x30 [ 584.975805][T19120] vfs_get_tree+0x57/0x1d0 [ 584.980665][T19120] do_new_mount+0x288/0x8d0 [ 584.985596][T19120] path_mount+0x4d0/0xbc0 [ 584.990577][T19120] __se_sys_mount+0x28c/0x2e0 [ 584.995565][T19120] ? __x64_sys_mount+0x1e/0x80 [ 585.000616][T19120] __x64_sys_mount+0x67/0x80 [ 585.005626][T19120] x64_sys_call+0x2d61/0x3020 [ 585.011110][T19120] do_syscall_64+0x12c/0x3b0 [ 585.016126][T19120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.022747][T19120] RIP: 0033:0x7f2011abe0ca [ 585.027827][T19120] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.048106][T19120] RSP: 002b:00007f20104f5e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 585.057124][T19120] RAX: ffffffffffffffda RBX: 00007f20104f5ee0 RCX: 00007f2011abe0ca [ 585.065475][T19120] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f20104f5ea0 [ 585.073699][T19120] RBP: 00002000000009c0 R08: 00007f20104f5ee0 R09: 0000000000800718 [ 585.081967][T19120] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 585.090255][T19120] R13: 00007f20104f5ea0 R14: 000000000000048d R15: 0000200000000200 [ 585.098685][T19120] [ 585.102240][T19120] ---[ end trace 0000000000000000 ]--- [ 585.110007][T19120] EXT4-fs (loop4): 1 orphan inode deleted [ 585.120649][T19120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 585.232257][T19120] bond2: down delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 585.247045][T19120] 8021q: adding VLAN 0 to HW filter on device bond2 [ 585.386267][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.438206][T19139] loop8: detected capacity change from 0 to 256 [ 585.447278][T19140] netlink: 328 bytes leftover after parsing attributes in process `syz.1.3869'. [ 585.590681][T19140] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3869'. [ 585.886044][T19148] loop1: detected capacity change from 0 to 4096 [ 585.962428][T19148] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.006538][ T28] audit: type=1400 audit(1779849927.718:4348): avc: denied { write } for pid=19146 comm="syz.1.3870" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 586.176279][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.188845][T19162] xt_hashlimit: size too large, truncated to 1048576 [ 586.439736][T19176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3878'. [ 586.478589][T19179] loop9: detected capacity change from 0 to 256 [ 587.868974][T19202] loop8: detected capacity change from 0 to 4096 [ 587.881986][T19202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 587.946153][ T28] audit: type=1400 audit(1779849929.648:4349): avc: denied { append } for pid=19198 comm="syz.4.3884" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 588.124316][T19209] loop4: detected capacity change from 0 to 256 [ 588.915479][ T28] audit: type=1400 audit(1779849929.738:4350): avc: denied { write } for pid=19201 comm="syz.8.3885" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.608835][T19219] loop9: detected capacity change from 0 to 512 [ 589.903374][T19219] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.940087][T19219] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 589.971805][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.120175][ T28] audit: type=1326 audit(1779849931.838:4351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19231 comm="syz.4.3894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2011abce59 code=0x0 [ 590.153894][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.173769][T19239] netlink: 'syz.8.3895': attribute type 21 has an invalid length. [ 590.182093][T19239] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3895'. [ 590.465763][T19254] loop4: detected capacity change from 0 to 256 [ 590.582212][ T28] audit: type=1400 audit(1779849932.288:4352): avc: denied { write } for pid=19237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.699096][ T28] audit: type=1400 audit(1779849932.408:4353): avc: denied { write } for pid=19260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 590.747269][T19239] syzkaller0: entered promiscuous mode [ 590.757922][T19239] syzkaller0: entered allmulticast mode [ 590.828549][T19274] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3901'. [ 591.118635][T19278] loop1: detected capacity change from 0 to 512 [ 591.155272][T19276] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 591.247745][T19276] SELinux: failed to load policy [ 591.747798][ T28] audit: type=1400 audit(1779849933.458:4354): avc: denied { write } for pid=19286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.760223][T19290] loop7: detected capacity change from 0 to 4096 [ 591.807799][T19305] loop4: detected capacity change from 0 to 512 [ 591.868224][ T28] audit: type=1400 audit(1779849933.528:4355): avc: denied { write } for pid=19306 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 591.997147][T19305] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.011806][T19290] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.145127][T19305] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 592.362813][ T28] audit: type=1400 audit(1779849934.078:4356): avc: denied { write } for pid=19289 comm="syz.7.3905" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 592.717490][ T28] audit: type=1400 audit(1779849934.428:4357): avc: denied { write } for pid=19313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 592.898191][ T28] audit: type=1400 audit(1779849934.608:4358): avc: denied { write } for pid=19342 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.015468][ T28] audit: type=1400 audit(1779849934.728:4359): avc: denied { write } for pid=19347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.094830][ T28] audit: type=1400 audit(1779849934.798:4360): avc: denied { write } for pid=19360 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 593.138106][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.180711][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.231820][T19365] loop1: detected capacity change from 0 to 512 [ 593.245343][T19367] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3912'. [ 593.382448][T19365] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 593.487486][T19365] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 593.500255][T19365] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.145794][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 594.155697][T19391] usb usb5: usbfs: process 19391 (syz.9.3920) did not claim interface 0 before use [ 594.347210][T19400] loop1: detected capacity change from 0 to 512 [ 594.395591][T19400] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 594.425798][T19400] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 594.455416][T19410] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3926'. [ 594.464326][T19410] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3926'. [ 594.487911][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.529473][T19410] SELinux: failed to load policy [ 594.585698][T19418] loop4: detected capacity change from 0 to 512 [ 594.600311][T19418] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 594.682595][T19418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 594.695438][T19418] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 595.182611][T19427] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3931'. [ 595.222504][T19427] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3931'. [ 595.237578][T19429] xt_hashlimit: size too large, truncated to 1048576 [ 595.716771][T19437] netlink: 104 bytes leftover after parsing attributes in process `syz.8.3934'. [ 596.476523][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 596.552352][T19445] loop7: detected capacity change from 0 to 512 [ 596.626896][T19445] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.649152][T19451] loop9: detected capacity change from 0 to 512 [ 596.668537][T19445] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 596.705318][T19453] loop8: detected capacity change from 0 to 512 [ 596.735170][T19451] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.750257][T19453] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 596.758401][T19451] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.772138][T19453] System zones: 0-2, 18-18, 34-35 [ 596.790142][T19453] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 596.879098][T19453] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 596.891018][T19464] usb usb5: usbfs: process 19464 (syz.4.3940) did not claim interface 0 before use [ 596.926588][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.063102][T19467] loop9: detected capacity change from 0 to 4096 [ 597.089991][T19467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.185794][T19458] syz.7.3936 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 597.232085][T19458] CPU: 0 UID: 0 PID: 19458 Comm: syz.7.3936 Tainted: G W syzkaller #0 PREEMPT(full) [ 597.232148][T19458] Tainted: [W]=WARN [ 597.232155][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.232167][T19458] Call Trace: [ 597.232173][T19458] [ 597.232180][T19458] __dump_stack+0x1d/0x30 [ 597.232206][T19458] dump_stack_lvl+0x95/0xd0 [ 597.232253][T19458] dump_stack+0x15/0x1b [ 597.232275][T19458] dump_header+0x80/0x240 [ 597.232376][T19458] oom_kill_process+0x295/0x350 [ 597.232484][T19458] out_of_memory+0x97d/0xb80 [ 597.232519][T19458] try_charge_memcg+0x62f/0xa10 [ 597.232556][T19458] ? __rcu_read_unlock+0x33/0x70 [ 597.232649][T19458] charge_memcg+0x6d/0x120 [ 597.232751][T19458] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 597.232784][T19458] __swap_cache_prepare_and_add+0x69/0x4a0 [ 597.232871][T19458] ? alloc_pages_mpol+0x217/0x260 [ 597.232908][T19458] ? xas_load+0x413/0x430 [ 597.232949][T19458] swap_cache_alloc_folio+0xa2/0x120 [ 597.232979][T19458] swap_cluster_readahead+0x25f/0x3c0 [ 597.233084][T19458] swapin_readahead+0xde/0x840 [ 597.233127][T19458] ? _raw_spin_unlock+0x9/0x30 [ 597.233149][T19458] ? __rcu_read_unlock+0x4e/0x70 [ 597.233170][T19458] ? swap_cache_get_folio+0x1e0/0x1f0 [ 597.233195][T19458] do_swap_page+0x31e/0x2180 [ 597.233273][T19458] ? __css_rstat_updated+0xbb/0x280 [ 597.233308][T19458] ? __rcu_read_lock+0x36/0x50 [ 597.233333][T19458] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 597.233359][T19458] handle_mm_fault+0xb30/0x2e70 [ 597.233390][T19458] ? _raw_spin_lock+0x52/0xa0 [ 597.233429][T19458] __get_user_pages+0x1290/0x1f10 [ 597.233540][T19458] __mm_populate+0x242/0x390 [ 597.233579][T19458] do_mlock+0x47c/0x520 [ 597.233662][T19458] ? xfd_validate_state+0x45/0xf0 [ 597.233692][T19458] ? restore_fpregs_from_fpstate+0x61/0x110 [ 597.233735][T19458] __x64_sys_mlock+0x36/0x50 [ 597.233773][T19458] x64_sys_call+0x1ab3/0x3020 [ 597.233801][T19458] do_syscall_64+0x12c/0x3b0 [ 597.233941][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.233967][T19458] RIP: 0033:0x7ff3aa1ace59 [ 597.233984][T19458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.234000][T19458] RSP: 002b:00007ff3a8be6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 597.234060][T19458] RAX: ffffffffffffffda RBX: 00007ff3aa426090 RCX: 00007ff3aa1ace59 [ 597.234076][T19458] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000000000 [ 597.234133][T19458] RBP: 00007ff3aa242d6f R08: 0000000000000000 R09: 0000000000000000 [ 597.234144][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.234155][T19458] R13: 00007ff3aa426128 R14: 00007ff3aa426090 R15: 00007fff50226588 [ 597.234178][T19458] [ 597.534294][T19458] memory: usage 145056kB, limit 307200kB, failcnt 626 [ 597.545440][T19458] memory+swap: usage 142808kB, limit 9007199254740988kB, failcnt 0 [ 597.560452][T19458] kmem: usage 115636kB, limit 9007199254740988kB, failcnt 0 [ 597.584016][T19458] Memory cgroup stats for /syz7: [ 597.584287][T19458] cache 8192 [ 597.610899][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.635394][T19458] rss 5619712 [ 597.643443][T19458] shmem 0 [ 597.649192][T19458] mapped_file 0 [ 597.657195][T19458] dirty 0 [ 597.662893][T19472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3944'. [ 597.692231][T19458] writeback 0 [ 597.696258][T19458] workingset_refault_anon 1430 [ 597.701061][T19458] workingset_refault_file 0 [ 597.705679][T19458] swap 6750208 [ 597.720019][T19458] swapcached 12648448 [ 597.728307][T19472] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3944'. [ 597.753687][T19458] pgpgin 107377 [ 597.775491][T19458] pgpgout 105995 [ 597.779454][T19458] pgfault 82046 [ 597.783014][T19458] pgmajfault 193 [ 597.786614][T19458] inactive_anon 28672 [ 597.790756][T19458] active_anon 8192 [ 597.794651][T19458] inactive_file 8192 [ 597.798555][T19458] active_file 0 [ 597.802130][T19458] unevictable 5615616 [ 597.806143][T19458] hierarchical_memory_limit 314572800 [ 597.811624][T19458] hierarchical_memsw_limit 9223372036854771712 [ 597.818184][T19458] total_cache 8192 [ 597.821949][T19458] total_rss 5619712 [ 597.825843][T19458] total_shmem 0 [ 597.829355][T19458] total_mapped_file 0 [ 597.853664][T19458] total_dirty 0 [ 597.857272][T19458] total_writeback 0 [ 597.861094][T19458] total_workingset_refault_anon 1430 [ 597.866398][T19458] total_workingset_refault_file 0 [ 597.871456][T19458] total_swap 6750208 [ 597.875406][T19458] total_swapcached 12648448 [ 597.879929][T19458] total_pgpgin 107377 [ 597.883921][T19458] total_pgpgout 105995 [ 597.887994][T19458] total_pgfault 82046 [ 597.891984][T19458] total_pgmajfault 193 [ 597.896067][T19458] total_inactive_anon 28672 [ 597.900575][T19458] total_active_anon 8192 [ 597.904831][T19458] total_inactive_file 8192 [ 597.909259][T19458] total_active_file 0 [ 597.913262][T19458] total_unevictable 5615616 [ 597.917790][T19458] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.3936,pid=19444,uid=0 [ 597.962672][T19485] loop4: detected capacity change from 0 to 512 [ 597.975259][T19458] Memory cgroup out of memory: Killed process 19444 (syz.7.3936) total-vm:94300kB, anon-rss:6712kB, file-rss:22416kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 598.029762][T19485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 598.031813][T17592] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.089556][T19490] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3949'. [ 598.219240][T19485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 598.262085][T19485] ext4 filesystem being mounted at /220/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.420134][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 598.430274][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.731525][T19505] loop1: detected capacity change from 0 to 512 [ 598.809721][T19505] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 598.924186][T19505] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.970900][T19510] loop4: detected capacity change from 0 to 4096 [ 598.995929][T19514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3954'. [ 599.040303][T19510] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.266585][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.633685][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.691906][T19525] loop7: detected capacity change from 0 to 256 [ 600.129474][T19529] loop4: detected capacity change from 0 to 512 [ 600.171019][T19529] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 600.435475][T19529] System zones: 0-2, 18-18, 34-34 [ 600.494840][T19529] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 600.529050][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 600.535511][ C1] EXT4-fs (loop4): initial error at time 1779849942: ext4_mb_generate_buddy:1317 [ 600.545014][ C1] EXT4-fs (loop4): last error at time 1779849942: ext4_mb_generate_buddy:1317 [ 600.581707][T19529] EXT4-fs (loop4): Remounting filesystem read-only [ 600.639289][T19529] EXT4-fs (loop4): 1 truncate cleaned up [ 600.660635][ T5830] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 600.682341][T19529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.698335][ T5830] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 600.706012][T19529] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.709242][ T5830] Quota error (device loop4): write_blk: dquota write failed [ 600.729215][T19537] loop1: detected capacity change from 0 to 512 [ 600.735590][ T5830] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 600.745606][ T5830] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 600.763237][T19537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 600.780388][ T5830] Quota error (device loop4): write_blk: dquota write failed [ 600.787943][ T5830] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 600.798083][ T5830] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 600.808162][ T5830] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 600.816928][ T5830] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 600.823562][T19529] ip6_vti0 speed is unknown, defaulting to 1000 [ 600.840709][ T5830] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 600.864263][ T28] audit: type=1400 audit(1779849942.578:4361): avc: denied { write } for pid=19528 comm="syz.4.3959" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 600.890231][T19537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 600.902764][T19537] ext4 filesystem being mounted at /205/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.984608][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 601.093650][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.103214][T19561] loop1: detected capacity change from 0 to 4096 [ 601.303417][T19561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.357683][T19575] loop9: detected capacity change from 0 to 512 [ 601.380154][T19575] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 601.404887][T19575] System zones: 0-2, 18-18, 34-34 [ 601.414409][T19575] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 601.428993][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 601.435438][ C1] EXT4-fs (loop9): initial error at time 1779849943: ext4_mb_generate_buddy:1317 [ 601.444611][ C1] EXT4-fs (loop9): last error at time 1779849943: ext4_mb_generate_buddy:1317 [ 601.462743][T19575] EXT4-fs (loop9): Remounting filesystem read-only [ 601.469663][T19575] EXT4-fs (loop9): 1 truncate cleaned up [ 601.475780][T19575] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 601.488833][T19575] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 601.518531][T19575] ip6_vti0 speed is unknown, defaulting to 1000 [ 601.557966][ T28] audit: type=1400 audit(1779849943.268:4362): avc: denied { write } for pid=19573 comm="syz.9.3972" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 601.615335][T19580] FAULT_INJECTION: forcing a failure. [ 601.615335][T19580] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.644353][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.653782][T19580] CPU: 1 UID: 0 PID: 19580 Comm: syz.7.3973 Tainted: G W syzkaller #0 PREEMPT(full) [ 601.653846][T19580] Tainted: [W]=WARN [ 601.653852][T19580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 601.653865][T19580] Call Trace: [ 601.653871][T19580] [ 601.653878][T19580] __dump_stack+0x1d/0x30 [ 601.654003][T19580] dump_stack_lvl+0x95/0xd0 [ 601.654126][T19580] dump_stack+0x15/0x1b [ 601.654142][T19580] should_fail_ex+0x263/0x280 [ 601.654175][T19580] should_fail+0xb/0x20 [ 601.654253][T19580] should_fail_usercopy+0x1a/0x20 [ 601.654289][T19580] _copy_to_user+0x20/0xa0 [ 601.654319][T19580] simple_read_from_buffer+0xb5/0x130 [ 601.654374][T19580] proc_fail_nth_read+0x10e/0x150 [ 601.654410][T19580] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 601.654507][T19580] vfs_read+0x1ab/0x7f0 [ 601.654556][T19580] ? ksys_read+0x56/0x1a0 [ 601.654589][T19580] ? kcsan_setup_watchpoint+0x404/0x410 [ 601.654633][T19580] ? ksys_read+0x56/0x1a0 [ 601.654675][T19580] ksys_read+0xdc/0x1a0 [ 601.654708][T19580] __x64_sys_read+0x40/0x50 [ 601.654741][T19580] x64_sys_call+0x2886/0x3020 [ 601.654793][T19580] do_syscall_64+0x12c/0x3b0 [ 601.654823][T19580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.654864][T19580] RIP: 0033:0x7ff3aa16d68e [ 601.654937][T19580] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.654967][T19580] RSP: 002b:00007ff3a8c06fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 601.654985][T19580] RAX: ffffffffffffffda RBX: 00007ff3a8c076c0 RCX: 00007ff3aa16d68e [ 601.655001][T19580] RDX: 000000000000000f RSI: 00007ff3a8c070a0 RDI: 0000000000000004 [ 601.655048][T19580] RBP: 00007ff3a8c07090 R08: 0000000000000000 R09: 0000000000000000 [ 601.655059][T19580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.655069][T19580] R13: 00007ff3aa426038 R14: 00007ff3aa425fa0 R15: 00007fff50226588 [ 601.655090][T19580] [ 601.900630][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.915457][ T4544] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 601.927960][T19588] x_tables: ip_tables: ah match: only valid for protocol 51 [ 601.935359][T19586] loop7: detected capacity change from 0 to 512 [ 601.960464][ T4544] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 601.991135][T19587] loop1: detected capacity change from 0 to 256 [ 602.021030][ T4544] EXT4-fs (loop9): Quota write (off=8, len=24) cancelled because transaction is not started [ 602.067428][T19593] loop1: detected capacity change from 0 to 512 [ 602.075658][T19593] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 602.097274][T19593] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 602.111040][T19593] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.167764][T14784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 602.222785][T19586] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 602.342031][T19586] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 602.391438][ T4555] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.441894][T19586] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3975: corrupted xattr block 33: invalid ea_ino [ 602.510530][T19602] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3979'. [ 602.525197][T19586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 602.554210][T19586] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3975: corrupted xattr block 33: invalid ea_ino [ 602.581823][T19603] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3975: corrupted xattr block 33: invalid ea_ino [ 602.595195][T19586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 602.604412][T19586] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3975: corrupted xattr block 33: invalid ea_ino [ 602.617930][T19603] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 602.627212][T19603] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.3975: corrupted xattr block 33: invalid ea_ino [ 602.644270][T19586] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 602.680103][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.943202][T19608] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 602.963120][T19608] System zones: 0-2, 18-18, 34-34 [ 602.985083][T19608] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 603.013225][T19608] EXT4-fs (loop7): Remounting filesystem read-only [ 603.019831][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 603.019846][ C0] EXT4-fs (loop7): initial error at time 1779849944: ext4_mb_generate_buddy:1317 [ 603.019865][ C0] EXT4-fs (loop7): last error at time 1779849944: ext4_mb_generate_buddy:1317 [ 603.070243][T19608] EXT4-fs (loop7): 1 truncate cleaned up [ 603.079692][T19608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.096853][ T5826] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 603.116097][T19608] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 603.129841][ T5826] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 603.151030][ T5826] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 603.201736][T19618] netlink: 104 bytes leftover after parsing attributes in process `syz.9.3982'. [ 603.221253][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 603.321652][T19624] netlink: 328 bytes leftover after parsing attributes in process `syz.1.3985'. [ 603.351039][T19622] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 603.778806][T19633] netlink: 'syz.4.3987': attribute type 21 has an invalid length. [ 603.812142][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3987'. [ 603.868594][T19633] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 604.033894][T19633] bond3 (unregistering): Released all slaves [ 604.111087][T19638] set_capacity_and_notify: 2 callbacks suppressed [ 604.111106][T19638] loop9: detected capacity change from 0 to 512 [ 604.126135][T19638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 604.158255][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3990'. [ 604.192613][T19638] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 604.205100][T19638] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 604.228942][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 604.318014][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.399057][ T3650] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 604.528622][T19666] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3998'. [ 605.159704][T19676] loop7: detected capacity change from 0 to 512 [ 605.184529][T19676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 605.240743][T19684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4004'. [ 605.275542][T19684] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4004'. [ 605.355044][T19676] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 605.367644][T19676] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 605.483871][T19691] loop9: detected capacity change from 0 to 4096 [ 605.519429][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 605.538044][T19694] FAULT_INJECTION: forcing a failure. [ 605.538044][T19694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.577490][T19691] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.605454][T19694] CPU: 1 UID: 0 PID: 19694 Comm: syz.4.4008 Tainted: G W syzkaller #0 PREEMPT(full) [ 605.605484][T19694] Tainted: [W]=WARN [ 605.605491][T19694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.605503][T19694] Call Trace: [ 605.605509][T19694] [ 605.605518][T19694] __dump_stack+0x1d/0x30 [ 605.605621][T19694] dump_stack_lvl+0x95/0xd0 [ 605.605647][T19694] dump_stack+0x15/0x1b [ 605.605681][T19694] should_fail_ex+0x263/0x280 [ 605.605733][T19694] should_fail+0xb/0x20 [ 605.605783][T19694] should_fail_usercopy+0x1a/0x20 [ 605.605828][T19694] _copy_to_user+0x20/0xa0 [ 605.605917][T19694] sctp_getsockopt_local_addrs+0x817/0x960 [ 605.605966][T19694] ? lock_sock_nested+0x84/0x110 [ 605.606086][T19694] sctp_getsockopt+0x631/0xaa0 [ 605.606114][T19694] sock_common_getsockopt+0x60/0x70 [ 605.606198][T19694] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 605.606242][T19694] do_sock_getsockopt+0x2f5/0x570 [ 605.606276][T19694] __x64_sys_getsockopt+0x11d/0x1a0 [ 605.606322][T19694] x64_sys_call+0x2dcf/0x3020 [ 605.606346][T19694] do_syscall_64+0x12c/0x3b0 [ 605.606378][T19694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.606443][T19694] RIP: 0033:0x7f2011abce59 [ 605.606458][T19694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.606477][T19694] RSP: 002b:00007f2010517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 605.606502][T19694] RAX: ffffffffffffffda RBX: 00007f2011d35fa0 RCX: 00007f2011abce59 [ 605.606518][T19694] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 605.606606][T19694] RBP: 00007f2010517090 R08: 0000200000000580 R09: 0000000000000000 [ 605.606626][T19694] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 605.606639][T19694] R13: 00007f2011d36038 R14: 00007f2011d35fa0 R15: 00007ffdba9f3a18 [ 605.606658][T19694] [ 605.820621][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 605.820634][ T28] audit: type=1400 audit(1779849947.528:4368): avc: denied { write } for pid=19690 comm="syz.9.4006" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 606.385128][T19714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19714 comm=syz.7.4007 [ 606.391050][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.408703][T19714] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19714 comm=syz.7.4007 [ 606.681834][T19729] loop4: detected capacity change from 0 to 512 [ 606.688936][T19729] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 606.848578][T19729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 606.855411][T19745] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4024'. [ 606.861263][T19729] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 606.899416][T19745] ip6gre1: entered promiscuous mode [ 606.904812][T19745] ip6gre1: entered allmulticast mode [ 606.958339][T19747] loop7: detected capacity change from 0 to 512 [ 606.965617][T19747] ext4: Unknown parameter 'nouser_xattr' [ 606.996249][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 607.047953][ T28] audit: type=1400 audit(1779849948.718:4369): avc: denied { accept } for pid=19744 comm="syz.9.4024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 608.028209][T19754] loop9: detected capacity change from 0 to 4096 [ 608.035464][T19759] loop4: detected capacity change from 0 to 256 [ 608.059775][T19754] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.748038][T19759] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 608.818229][ T28] audit: type=1400 audit(1779849950.518:4370): avc: denied { write } for pid=19752 comm="syz.9.4026" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 608.876426][T19767] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4029'. [ 609.336260][T19769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19769 comm=syz.4.4030 [ 609.403999][T19769] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19769 comm=syz.4.4030 [ 609.763383][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.297562][T19785] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4036'. [ 610.311859][T19789] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4038'. [ 610.332994][T19785] netlink: 36 bytes leftover after parsing attributes in process `syz.9.4036'. [ 610.374742][T19795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19795 comm=syz.4.4041 [ 610.387866][T19795] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19795 comm=syz.4.4041 [ 610.421429][T19787] vlan2: entered promiscuous mode [ 610.426512][T19787] ip6gretap0: entered promiscuous mode [ 610.510684][T19797] loop9: detected capacity change from 0 to 4096 [ 610.644186][T19797] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 610.665498][ T28] audit: type=1400 audit(1779849952.378:4371): avc: denied { write } for pid=19796 comm="syz.9.4042" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 610.687441][T19805] loop7: detected capacity change from 0 to 256 [ 611.421412][ T28] audit: type=1400 audit(1779849953.138:4372): avc: denied { listen } for pid=19818 comm="syz.1.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 611.734890][T19826] loop7: detected capacity change from 0 to 1024 [ 611.824468][T19826] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 611.946962][T19826] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 611.961729][T19828] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4052'. [ 612.004988][T19826] EXT4-fs (loop7): orphan cleanup on readonly fs [ 612.071991][T19826] EXT4-fs error (device loop7): ext4_free_blocks:6718: comm syz.7.4051: Freeing blocks not in datazone - block = 0, count = 4096 [ 612.172245][T19826] loop7: lost filesystem error report for type 5 error -117 [ 612.172414][T19826] EXT4-fs (loop7): Remounting filesystem read-only [ 612.179799][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 612.179815][ C1] EXT4-fs (loop7): initial error at time 1779849953: ext4_free_blocks:6718 [ 612.179835][ C1] EXT4-fs (loop7): last error at time 1779849953: ext4_free_blocks:6718 [ 612.330843][T19826] EXT4-fs (loop7): 1 orphan inode deleted [ 612.359559][T19826] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 612.420684][T19819] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4049'. [ 612.435654][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.489239][T19819] netlink: 'syz.1.4049': attribute type 7 has an invalid length. [ 612.508587][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.525877][T19836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19836 comm=syz.9.4053 [ 612.579156][T19819] netlink: 'syz.1.4049': attribute type 8 has an invalid length. [ 612.593928][T19836] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19836 comm=syz.9.4053 [ 612.614873][T19819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4049'. [ 612.669878][T19841] loop7: detected capacity change from 0 to 512 [ 612.690067][T19841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 612.710911][T19841] System zones: 0-2, 18-18, 34-34 [ 612.743625][T19841] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 612.762413][T19841] EXT4-fs (loop7): Remounting filesystem read-only [ 612.769002][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 612.769025][ C1] EXT4-fs (loop7): initial error at time 1779849954: ext4_mb_generate_buddy:1317 [ 612.769065][ C1] EXT4-fs (loop7): last error at time 1779849954: ext4_mb_generate_buddy:1317 [ 612.820426][T19841] EXT4-fs (loop7): 1 truncate cleaned up [ 612.826821][T19841] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.839703][T19841] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.874708][T19848] loop4: detected capacity change from 0 to 512 [ 612.900650][T19848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.927440][T19848] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.938730][T19851] ip6_vti0 speed is unknown, defaulting to 1000 [ 612.969036][ T28] audit: type=1400 audit(1779849954.668:4373): avc: denied { write } for pid=19846 comm="syz.4.4057" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.036041][ T28] audit: type=1400 audit(1779849954.678:4374): avc: denied { write } for pid=19840 comm="syz.7.4055" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 613.249848][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.268495][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 613.337749][ T5830] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 613.352987][ T5830] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 613.363795][ T5830] Quota error (device loop7): write_blk: dquota write failed [ 613.379300][ T5830] Quota error (device loop7): remove_free_dqentry: Can't write block (5) with free entries [ 613.398561][ T5830] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 613.411540][ T5830] Quota error (device loop7): write_blk: dquota write failed [ 613.419239][ T5830] Quota error (device loop7): free_dqentry: Can't move quota data block (5) to free list [ 613.429218][ T5830] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 613.439741][ T5830] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 613.448823][ T5830] Quota error (device loop7): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 613.492144][T19867] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4061'. [ 613.635804][T19877] loop7: detected capacity change from 0 to 4096 [ 613.651225][T19877] EXT4-fs: inline encryption not supported [ 613.660827][T19883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19883 comm=syz.4.4070 [ 613.674781][T19883] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19883 comm=syz.4.4070 [ 613.686525][T19881] loop9: detected capacity change from 0 to 512 [ 613.694867][T19877] EXT4-fs (loop7): can't mount with journal_checksum, fs mounted w/o journal [ 613.715080][T19881] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.729033][T19881] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.752894][T19877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4068'. [ 613.799532][T19887] loop4: detected capacity change from 0 to 512 [ 613.831742][T19887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 613.841144][T19887] System zones: 0-2, 18-18, 34-34 [ 613.847524][T19887] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 613.864985][T19887] EXT4-fs (loop4): Remounting filesystem read-only [ 613.871536][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 613.871559][ C1] EXT4-fs (loop4): initial error at time 1779849955: ext4_mb_generate_buddy:1317 [ 613.871598][ C1] EXT4-fs (loop4): last error at time 1779849955: ext4_mb_generate_buddy:1317 [ 613.897093][T19887] EXT4-fs (loop4): 1 truncate cleaned up [ 613.911314][T19887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.924174][T19887] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.943702][ T5826] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 613.954271][ T5826] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 613.964784][ T5826] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 614.011820][T19897] loop1: detected capacity change from 0 to 256 [ 614.070091][T14439] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.185348][T18833] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.025556][T19905] FAULT_INJECTION: forcing a failure. [ 615.025556][T19905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 615.042313][T19905] CPU: 0 UID: 0 PID: 19905 Comm: syz.4.4077 Tainted: G W syzkaller #0 PREEMPT(full) [ 615.042343][T19905] Tainted: [W]=WARN [ 615.042350][T19905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.042361][T19905] Call Trace: [ 615.042369][T19905] [ 615.042376][T19905] __dump_stack+0x1d/0x30 [ 615.042404][T19905] dump_stack_lvl+0x95/0xd0 [ 615.042493][T19905] dump_stack+0x15/0x1b [ 615.042518][T19905] should_fail_ex+0x263/0x280 [ 615.042555][T19905] should_fail+0xb/0x20 [ 615.042655][T19905] should_fail_usercopy+0x1a/0x20 [ 615.042691][T19905] _copy_to_user+0x20/0xa0 [ 615.042792][T19905] simple_read_from_buffer+0xb5/0x130 [ 615.042904][T19905] proc_fail_nth_read+0x10e/0x150 [ 615.042945][T19905] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 615.043038][T19905] vfs_read+0x1ab/0x7f0 [ 615.043072][T19905] ? __rcu_read_unlock+0x4e/0x70 [ 615.043100][T19905] ? __fget_files+0x184/0x1c0 [ 615.043138][T19905] ? mutex_lock+0x57/0x90 [ 615.043170][T19905] ksys_read+0xdc/0x1a0 [ 615.043203][T19905] __x64_sys_read+0x40/0x50 [ 615.043293][T19905] x64_sys_call+0x2886/0x3020 [ 615.043336][T19905] do_syscall_64+0x12c/0x3b0 [ 615.043444][T19905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.043543][T19905] RIP: 0033:0x7f2011a7d68e [ 615.043564][T19905] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 615.043582][T19905] RSP: 002b:00007f2010516fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 615.043602][T19905] RAX: ffffffffffffffda RBX: 00007f20105176c0 RCX: 00007f2011a7d68e [ 615.043663][T19905] RDX: 000000000000000f RSI: 00007f20105170a0 RDI: 0000000000000004 [ 615.043676][T19905] RBP: 00007f2010517090 R08: 0000000000000000 R09: 0000000000000000 [ 615.043689][T19905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.043702][T19905] R13: 00007f2011d36038 R14: 00007f2011d35fa0 R15: 00007ffdba9f3a18 [ 615.043780][T19905] [ 615.450032][T19911] vlan2: entered allmulticast mode [ 615.468810][T19911] macsec0: entered allmulticast mode [ 615.485743][T19911] veth1_macvtap: entered allmulticast mode [ 615.582948][T19917] loop8: detected capacity change from 0 to 4096 [ 615.605121][T19917] EXT4-fs: inline encryption not supported [ 615.634872][T19917] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 615.762581][T19923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19923 comm=syz.1.4081 [ 615.777171][T19917] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4083'. [ 615.807863][T19923] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19923 comm=syz.1.4081 [ 616.407565][T19941] loop8: detected capacity change from 0 to 512 [ 616.550079][T19941] EXT4-fs: Ignoring removed nobh option [ 616.604060][T19942] loop9: detected capacity change from 0 to 256 [ 616.651946][T19945] loop7: detected capacity change from 0 to 512 [ 617.274297][T19941] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 617.318889][T19945] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.332200][T19936] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000001) [ 617.348147][T19941] EXT4-fs (loop8): 1 truncate cleaned up [ 617.354033][T19945] ext4 filesystem being mounted at /150/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.367935][T19936] FAT-fs (loop9): Filesystem has been set read-only [ 617.411376][T19953] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4093'. [ 617.447180][T19955] loop1: detected capacity change from 0 to 512 [ 617.453711][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 617.453802][ T28] audit: type=1400 audit(1779849959.088:4378): avc: denied { write } for pid=19943 comm="syz.7.4091" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.482156][T19941] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.544689][T16784] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.559903][T19955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.576973][ T28] audit: type=1400 audit(1779849959.238:4379): avc: denied { write } for pid=19933 comm="syz.8.4089" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 617.600393][T19955] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.871646][T19974] vlan3: entered allmulticast mode [ 617.876997][T19974] macsec0: entered allmulticast mode [ 617.882590][T19974] veth1_macvtap: entered allmulticast mode [ 617.947652][T19978] loop8: detected capacity change from 0 to 512 [ 617.994090][T19978] EXT4-fs (loop8): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 618.025021][T19982] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4101'. [ 618.044456][T19978] EXT4-fs (loop8): group descriptors corrupted! [ 618.056668][T19977] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 618.083802][T19985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=19985 comm=syz.1.4102 [ 618.097400][T19985] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=19985 comm=syz.1.4102 [ 618.113801][T19978] loop8: detected capacity change from 0 to 2048 [ 618.260769][T19987] loop7: detected capacity change from 0 to 512 [ 618.260821][T19991] loop9: detected capacity change from 0 to 4096 [ 618.275163][T19987] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.4099: inode has both inline data and extents flags [ 618.277891][T19988] netlink: 'syz.7.4099': attribute type 12 has an invalid length. [ 618.296865][T19991] EXT4-fs: inline encryption not supported [ 618.307208][T19987] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 618.307306][T19988] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4099'. [ 618.325572][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 618.325598][ C1] EXT4-fs (loop7): initial error at time 1779849959: ext4_orphan_get:1397: inode 15 [ 618.325658][ C1] EXT4-fs (loop7): last error at time 1779849959: ext4_orphan_get:1397: inode 15 [ 618.347610][T19987] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.4099: couldn't read orphan inode 15 (err -117) [ 618.352330][T19991] EXT4-fs (loop9): can't mount with journal_checksum, fs mounted w/o journal [ 618.410754][T19987] loop7: lost filesystem error report for type 5 error -117 [ 618.593026][ T28] audit: type=1400 audit(1779849960.288:4380): avc: denied { ioctl } for pid=20006 comm="syz.1.4104" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6e82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 618.688038][T20011] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4105'. [ 618.796701][T20018] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 618.796701][T20018] program syz.8.4107 not setting count and/or reply_len properly [ 618.825413][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4100'. [ 618.960896][T20023] loop9: detected capacity change from 0 to 164 [ 618.997907][T20023] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4109'. [ 619.317664][T20035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20035 comm=syz.4.4113 [ 619.359435][T20035] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=20035 comm=syz.4.4113 [ 619.531635][T20027] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 619.543861][T20027] System zones: 0-2, 18-18, 34-34 [ 619.550581][T20027] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 619.565855][T20027] EXT4-fs (loop1): Remounting filesystem read-only [ 619.572424][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 619.572447][ C1] EXT4-fs (loop1): initial error at time 1779849961: ext4_mb_generate_buddy:1317 [ 619.572483][ C1] EXT4-fs (loop1): last error at time 1779849961: ext4_mb_generate_buddy:1317 [ 619.599416][T20027] EXT4-fs (loop1): 1 truncate cleaned up [ 619.606923][T20027] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.621608][T20042] FAULT_INJECTION: forcing a failure. [ 619.621608][T20042] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 619.639550][ T4544] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 619.713597][ T4544] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 619.728993][ T4544] Quota error (device loop1): write_blk: dquota write failed [ 619.749092][T20042] CPU: 1 UID: 0 PID: 20042 Comm: syz.4.4115 Tainted: G W syzkaller #0 PREEMPT(full) [ 619.749154][T20042] Tainted: [W]=WARN [ 619.749161][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.749183][T20042] Call Trace: [ 619.749189][T20042] [ 619.749196][T20042] __dump_stack+0x1d/0x30 [ 619.749219][T20042] dump_stack_lvl+0x95/0xd0 [ 619.749242][T20042] dump_stack+0x15/0x1b [ 619.749264][T20042] should_fail_ex+0x263/0x280 [ 619.749370][T20042] should_fail_alloc_page+0xf2/0x100 [ 619.749411][T20042] __alloc_frozen_pages_noprof+0x108/0x350 [ 619.749436][T20042] alloc_pages_mpol+0xb3/0x260 [ 619.749463][T20042] alloc_pages_noprof+0x8f/0x140 [ 619.749546][T20042] __pud_alloc+0x47/0x460 [ 619.749614][T20042] handle_mm_fault+0x1eae/0x2e70 [ 619.749657][T20042] ? lock_mm_and_find_vma+0x8b/0x3d0 [ 619.749699][T20042] do_user_addr_fault+0x3fd/0x1050 [ 619.749749][T20042] exc_page_fault+0x62/0xa0 [ 619.749780][T20042] asm_exc_page_fault+0x26/0x30 [ 619.749801][T20042] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 619.749823][T20042] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 1e 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 619.749872][T20042] RSP: 0018:ffffc900020c3df8 EFLAGS: 00050216 [ 619.749894][T20042] RAX: ffff88810512ad00 RBX: 0000000000000020 RCX: 0000000000000020 [ 619.749910][T20042] RDX: 0000000000000001 RSI: 0000200000000f40 RDI: ffffc900020c3e20 [ 619.749927][T20042] RBP: 0000000000000020 R08: 000000000000026b R09: 0000000000000000 [ 619.749943][T20042] R10: 0001c900020c3e20 R11: 0001c900020c3e3f R12: 0000000000000000 [ 619.749960][T20042] R13: ffff88810512a200 R14: ffffc900020c3e20 R15: 0000200000000f40 [ 619.750011][T20042] _copy_from_user+0x6f/0xb0 [ 619.750052][T20042] __sys_connect+0xd0/0x2a0 [ 619.750153][T20042] __x64_sys_connect+0x3f/0x50 [ 619.750174][T20042] x64_sys_call+0x2df0/0x3020 [ 619.750202][T20042] do_syscall_64+0x12c/0x3b0 [ 619.750242][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.750405][T20042] RIP: 0033:0x7f2011abce59 [ 619.750424][T20042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.750441][T20042] RSP: 002b:00007f2010517028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 619.750497][T20042] RAX: ffffffffffffffda RBX: 00007f2011d35fa0 RCX: 00007f2011abce59 [ 619.750515][T20042] RDX: 0000000000000020 RSI: 0000200000000f40 RDI: 0000000000000003 [ 619.750595][T20042] RBP: 00007f2010517090 R08: 0000000000000000 R09: 0000000000000000 [ 619.750611][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.750627][T20042] R13: 00007f2011d36038 R14: 00007f2011d35fa0 R15: 00007ffdba9f3a18 [ 619.750659][T20042] [ 619.765687][T20027] ip6_vti0 speed is unknown, defaulting to 1000 [ 619.782996][ T4544] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 619.788606][ T28] audit: type=1400 audit(1779849961.488:4381): avc: denied { write } for pid=20026 comm="syz.1.4111" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 619.800930][ T4544] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 619.942692][T20048] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4117'. [ 619.983794][ T4544] Quota error (device loop1): write_blk: dquota write failed [ 620.102103][T20050] EXT4-fs: inline encryption not supported [ 620.108277][ T4544] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 620.118439][ T4544] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 620.128870][T20050] EXT4-fs (loop8): can't mount with journal_checksum, fs mounted w/o journal [ 620.158632][ T4544] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 620.168460][T20050] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4119'. [ 620.248606][T20062] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4122'. [ 620.314882][T20067] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 620.341600][T20067] System zones: 0-2, 18-18, 34-34 [ 620.354132][T20076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=20076 comm=syz.1.4127 [ 620.368230][T20076] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=20076 comm=syz.1.4127 [ 620.368883][T20067] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters [ 620.381178][T20076] ================================================================== [ 620.396442][T20067] EXT4-fs (loop7): Remounting filesystem read-only [ 620.403171][T20076] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 620.410582][T20067] EXT4-fs (loop7): 1 truncate cleaned up [ 620.417384][T20076] [ 620.417394][T20076] write to 0xffffffff86e363c8 of 8 bytes by task 20067 on cpu 1: [ 620.417444][T20076] console_flush_all+0x38c/0x6c0 [ 620.423192][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 620.425415][T20076] console_unlock+0xa1/0x280 [ 620.433180][ C1] EXT4-fs (loop7): initial error at time 1779849962: ext4_mb_generate_buddy:1317 [ 620.438097][T20076] vprintk_emit+0x3e4/0x600 [ 620.444536][ C1] [ 620.449106][T20076] vprintk_default+0x26/0x30 [ 620.458225][ C1] EXT4-fs (loop7): last error at time 1779849962: ext4_mb_generate_buddy:1317 [ 620.462732][T20076] vprintk+0x1d/0x30 [ 620.465084][ C1] [ 620.469354][T20067] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.469691][T20076] _printk+0x79/0xa0 [ 620.469713][T20076] __ext4_grp_locked_error+0x56d/0x7a0 [ 620.469734][T20076] ext4_mb_generate_buddy+0x3a0/0x430 [ 620.509975][T20076] ext4_mb_init_cache+0x887/0xbd0 [ 620.515045][T20076] ext4_mb_init_group+0x42d/0x580 [ 620.520097][T20076] ext4_mb_load_buddy_gfp+0x8d0/0x930 [ 620.525499][T20076] ext4_free_blocks+0x761/0x1430 [ 620.530474][T20076] ext4_ext_remove_space+0x1875/0x2950 [ 620.535961][T20076] ext4_ext_truncate+0xc7/0x160 [ 620.540832][T20076] ext4_truncate+0x6ea/0xa10 [ 620.545441][T20076] ext4_process_orphan+0x110/0x1c0 [ 620.550576][T20076] ext4_orphan_cleanup+0x69c/0x9f0 [ 620.555727][T20076] ext4_fill_super+0x3408/0x37c0 [ 620.560684][T20076] get_tree_bdev_flags+0x291/0x300 [ 620.565825][T20076] get_tree_bdev+0x1f/0x30 [ 620.570267][T20076] ext4_get_tree+0x1c/0x30 [ 620.574712][T20076] vfs_get_tree+0x57/0x1d0 [ 620.579157][T20076] do_new_mount+0x288/0x8d0 [ 620.583696][T20076] path_mount+0x4d0/0xbc0 [ 620.588062][T20076] __se_sys_mount+0x28c/0x2e0 [ 620.592753][T20076] __x64_sys_mount+0x67/0x80 [ 620.597378][T20076] x64_sys_call+0x2d61/0x3020 [ 620.602076][T20076] do_syscall_64+0x12c/0x3b0 [ 620.606699][T20076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.612642][T20076] [ 620.614977][T20076] read to 0xffffffff86e363c8 of 8 bytes by task 20076 on cpu 0: [ 620.622631][T20076] console_flush_all+0x548/0x6c0 [ 620.627606][T20076] console_unlock+0xa1/0x280 [ 620.632211][T20076] vprintk_emit+0x3e4/0x600 [ 620.636732][T20076] vprintk_default+0x26/0x30 [ 620.641334][T20076] vprintk+0x1d/0x30 [ 620.645258][T20076] _printk+0x79/0xa0 [ 620.649225][T20076] selinux_netlink_send+0x5d9/0x650 [ 620.654457][T20076] security_netlink_send+0x3c/0x70 [ 620.659592][T20076] netlink_sendmsg+0x4d5/0x6f0 [ 620.664385][T20076] ____sys_sendmsg+0x563/0x5b0 [ 620.669180][T20076] ___sys_sendmsg+0x195/0x1e0 [ 620.673881][T20076] __x64_sys_sendmsg+0xd4/0x160 [ 620.678755][T20076] x64_sys_call+0x194c/0x3020 [ 620.683460][T20076] do_syscall_64+0x12c/0x3b0 [ 620.688085][T20076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.693995][T20076] [ 620.696336][T20076] value changed: 0x0000000000002923 -> 0x0000000000002924 [ 620.703456][T20076] [ 620.705797][T20076] Reported by Kernel Concurrency Sanitizer on: [ 620.711962][T20076] CPU: 0 UID: 0 PID: 20076 Comm: syz.1.4127 Tainted: G W syzkaller #0 PREEMPT(full) [ 620.722916][T20076] Tainted: [W]=WARN [ 620.726732][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.736805][T20076] ================================================================== [ 620.855317][ T5826] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 620.865942][ T5826] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 620.876498][ T5826] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started