last executing test programs: 42.621395628s ago: executing program 3 (id=745): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r1, &(0x7f0000000100)=ANY=[], 0x200002e6) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4000, r0}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) write$P9_RFLUSH(r3, &(0x7f0000000040)={0x7, 0x6d, 0x2}, 0x7) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000020701020000000000000000050000073400078008000140000000040800014000000009080002"], 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 41.375738718s ago: executing program 3 (id=753): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4}}}]}]}], {0x14, 0x20}}, 0xc4}}, 0x0) pread64(r0, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) (async, rerun: 32) r6 = socket$inet6(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) (async, rerun: 64) r7 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r7, &(0x7f00000005c0), 0x10) recvmmsg(r7, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002000)=""/232, 0xe8}, {0x0}], 0x2}, 0x3}], 0x1, 0x10002, 0x0) (async) sendmsg$can_bcm(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) (async, rerun: 32) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) (rerun: 32) connect$inet6(r6, &(0x7f00000004c0)={0xa, 0x2, 0x9, @local}, 0x1c) 41.124864596s ago: executing program 3 (id=755): syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xff, 0x9}}, './file0\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 40.266336993s ago: executing program 3 (id=761): r0 = socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4f22, 0x0, @remote, 0x7}, 0x1c) listen(r0, 0x399d) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000001c0)='./file0\x00', 0x80a, &(0x7f00000009c0)={[{@inlinecrypt}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@grpjquota}, {@sysvgroups}, {@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@errors_remount}]}, 0x1, 0x7ca, &(0x7f00000014c0)="$eJzs3c9rG9kdAPDvyLKdOGnjQqFJLvEpDYTISeomLRTq0EMpNBBoz02MrBjXshUsOcTGh4RSKJTSNvTQ0l56bnezt70uu+f9G/ayLEtCdtcJm2UPi5bRD1u2bMl2ZDuJPx8Y+73RG7331dO8eaMZpAAOrZH0TybiVET8LYk40VifRER/LZWNGK+Xe7GynE+XJKrV33ye1Mo8X1nOR8s2qWONzMmIeP+PEecz7fWWF5dmJorFwnwjP1qZvTNaXly6MD07MVWYKsxduTQ2dvnqj69e6V2sX364dPzJ33/5w7fHv/7DDx795YMkxuN447HWOHplJEYar0l/+hKu84teV3bAanEePehWsFPprtlX38vjVJyIvsjqRQB4w6XH/yoAcMgkjv8AcMg0Pwd4vrKcby4H+4nE/np6LSJJ6vE3r2/WH8k2rtkdqV0HHXqeRLZxRXT1QmcPjETEf9793f/TJfboOiTAZu4/iIhbwyPt43/Sds/CTl3cRpmRDXnjH+yf965FxE82m/9lVuc/sTr/WTO4yb67GyMRA6359v0/83jTDX/eg8ob87+f1e9tSwNtmf+t3rQ23NfIfSfNnImI6WIhHdu+GxHnon/w9nSxcKlDHeeeffNsq8da539fPPz9/9L60/9rJTKPs4Prt5mcqEy8TMytnj6IOJ1du7fvRdv4f6Q23d3Y/+m6G52e+Mxa8lc//dO/tyqWxp/G21za499b1f9GnI3N429KOt6fOJp2/8X6383reOfjfw5tVX9r/6dLWn/zXGA/pP0/1Dn+4aT1fs1yb+vvHv/m7/+B5Le1dHPwuDdRqcxfihhIft2+/vLats18s3wafz3SjfFnOr7/0zPBW9uMMfvks7d2H/+qHp51rknjn+zS/+Pr+n/niUcvZvp2H3/a/2O11LnGmm7j3+mIKBYGYjsNfNnXDwAAAAAAAAAAAAAAAAAAAAAAAAC2IxMRxyPJ5FbTmUwuV/8N7+/HUKZYKlfO3y4tzE1G7beyh6M/0/yqy+Z3LDa//3S4/niS5i9vyP8oIr4XEf8YPFrL5/Kl4uQBxw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATce2+P3/1KeDHTZMsvvVRABgLxzpWuJZYV22Wq1W97A9AMDe6378b/evv+5BQwCAfdPh+H+085b3e94WAGB/7Ob8HwB4vTn+A8Dhs3b8P9vl834AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYlRvXr6dL9auV5Xyan7y7uDBTunthslCeyc0u5HP50vyd3FSpNFUs5PKl2W7PVyyV7ozF3MK90UqhXBktLy7dnC0tzFVuTs9OTBVuFvr3JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2Jny4tLMRLFYmH8jEn+OiPVrqq9Gw14+kcQr0YwDSXxy4aOTnco87PI2Hn8lonjNEgc9MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8Hr4NAAD//20lJ3Y=") connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r5) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x60, 0x24, 0x1, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xc}, {0xfff3, 0xffe0}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6}}}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x87}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}]}, 0x60}, 0x1, 0x0, 0x0, 0xd1}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000010000002400018006000f004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) vmsplice(r4, &(0x7f00000007c0)=[{&(0x7f00000006c0)="8b1919ba74f4d17d0595319bd4cbc551a988d11b6e99a5900c6481f08ada2ae735760b675080d1ddde884e9b3e347017ab8fb86d2dc60600abf9311502363a10ae58fcc57382858c12e085d362755ebf7732c2386d3b8284f3ca2858537cb9c3219ae653d4c9d24091a2cc5d59e00443a2942d0b8e4f2312b38e4811b64e33065fb9fe5d7fd8367d8558a7baec5dc751c4dca2feed95a4b002903e48e82ef4d081ba6b0ae22caaae40ac231d2758d47bf68c786727deb6300e6edc532d0264b86fd42534a357117af13fe261b9ce9d58cc7fefa4aeab2993d023d378872f8b07526db3", 0xe3}], 0x1, 0x4) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000200), 0x0) r9 = syz_clone(0x80000, &(0x7f0000000a80)="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", 0xfa, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000240)="ff3936b4a55c7d97f806d85c13ce09c2436869fca6dd8961ba19c59e511a88fe69f3de17beece8b0d72ed3cf4e853b56d339e04729468a8693e91c8aae761572596d8c18ffbf9599650ff8c2540b334b9cf5626f4faa0103656475d05ec1538e3c703765f5a12834") r10 = syz_open_procfs(r9, &(0x7f0000000040)='mounts\x00') pread64(r10, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r11 = syz_clone3(&(0x7f0000003400)={0x91082000, &(0x7f0000000600), &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0, {0x1}, &(0x7f0000002340)=""/4096, 0x1000, &(0x7f0000003340)=""/125, &(0x7f00000033c0)=[r9, r9, r9, r1, r9], 0x5, {r10}}, 0x58) r14 = getpgid(r1) getpgid(r12) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x390800, &(0x7f0000001240)={[], [{@fowner_eq}, {@hash}, {@audit}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r15 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='./file1\x00', 0xe1, &(0x7f0000000440)=ANY=[@ANYRESHEX=r4, @ANYRES8=r8], 0x0, 0x0, &(0x7f0000000000)) flistxattr(r15, 0x0, 0x0) syz_clone3(&(0x7f00000034c0)={0x300000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180), {0x1a}, &(0x7f0000000480)=""/82, 0x52, &(0x7f0000000500)=""/194, &(0x7f0000003480)=[r9, r9, r13, r14, r1, r1, r11, r1, r1], 0x9, {r10}}, 0x58) connect$can_bcm(r0, &(0x7f0000000140), 0x10) socket$nl_route(0x10, 0x3, 0x0) 39.377169802s ago: executing program 3 (id=773): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x81, &(0x7f0000000000)={[{@errors_remount}]}, 0x4, 0x4f0, &(0x7f0000000740)="$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") 38.671968315s ago: executing program 3 (id=777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@oldalloc}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7a}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000200)="$eJzs28tvG0UYAPBv10lK+koo5dEHECiIiEfSpAV64AICiQNISHAox5CkVanboCZItKogRagcUSU4I46V+As4wQUBJySucEeVKpRLCyejtXcTx3XSxLXjgn8/aeOZ3bFmPu+OPbOTDaBnjWR/koidEfF7RAzVsqsLjNRebi5dnP576eJ0EpXK238l1XI3li5OF0WL9+3IM6NpRPpZEgea1Dt//sLpqXJ59lyeH18488H4/PkLz506M3Vy9uTs2cljx44emXjxhcnn2xJn1qYb+z+eO7jv9XevvDl9/Mp7P3+bFPE3xNEmI+sdfLJSaXN13bWrLp30dbEhbEopIrLT1V/t/0NRipWTNxSvfdrVxgEdValUKjvWPrxYAf7Hkuh2C4DuKH7os/lvsW3R0OOucP3l2gQoi/vm0u7qPY7akb5I8zL9DfPbdhqJiOOL/3ydbdGZ+xAAAKt8n41/nm02/kvjgbpyu/O1oeGIuDci9kTEfRGxNyLuj6iWfTAiHtpk/Y2LJLeOf9JrLQW2Qdn476V8bavY8nqLIsOlPLerGn9/cuJUefZw/pmMRv+2LD+xTh0/vPrbF2sdqx//ZVtWfzEWzNtxrW/b6vfMTC1M3UnM9a5fitjf1yz+ZHklIImIfRGxv8U6Tj199eBax24f/zrasM5U+Sbiqdr5X4yG+AvJ+uuT4/dEefbweHFV3OqXXy+/VZ+/VJe+o/jbIDv/25te/8vxDyf167Xzm6/j8h+frzmnafX6H0jeqaYH8n0fTS0snJuIGEjeqDW6fv/kynuLfFE+i3/0UPP+vydWPokDEZFdxA9HxCMR8Wje9sci4vGIONQktsH89adXnni/9fg7K4t/ZlPnfyUxEI17midKp3/8blWlw5uJPzv/R6up0XzPRr7/NtKu1q5mAAAA+O9JI2JnJOnYcjpNx8Zq/y+/N7an5bn5hWdOzH14dqb2jMBw9KfFna6huvuhE/m0vshPNuSP5PeNvywNVvNj03PlmW4HDz1uxxr9P/NnqdutAzrO81rQu/R/6F36P/Qu/R96V5P+P9iNdgBbr9nv/yddaAew9Rr6v2U/6CHm/9C79H/oXfo/9KT5wbj9Q/LnL1z9akNP+reUqD6rvy0iOleFRPsTkd4VzZDoUKLb30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADt8W8AAAD//9do5NY=") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x181900, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) getpgrp(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x38, 0x2, {{0x2, 0x7, 0x9, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0x8001, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="060000065200000100000000000000008510000002000056404f4f22fa257b53ef2d614c8d42430085000093c1000500000095000000000000009500a505000047be383c18ce5080483455ad1f9fe1867a78114a92dadeb92f092bbcba1abf5e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa012, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0xc3b37ea506c38a59}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 38.528816189s ago: executing program 32 (id=777): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000080)={[{@quota}, {@oldalloc}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7a}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x181900, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) getpgrp(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$inet(0x2, 0x2, 0x1) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001700)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000840)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x38, 0x2, {{0x2, 0x7, 0x9, 0x0, 0x2}, 0x609d, 0x1, 0x8, 0xfffffffa, 0x2, 0x2, 0x18, 0x1, 0x6, 0xe, {0x3, 0xffbffeff, 0x5, 0x0, 0x9, 0x2}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x8, 0x8001, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xb, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="060000065200000100000000000000008510000002000056404f4f22fa257b53ef2d614c8d42430085000093c1000500000095000000000000009500a505000047be383c18ce5080483455ad1f9fe1867a78114a92dadeb92f092bbcba1abf5e"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa012, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x1, @perf_bp={0x0, 0xc3b37ea506c38a59}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) 35.503927856s ago: executing program 0 (id=802): perf_event_open(&(0x7f00000009c0)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640a8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x29, 0x5, 0x0) socket(0xf, 0x1, 0x40000001) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f00000002c0)={@llc={0x1a, 0x20, 0x1, 0x8, 0x3, 0xb, @broadcast}, {0x0}, 0x0, 0x4}, 0xa0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) 35.338002481s ago: executing program 0 (id=803): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x4008}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x8000) r3 = socket$inet(0x2, 0x3, 0x2) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000980)={@val={0xa, 0x1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @random="527bcee565f4", @void, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "79b96a", 0x10, 0x21, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x7, "789fa3", 0x9a, "945c9c"}}}}}}}}, 0x4a) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x5, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x80082102, 0xffffffffffffffff) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x100, &(0x7f0000000580)={@link_local, @local, @void, {@mpls_mc={0x8848, {[{0x9}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xc, 0x0, 0x1}, {0x7f, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x7}, {0x8}], @ipv4=@tcp={{0x16, 0x4, 0x2, 0x8, 0xd2, 0x67, 0x0, 0x6, 0x6, 0x0, @remote, @loopback, {[@generic={0x86, 0x11, "0f9ae7b48ebac175e2850b5a8dfeef"}, @ssrr={0x89, 0xb, 0x68, [@private=0xa010102, @multicast1]}, @cipso={0x86, 0x28, 0x2, [{0x1, 0x5, "3a8a75"}, {0x5, 0xd, "35d860d98a2658e1db961b"}, {0x6, 0x10, "0e5b089c7bdf76781e0dd77efca2"}]}]}}, {{0x4e20, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0xc900, 0x0, 0x1, {[@nop, @nop, @md5sig={0x13, 0x12, "7b9fbab62222fc5d68a5a191b4ca12cd"}]}}, {"58f7750231691a842ed2ef094ed0f3b99e5288fbeadfaefe11dba0f65f9270a53146cb3ba5d728becb47b63745a10f23d3c310172f18641f32aa3cb7405d1a9b87e0d846a1703da46041c002bc1e7f9bd349"}}}}}}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000001000000002"], 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r9, &(0x7f0000000300)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000000c0)={0x0}, 0x7, 0x0, 0x0, 0x2004c004}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="6800000013000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000034001a80290002800c"], 0x68}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 35.070460739s ago: executing program 0 (id=807): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)}], 0x1}, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000100), 0x0}, 0x20) (fail_nth: 2) 34.675133092s ago: executing program 0 (id=809): r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x121000, 0x0) perf_event_open(&(0x7f0000000000)={0x4, 0xfffffffffffffe38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffb}, 0x10c0e8, 0x0, 0x0, 0x3, 0xc, 0x8001, 0x7fff, 0x0, 0x2}, 0x0, 0x8, 0xffffffffffffffff, 0x18) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x4, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x405, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x4, 0x4107a2b1, 0x358827d1, 0x8, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x4, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x8, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x7ffffffd, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x8, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x4000008, 0x40, 0x6, 0x5, 0x4, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x470, 0x4, 0x0, 0x7, 0x3, 0xe, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x0, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa1, 0x6, 0x100009]}}) syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r2, 0x40046, 0x10821}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4040840}, 0x20000800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000ffffffffffffffff0000000000000000000000000000001400"]) getsockopt$inet_udp_int(r0, 0x11, 0x65, 0x0, 0x0) fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") r5 = io_uring_setup(0x86c, &(0x7f00000000c0)={0x0, 0x1000, 0x10000, 0x100000, 0x75}) msgget(0x1, 0x400) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) r7 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedreceive(r7, 0x0, 0xfffffffffffffee3, 0x1, 0x0) 34.385872861s ago: executing program 0 (id=810): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[], &(0x7f0000000040)=""/249, 0x46, 0xf9, 0x6}, 0x28) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)={0x10, 0x7a, 0x601, 0x70bd2a}, 0x10}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd3a, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 31.29972445s ago: executing program 0 (id=837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2, 0x7, 0x4, 0x7ffc0001}, {0x4, 0x40, 0x62, 0x79}, {0x3ff, 0x9, 0x2, 0x4}, {0xff, 0xa0, 0x8, 0x3}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x8}, @private=0xa010100, 0x13, 0xa}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 31.146554065s ago: executing program 33 (id=837): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x2, 0x7, 0x4, 0x7ffc0001}, {0x4, 0x40, 0x62, 0x79}, {0x3ff, 0x9, 0x2, 0x4}, {0xff, 0xa0, 0x8, 0x3}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r3, 0x89fa, &(0x7f0000000100)={'sit0\x00', &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x8}, @private=0xa010100, 0x13, 0xa}}) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x21, 0x0, @l2={'eth', 0x3a, 'ip6gre0\x00'}}}}}, 0x34}}, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r2, 0x800, 0x70bd2c, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.372007821s ago: executing program 5 (id=1119): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000, 0xffffffffffffffff, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) statx(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x40000, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @remote}, 0x1c) shutdown(r1, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0, 0x568}, 0x8) pipe(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c0000000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100000000000c000c40000000000000000714000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x16, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000fcffffff000000000946000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000002850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x220240, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0x2283, &(0x7f0000000180)=0x65) openat$selinux_avc_hash_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.258244035s ago: executing program 5 (id=1121): r0 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffa, 0x0, 0x0, 0x0, 0x40}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x5, 0x5}, 0x1000, 0x0, 0x7ffffffe, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) file_getattr(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x18, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d10c6a41d1c26ab7000fff5000007000040"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x4008000}, 0x48004) ioctl$SIOCSIFHWADDR(r8, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="0400"}) 3.950772494s ago: executing program 5 (id=1126): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x4008894) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x14, r4, 0x321, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), &(0x7f00000002c0)=""/187}, 0x20) add_key(0x0, 0x0, &(0x7f0000000300)='\x00\x00\x00', 0x3, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c90c, &(0x7f0000001340)={[{@delalloc}, {@init_itable}, {@jqfmt_vfsold}, {@delalloc}, {@errors_remount}, {@nomblk_io_submit}, {@nojournal_checksum}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid, 0x32}]}, 0x1e, 0x4e1, &(0x7f0000001a40)="$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") setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a00000000", @ANYRES32=r7, @ANYBLOB="06001500070000000c001680", @ANYRES32], 0x38}}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000680)={0x0, 0xfffffff8}, &(0x7f00000006c0)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x94) prctl$PR_CAPBSET_READ(0x17, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) 3.683266693s ago: executing program 5 (id=1129): ioprio_set$uid(0x3, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)) prlimit64(0x0, 0xc, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() cachestat(r0, &(0x7f0000000040)={0x6, 0x5}, &(0x7f0000000340), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) get_mempolicy(&(0x7f0000000000), 0x0, 0x3, &(0x7f0000ffe000/0x1000)=nil, 0x4) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xb, 0x0, 0x100000}, 0x20) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, 0x0, &(0x7f00000000c0)) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(r0, r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000380), 0x0}, 0x20) r6 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000300)={0x0, 0xffffffffffffff14, &(0x7f00000001c0)={0x0}}, 0x800) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) unshare(0x6c040000) name_to_handle_at(r0, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x600) 3.258513716s ago: executing program 5 (id=1136): ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, &(0x7f00000000c0)={0x3}) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0xffffff1f, 0xfffffff8, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20044, 0x5c182}, [@IFLA_IFNAME={0x14, 0x3, 'hsr0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008880}, 0x4008040) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40440, 0x3) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300), 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) clock_gettime(0x0, &(0x7f0000000140)) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) clock_gettime(0x0, &(0x7f0000000180)) clock_gettime(0x0, &(0x7f00000001c0)) capset(0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000001640)='attr/keycreate\x00') setsockopt$inet6_buf(r4, 0x29, 0x14, &(0x7f0000000000)="1ca8fa6ae78fd3f386b6b0e9173dc3cf41ae6d9126d1850d47920f8c494156af976822ad5b8f3bbb50dd3fd9242743277d7a61c589a9d7bfd97c10", 0x3b) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="48bd370e9b04cdd58b47f6e09cfb9f3da5bfb5103ee20fde78430b0ebd4bba2a6819453e7083a49ebd789e7e2aa08d67"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0xba9315253d54dce6, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4000) r6 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r7, 0x7041, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000014c0)={'syztnl0\x00', &(0x7f0000001440)={'syztnl2\x00', 0x0, 0x29, 0x0, 0xf9, 0x1ff, 0x40, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7, 0x10, 0x4, 0x3}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001580)={0x6, 0x14, &(0x7f0000001280)=ANY=[@ANYBLOB="18000000757900000000000005000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000180000003300000000000000080000009500000000000000"], &(0x7f0000001340)='syzkaller\x00', 0xfffffffd, 0x88, &(0x7f0000001380)=""/136, 0x41000, 0x1, '\x00', r8, 0x25, r4, 0x8, &(0x7f0000001500)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[r4, r4, r1], 0x0, 0x10, 0x75f}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa}, 0x94) socket$netlink(0x10, 0x3, 0x10) 3.107711011s ago: executing program 5 (id=1139): sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x75, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000900)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x240}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x6a}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="340440eb405ea02769cbc722599b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x514, &(0x7f0000002080)="$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") 2.803802851s ago: executing program 4 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x68000000}, 0x0) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e23, 0x2a0, @private1}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x0, @private2}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf40000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_UIE_ON(r6, 0x7003) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={0x0, 0xd3, 0xd}, 0xc) r7 = syz_open_procfs(0x0, &(0x7f0000000280)='net/vlan/config\x00') read$eventfd(r7, &(0x7f0000000000), 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000180)=@file={0x1}, 0x6e) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1}, 0x6e) unshare(0x40020000) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000b00)={0x630, 0x3f3, 0x10, 0x70bd27, 0x25dfdbfc, {0x2, 0x1, 0x4, [0xfffff48a, 0x9, 0x7, 0x6, 0x3, 0x5c2, 0x6, 0x4, 0xa70a, 0xfffffffb, 0x6, 0x10001, 0x9, 0x4, 0x10, 0x6, 0xb, 0xfff, 0x2, 0x6, 0xf, 0x4, 0x3843, 0x7, 0xfffffff8, 0x5, 0xbce4, 0x80000000, 0x80000000, 0xa2c, 0x6, 0x2, 0xffffffff, 0x1, 0x2e, 0xfff, 0x5, 0x400101, 0x2, 0xb, 0x0, 0x8001, 0xe, 0xffffffff, 0x1000, 0x717, 0xb47, 0x4, 0x3, 0xfe000, 0x10, 0x6, 0xaa2, 0x7f, 0x9, 0x8, 0x5, 0x8000, 0x7d, 0x7, 0x9, 0x350ad975, 0x60e1, 0x8], [0xc2, 0xd673, 0x7, 0x5, 0xffff0001, 0xb, 0xb, 0x8100, 0x7, 0x2, 0x800, 0x8, 0x2218, 0x7e, 0xfffffe64, 0xb, 0x7, 0x5, 0xc17, 0x6, 0xffffff7f, 0x3c4c, 0x6, 0x9, 0x0, 0x100, 0x1, 0x9, 0x6, 0x10, 0x1, 0xfffffffd, 0x3b6, 0x1, 0x200, 0x3, 0x40, 0x3, 0xf9, 0x80000000, 0x1, 0xc, 0x914, 0xfffffff1, 0x81, 0xa304, 0x0, 0x9, 0x100, 0x9, 0x5, 0x9, 0x35e4, 0x1, 0x6, 0x1, 0xfff, 0x8, 0x10, 0x40000080, 0x0, 0x7, 0x9, 0x8000], [0xabc, 0xffffffff, 0xffff, 0x2, 0x8, 0x6, 0x5, 0x2, 0x4, 0x100, 0x9, 0x5, 0x6, 0x0, 0xec, 0x5f, 0x3, 0x9, 0x1, 0x0, 0xbb, 0x8, 0xb6, 0x0, 0xfffffff5, 0x5002, 0x100, 0x2, 0x6f8d, 0xf, 0x6, 0x2, 0x7, 0x1, 0x1, 0x0, 0x6, 0x53a, 0xa0, 0x1, 0xb21c, 0x6, 0x100, 0xb6, 0x80, 0x1, 0x5, 0xb, 0xc82, 0x6, 0xff, 0x20000004, 0x7fffffff, 0xac64, 0x10000, 0x7, 0x24f9, 0xe0f, 0x86, 0x4, 0xd, 0x7fffffff, 0x1, 0x3ff], [0x2, 0xffffffff, 0x9, 0x800, 0x3, 0x1d, 0x10000, 0xf, 0x4, 0x81, 0xcda2, 0xfffffff5, 0x9, 0xfffffff7, 0x1, 0xb809, 0x2, 0xffffffff, 0x9, 0x6, 0x5, 0x9, 0x4, 0x3, 0xffff, 0x6, 0xb, 0x2000, 0xcac, 0x18000000, 0x5, 0x7, 0x6, 0xffff, 0x3, 0xe, 0x100, 0x9, 0x38f, 0xa0e830d8, 0x7fffffff, 0x5, 0xfffffff7, 0x400, 0x7, 0x9, 0x0, 0xe, 0x200, 0x6, 0x5, 0x10001, 0xe, 0xb33a, 0x8, 0x0, 0xf, 0x9, 0xdbd40000, 0x9, 0x1, 0x1, 0x9, 0x1ff], 0x20e, ['*+@\\,-//:\x00', '\xfd\xd0\x9aC\x93\x1a\xa9t@\t\a;\x8by\xea\xd9\x8c\x9dg\x0e\x13\xce\x84*\xb3\xf4\xe7\xbf \x16\xe2j\xb1q0l\x89\x81\xb7?\xe8\xe0\x14\xaf\x9bTF\x02\b\xea!L]\xfc\xe0\x1a\\\xa4\xb4\xcbu\x8b >\xe3m\xf4;\x0f\x9a}&\'\xb83\x18p\x9b8L\x1b\x9b\x06\xee\nM\xf5\xfdB\x1b\xf9A\x97\xc0<\xb6\xd9#5N\xa2]\xafg\x03\xc5\'>\x00 m\x06\x8f\x8cN\xebh\x9f\xad\xef\x10Sp\xb0[0\xf12\xf20\x11W|\xbd@\xef\xa9\xdfY\xf3\x9d\xe1:\xb7+\x1d\xd0\x98\xf2l\x9b\xa8e\x8d\x92]\"\xf1\xed\x93\x9f\v\x03\x87#]\xc6KI\x84\xe1\xce2\xed\xb2\xb8\xeb\x8b\xe9\xc9\xf56\x89\x15\xbb\xb0K\xca\x04r>\x8b\xe3\\\xe8\xdbj\x82\x02\xc6\x00\xa7\xb1\xe3\xb0-\xfe\x06s!a\x92\x897d\x8a\x02@NQ\xdc\x81(\x9a\x88\xf0\xc3\xce.@\x98RL\x11\xc0c\xcd\x13H\x96\xe2\xc9\xce\xd9\xca\xe1\xc3\x93\x8ecu&\xef\xf7n\x81\xf6LJz\xffH\x81\xf4\x83v\xbbk9{\xe5\xf9\x1a\x1c\xe2\x81,@\x12o8RW\x8b1\xe5\x01\xff-\xb9<\xd0y7\xe3\xd5a\x87\xde6J8t\xae\tM\xaa\xc9\xce.\xce', '&@\\\x1c#}{\x00\x04\xd6Q\x86X\xa5\xef\x05\x92\xf2!D\xdf\x9e8u9\x19\xc2\x06\xbf\xad\x8e\x9d\x9cA\xbf\xd4\r\xbdk\'\xeeQ&\xc9\x93Q\xd68\x8a\xfe\xda\xfcRK\xc8n\xa7\x02\x85\x04\xc7W\xbc,\xbeq\x00\xaf\xa6BE\xff\xder=\xdf@\xa7\x19\x98=\xdej+\x9b\x87\xf3\xf0\xffFDJ\x05\xeb\x84', '/[ev/rtc0\x00X\xc3\\|>\xde%B5G\xf89\xb8\x90jAJi\bw|\xaa\xd0\"\x17\x7f\xc1\xbc\x0103 \x11=]\xe3\x9b\x03PC\xda\xc3\xca\xfe\xf7\x16\xd6\"\x1eUX\x03\xe9#\x99\x16\xbd\xc3U`\xf9)\x8b\xa0M\x86\xaa:\xa46R\xa6\xc3\xfe\bF{\xdd\x80\x04\x85\xee', ',%-:$\x00', ',^%\xd4:,.\x00', '\x00', '{\'\x00']}, ["", ""]}, 0x630}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x2c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008814}, 0xbd7838ee412df6f2) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000000)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 2.605074168s ago: executing program 1 (id=1151): socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x22060600) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) socket(0xa, 0x800, 0x0) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f00030100000009"], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}}, 0x8000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0xffffeff9, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2.19590185s ago: executing program 2 (id=1155): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lsm=0x2b}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e80)=@newchain={0xa94, 0x64, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xffff}, {0x5, 0x1}, {0xfff2, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_flow={{0x9}, {0xa1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8000}, @TCA_FLOW_EMATCHES={0x538, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x33c}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x1}, {0x0, 0x1, 0x1}}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x81}, {0x3, 0x9, 0x2, "f5d3efb0131ee48dba"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x25, 0x8, 0x2}, {0xffffffffffffffff, 0x3, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x3}, "afb685b3346c570aa3a17afad937b56d1798665d53467e71fad4810a8af3deb5d43971701fa8e7f8247cb477b2af15aa4a39f53d001d3060baf7ff39a63ae90010fde3c28ba1c2978c8e4f581c0a7f580f152f0565"}}]}, @TCA_EMATCH_TREE_LIST={0x1ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x81, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x2}, {0x7, 0x4, 0x2, 0xcc1}}}, @TCF_EM_IPT={0x10c, 0x3, 0x0, 0x0, {{0xffff, 0x9, 0x1ff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xe4, 0x5, "6a1914176fa7e2ce3e6ffa540eb00de6ee6d129acc97e59d004effcadfbf911ba827b32a832bf9622ef8fe363ca6ea8014000ddb4b938a07512e15ad164cd173a6b23845c60cd598804fbddc82d71e985058a356fca53310af5a2b8cbacfa7488968b18442f04e425c85c231279a5a243559d914b38a501419bef0fa803de5eff1f223b77c3123854be8e71637590d633bb65df815b911e74017cc35797be4780b4b6419125d076b73207888fb4a5467e4b48710f154ba7f49cb9b891abf2ccbcd9b07e1d1e0f2c8be16fce8295b682d9dc7582b25524d12d61f9e6fdf2356df"}]}}, @TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0xe8}, "4c0234889786a368144d911cbc"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x800, 0x8, 0x9}, {0x3, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x3}, "e0a633796ce43a55147d84d75ffbbe61ae765a7885c5fbd971f2eb7e90b655ac670ffafd3ff854cbb8"}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x2, 0x4}, {0x5, 0xa, 0x2, "8ad5222f277ab8b75ebc"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0xfff, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0xffff, 0x2c}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="7b955978a880", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="244d2de75818e4", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xa0, 0x1}, {0x0, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4e3124f511"]}]}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5466b840", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8bb33185"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e934d93dabc65261"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="fbcdc6"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x81, 0x2}, {0x2, 0x3, 0x99e08ab41ffdcb1d}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="0c87", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x1, 0xf, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6dce}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x0, 0x7, 0x9, 0x4, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x81b}, {0x5, 0x9, 0x5a, 0x9ece}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x4}, {{0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x3, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x7, 0x0, 0xfffa}, "f9532ddb1751bfbd79b7b63e29a51c6cdc18deb2cfa9b4b71acde1acf25c12d612511e0866e6e78c523bc2e0725ab02154b3debcdf5a7b8af84cfef61eb6c782466aab2c5368d4c59e1c66245199e751b3c20221d5e8c8bf8cf984e86de3678df30fffc8747784326d1217570102d85b66130059271fff17bb6c26bd1cb473fd653d9891b1ef410646bad12179"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x6}, {0x4, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x1}, {0xffffffffffffffff, 0x1, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x3ac8}, {0x6, 0x1387bc29, 0x200, 0x9}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xff, 0x1, 0x8}, {0x8a1, 0x2, 0xfff, 0x1, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3ff}, @TCA_FLOW_ACT={0x26c, 0x9, 0x0, 0x1, [@m_bpf={0x174, 0xf, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x1, 0x9fc, 0x9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9c0e, 0x4, 0x5, 0x1, 0x8}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1ff, 0x54, 0xc9}, {0x3, 0x68, 0x2, 0x2}, {0x1, 0x9, 0x4, 0x80000000}, {0x7, 0x0, 0x1, 0x3ff}]}]}, {0xd4, 0x6, "eb5d3f349ced79e8c60083a3d92c12195694475f0b76a79e14c0b97d34678c549298f8180954c80b15f219f8f5642dd9c0bf65d4ea4c1059a78d5744aa16a82d25e8ff10c30f40d1b20cad866f8a36fef8eb08d7a373a6be1b3a188f1c25ccc6e724205d7e5229800e95d15fad6e81e1aa7ba268993ce818eee4b2384e763a7b910c257a32ff92d7c8998a12ea98ea9ed9c5737de023390cffba902f706174e83c0b6ac57f3ffc854bd93bd8fbd346ac766f8af1d84a93e2ce4745968b23183a0d5c326657d5155f5d25513cf4bcca12"}, {0xc}, {0xc, 0x8, {0x172e60b035dbd325, 0x1}}}}, @m_sample={0x78, 0x7, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xbe6e}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x31, 0x6, "42882fee90fb19a44b2f18da311b9062d5832614c199f0dd6e4b7a29580be6c2381566e88e3a664cd34ede730b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x7c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x8, 0x0, 0x371edda1, 0x9da}, 0x72}}]}, {0x33, 0x6, "6f46fb1e8c36a3155ae5d6e967d915e798c72aa65b39590134388d882d95c1682e5ed4c077c4ceb180b4e34c563dbb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_EMATCHES={0x264, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x900}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x230, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0xb, 0x4, 0x7f}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="2bd7629a191c", @TCF_META_TYPE_VAR="98dbaa151d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x81}, {0x0, 0x3}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="a5ccee2e38d140", @TCF_META_TYPE_VAR="087a7fee4fb96c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6c6564347837e2a6"]}]}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x346a, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x25}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xe67f, 0x4, 0x100}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff, 0x8, 0x4}, {0x2, 0xfc, 0x4}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xffff, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3b}]}}, @TCF_EM_IPT={0x170, 0x2, 0x0, 0x0, {{0x200, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x70, 0x5, "8b91e15f7413702fe7bf5b96fbfec05edc9d60335520b7b9ed0353c779138f50ec789c310cbe4d9266cb80a55f8c0af6c6a265e3ca620a6261ea67cc8e6db39f78b15d5961d89b6585840def606d386459c0e9d4230fd40616260d43540cc9cec79bdae043fad1e6b42da05c"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xd8, 0x5, "50e4294a73e581722bb63d51ede00ab59563ad974110fd1c74baf9663c77a81bc03de1f37f3becf2fbcc180341c97d76a5ca9e197da527c2831cd39849eca7950816008bc466fac6639f215b57fe9a7f0e93f2f89332f65a8ab7d2cce4364fa96e090532f6ef463d2e84f5092a4581eb20910d1a8eaf5b53adb3e3f505ff3d2d999b34dcb5e8fd5f92014324af0647dabe33bc1c35a164b3f0b6bd4262c165030f250f4144699d5422c05694d0e90eff4bd96798e182f925776f3fee61da4acbf335091f500b328139be243b7f3b8890392e76b5"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0xb2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @TCA_RATE={0x6, 0x5, {0xe7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9c}}]}, 0xa94}}, 0x8040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b00000073110e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000e00), &(0x7f0000000e40)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x0) 2.162867202s ago: executing program 4 (id=1156): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000140)={0x1d, r1}, 0x39, &(0x7f0000000040)={&(0x7f0000000400)=@can={{0x9b50, 0x0, 0x1}, 0x8, 0x2}, 0x10}, 0x2}, 0x1004885d) r2 = socket$inet(0x2, 0x80001, 0x84) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000100)={{0x2, 0x4e30, @broadcast}, {0x1, @remote}, 0x6, {0x2, 0x4e21, @local}, 'bridge0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000040)={'ip6erspan0\x00', 0x200}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000200)) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x100000000009, 0xa, 0x0, 0x3}, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r5, 0x400, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x8, 0x2, 0x10000}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) getsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000400)={@broadcast, @dev}, &(0x7f0000000440)=0xc) 2.046972045s ago: executing program 2 (id=1157): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00'}, 0x94) unshare(0x60000600) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x200, 0x3}, 0x102802, 0x3, 0x0, 0x1, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000014000780080006408900000000000000020073797a32000000000500040000200000050005000a00000011000300686173683a6970f3b710ecaee882d128a589e605c1de1bb7b2c7959fbf4225ded7"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDDELIO(r2, 0x7040, 0x6) sync() sync() sync() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5a8, &(0x7f0000000680)="$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") sendmsg$AUDIT_SET(0xffffffffffffffff, 0x0, 0x20040090) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x1040) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/image_size', 0x129a82, 0x0) write$bt_hci(r3, &(0x7f0000001300)={0x1, @write_remote_amp_assoc={{0x140b, 0x5}, {0x87404d9a1c7bb7db, 0x1, 0x2}}}, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x15, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/253, 0xfd}], 0x1) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r0], 0x48}, 0x1, 0x0, 0x0, 0x28040000}, 0x894) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x50) 1.945344498s ago: executing program 1 (id=1159): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x7) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000000018000000001200000000000000000000000b0100000000005f00313e9e23ab28763e0985ad8372204c9c1b734b696bae168aa60e7ec2af90dfb684fea0ad1fbade2b2b1a2696fa10a7f1aba5d9e6542d7fb8c81b80cad75aec8423a47e7618af4d113d497ca842b42ba5fb4e73523a967f1e805f5eb2dde06300e94a89070f6d4d12b94eacfb310e0114ada95c4eff1bcc6aacd4cb5d5769a3e1d036a3356a8bb67816d1952ceb307ea1dc992ccf73502d6e229d85e34d908d761a70ed13816fc4b6e5317e27f82451a77a5bffd4c6790fa2bca68da08e586e7e77e7672006f2f19b99f7bdf2b5bb1a7dd0b48c7e05757bdf47fdc3b5c049d311b5ca4d"], 0x0, 0x34}, 0x28) keyctl$read(0xb, r0, &(0x7f0000000100)=""/54, 0x36) 1.944867538s ago: executing program 1 (id=1160): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x9) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) getdents64(r3, 0x0, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r4, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc1100001200010200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010007c01c0002"], 0x11fc}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) 1.844259542s ago: executing program 6 (id=1162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x1c, 0x1, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x24000014) 1.843747672s ago: executing program 6 (id=1163): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001280)=@bpf_ext={0x1c, 0x27, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000000008000000000ffffffff18110000", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b703000000000000850014473ef5589b58a3152a58c33a000083000000bf09000000000000dc090100000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180000000500000000000000050000001832000002000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018150000", @ANYRES32, @ANYBLOB="0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f00008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000009c0)='syzkaller\x00', 0x101, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xb3c8, 0xffffffffffffffff, 0x0, &(0x7f0000001240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x5}, 0x94) r4 = syz_create_resource$binfmt(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) write$binfmt_script(r5, &(0x7f0000000ec0)={'#! ', './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xfd) close(r5) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r6, 0x894c, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) socket$kcm(0x10, 0x2, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000380)=""/26, &(0x7f0000000480)=0x1a) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d0000000003000000030000000000000003000000040000"], 0x0, 0x5e, 0x0, 0x5}, 0x28) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r7) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES64=r0, @ANYBLOB="13080000000000000000110000"], 0x84}, 0x1, 0x0, 0x0, 0xc8000}, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0xc, @private2, @private0, 0x700, 0x7800, 0xb3, 0x3b}}) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYRES64=r8], 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4008894) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x1}, 0x1000, 0x1, 0xffffff7e, 0x8, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x29c03, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r10, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa269}, 0x50) 1.843443012s ago: executing program 1 (id=1164): ioprio_set$uid(0x3, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x8, &(0x7f0000000580)=""/193) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) r2 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) socket(0x10, 0x803, 0x0) 1.416085546s ago: executing program 6 (id=1165): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e"], 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2800300000000000290000000400"], 0x28}, 0x4004004) 1.414463386s ago: executing program 6 (id=1166): r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x200) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) sendfile(r2, r1, 0x0, 0x7fffffff) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@map, 0x5, 0x1, 0x29, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000180)={r5, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r5, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r5, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r7, 0x407, 0xb) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex=r5, r2, 0x15, 0x0, 0xffffffffffffffff, @void, @value=r7, @void, @void, r3}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r8) mount$bpf(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x2010000, 0x0) r9 = inotify_init1(0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$dupfd(r0, 0x406, r9) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r10, &(0x7f0000002ec0)={&(0x7f0000000580)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x101, 0x4000}, 0x80, 0x0}, 0x20000000) r11 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r11, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="05000000100e00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000002901"], 0x80}, 0x1, 0x0, 0x0, 0x28000880}, 0x4) 1.365541577s ago: executing program 2 (id=1167): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a800800058004000380"], 0x2c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @lsm=0x2b}, 0x94) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001e80)=@newchain={0xa94, 0x64, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xa, 0xffff}, {0x5, 0x1}, {0xfff2, 0xd}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa}, @TCA_ROUTE4_IIF={0x8, 0x4, r2}]}}, @filter_kind_options=@f_flow={{0x9}, {0xa1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x8000}, @TCA_FLOW_EMATCHES={0x538, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x33c}}, @TCA_EMATCH_TREE_LIST={0xdc, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x4, 0x8, 0x1}, {0x0, 0x1, 0x1}}}, @TCF_EM_IPT={0x24, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x81}, {0x3, 0x9, 0x2, "f5d3efb0131ee48dba"}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x25, 0x8, 0x2}, {0xffffffffffffffff, 0x3, 0x8}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x0, 0x7, 0x3}, {{0x1, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0x64, 0x3, 0x0, 0x0, {{0x0, 0x0, 0x3}, "afb685b3346c570aa3a17afad937b56d1798665d53467e71fad4810a8af3deb5d43971701fa8e7f8247cb477b2af15aa4a39f53d001d3060baf7ff39a63ae90010fde3c28ba1c2978c8e4f581c0a7f580f152f0565"}}]}, @TCA_EMATCH_TREE_LIST={0x1ac, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x81, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x2}, {0x7, 0x4, 0x2, 0xcc1}}}, @TCF_EM_IPT={0x10c, 0x3, 0x0, 0x0, {{0xffff, 0x9, 0x1ff}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0xe4, 0x5, "6a1914176fa7e2ce3e6ffa540eb00de6ee6d129acc97e59d004effcadfbf911ba827b32a832bf9622ef8fe363ca6ea8014000ddb4b938a07512e15ad164cd173a6b23845c60cd598804fbddc82d71e985058a356fca53310af5a2b8cbacfa7488968b18442f04e425c85c231279a5a243559d914b38a501419bef0fa803de5eff1f223b77c3123854be8e71637590d633bb65df815b911e74017cc35797be4780b4b6419125d076b73207888fb4a5467e4b48710f154ba7f49cb9b891abf2ccbcd9b07e1d1e0f2c8be16fce8295b682d9dc7582b25524d12d61f9e6fdf2356df"}]}}, @TCF_EM_CONTAINER={0x1c, 0x2, 0x0, 0x0, {{0xe8}, "4c0234889786a368144d911cbc"}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x800, 0x8, 0x9}, {0x3, 0x5, 0x3}}}, @TCF_EM_CONTAINER={0x38, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x3}, "e0a633796ce43a55147d84d75ffbbe61ae765a7885c5fbd971f2eb7e90b655ac670ffafd3ff854cbb8"}}]}, @TCA_EMATCH_TREE_LIST={0x130, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x1c, 0x1, 0x0, 0x0, {{0xd, 0x2, 0x4}, {0x5, 0xa, 0x2, "8ad5222f277ab8b75ebc"}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x4, 0x7, 0x6}, {{0x1, 0x0, 0x1, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_META={0x6c, 0x2, 0x0, 0x0, {{0xfff, 0x4, 0x8}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0xffff, 0x2c}}}, @TCA_EM_META_LVALUE={0xe, 0x2, [@TCF_META_TYPE_VAR="7b955978a880", @TCF_META_TYPE_INT=0xa]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="244d2de75818e4", @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0xa0, 0x1}, {0x0, 0x9, 0x2}}}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="4e3124f511"]}]}}, @TCF_EM_META={0x74, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT, @TCF_META_TYPE_VAR="5466b840", @TCF_META_TYPE_INT=0x3]}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="8bb33185"]}, @TCA_EM_META_RVALUE={0x10, 0x3, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="e934d93dabc65261"]}, @TCA_EM_META_RVALUE={0x7, 0x3, [@TCF_META_TYPE_VAR="fbcdc6"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x2, 0x1}, {0x9, 0x9, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x81, 0x2}, {0x2, 0x3, 0x99e08ab41ffdcb1d}}}, @TCA_EM_META_RVALUE={0xe, 0x3, [@TCF_META_TYPE_VAR="0c87", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x9}, {0x1, 0xf, 0x5, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6dce}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x60, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x9, 0x1, 0x6}, {0x0, 0x7, 0x9, 0x4, 0x5, 0x1, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x81b}, {0x5, 0x9, 0x5a, 0x9ece}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x6, 0x7, 0x4}, {{0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x4, 0x7, 0x1}, {{0x3, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x9c, 0x2, 0x0, 0x0, {{0x7, 0x0, 0xfffa}, "f9532ddb1751bfbd79b7b63e29a51c6cdc18deb2cfa9b4b71acde1acf25c12d612511e0866e6e78c523bc2e0725ab02154b3debcdf5a7b8af84cfef61eb6c782466aab2c5368d4c59e1c66245199e751b3c20221d5e8c8bf8cf984e86de3678df30fffc8747784326d1217570102d85b66130059271fff17bb6c26bd1cb473fd653d9891b1ef410646bad12179"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x6}, {0x4, 0x3, 0x3}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x7, 0x8, 0x1}, {0xffffffffffffffff, 0x1, 0x6}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x3ac8}, {0x6, 0x1387bc29, 0x200, 0x9}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xff, 0x1, 0x8}, {0x8a1, 0x2, 0xfff, 0x1, 0x3, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x200}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x3ff}, @TCA_FLOW_ACT={0x26c, 0x9, 0x0, 0x1, [@m_bpf={0x174, 0xf, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x6, 0x5, 0x1, 0x9fc, 0x9}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x9c0e, 0x4, 0x5, 0x1, 0x8}}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{0x1ff, 0x54, 0xc9}, {0x3, 0x68, 0x2, 0x2}, {0x1, 0x9, 0x4, 0x80000000}, {0x7, 0x0, 0x1, 0x3ff}]}]}, {0xd4, 0x6, "eb5d3f349ced79e8c60083a3d92c12195694475f0b76a79e14c0b97d34678c549298f8180954c80b15f219f8f5642dd9c0bf65d4ea4c1059a78d5744aa16a82d25e8ff10c30f40d1b20cad866f8a36fef8eb08d7a373a6be1b3a188f1c25ccc6e724205d7e5229800e95d15fad6e81e1aa7ba268993ce818eee4b2384e763a7b910c257a32ff92d7c8998a12ea98ea9ed9c5737de023390cffba902f706174e83c0b6ac57f3ffc854bd93bd8fbd346ac766f8af1d84a93e2ce4745968b23183a0d5c326657d5155f5d25513cf4bcca12"}, {0xc}, {0xc, 0x8, {0x172e60b035dbd325, 0x1}}}}, @m_sample={0x78, 0x7, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0xbe6e}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}]}, {0x31, 0x6, "42882fee90fb19a44b2f18da311b9062d5832614c199f0dd6e4b7a29580be6c2381566e88e3a664cd34ede730b"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_csum={0x7c, 0x1e, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7ff, 0x8, 0x0, 0x371edda1, 0x9da}, 0x72}}]}, {0x33, 0x6, "6f46fb1e8c36a3155ae5d6e967d915e798c72aa65b39590134388d882d95c1682e5ed4c077c4ceb180b4e34c563dbb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_FLOW_EMATCHES={0x264, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x400}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x900}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x230, 0x2, 0x0, 0x1, [@TCF_EM_META={0x4c, 0x1, 0x0, 0x0, {{0xb, 0x4, 0x7f}, [@TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="2bd7629a191c", @TCF_META_TYPE_VAR="98dbaa151d"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0xa, 0x81}, {0x0, 0x3}}}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="a5ccee2e38d140", @TCF_META_TYPE_VAR="087a7fee4fb96c", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6c6564347837e2a6"]}]}}, @TCF_EM_IPT={0x30, 0x3, 0x0, 0x0, {{0x346a, 0x9, 0x1}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x25}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xe67f, 0x4, 0x100}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0xfff, 0x8, 0x4}, {0x2, 0xfc, 0x4}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0xffff, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x5}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x3b}]}}, @TCF_EM_IPT={0x170, 0x2, 0x0, 0x0, {{0x200, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x70, 0x5, "8b91e15f7413702fe7bf5b96fbfec05edc9d60335520b7b9ed0353c779138f50ec789c310cbe4d9266cb80a55f8c0af6c6a265e3ca620a6261ea67cc8e6db39f78b15d5961d89b6585840def606d386459c0e9d4230fd40616260d43540cc9cec79bdae043fad1e6b42da05c"}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xd8, 0x5, "50e4294a73e581722bb63d51ede00ab59563ad974110fd1c74baf9663c77a81bc03de1f37f3becf2fbcc180341c97d76a5ca9e197da527c2831cd39849eca7950816008bc466fac6639f215b57fe9a7f0e93f2f89332f65a8ab7d2cce4364fa96e090532f6ef463d2e84f5092a4581eb20910d1a8eaf5b53adb3e3f505ff3d2d999b34dcb5e8fd5f92014324af0647dabe33bc1c35a164b3f0b6bd4262c165030f250f4144699d5422c05694d0e90eff4bd96798e182f925776f3fee61da4acbf335091f500b328139be243b7f3b8890392e76b5"}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}, @TCA_RATE={0x6, 0x5, {0x5, 0xb2}}, @TCA_RATE={0x6, 0x5, {0x4, 0x80}}, @TCA_RATE={0x6, 0x5, {0xe7, 0x1}}, @TCA_RATE={0x6, 0x5, {0x9c}}]}, 0xa94}}, 0x8040) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000b00000073110e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x40, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0x9}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000000)={[{@usrquota}]}, 0x1, 0x588, &(0x7f0000000bc0)="$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") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000e00), &(0x7f0000000e40)=@v1={0x1000000, [{0x4, 0x9}]}, 0xc, 0x0) 1.155746544s ago: executing program 6 (id=1168): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./control\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x169) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff010}, {0x6, 0xff}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r2, 0x4) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) sendmmsg$inet6(r2, &(0x7f0000000640)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000000c0)="088ceb1dbfc6d0b4532acf72234775be770b40a7bfcde33f65c777", 0x1b}, {&(0x7f0000000200)="985d0b3f70b1e75e82e0bad4f8e8ad9d612bfb03b3411f976bed5ffeb189452d82941a2243c09f93378271d515bff1acff28c31b03607eef6fea095e4425ec6d1c5830adc729bcbf5fb55451762264572298486f34b90cb71a4963e1b49885cc21b0496a40761de6cee6fdcbdfc016a25d127d6ca057393405b54cbafc169e64dc4d02054659eaa7af0ce89d55c41cee1e6fabedecbeae25f34d5c2c37c788d5defe9eb2997dcf18e265ddc016069c7fc368c98400e7cff3e71ab939d3a5a4d65f7f49b18bc5bc9436b01c403c2a098255fc504dacd01b8a7c337105151fae37760c6e24bd", 0xe5}, {&(0x7f0000000300)="2617cfe902fff0730ded8eb8e73994e43d23c852a016a010f9e00aaed966ac8dda35bb1d739c", 0x26}, {&(0x7f0000000340)="d6f721766ec2ec", 0x7}, {0x0}, {&(0x7f0000000500)="4989c991ddb863a2e81600487be5451bae8f99c19d768c8c643352523d87a7d151a768df03a9f2eee9af09ac35a907f20e91e1fce35b7d776c636ad621f8c83d569d87837c018703a1c295238e28a4ab83d2352053e95be01301fdb883656dd2615f476b5df311566035c68a91f7fa06e98fe4a1c2c29c8daad8e6b8032e68eaa56542021f0b29d02a1345dff2fd3ec97c2d08de7c7776475745f11ac48a54255441", 0xa2}], 0x6}}], 0x1, 0x45) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100030000002ad30000010000001c000180060001000200000008000300ac1400"/42], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000080)) (async) r6 = syz_open_dev$loop(0x0, 0x100, 0x2) (async) ioctl$EXT4_IOC_GETFSUUID(0xffffffffffffffff, 0x8008662c, &(0x7f0000000000)) ioctl$BLKCRYPTOGENERATEKEY(r6, 0xc030128a, 0x0) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000040)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x21c, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0x208, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x204, 0x7, 0x10000000, 0x200000, 0x6}, 0x2}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_skbedit={0x8c, 0x18, 0x0, 0x0, {{0xc}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2, 0xe4e, 0x3, 0x4, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xff}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff1, 0x3}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x100}]}, {0xf, 0x6, "1abf842170b99b2d385cd0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_ife={0x114, 0x2, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x7b84, 0xffffffffffffffff, 0x0, 0x4000}, 0x1}}, @TCA_IFE_METALST={0x20, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x696}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0xa}, @IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_TYPE={0x6, 0x5, 0xc9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, @TCA_IFE_PARMS={0x1c, 0x1, {{0xe, 0x100000, 0x4, 0x6, 0x3}}}, @TCA_IFE_SMAC={0xa}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xd, 0x2, 0x4, 0x4}, 0x1}}]}, {0x4b, 0x6, "0745eda98a44af97ae46a19127d038c5123f3cb17331ff9148552ed3e66c1ec3da02b7f8bf5c416577450e40e13f05636db4c6ad1b3b41745844ead184f6931b6094c2079d7cfc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x7}}}}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0xc080}, 0x1004) (async) select(0x0, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) 1.090553516s ago: executing program 4 (id=1169): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0xa, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c319b2afffba969b38cf4de343a00d1d011b97d0cb91b70fcb0f374ca29506a7ba68bbd0fc635434ec92e2e725028fc0e886fd8b49765629039740b70ff58edde9d0bd920be2648b33a3a53724d7a4fd1cc896f8a7bbfe55dd39e358d4401e4a86d2661bdc5cb5ff3881ced037b6cc0f0d9b5bc650b6b03f86dfc3e3e87b94abf06de190ee6800b18be11eaa2caa8d693f4850697195a482277f4702ed368f320c72c8d29385b526efc0763aae61c145cd34289cdfddd2deddbc77de3c1372787d82a2bb00df"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000e9ffffffffb000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc0900000000000045080100002000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffffc40200000800000018220000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608efff76000000bf9800000000000056090000000000008500000000000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x3, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@fadd={0x58, 0x114, 0x6, {{0x83, 0x9}, &(0x7f00000003c0)=0xa0000000000000, 0x0, 0x8, 0x8000000000000001, 0x3, 0x4843, 0x74bd180309d768c, 0x5051}}], 0x58}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20002040) 973.11307ms ago: executing program 2 (id=1170): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x8, 0xffff}, {0xe, 0x4}}}, 0xfffd}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 551.133273ms ago: executing program 2 (id=1171): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7f, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$set_timeout(0xf, 0x0, 0x7) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x200, 0x2, 0x8, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0xfffffffffffffffe, 0x100, 0x0, 0x0, 0x80009, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4, 0x0, 0x3, 0x2, 0x0, 0x1, 0x0, 0x7, 0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x34}, 0x28) keyctl$read(0xb, r0, &(0x7f0000000100)=""/54, 0x36) 505.095044ms ago: executing program 1 (id=1172): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1da40006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a800080008001140040800009c000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000180)="2dce", 0x2}, {&(0x7f0000000300)="c2172926", 0x4}, {&(0x7f00000004c0)="8cd391a732", 0x5}, {&(0x7f00000005c0)="b1446ddbfe", 0x5}, {&(0x7f0000000680)="883273e8", 0x4}], 0x5, 0x0) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000001740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={0x1010, 0x464, 0x400, 0x70bd28, 0x25dfdbfd, "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", ["", "", "", ""]}, 0x1010}, 0x1, 0x0, 0x0, 0x1}, 0x8841) ioctl$TCFLSH(r0, 0x541b, 0x7ffffffffffffffe) 374.500969ms ago: executing program 2 (id=1173): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0x3, 0xfffffff9, 0x9, 0x101, 0x2, 0xffff}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x360a, 0xff, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000003, 0xfffffffa, 0xffffffff, 0x800, 0xf30d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x9, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x6, 0x4, 0x9, 0x200, 0x3ff, 0xf, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0xffffffff, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0xffff, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x1000000, 0xf9, 0x9, 0xe, 0x1, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x2001d58, 0x401, 0x3, 0x8002, 0x8, 0xffffffff, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x81, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0x3, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xdaf, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0x10001, 0x2c800010, 0x5d, 0xc5, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0xb, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0xff, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x30, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xfffffffc, 0x5, 0xe8, 0x6, 0x2f4, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0xc, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x52bd315b, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x6, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0x9, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef28, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x40000005, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x200, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x8, 0x3, 0x20008, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5ce6f98c, 0x84a515e295449745, 0x2ea9dcbf, 0x80000001, 0xfff, {0x7, 0x2, 0x3, 0x4, 0x9, 0x2000000}, {0x2, 0x2, 0xbae, 0x3, 0x1, 0x6}, 0x10, 0x5, 0x6}}]}]}}]}, 0x87c}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000200), &(0x7f0000000140)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r3, &(0x7f0000000040)}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x3, 0x10000}, 0x0, 0x2, 0x80, 0xf, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c00000000001400"], 0x30}}, 0x0) sendmsg$sock(r6, &(0x7f0000000e00)={&(0x7f0000000c00)=@alg={0x26, 'hash\x00', 0x0, 0x0, 'sha224-neon\x00'}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000c80)="ca6b8ddef113ab1dec294b92275689746206af7eb6be5b9ef68d89d49929ed4c826d6d8ac8379e64a90b6b3b6416ae81b69f61ae41121a1e0b488c20493af671fb1202870be724d1bf49b74c643f9310f529529880c171ef8ccb28d3193016f91fe54b0d78a82108277da815e9781b6b4283710a4354b3b67ab4350f153928a0bed596c1dec1ee2ad8f7eccd327f7c4d4432de7a58", 0x95}, {&(0x7f0000000d40)="629b6a8ea64383cb132a11c112a32ea3239f27f733a6ee6391df5e543cb8ccca121ecbbeec43ae429e35b5cbda4e1b89ea6c5a49f601082d3bb4a84120940544af7a15f2683512c53acaf462e7ab8ac5df1659f4f6809bd4da26301e4dee2c7d135bee45165cde62bb27dad6cd5cfa2db95618", 0x73}], 0x2}, 0x94) 296.087251ms ago: executing program 1 (id=1174): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum={0x3, 0x300}]}, {0x0, [0x30, 0x61, 0x5f]}}, 0x0, 0x29, 0x0, 0x9, 0x6}, 0x28) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000180)={0x88, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim={0x4, 0x1, 0x3}, @jumbo]}, 0x18) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f00000006c0)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x9, @v={0x5, 0x2, 0x3, 0x6, 0x4, 0x6, 0x2, {0x0, 0x5, "7e2df34e1b96497a"}, 0x40, 0x98, 0xc, 0x7}}, 0x19) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="6400000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000001400078008000640000002000800084000"], 0x64}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 295.968141ms ago: executing program 6 (id=1175): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x37) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x8b, 0x1000, 0x7fff}, 0x10) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000200)={&(0x7f0000000100)=""/247, 0x1000000, 0x800, 0x3}, 0x20) 205.090274ms ago: executing program 4 (id=1176): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f3, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8, 0x2, 0xa67240e7c926b756}, @IFAL_ADDRESS={0x14, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@deltaction={0x84, 0x18, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80000000}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4c040}, 0x20040844) 133.788216ms ago: executing program 4 (id=1177): perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x3, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0xa, 0x0, 0x0) connect$unix(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @remote, 0x6}}}, 0x30) writev(r0, &(0x7f0000000540), 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000dc0)=@newtaction={0x18, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfd, {}, [{0xffffffffffffffa3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20048840}, 0x1004) r4 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC=r4, @ANYRES64, @ANYRES64=r4], 0x1, 0x2c3, &(0x7f0000000180)="$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") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) rename(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000580)='./file0\x00') setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d00)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x10, {{@in6=@mcast1, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x2, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x3d04c9a7, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffb}, {0x0, 0x2, 0x0, 0x3}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@mark={0xc, 0x15, {0x35075d, 0x1004}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e"], 0xd4}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 0s ago: executing program 4 (id=1178): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="100000000000000028001280"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf, 0x9}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, '\x00', {0x4}, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r3 = eventfd2(0x40803, 0x80800) io_setup(0x81, &(0x7f0000000400)=0x0) socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000000000/0xc000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0x3, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) io_submit(r4, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x0, 0x0, 0x20, 0x7, 0x8, r2, 0x0, 0x0, 0x1397, 0x0, 0x1, r3}]) kernel console output (not intermixed with test programs): 04] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.709848][ T5863] loop4: detected capacity change from 0 to 256 [ 145.812222][ T5877] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 145.862105][ T5878] loop0: detected capacity change from 0 to 256 [ 145.951854][ T5875] loop2: detected capacity change from 0 to 764 [ 146.033528][ T5881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.718'. [ 147.505459][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.725'. [ 148.725489][ T5910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.735780][ T5910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.009468][ T5914] loop0: detected capacity change from 0 to 1024 [ 149.040164][ T5914] EXT4-fs: Ignoring removed orlov option [ 149.087736][ T5914] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 149.185456][ T29] audit: type=1326 audit(1778648015.295:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.242542][ T29] audit: type=1326 audit(1778648015.295:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.292549][ T29] audit: type=1326 audit(1778648015.295:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.342606][ T29] audit: type=1326 audit(1778648015.305:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.393996][ T29] audit: type=1326 audit(1778648015.315:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.455804][ T5927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.468173][ T29] audit: type=1326 audit(1778648015.315:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.507422][ T5927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.557558][ T29] audit: type=1326 audit(1778648015.315:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.587965][ T5933] netlink: 88 bytes leftover after parsing attributes in process `syz.0.735'. [ 149.607922][ T5933] netlink: 48 bytes leftover after parsing attributes in process `syz.0.735'. [ 149.636064][ T29] audit: type=1326 audit(1778648015.315:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.689474][ T5936] loop0: detected capacity change from 0 to 512 [ 149.709674][ T5936] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 149.729771][ T29] audit: type=1326 audit(1778648015.315:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.734460][ T5936] EXT4-fs (loop0): orphan cleanup on readonly fs [ 149.763802][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 149.777348][ T5936] loop0: lost filesystem error report for type 5 error -117 [ 149.777434][ T29] audit: type=1326 audit(1778648015.315:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5920 comm="syz.2.731" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 149.784880][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 149.784902][ C0] EXT4-fs (loop0): initial error at time 1778648015: ext4_read_block_bitmap_nowait:517 [ 149.784925][ C0] EXT4-fs (loop0): last error at time 1778648015: ext4_read_block_bitmap_nowait:517 [ 149.822918][ T5936] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 149.875423][ T5939] loop3: detected capacity change from 0 to 8192 [ 149.885997][ T5936] loop0: lost filesystem error report for type 5 error -117 [ 149.888518][ T5936] EXT4-fs (loop0): 1 orphan inode deleted [ 149.902901][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 152.529120][ T5936] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 152.559927][ T5936] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 152.576042][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.629478][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.669898][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.708922][ T5946] sg_write: data in/out 404444/42 bytes for SCSI command 0x0-- guessing data in; [ 152.708922][ T5946] program syz.0.736 not setting count and/or reply_len properly [ 152.729813][ T5948] netlink: 32 bytes leftover after parsing attributes in process `syz.3.739'. [ 152.735721][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.769395][ T5950] loop4: detected capacity change from 0 to 512 [ 152.796787][ T5950] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 152.811599][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.845759][ T5952] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.924686][ T5950] EXT4-fs (loop4): 1 truncate cleaned up [ 152.925073][ T5936] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 152.933274][ T5950] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.960718][ T5952] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 153.108146][ T5952] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 153.178390][ T5952] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.736: Block bitmap for bg 0 marked uninitialized [ 153.568282][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.588336][ T5966] netlink: 120 bytes leftover after parsing attributes in process `syz.4.744'. [ 153.622031][ T5966] loop4: detected capacity change from 0 to 2048 [ 153.701826][ T5966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.716785][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.730528][ T5972] netlink: 68 bytes leftover after parsing attributes in process `syz.3.745'. [ 153.763280][ T5972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.745'. [ 153.764682][ T5976] netlink: 20 bytes leftover after parsing attributes in process `syz.0.746'. [ 153.805019][ T5966] EXT4-fs error (device loop4): ext4_find_extent:904: inode #2: comm syz.4.744: inode has invalid extent depth: 7 [ 153.821479][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 153.855970][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 153.881599][ T5975] loop2: detected capacity change from 0 to 128 [ 153.904322][ T5980] loop1: detected capacity change from 0 to 128 [ 153.915695][ T5975] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.930786][ T5980] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 153.950494][ T5975] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.953584][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.979058][ T5980] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 153.999000][ T5983] loop0: detected capacity change from 0 to 512 [ 154.020212][ T5983] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.750: corrupted in-inode xattr: invalid ea_ino [ 154.058031][ T5975] netlink: 20 bytes leftover after parsing attributes in process `syz.2.747'. [ 154.093081][ T5983] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 154.093721][ T5980] netlink: 20 bytes leftover after parsing attributes in process `syz.1.748'. [ 154.103180][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 154.103243][ C0] EXT4-fs (loop0): initial error at time 1778648020: ext4_iget_extra_inode:5128: inode 15 [ 154.103342][ C0] EXT4-fs (loop0): last error at time 1778648020: ext4_iget_extra_inode:5128: inode 15 [ 154.140521][ T5983] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.750: couldn't read orphan inode 15 (err -117) [ 154.170863][ T5983] loop0: lost filesystem error report for type 5 error -117 [ 154.178844][ T5983] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.246884][ T38] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.252915][ T5983] xt_l2tp: missing protocol rule (udp|l2tpip) [ 154.289758][ T12] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 154.351869][ T5991] netlink: 4 bytes leftover after parsing attributes in process `syz.4.749'. [ 154.521634][ T5992] loop2: detected capacity change from 0 to 512 [ 154.811102][ T5992] __quota_error: 64 callbacks suppressed [ 154.811125][ T5992] Quota error (device loop2): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 154.855523][ T5992] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 154.899779][ T29] audit: type=1400 audit(1778648020.995:942): avc: denied { write } for pid=5982 comm="syz.0.750" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.931572][ T5992] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.751: Failed to acquire dquot type 1 [ 154.999382][ T5992] loop2: lost filesystem error report for type 5 error -117 [ 155.002529][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 155.016363][ C1] EXT4-fs (loop2): initial error at time 1778648021: ext4_acquire_dquot:7034 [ 155.025203][ C1] EXT4-fs (loop2): last error at time 1778648021: ext4_acquire_dquot:7034 [ 155.047920][ T5992] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.751: corrupted inode contents [ 155.063134][ T5983] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 13: comm syz.0.750: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 155.074302][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.089991][ T29] audit: type=1400 audit(1778648021.195:943): avc: denied { read } for pid=6004 comm="syz.4.754" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.116041][ T5992] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.751: mark_inode_dirty error [ 155.133753][ T29] audit: type=1400 audit(1778648021.225:944): avc: denied { open } for pid=6004 comm="syz.4.754" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 155.176299][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.177472][ T5992] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.751: corrupted inode contents [ 155.198930][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.199200][ T5992] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.751: mark_inode_dirty error [ 155.240784][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.240992][ T5992] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.751: corrupted inode contents [ 155.276214][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.276670][ T5992] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 155.295302][ T5992] loop2: lost filesystem error report for type 5 error -117 [ 155.295489][ T5992] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.751: corrupted inode contents [ 155.314882][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.315079][ T5992] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.751: mark_inode_dirty error [ 155.339546][ T29] audit: type=1400 audit(1778648021.445:945): avc: denied { map } for pid=6010 comm="syz.4.757" path="socket:[13459]" dev="sockfs" ino=13459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.363211][ T5992] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 155.363516][ T5992] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 155.382536][ T29] audit: type=1400 audit(1778648021.445:946): avc: denied { read } for pid=6010 comm="syz.4.757" path="socket:[13459]" dev="sockfs" ino=13459 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.407410][ T5992] loop2: lost filesystem error report for type 5 error -117 [ 155.407847][ T5992] EXT4-fs (loop2): 1 truncate cleaned up [ 155.422424][ T5992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.435243][ T5992] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.675047][ T6017] loop4: detected capacity change from 0 to 128 [ 155.698160][ T6017] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 155.713636][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.728557][ T6017] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 155.770287][ T6019] FAULT_INJECTION: forcing a failure. [ 155.770287][ T6019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 155.803490][ T6019] CPU: 0 UID: 0 PID: 6019 Comm: syz.0.756 Tainted: G W syzkaller #0 PREEMPT(full) [ 155.803567][ T6019] Tainted: [W]=WARN [ 155.803577][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.803594][ T6019] Call Trace: [ 155.803603][ T6019] [ 155.803614][ T6019] __dump_stack+0x1d/0x30 [ 155.803645][ T6019] dump_stack_lvl+0x95/0xd0 [ 155.803672][ T6019] dump_stack+0x15/0x1b [ 155.803717][ T6019] should_fail_ex+0x263/0x280 [ 155.803755][ T6019] should_fail+0xb/0x20 [ 155.803853][ T6019] should_fail_usercopy+0x1a/0x20 [ 155.803904][ T6019] _copy_from_user+0x1c/0xb0 [ 155.803945][ T6019] __sys_bpf+0x183/0x7e0 [ 155.804017][ T6019] __x64_sys_bpf+0x41/0x50 [ 155.804044][ T6019] x64_sys_call+0x10cb/0x3020 [ 155.804075][ T6019] do_syscall_64+0x12c/0x3b0 [ 155.804174][ T6019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.804203][ T6019] RIP: 0033:0x7f65e131ce59 [ 155.804225][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.804274][ T6019] RSP: 002b:00007f65dfd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 155.804299][ T6019] RAX: ffffffffffffffda RBX: 00007f65e1595fa0 RCX: 00007f65e131ce59 [ 155.804318][ T6019] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 155.804375][ T6019] RBP: 00007f65dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 155.804392][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.804408][ T6019] R13: 00007f65e1596038 R14: 00007f65e1595fa0 R15: 00007fff163d7938 [ 155.804457][ T6019] [ 155.995207][ T6021] vhci_hcd vhci_hcd.3: invalid port number 254 [ 156.034281][ T6024] loop3: detected capacity change from 0 to 1024 [ 156.049326][ T6024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.081577][ T6029] loop0: detected capacity change from 0 to 512 [ 156.098974][ T6029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 156.116632][ T6012] loop1: detected capacity change from 0 to 2048 [ 156.123859][ T6029] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 156.179622][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.192449][ T29] audit: type=1400 audit(1778648022.295:947): avc: denied { listen } for pid=6022 comm="syz.3.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 156.250707][ T5731] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 156.305964][ T29] audit: type=1400 audit(1778648022.415:948): avc: denied { write } for pid=6028 comm="syz.0.762" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.486421][ T29] audit: type=1400 audit(1778648022.595:949): avc: denied { write } for pid=6028 comm="syz.0.762" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.605217][ T6012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.896783][ T3303] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2860: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 156.914632][ T6064] netlink: 'syz.4.772': attribute type 5 has an invalid length. [ 156.954438][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 156.959211][ T3303] EXT4-fs error (device loop3): ext4_empty_dir:3114: inode #11: block 8192: comm syz-executor: Attempting to read directory block (8192) that is past i_size (8388864) [ 156.997811][ T3303] EXT4-fs (loop3): Remounting filesystem read-only [ 157.150893][ T6064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.184807][ T6064] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.422102][ T6033] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.432552][ T5731] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.506131][ T5731] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 157.534869][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.639208][ T5731] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.743855][ T5731] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 157.826806][ T5731] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.855640][ T5731] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 157.983356][ T5731] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.004564][ T5731] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 158.048392][ T6088] __nla_validate_parse: 5 callbacks suppressed [ 158.048412][ T6088] netlink: 20 bytes leftover after parsing attributes in process `syz.0.781'. [ 158.072158][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.779'. [ 158.118983][ T6084] set_capacity_and_notify: 1 callbacks suppressed [ 158.119010][ T6084] loop4: detected capacity change from 0 to 128 [ 158.191546][ T6084] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 158.256872][ T6084] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.292460][ T5731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.314238][ T5731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.335689][ T5731] bond0 (unregistering): Released all slaves [ 158.368712][ T6084] netlink: 20 bytes leftover after parsing attributes in process `syz.4.779'. [ 158.450811][ T5731] veth1_macvtap: left promiscuous mode [ 158.464815][ T5731] veth0_macvtap: left promiscuous mode [ 158.479976][ T5731] veth1_vlan: left promiscuous mode [ 158.501471][ T5731] veth0_vlan: left promiscuous mode [ 158.518936][ T3470] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.735505][ T5731] team0 (unregistering): Port device team_slave_1 removed [ 158.756103][ T5731] team0 (unregistering): Port device team_slave_0 removed [ 158.929344][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 159.272900][ T6139] loop2: detected capacity change from 0 to 128 [ 159.294265][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.336192][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.379040][ T6078] bridge_slave_0: entered allmulticast mode [ 159.409096][ T6078] bridge_slave_0: entered promiscuous mode [ 159.426008][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.442054][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.458055][ T6078] bridge_slave_1: entered allmulticast mode [ 159.483288][ T6078] bridge_slave_1: entered promiscuous mode [ 159.507317][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 159.521158][ T6162] loop2: detected capacity change from 0 to 1024 [ 159.560064][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.583784][ T6162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 159.595270][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.643055][ T6162] ext4: Unknown parameter '' [ 159.651886][ T6078] team0: Port device team_slave_0 added [ 159.659244][ T6078] team0: Port device team_slave_1 added [ 159.676071][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.683667][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.710031][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.721975][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.729388][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.763997][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.781251][ T6153] loop0: detected capacity change from 0 to 2048 [ 159.875034][ T6078] hsr_slave_0: entered promiscuous mode [ 159.881826][ T6078] hsr_slave_1: entered promiscuous mode [ 159.949011][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.002995][ T6153] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.066629][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 160.066644][ T29] audit: type=1400 audit(1778648026.175:978): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.144593][ T29] audit: type=1400 audit(1778648026.245:979): avc: denied { write } for pid=6187 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.195086][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 160.214988][ T29] audit: type=1400 audit(1778648026.255:980): avc: denied { write } for pid=6150 comm="syz.0.794" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.260735][ T29] audit: type=1400 audit(1778648026.295:981): avc: denied { write } for pid=6150 comm="syz.0.794" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 160.309312][ T29] audit: type=1400 audit(1778648026.295:982): avc: denied { create } for pid=6150 comm="syz.0.794" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 160.338186][ T6078] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 160.360421][ T29] audit: type=1400 audit(1778648026.305:983): avc: denied { read write } for pid=6150 comm="syz.0.794" name="file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 160.370834][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 160.396999][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.419834][ T29] audit: type=1400 audit(1778648026.305:984): avc: denied { open } for pid=6150 comm="syz.0.794" path="/181/file1/file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 160.431972][ T6078] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 160.469644][ T29] audit: type=1400 audit(1778648026.365:985): avc: denied { watch } for pid=6150 comm="syz.0.794" path="/181/file1/file0" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 160.510509][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 160.521850][ T29] audit: type=1326 audit(1778648026.405:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6195 comm="syz.2.800" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x0 [ 160.568286][ T6078] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 160.598915][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 160.623476][ T6078] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 160.676634][ T6078] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 160.762346][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.795078][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.800620][ T29] audit: type=1400 audit(1778648026.905:987): avc: denied { write } for pid=6201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 160.823559][ T180] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.833268][ T180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 160.863434][ T6027] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 160.881247][ T3470] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.888381][ T3470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.972468][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 161.019992][ T6226] netlink: 25 bytes leftover after parsing attributes in process `syz.0.803'. [ 161.047415][ T6226] netlink: 25 bytes leftover after parsing attributes in process `syz.0.803'. [ 161.059497][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.061529][ T6230] loop4: detected capacity change from 0 to 128 [ 161.207185][ T6242] loop4: detected capacity change from 0 to 128 [ 161.246665][ T6247] FAULT_INJECTION: forcing a failure. [ 161.246665][ T6247] name failslab, interval 1, probability 0, space 0, times 0 [ 161.280025][ T6242] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 161.292754][ T6247] CPU: 0 UID: 0 PID: 6247 Comm: syz.0.807 Tainted: G W syzkaller #0 PREEMPT(full) [ 161.292863][ T6247] Tainted: [W]=WARN [ 161.292870][ T6247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 161.292882][ T6247] Call Trace: [ 161.292890][ T6247] [ 161.292900][ T6247] __dump_stack+0x1d/0x30 [ 161.292932][ T6247] dump_stack_lvl+0x95/0xd0 [ 161.292958][ T6247] dump_stack+0x15/0x1b [ 161.292984][ T6247] should_fail_ex+0x263/0x280 [ 161.293012][ T6247] should_failslab+0x8c/0xb0 [ 161.293046][ T6247] __kvmalloc_node_noprof+0x155/0x640 [ 161.293125][ T6247] ? vmemdup_user+0x2b/0xd0 [ 161.293259][ T6247] vmemdup_user+0x2b/0xd0 [ 161.293318][ T6247] map_lookup_and_delete_elem+0x276/0x700 [ 161.293427][ T6247] ? security_bpf+0x2b/0x90 [ 161.293453][ T6247] __sys_bpf+0x661/0x7e0 [ 161.293513][ T6247] __x64_sys_bpf+0x41/0x50 [ 161.293533][ T6247] x64_sys_call+0x10cb/0x3020 [ 161.293560][ T6247] do_syscall_64+0x12c/0x3b0 [ 161.293630][ T6247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.293658][ T6247] RIP: 0033:0x7f65e131ce59 [ 161.293679][ T6247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 161.293702][ T6247] RSP: 002b:00007f65dfd77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 161.293726][ T6247] RAX: ffffffffffffffda RBX: 00007f65e1595fa0 RCX: 00007f65e131ce59 [ 161.293768][ T6247] RDX: 0000000000000020 RSI: 0000200000000400 RDI: 0000000000000015 [ 161.293784][ T6247] RBP: 00007f65dfd77090 R08: 0000000000000000 R09: 0000000000000000 [ 161.293800][ T6247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.293844][ T6247] R13: 00007f65e1596038 R14: 00007f65e1595fa0 R15: 00007fff163d7938 [ 161.293863][ T6247] [ 161.497729][ T6242] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.553537][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.808'. [ 161.580864][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.636477][ T6253] loop2: detected capacity change from 0 to 128 [ 161.690459][ T6253] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 161.743591][ T6253] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.755185][ T6260] loop0: detected capacity change from 0 to 2048 [ 161.798295][ T6260] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.846585][ T6253] netlink: 20 bytes leftover after parsing attributes in process `syz.2.808'. [ 161.911007][ T6078] veth0_vlan: entered promiscuous mode [ 161.919680][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 161.924369][ T6078] veth1_vlan: entered promiscuous mode [ 161.952266][ T6078] veth0_macvtap: entered promiscuous mode [ 161.969055][ T1012] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.986899][ T6078] veth1_macvtap: entered promiscuous mode [ 162.015315][ T6278] netlink: 28 bytes leftover after parsing attributes in process `syz.4.811'. [ 162.041755][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.074169][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.095765][ T38] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.105938][ T38] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.128893][ T38] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.137852][ T38] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.235099][ T6288] FAULT_INJECTION: forcing a failure. [ 162.235099][ T6288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.357194][ T6292] netlink: 14 bytes leftover after parsing attributes in process `syz.2.815'. [ 162.380883][ T6288] CPU: 1 UID: 0 PID: 6288 Comm: syz.5.778 Tainted: G W syzkaller #0 PREEMPT(full) [ 162.380934][ T6288] Tainted: [W]=WARN [ 162.381014][ T6288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 162.381028][ T6288] Call Trace: [ 162.381035][ T6288] [ 162.381043][ T6288] __dump_stack+0x1d/0x30 [ 162.381070][ T6288] dump_stack_lvl+0x95/0xd0 [ 162.381093][ T6288] dump_stack+0x15/0x1b [ 162.381113][ T6288] should_fail_ex+0x263/0x280 [ 162.381172][ T6288] should_fail+0xb/0x20 [ 162.381202][ T6288] should_fail_usercopy+0x1a/0x20 [ 162.381239][ T6288] _copy_from_user+0x1c/0xb0 [ 162.381282][ T6288] __sys_bpf+0x183/0x7e0 [ 162.381340][ T6288] __x64_sys_bpf+0x41/0x50 [ 162.381367][ T6288] x64_sys_call+0x10cb/0x3020 [ 162.381398][ T6288] do_syscall_64+0x12c/0x3b0 [ 162.381452][ T6288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.381527][ T6288] RIP: 0033:0x7f3702c4ce59 [ 162.381547][ T6288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.381571][ T6288] RSP: 002b:00007f37016a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 162.381607][ T6288] RAX: ffffffffffffffda RBX: 00007f3702ec5fa0 RCX: 00007f3702c4ce59 [ 162.381624][ T6288] RDX: 000000000000004c RSI: 0000200000000040 RDI: 000000000000000a [ 162.381639][ T6288] RBP: 00007f37016a7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.381653][ T6288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.381668][ T6288] R13: 00007f3702ec6038 R14: 00007f3702ec5fa0 R15: 00007ffe4b85fd88 [ 162.381691][ T6288] [ 162.771541][ T6292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.882444][ T6292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.910883][ T6305] loop1: detected capacity change from 0 to 128 [ 162.927972][ T6292] bond0 (unregistering): Released all slaves [ 162.947737][ T6305] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 162.978420][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.817'. [ 162.990459][ T6305] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.122887][ T1012] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.170006][ T6317] loop4: detected capacity change from 0 to 512 [ 163.239851][ T6317] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.819: Failed to acquire dquot type 1 [ 163.258874][ T6317] loop4: lost filesystem error report for type 5 error -117 [ 163.260732][ T6317] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.819: corrupted inode contents [ 163.268646][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 163.268669][ C1] EXT4-fs (loop4): initial error at time 1778648029: ext4_acquire_dquot:7034 [ 163.268707][ C1] EXT4-fs (loop4): last error at time 1778648029: ext4_acquire_dquot:7034 [ 163.316870][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.317126][ T6317] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #16: comm syz.4.819: mark_inode_dirty error [ 163.339411][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.339687][ T6317] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.819: corrupted inode contents [ 163.362186][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.362423][ T6317] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.819: mark_inode_dirty error [ 163.384318][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.384528][ T6317] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.819: corrupted inode contents [ 163.408945][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.409170][ T6317] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 163.437882][ T6317] loop4: lost filesystem error report for type 5 error -117 [ 163.438487][ T6317] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #16: comm syz.4.819: corrupted inode contents [ 163.460746][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.460922][ T6317] EXT4-fs error (device loop4): ext4_truncate:4690: inode #16: comm syz.4.819: mark_inode_dirty error [ 163.485420][ T6317] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 163.485665][ T6317] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 163.506269][ T6317] loop4: lost filesystem error report for type 5 error -117 [ 163.506788][ T6317] EXT4-fs (loop4): 1 truncate cleaned up [ 163.525426][ T6317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.539022][ T6317] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.640534][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.754633][ T6335] loop2: detected capacity change from 0 to 764 [ 163.774833][ T6347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.788491][ T6347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.861691][ T3378] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 163.882572][ T3378] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.905251][ T6335] Symlink component flag not implemented [ 163.921252][ T6335] Symlink component flag not implemented (116) [ 163.950219][ T6344] __nla_validate_parse: 1 callbacks suppressed [ 163.950238][ T6344] netlink: 128 bytes leftover after parsing attributes in process `syz.4.829'. [ 164.008007][ T6345] loop4: detected capacity change from 0 to 512 [ 164.046550][ T6345] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 164.091303][ T6344] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 164.091515][ T6345] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.829: Allocating blocks 41-42 which overlap fs metadata [ 164.091565][ T6345] loop4: lost filesystem error report for type 5 error -117 [ 164.092275][ T6345] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4222: comm syz.4.829: Allocating blocks 41-42 which overlap fs metadata [ 164.092370][ T6345] loop4: lost filesystem error report for type 5 error -117 [ 164.092571][ C0] EXT4-fs (loop4): error count since last fsck: 2 [ 164.092619][ C0] EXT4-fs (loop4): initial error at time 1778648030: ext4_mb_mark_diskspace_used:4222 [ 164.092718][ C0] EXT4-fs (loop4): last error at time 1778648030: ext4_mb_mark_diskspace_used:4222 [ 164.096076][ T6345] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.829: Failed to acquire dquot type 1 [ 164.222684][ T6345] loop4: lost filesystem error report for type 5 error -117 [ 164.223643][ T6345] EXT4-fs error (device loop4): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 164.252974][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.829: corrupted inode contents [ 164.289579][ T6345] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 164.290377][ T6345] EXT4-fs error (device loop4): ext4_dirty_inode:6587: inode #12: comm syz.4.829: mark_inode_dirty error [ 164.314268][ T6345] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 164.314774][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.829: corrupted inode contents [ 164.338563][ T6345] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 164.338998][ T6345] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #12: comm syz.4.829: mark_inode_dirty error [ 164.368208][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.829: corrupted inode contents [ 164.380953][ T6345] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 164.401676][ T6345] loop4: lost filesystem error report for type 5 error -117 [ 164.402308][ T6345] EXT4-fs error (device loop4): ext4_do_update_inode:5690: inode #12: comm syz.4.829: corrupted inode contents [ 164.429298][ T6345] EXT4-fs error (device loop4): ext4_truncate:4690: inode #12: comm syz.4.829: mark_inode_dirty error [ 164.441385][ T6345] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 164.451135][ T6345] loop4: lost filesystem error report for type 5 error -117 [ 164.451831][ T6345] EXT4-fs (loop4): 1 truncate cleaned up [ 164.466597][ T6345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.485829][ T6360] loop2: detected capacity change from 0 to 512 [ 164.506844][ T6360] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 164.517189][ T6360] EXT4-fs (loop2): 1 orphan inode deleted [ 164.517215][ T6360] EXT4-fs (loop2): 1 truncate cleaned up [ 164.519177][ T6360] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.677870][ T4072] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.883070][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.883106][ T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 164.927309][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.927358][ T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 164.966709][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.966811][ T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 165.024004][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.024056][ T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 165.074589][ T6372] netlink: 'syz.5.835': attribute type 13 has an invalid length. [ 165.074685][ T6372] netlink: 152 bytes leftover after parsing attributes in process `syz.5.835'. [ 165.078254][ T6372] syz_tun: refused to change device tx_queue_len [ 165.078524][ T6372] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.492529][ T6377] loop1: detected capacity change from 0 to 512 [ 165.506485][ T6377] __quota_error: 15 callbacks suppressed [ 165.506502][ T6377] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 165.506602][ T6377] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 165.506623][ T6377] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.840: Failed to acquire dquot type 1 [ 165.506739][ T6377] loop1: lost filesystem error report for type 5 error -117 [ 165.511878][ T6377] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.840: corrupted inode contents [ 165.512514][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 165.512536][ C0] EXT4-fs (loop1): initial error at time 1778648031: ext4_acquire_dquot:7034 [ 165.512558][ C0] EXT4-fs (loop1): last error at time 1778648031: ext4_do_update_inode:5690: inode 16 [ 165.513339][ T6377] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.840: mark_inode_dirty error [ 165.513513][ T6377] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.840: corrupted inode contents [ 165.513705][ T6377] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.840: mark_inode_dirty error [ 165.514234][ T6377] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.840: corrupted inode contents [ 165.515233][ T6377] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 165.515251][ T6377] loop1: lost filesystem error report for type 5 error -117 [ 165.515416][ T6377] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.840: corrupted inode contents [ 165.526541][ T6377] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.840: mark_inode_dirty error [ 165.528793][ T6377] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 165.530541][ T6377] EXT4-fs (loop1): 1 truncate cleaned up [ 165.531074][ T6377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.531146][ T6377] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.584528][ T38] bond0 (unregistering): Released all slaves [ 165.589749][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.590917][ T38] bond1 (unregistering): Released all slaves [ 166.449609][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.841'. [ 166.450142][ T6326] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 166.462564][ T29] audit: type=1400 audit(1778648032.565:997): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 166.478250][ T29] audit: type=1400 audit(1778648032.585:998): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 166.478434][ T29] audit: type=1400 audit(1778648032.585:999): avc: denied { unlink } for pid=3304 comm="syz-executor" name="bus" dev="loop2" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 166.483153][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.565903][ T38] veth1_macvtap: left promiscuous mode [ 166.565928][ T38] veth0_macvtap: left promiscuous mode [ 166.566196][ T38] veth1_vlan: left promiscuous mode [ 166.566295][ T38] veth0_vlan: left promiscuous mode [ 166.737114][ T6396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6396 comm=syz.2.842 [ 166.737658][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.842'. [ 166.738992][ T6396] netlink: 'syz.2.842': attribute type 21 has an invalid length. [ 166.845071][ T29] audit: type=1400 audit(1778648032.945:1000): avc: denied { write } for pid=6389 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.036763][ T6406] capability: warning: `syz.1.843' uses deprecated v2 capabilities in a way that may be insecure [ 167.044461][ T29] audit: type=1400 audit(1778648033.035:1001): avc: denied { create } for pid=6404 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.118864][ T29] audit: type=1400 audit(1778648033.045:1002): avc: denied { read } for pid=6404 comm="syz.1.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 167.139281][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.186724][ T29] audit: type=1400 audit(1778648033.295:1003): avc: denied { write } for pid=6407 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.203565][ T29] audit: type=1400 audit(1778648033.305:1004): avc: denied { ioctl } for pid=6404 comm="syz.1.843" path="socket:[15387]" dev="sockfs" ino=15387 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 167.298574][ T6396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.842'. [ 167.308735][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 167.408331][ T6419] loop4: detected capacity change from 0 to 4096 [ 167.444003][ T6419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.474767][ T6429] loop1: detected capacity change from 0 to 256 [ 167.601268][ T38] IPVS: stop unused estimator thread 0... [ 167.693157][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.807767][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 167.950472][ T6463] loop5: detected capacity change from 0 to 512 [ 167.966586][ T6463] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.854: Failed to acquire dquot type 1 [ 167.980514][ T6463] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.854: corrupted inode contents [ 167.992350][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 167.992375][ C0] EXT4-fs (loop5): initial error at time 1778648034: ext4_acquire_dquot:7034 [ 167.992398][ C0] EXT4-fs (loop5): last error at time 1778648034: ext4_acquire_dquot:7034 [ 168.064882][ T6463] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.854: mark_inode_dirty error [ 168.079207][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.852'. [ 168.204562][ T6463] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.854: corrupted inode contents [ 168.256797][ T6378] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.298081][ T6463] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.854: mark_inode_dirty error [ 168.319230][ T6378] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.358922][ T6378] bridge_slave_0: entered allmulticast mode [ 168.388542][ T6463] fserror_report: 14 callbacks suppressed [ 168.388559][ T6463] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.410544][ T6378] bridge_slave_0: entered promiscuous mode [ 168.458601][ T6463] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.854: corrupted inode contents [ 168.513072][ T6463] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.514036][ T6463] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 168.546393][ T6463] fserror_report: 2 callbacks suppressed [ 168.546828][ T6378] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.554978][ T6463] loop5: lost filesystem error report for type 5 error -117 [ 168.561853][ T6378] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.576087][ T6463] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.854: corrupted inode contents [ 168.582586][ T6378] bridge_slave_1: entered allmulticast mode [ 168.588683][ T6463] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.596159][ T6463] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.854: mark_inode_dirty error [ 168.597174][ T6378] bridge_slave_1: entered promiscuous mode [ 168.605921][ T6463] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 168.624174][ T6463] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 168.642764][ T6463] loop5: lost filesystem error report for type 5 error -117 [ 168.644498][ T6463] EXT4-fs (loop5): 1 truncate cleaned up [ 168.671012][ T6378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.681685][ T6378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.691615][ T6463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.716647][ T6463] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.730812][ T6378] team0: Port device team_slave_0 added [ 168.738220][ T6378] team0: Port device team_slave_1 added [ 168.805188][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.819018][ T6484] 9p: Bad value for 'timeout' [ 168.820650][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.852080][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.862531][ T6378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.884836][ T6480] syzkaller0: entered promiscuous mode [ 168.902580][ T6480] syzkaller0: entered allmulticast mode [ 168.919706][ T6378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.944243][ T6378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.975077][ T6378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.988052][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.859'. [ 169.014202][ T6495] netlink: 'syz.5.859': attribute type 5 has an invalid length. [ 169.050557][ T6504] 9p: Could not find request transport: f [ 169.058317][ T6504] netlink: 6068 bytes leftover after parsing attributes in process `syz.4.861'. [ 169.076987][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.859'. [ 169.099477][ T6378] hsr_slave_0: entered promiscuous mode [ 169.119929][ T6513] loop4: detected capacity change from 0 to 512 [ 169.126864][ T6378] hsr_slave_1: entered promiscuous mode [ 169.140394][ T6513] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 169.153414][ T6378] debugfs: 'hsr0' already exists in 'hsr' [ 169.167665][ T6378] Cannot create hsr debugfs directory [ 169.175901][ T6513] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 169.182415][ T6500] loop5: detected capacity change from 0 to 512 [ 169.192258][ T6513] EXT4-fs (loop4): failed to initialize system zone (-117) [ 169.200257][ T6513] EXT4-fs (loop4): mount failed [ 169.284213][ T6522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.865'. [ 169.295330][ T6495] geneve2: entered promiscuous mode [ 169.301252][ T6495] geneve2: entered allmulticast mode [ 169.309101][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 169.369894][ T6500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.386548][ T6500] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.407962][ T1012] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 169.417455][ T1012] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 169.451855][ T1012] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 169.452513][ T6525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.864'. [ 169.471217][ T6525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.864'. [ 169.502756][ T1012] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 169.505456][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.563681][ T6537] veth1_macvtap: left promiscuous mode [ 169.569961][ T6537] macsec0: entered promiscuous mode [ 169.575524][ T6537] macsec0: entered allmulticast mode [ 169.622798][ T6537] veth1_macvtap: entered promiscuous mode [ 169.634084][ T6537] veth1_macvtap: entered allmulticast mode [ 169.642799][ T6537] macsec0: left promiscuous mode [ 169.648698][ T6537] macsec0: left allmulticast mode [ 169.654398][ T6537] veth1_macvtap: left allmulticast mode [ 169.717263][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 169.730275][ T6539] veth1_macvtap: left promiscuous mode [ 169.736230][ T6539] macsec0: entered promiscuous mode [ 169.741926][ T6539] macsec0: entered allmulticast mode [ 169.767033][ T6378] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 169.781020][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.792060][ T6378] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 169.814653][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.833780][ T6549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.866'. [ 169.898606][ T6378] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 169.975905][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 170.240357][ T6554] loop2: detected capacity change from 0 to 128 [ 170.323837][ T6378] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 170.336796][ T6378] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.612158][ T6578] FAULT_INJECTION: forcing a failure. [ 170.612158][ T6578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 170.652827][ T6378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.734806][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.5.873 Tainted: G W syzkaller #0 PREEMPT(full) [ 170.734847][ T6578] Tainted: [W]=WARN [ 170.734856][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 170.734883][ T6578] Call Trace: [ 170.734890][ T6578] [ 170.734898][ T6578] __dump_stack+0x1d/0x30 [ 170.734922][ T6578] dump_stack_lvl+0x95/0xd0 [ 170.734942][ T6578] dump_stack+0x15/0x1b [ 170.735093][ T6578] should_fail_ex+0x263/0x280 [ 170.735128][ T6578] should_fail+0xb/0x20 [ 170.735157][ T6578] should_fail_usercopy+0x1a/0x20 [ 170.735210][ T6578] _copy_from_iter+0xcf/0xea0 [ 170.735252][ T6578] ? __alloc_skb+0x4f6/0x690 [ 170.735343][ T6578] ? __alloc_skb+0x200/0x690 [ 170.735365][ T6578] netlink_sendmsg+0x4ae/0x6f0 [ 170.735447][ T6578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.735487][ T6578] ____sys_sendmsg+0x563/0x5b0 [ 170.735517][ T6578] ___sys_sendmsg+0x195/0x1e0 [ 170.735696][ T6578] __x64_sys_sendmsg+0xd4/0x160 [ 170.735727][ T6578] x64_sys_call+0x194c/0x3020 [ 170.735758][ T6578] do_syscall_64+0x12c/0x3b0 [ 170.735788][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.735855][ T6578] RIP: 0033:0x7f3702c4ce59 [ 170.735875][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 170.735898][ T6578] RSP: 002b:00007f37016a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.735918][ T6578] RAX: ffffffffffffffda RBX: 00007f3702ec5fa0 RCX: 00007f3702c4ce59 [ 170.735931][ T6578] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 170.735944][ T6578] RBP: 00007f37016a7090 R08: 0000000000000000 R09: 0000000000000000 [ 170.735967][ T6578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.735983][ T6578] R13: 00007f3702ec6038 R14: 00007f3702ec5fa0 R15: 00007ffe4b85fd88 [ 170.736006][ T6578] [ 171.095079][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 171.095098][ T29] audit: type=1400 audit(1778648037.205:1024): avc: denied { read write } for pid=6582 comm="syz.4.876" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.116170][ T6378] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.136986][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.875'. [ 171.140649][ T29] audit: type=1400 audit(1778648037.245:1025): avc: denied { open } for pid=6582 comm="syz.4.876" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.148006][ T6583] loop4: detected capacity change from 0 to 1024 [ 171.193483][ T1012] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.200670][ T1012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.208362][ T29] audit: type=1400 audit(1778648037.245:1026): avc: denied { ioctl } for pid=6582 comm="syz.4.876" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 171.251590][ T1012] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.259291][ T1012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.274321][ T6583] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 171.280629][ T29] audit: type=1400 audit(1778648037.355:1027): avc: denied { create } for pid=6588 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.321977][ T29] audit: type=1400 audit(1778648037.385:1028): avc: denied { mounton } for pid=6582 comm="syz.4.876" path="/183/file1" dev="tmpfs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 171.337747][ T6583] JBD2: no valid journal superblock found [ 171.354322][ T6591] loop5: detected capacity change from 0 to 1024 [ 171.383855][ T6583] EXT4-fs (loop4): Could not load journal inode [ 171.385952][ T6589] ipvlan2: entered promiscuous mode [ 171.397005][ T6589] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 171.416754][ T29] audit: type=1400 audit(1778648037.385:1029): avc: denied { setopt } for pid=6588 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 171.441834][ T6589] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 171.443980][ T6591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 171.460176][ T29] audit: type=1400 audit(1778648037.385:1030): avc: denied { create } for pid=6588 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 171.487503][ T6589] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 171.506935][ T29] audit: type=1400 audit(1778648037.385:1031): avc: denied { open } for pid=6588 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 171.521694][ T6591] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.527195][ T29] audit: type=1400 audit(1778648037.385:1032): avc: denied { perfmon } for pid=6588 comm="syz.1.877" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 171.558169][ T29] audit: type=1400 audit(1778648037.385:1033): avc: denied { kernel } for pid=6588 comm="syz.1.877" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 171.590043][ T6583] loop4: detected capacity change from 0 to 2048 [ 171.618120][ T6583] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.671837][ T6605] bridge0: port 1(gretap0) entered blocking state [ 171.687916][ T6598] loop2: detected capacity change from 0 to 128 [ 171.695532][ T6605] bridge0: port 1(gretap0) entered disabled state [ 171.704405][ T6605] gretap0: entered allmulticast mode [ 171.733874][ T6605] gretap0: entered promiscuous mode [ 171.753075][ T6605] bridge0: port 1(gretap0) entered blocking state [ 171.759670][ T6605] bridge0: port 1(gretap0) entered forwarding state [ 171.834153][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.926284][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.000382][ T6625] syz.1.887 (6625): attempted to duplicate a private mapping with mremap. This is not supported. [ 172.012878][ T6624] cgroup: Unknown subsys name 'subj_role' [ 172.064643][ T6624] loop4: detected capacity change from 0 to 1024 [ 172.131497][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 172.149614][ T6378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.403427][ T6636] lo speed is unknown, defaulting to 1000 [ 172.562960][ T6636] lo speed is unknown, defaulting to 1000 [ 172.605774][ T6636] lo speed is unknown, defaulting to 1000 [ 172.613457][ T6636] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 172.626819][ T6636] lo speed is unknown, defaulting to 1000 [ 172.670125][ T6636] lo speed is unknown, defaulting to 1000 [ 172.677353][ T6636] lo speed is unknown, defaulting to 1000 [ 172.685398][ T6636] lo speed is unknown, defaulting to 1000 [ 172.696812][ T6636] lo speed is unknown, defaulting to 1000 [ 172.909646][ T6378] veth0_vlan: entered promiscuous mode [ 172.945866][ T6378] veth1_vlan: entered promiscuous mode [ 172.960647][ T6656] can: request_module (can-proto-0) failed. [ 172.968615][ T6663] loop2: detected capacity change from 0 to 128 [ 172.976883][ T6685] loop1: detected capacity change from 0 to 2048 [ 173.007341][ T6378] veth0_macvtap: entered promiscuous mode [ 173.023415][ T6685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 173.035261][ T6378] veth1_macvtap: entered promiscuous mode [ 173.058319][ T6680] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.074219][ T6680] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.097130][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.113352][ T6378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.120022][ T6685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.143885][ T25] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.159480][ T25] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.198596][ T6700] FAULT_INJECTION: forcing a failure. [ 173.198596][ T6700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.212405][ T6700] CPU: 0 UID: 0 PID: 6700 Comm: syz.2.894 Tainted: G W syzkaller #0 PREEMPT(full) [ 173.212440][ T6700] Tainted: [W]=WARN [ 173.212448][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.212465][ T6700] Call Trace: [ 173.212473][ T6700] [ 173.212487][ T6700] __dump_stack+0x1d/0x30 [ 173.212576][ T6700] dump_stack_lvl+0x95/0xd0 [ 173.212601][ T6700] dump_stack+0x15/0x1b [ 173.212647][ T6700] should_fail_ex+0x263/0x280 [ 173.212674][ T6700] should_fail+0xb/0x20 [ 173.212703][ T6700] should_fail_usercopy+0x1a/0x20 [ 173.212761][ T6700] _copy_from_user+0x1c/0xb0 [ 173.212796][ T6700] ___sys_sendmsg+0xc1/0x1e0 [ 173.212837][ T6700] __x64_sys_sendmsg+0xd4/0x160 [ 173.212874][ T6700] x64_sys_call+0x194c/0x3020 [ 173.212904][ T6700] do_syscall_64+0x12c/0x3b0 [ 173.212960][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.212987][ T6700] RIP: 0033:0x7fa7b8c6ce59 [ 173.213006][ T6700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.213028][ T6700] RSP: 002b:00007fa7b76bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 173.213052][ T6700] RAX: ffffffffffffffda RBX: 00007fa7b8ee5fa0 RCX: 00007fa7b8c6ce59 [ 173.213066][ T6700] RDX: 000000000404c000 RSI: 0000200000001800 RDI: 0000000000000003 [ 173.213111][ T6700] RBP: 00007fa7b76bf090 R08: 0000000000000000 R09: 0000000000000000 [ 173.213127][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.213173][ T6700] R13: 00007fa7b8ee6038 R14: 00007fa7b8ee5fa0 R15: 00007ffc7a5bb568 [ 173.213199][ T6700] [ 173.223723][ T25] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.394257][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.397611][ T25] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.457126][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.547962][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.897'. [ 173.730212][ T6730] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 173.796324][ T6730] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 173.909265][ T3446] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.223009][ T6790] set_capacity_and_notify: 4 callbacks suppressed [ 174.223037][ T6790] loop4: detected capacity change from 0 to 128 [ 174.333340][ T6801] xt_TPROXY: Can be used only with -p tcp or -p udp [ 174.357450][ T6801] lo speed is unknown, defaulting to 1000 [ 174.435431][ T6806] __nla_validate_parse: 4 callbacks suppressed [ 174.435487][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.918'. [ 174.505302][ T6810] loop6: detected capacity change from 0 to 128 [ 174.524106][ T6810] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 174.550457][ T6810] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.673257][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz.6.918'. [ 175.549282][ T6823] netlink: 168 bytes leftover after parsing attributes in process `syz.4.921'. [ 175.695945][ T6831] loop2: detected capacity change from 0 to 512 [ 175.724562][ T6831] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.923: Failed to acquire dquot type 1 [ 175.739161][ T6831] loop2: lost filesystem error report for type 5 error -117 [ 175.742555][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 175.756407][ C1] EXT4-fs (loop2): initial error at time 1778648041: ext4_acquire_dquot:7034 [ 175.765237][ C1] EXT4-fs (loop2): last error at time 1778648041: ext4_acquire_dquot:7034 [ 175.777631][ T6831] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.923: corrupted inode contents [ 175.789935][ T6835] loop4: detected capacity change from 0 to 512 [ 175.800674][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.801338][ T6831] EXT4-fs error (device loop2): ext4_dirty_inode:6587: inode #16: comm syz.2.923: mark_inode_dirty error [ 175.825468][ T6835] EXT4-fs (loop4): 1 truncate cleaned up [ 175.831677][ T6835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 175.845345][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.845627][ T6831] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.923: corrupted inode contents [ 175.890091][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.890320][ T6831] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.923: mark_inode_dirty error [ 175.911624][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.911889][ T6831] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.923: corrupted inode contents [ 175.936426][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.936677][ T6831] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 175.954798][ T6831] loop2: lost filesystem error report for type 5 error -117 [ 175.955047][ T6831] EXT4-fs error (device loop2): ext4_do_update_inode:5690: inode #16: comm syz.2.923: corrupted inode contents [ 175.974783][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.975032][ T6831] EXT4-fs error (device loop2): ext4_truncate:4690: inode #16: comm syz.2.923: mark_inode_dirty error [ 175.995443][ T6831] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 175.995656][ T6831] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 176.013910][ T6831] loop2: lost filesystem error report for type 5 error -117 [ 176.014371][ T6831] EXT4-fs (loop2): 1 truncate cleaned up [ 176.028626][ T6831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.041267][ T6831] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.116759][ T1012] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.158649][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.174709][ T6845] mmap: syz.6.925 (6845) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.240926][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 177.240941][ T29] audit: type=1400 audit(1778648043.345:1141): avc: denied { mount } for pid=6844 comm="syz.6.925" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 177.414579][ T6849] loop4: detected capacity change from 0 to 128 [ 177.506792][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.929'. [ 177.565294][ T29] audit: type=1400 audit(1778648043.665:1142): avc: denied { create } for pid=6850 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.596541][ T29] audit: type=1400 audit(1778648043.665:1143): avc: denied { write } for pid=6850 comm="syz.5.928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 177.627667][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.806119][ T29] audit: type=1400 audit(1778648043.915:1144): avc: denied { ioctl } for pid=6863 comm="syz.4.932" path="socket:[16080]" dev="sockfs" ino=16080 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 177.835427][ T6865] syzkaller1: entered promiscuous mode [ 177.851318][ T6865] syzkaller1: entered allmulticast mode [ 178.025771][ T29] audit: type=1400 audit(1778648044.105:1145): avc: denied { map } for pid=6868 comm="syz.2.933" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.052183][ T29] audit: type=1400 audit(1778648044.105:1146): avc: denied { read write } for pid=6868 comm="syz.2.933" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17080 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 178.082475][ T6871] loop2: detected capacity change from 0 to 512 [ 178.109006][ T6871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 178.144249][ T29] audit: type=1400 audit(1778648044.235:1147): avc: denied { unmount } for pid=6378 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 178.243944][ T6871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 178.265925][ T6871] ext4 filesystem being mounted at /189/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.269507][ T29] audit: type=1400 audit(1778648556.375:1148): avc: denied { create } for pid=6884 comm="syz.5.938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 178.300964][ T6887] netlink: 'syz.4.935': attribute type 10 has an invalid length. [ 178.311259][ T6885] loop5: detected capacity change from 0 to 512 [ 178.318097][ T6885] EXT4-fs: Ignoring removed nobh option [ 178.327209][ T29] audit: type=1400 audit(1778648556.415:1149): avc: denied { create } for pid=6880 comm="syz.1.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 178.346994][ T6887] syz_tun: entered promiscuous mode [ 178.356096][ T6885] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 178.368714][ T29] audit: type=1400 audit(1778648556.475:1150): avc: denied { mount } for pid=6872 comm="syz.4.935" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 178.393875][ T6885] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.938: invalid indirect mapped block 256 (level 1) [ 178.417900][ T6885] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 178.422513][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 178.438626][ C1] EXT4-fs (loop5): initial error at time 1778648556: ext4_free_branches:1023: inode 13 [ 178.448333][ C1] EXT4-fs (loop5): last error at time 1778648556: ext4_free_branches:1023: inode 13 [ 178.464781][ T6885] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.938: invalid indirect mapped block 2683928664 (level 1) [ 178.489110][ T6890] loop6: detected capacity change from 0 to 128 [ 178.499839][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 178.518254][ T6885] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 178.527973][ T6885] EXT4-fs (loop5): 1 truncate cleaned up [ 178.554352][ T6885] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.670161][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.677503][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.729086][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.764975][ T6901] bridge_slave_0: left allmulticast mode [ 178.770834][ T6901] bridge_slave_0: left promiscuous mode [ 178.778959][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.834351][ T6901] bridge_slave_1: left allmulticast mode [ 178.853251][ T6901] bridge_slave_1: left promiscuous mode [ 178.864171][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.895245][ T6901] bond0: (slave bond_slave_0): Releasing backup interface [ 178.909291][ T6901] bond0: (slave bond_slave_1): Releasing backup interface [ 178.924983][ T6901] team0: Port device team_slave_0 removed [ 178.934572][ T6901] team0: Port device team_slave_1 removed [ 178.942291][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.951655][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.960955][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.970046][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.984749][ T6901] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 179.099616][ T6927] loop6: detected capacity change from 0 to 512 [ 179.121025][ T6927] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 179.125318][ T6929] loop2: detected capacity change from 0 to 512 [ 179.149262][ T6927] EXT4-fs (loop6): orphan cleanup on readonly fs [ 179.169603][ T6927] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.948: Block bitmap for bg 0 marked uninitialized [ 179.190630][ T6922] syzkaller1: entered promiscuous mode [ 179.196930][ T6903] infiniband sy1: RDMA CMA: cma_listen_on_dev, error -98 [ 179.205615][ T6922] syzkaller1: entered allmulticast mode [ 179.225289][ T6927] loop6: lost filesystem error report for type 5 error -117 [ 179.225896][ T6927] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 179.233462][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 179.233480][ C1] EXT4-fs (loop6): initial error at time 1778648557: ext4_read_block_bitmap_nowait:517 [ 179.233501][ C1] EXT4-fs (loop6): last error at time 1778648557: ext4_read_block_bitmap_nowait:517 [ 179.302645][ T6927] loop6: lost filesystem error report for type 5 error -117 [ 179.303098][ T6927] EXT4-fs (loop6): 1 orphan inode deleted [ 179.318795][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.333407][ T6927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 179.346894][ T6929] ext4 filesystem being mounted at /191/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.380144][ T6927] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 179.395032][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.513118][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.562400][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 179.647709][ T6944] loop6: detected capacity change from 0 to 256 [ 179.693387][ T6943] loop5: detected capacity change from 0 to 128 [ 179.715842][ T6948] loop4: detected capacity change from 0 to 7 [ 179.734064][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.956'. [ 179.759448][ T6951] loop1: detected capacity change from 0 to 128 [ 179.783926][ T3595] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.799849][ T6951] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 179.817218][ T3595] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.851472][ T3595] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.866205][ T6951] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 179.888360][ T3595] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.911936][ T3595] Buffer I/O error on dev loop4, logical block 0, async page read [ 179.975080][ T6956] loop6: detected capacity change from 0 to 256 [ 179.997746][ T6951] netlink: 20 bytes leftover after parsing attributes in process `syz.1.956'. [ 180.039182][ T6959] loop2: detected capacity change from 0 to 764 [ 180.138427][ T38] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 180.159348][ T6964] loop6: detected capacity change from 0 to 512 [ 180.168822][ T6959] Symlink component flag not implemented [ 180.179558][ T6959] Symlink component flag not implemented (116) [ 180.208247][ T6964] EXT4-fs error (device loop6): ext4_iget_extra_inode:5128: inode #15: comm syz.6.961: corrupted in-inode xattr: invalid ea_ino [ 180.248149][ T6968] loop1: detected capacity change from 0 to 512 [ 180.262558][ T6964] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 180.262793][ T6964] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.961: couldn't read orphan inode 15 (err -117) [ 180.283739][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 180.283783][ C0] EXT4-fs (loop6): initial error at time 1778648814: ext4_iget_extra_inode:5128: inode 15 [ 180.283821][ C0] EXT4-fs (loop6): last error at time 1778648814: ext4_iget_extra_inode:5128: inode 15 [ 180.310749][ T6964] loop6: lost filesystem error report for type 5 error -117 [ 180.311449][ T6964] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 180.369616][ T6968] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 180.432865][ T6971] netlink: 16 bytes leftover after parsing attributes in process `syz.6.961'. [ 180.449687][ T6971] netlink: 108 bytes leftover after parsing attributes in process `syz.6.961'. [ 180.496198][ T6968] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.962: bad orphan inode 131083 [ 180.509455][ T6971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.961'. [ 180.548660][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 180.566290][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.965'. [ 180.572739][ T6968] loop1: lost filesystem error report for type 5 error -117 [ 180.578584][ T6968] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.678196][ T6977] netlink: 'syz.5.965': attribute type 1 has an invalid length. [ 180.737977][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.747985][ T6983] loop2: detected capacity change from 0 to 128 [ 180.928037][ T6993] loop6: detected capacity change from 0 to 128 [ 181.043157][ T7003] Symlink component flag not implemented [ 181.050458][ T7003] Symlink component flag not implemented (116) [ 181.066337][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.075736][ T7005] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 181.096918][ T7005] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 181.168665][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 181.178185][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.6.977'. [ 181.201783][ T7009] ext4: Bad value for 'stripe' [ 181.344309][ T7018] EXT4-fs: Ignoring removed orlov option [ 181.375679][ T7018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.407237][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.044453][ T7046] lo speed is unknown, defaulting to 1000 [ 182.146509][ T7063] 9p: Bad value for 'rfdno' [ 182.216752][ T7058] lo speed is unknown, defaulting to 1000 [ 182.263955][ T7063] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 182.337889][ T7063] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 182.426644][ T7063] EXT4-fs (loop2): 1 truncate cleaned up [ 182.448233][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 182.448250][ T29] audit: type=1400 audit(1778649328.554:1338): avc: denied { setopt } for pid=7079 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 182.479491][ T7062] Symlink component flag not implemented [ 182.489420][ T7062] Symlink component flag not implemented (116) [ 182.500916][ T7063] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.528910][ T29] audit: type=1400 audit(1778649328.584:1339): avc: denied { setopt } for pid=7079 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.558766][ T29] audit: type=1400 audit(1778649328.594:1340): avc: denied { ioctl } for pid=7079 comm="syz.1.992" path="socket:[18437]" dev="sockfs" ino=18437 ioctlcmd=0x5883 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 182.603298][ T29] audit: type=1400 audit(1778649328.594:1341): avc: denied { ioctl } for pid=7079 comm="syz.1.992" path="socket:[18438]" dev="sockfs" ino=18438 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.659406][ T29] audit: type=1400 audit(1778649328.594:1342): avc: denied { ioctl } for pid=7079 comm="syz.1.992" path="socket:[18439]" dev="sockfs" ino=18439 ioctlcmd=0x6f02 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.714082][ T29] audit: type=1400 audit(1778649328.604:1343): avc: denied { setopt } for pid=7079 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.772116][ T29] audit: type=1400 audit(1778649328.604:1344): avc: denied { read } for pid=7079 comm="syz.1.992" path="socket:[18439]" dev="sockfs" ino=18439 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 182.784784][ T7063] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 182.822806][ T29] audit: type=1400 audit(1778649328.624:1345): avc: denied { write } for pid=7054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.850865][ T7063] SELinux: failed to load policy [ 182.876830][ T29] audit: type=1400 audit(1778649328.664:1346): avc: denied { read } for pid=7079 comm="syz.1.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 182.931935][ T29] audit: type=1400 audit(1778649328.834:1347): avc: denied { write } for pid=7085 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.075445][ T7063] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.557281][ T7144] netlink: 'syz.2.1005': attribute type 5 has an invalid length. [ 183.681475][ T7141] Symlink component flag not implemented [ 183.687987][ T7141] Symlink component flag not implemented (116) [ 183.692905][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.744583][ T7144] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 183.806249][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.858228][ T7163] EXT4-fs: Ignoring removed orlov option [ 183.873879][ T7163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.092047][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.289104][ T7188] Symlink component flag not implemented [ 184.295555][ T7188] Symlink component flag not implemented (116) [ 184.338440][ T7194] FAULT_INJECTION: forcing a failure. [ 184.338440][ T7194] name failslab, interval 1, probability 0, space 0, times 0 [ 184.361924][ T7194] CPU: 1 UID: 0 PID: 7194 Comm: syz.5.1023 Tainted: G W syzkaller #0 PREEMPT(full) [ 184.361966][ T7194] Tainted: [W]=WARN [ 184.361975][ T7194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.361990][ T7194] Call Trace: [ 184.362017][ T7194] [ 184.362026][ T7194] __dump_stack+0x1d/0x30 [ 184.362056][ T7194] dump_stack_lvl+0x95/0xd0 [ 184.362093][ T7194] dump_stack+0x15/0x1b [ 184.362111][ T7194] should_fail_ex+0x263/0x280 [ 184.362145][ T7194] ? ip_set_create+0x1ec/0x970 [ 184.362229][ T7194] should_failslab+0x8c/0xb0 [ 184.362270][ T7194] __kmalloc_cache_noprof+0x5f/0x400 [ 184.362327][ T7194] ip_set_create+0x1ec/0x970 [ 184.362355][ T7194] ? nla_get_range_unsigned+0x253/0x290 [ 184.362459][ T7194] ? __nla_parse+0x40/0x60 [ 184.362497][ T7194] nfnetlink_rcv_msg+0x4fe/0x5d0 [ 184.362550][ T7194] netlink_rcv_skb+0x123/0x220 [ 184.362585][ T7194] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 184.362625][ T7194] nfnetlink_rcv+0x167/0x1720 [ 184.362658][ T7194] ? __kfree_skb+0x109/0x150 [ 184.362682][ T7194] ? nlmon_xmit+0x4f/0x60 [ 184.362756][ T7194] ? consume_skb+0x4b/0x130 [ 184.362781][ T7194] ? nlmon_xmit+0x4f/0x60 [ 184.362815][ T7194] ? dev_hard_start_xmit+0x36c/0x3a0 [ 184.362847][ T7194] ? __dev_queue_xmit+0x1396/0x1ec0 [ 184.362873][ T7194] ? __dev_queue_xmit+0x165/0x1ec0 [ 184.362949][ T7194] ? ref_tracker_free+0x37d/0x3e0 [ 184.363022][ T7194] ? __netlink_deliver_tap+0x4dc/0x500 [ 184.363073][ T7194] netlink_unicast+0x5a8/0x680 [ 184.363151][ T7194] netlink_sendmsg+0x5c8/0x6f0 [ 184.363183][ T7194] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.363220][ T7194] ____sys_sendmsg+0x563/0x5b0 [ 184.363253][ T7194] ___sys_sendmsg+0x195/0x1e0 [ 184.363340][ T7194] __x64_sys_sendmsg+0xd4/0x160 [ 184.363375][ T7194] x64_sys_call+0x194c/0x3020 [ 184.363450][ T7194] do_syscall_64+0x12c/0x3b0 [ 184.363487][ T7194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.363512][ T7194] RIP: 0033:0x7f3702c4ce59 [ 184.363527][ T7194] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.363545][ T7194] RSP: 002b:00007f37016a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.363574][ T7194] RAX: ffffffffffffffda RBX: 00007f3702ec5fa0 RCX: 00007f3702c4ce59 [ 184.363592][ T7194] RDX: 0000000000000010 RSI: 00002000000000c0 RDI: 0000000000000003 [ 184.363608][ T7194] RBP: 00007f37016a7090 R08: 0000000000000000 R09: 0000000000000000 [ 184.363669][ T7194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.363681][ T7194] R13: 00007f3702ec6038 R14: 00007f3702ec5fa0 R15: 00007ffe4b85fd88 [ 184.363706][ T7194] [ 184.753153][ T7203] netlink: 'syz.5.1026': attribute type 10 has an invalid length. [ 184.776728][ T7203] syz_tun: entered promiscuous mode [ 184.786917][ T7203] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 184.942154][ T7208] __nla_validate_parse: 7 callbacks suppressed [ 184.942173][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'. [ 184.951842][ T7211] set_capacity_and_notify: 18 callbacks suppressed [ 184.951972][ T7211] loop5: detected capacity change from 0 to 128 [ 185.141655][ T7224] loop1: detected capacity change from 0 to 512 [ 185.151646][ T7220] lo speed is unknown, defaulting to 1000 [ 185.158024][ T7224] EXT4-fs: Mount option(s) incompatible with ext3 [ 185.229647][ T7227] loop6: detected capacity change from 0 to 2048 [ 185.238213][ T7210] netlink: 'syz.4.1034': attribute type 1 has an invalid length. [ 185.264572][ T7227] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.286188][ T7210] netlink: 'syz.4.1034': attribute type 2 has an invalid length. [ 185.350288][ T7210] loop4: detected capacity change from 0 to 128 [ 185.438434][ T7235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1039'. [ 185.462891][ T7235] netlink: 'syz.2.1039': attribute type 5 has an invalid length. [ 185.481054][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'. [ 185.494894][ T7233] loop1: detected capacity change from 0 to 764 [ 185.565493][ T7235] loop2: detected capacity change from 0 to 512 [ 185.595946][ T25] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 185.612343][ T7235] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.627518][ T7218] loop5: detected capacity change from 0 to 4096 [ 185.631801][ T25] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 185.647630][ T7235] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.679529][ T7233] Symlink component flag not implemented [ 185.682346][ T25] EXT4-fs (loop6): This should not happen!! Data will be lost [ 185.682346][ T25] [ 185.697802][ T7233] Symlink component flag not implemented (116) [ 185.719822][ T7218] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.743894][ T25] EXT4-fs (loop6): Total free blocks count 0 [ 185.755105][ T25] EXT4-fs (loop6): Free/Dirty block details [ 185.772556][ T25] EXT4-fs (loop6): free_blocks=4096 [ 185.779094][ T25] EXT4-fs (loop6): dirty_blocks=32 [ 185.789270][ T25] EXT4-fs (loop6): Block reservation details [ 185.795528][ T25] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 185.801971][ T25] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 185.815892][ T6378] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 185.840235][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.914743][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1040'. [ 185.929746][ T7245] netlink: 'syz.6.1040': attribute type 5 has an invalid length. [ 185.938126][ T7245] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1040'. [ 185.981562][ T7248] loop1: detected capacity change from 0 to 512 [ 185.994439][ T7245] geneve2: entered promiscuous mode [ 186.020416][ T7245] geneve2: entered allmulticast mode [ 186.041146][ T7248] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.069153][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1041'. [ 186.091585][ T38] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 186.106852][ T7250] loop4: detected capacity change from 0 to 128 [ 186.122274][ T38] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 186.145365][ T7248] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 186.158785][ T38] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 186.170787][ T38] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 186.178560][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.180231][ T7248] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.211150][ T7248] FAULT_INJECTION: forcing a failure. [ 186.211150][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.225394][ T7257] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1045'. [ 186.226544][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.1.1042 Tainted: G W syzkaller #0 PREEMPT(full) [ 186.226646][ T7248] Tainted: [W]=WARN [ 186.226679][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 186.226757][ T7248] Call Trace: [ 186.226810][ T7248] [ 186.226847][ T7248] __dump_stack+0x1d/0x30 [ 186.226925][ T7248] dump_stack_lvl+0x95/0xd0 [ 186.226999][ T7248] dump_stack+0x15/0x1b [ 186.227084][ T7248] should_fail_ex+0x263/0x280 [ 186.227190][ T7248] should_fail+0xb/0x20 [ 186.227369][ T7248] should_fail_usercopy+0x1a/0x20 [ 186.227458][ T7248] _copy_from_user+0x1c/0xb0 [ 186.227605][ T7248] ext4_ioctl+0x6f7/0x31b0 [ 186.227716][ T7248] ? __fget_files+0x184/0x1c0 [ 186.227781][ T7248] ? mutex_lock+0x57/0x90 [ 186.227868][ T7248] ? __pfx_ext4_ioctl+0x10/0x10 [ 186.228006][ T7248] __se_sys_ioctl+0xce/0x140 [ 186.228110][ T7248] __x64_sys_ioctl+0x43/0x50 [ 186.228254][ T7248] x64_sys_call+0x1563/0x3020 [ 186.228398][ T7248] do_syscall_64+0x12c/0x3b0 [ 186.228504][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.228599][ T7248] RIP: 0033:0x7f4d98afce59 [ 186.228661][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.228725][ T7248] RSP: 002b:00007f4d97557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 186.228841][ T7248] RAX: ffffffffffffffda RBX: 00007f4d98d75fa0 RCX: 00007f4d98afce59 [ 186.228886][ T7248] RDX: 0000200000001f40 RSI: 00000000c0c0583b RDI: 0000000000000004 [ 186.228929][ T7248] RBP: 00007f4d97557090 R08: 0000000000000000 R09: 0000000000000000 [ 186.228971][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.229083][ T7248] R13: 00007f4d98d76038 R14: 00007f4d98d75fa0 R15: 00007ffedf1e3e18 [ 186.229148][ T7248] [ 186.338590][ T7245] loop6: detected capacity change from 0 to 512 [ 186.375692][ T7258] veth1_virt_wifi: entered promiscuous mode [ 186.412341][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 186.419630][ T7258] veth1_virt_wifi: entered allmulticast mode [ 186.450008][ T7245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.464612][ T7245] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.529014][ T7261] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff˙˙˙˙˙˙˙˙˙18446744073709551615' [ 186.531468][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.574479][ T7267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.602842][ T7267] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 186.664835][ T7267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 186.688037][ T7267] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 186.757554][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1053'. [ 186.789036][ T7280] netlink: 'syz.1.1053': attribute type 5 has an invalid length. [ 186.935721][ T7280] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1053'. [ 187.310572][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 187.327054][ T7280] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.340040][ T7280] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.356649][ T7275] Symlink component flag not implemented [ 187.362998][ T7275] Symlink component flag not implemented (116) [ 187.433733][ T7294] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1056'. [ 187.453222][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.471217][ T23] IPVS: starting estimator thread 0... [ 187.562540][ T7302] IPVS: using max 2256 ests per chain, 112800 per kthread [ 187.830591][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 187.830611][ T29] audit: type=1400 audit(1778650613.938:1372): avc: denied { read append } for pid=7320 comm="syz.4.1065" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.878611][ T29] audit: type=1400 audit(1778650613.988:1373): avc: denied { ioctl open } for pid=7320 comm="syz.4.1065" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 187.905345][ T29] audit: type=1400 audit(1778650614.018:1374): avc: denied { write } for pid=7317 comm="syz.6.1062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 188.488519][ T7338] Quota error (device loop5): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 188.579881][ T7338] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 188.630648][ T7344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 188.650429][ T7334] Symlink component flag not implemented [ 188.666639][ T7338] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.1068: Failed to acquire dquot type 1 [ 188.678630][ T7334] Symlink component flag not implemented (116) [ 188.684541][ T7338] loop5: lost filesystem error report for type 5 error -117 [ 188.690079][ T7338] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1068: corrupted inode contents [ 188.695007][ T29] audit: type=1400 audit(1778650614.798:1375): avc: denied { create } for pid=7343 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 188.697579][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 188.697595][ C1] EXT4-fs (loop5): initial error at time 1778650614: ext4_acquire_dquot:7034 [ 188.697614][ C1] EXT4-fs (loop5): last error at time 1778650614: ext4_acquire_dquot:7034 [ 188.762596][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.798744][ T7338] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.1068: mark_inode_dirty error [ 188.839991][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.840327][ T7338] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1068: corrupted inode contents [ 188.856752][ T7355] IPVS: set_ctl: invalid protocol: 51 100.1.1.0:20003 [ 188.862671][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.870203][ T7338] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.1068: mark_inode_dirty error [ 188.911163][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 188.912959][ T7338] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1068: corrupted inode contents [ 188.949668][ T29] audit: type=1400 audit(1778650615.058:1376): avc: denied { write } for pid=7357 comm="syz.6.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 188.975815][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.999922][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.000161][ T7338] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 189.032764][ T7338] loop5: lost filesystem error report for type 5 error -117 [ 189.036949][ T7338] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.1068: corrupted inode contents [ 189.302788][ T29] audit: type=1400 audit(1778650615.188:1377): avc: denied { read } for pid=7363 comm="syz.6.1077" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.391201][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.392873][ T7338] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.1068: mark_inode_dirty error [ 189.467427][ T29] audit: type=1400 audit(1778650615.188:1378): avc: denied { open } for pid=7363 comm="syz.6.1077" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 189.556206][ T7338] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 189.556433][ T7338] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 189.655233][ T7338] loop5: lost filesystem error report for type 5 error -117 [ 189.657422][ T7338] EXT4-fs (loop5): 1 truncate cleaned up [ 189.697999][ T7338] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.725590][ T7338] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.850514][ T7379] netlink: 'syz.4.1080': attribute type 1 has an invalid length. [ 189.931249][ T7385] netlink: 'syz.1.1084': attribute type 1 has an invalid length. [ 189.947044][ T7384] __nla_validate_parse: 3 callbacks suppressed [ 189.947083][ T7384] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1083'. [ 189.997830][ T7384] set_capacity_and_notify: 9 callbacks suppressed [ 189.997878][ T7384] loop6: detected capacity change from 0 to 512 [ 190.036969][ T7388] loop1: detected capacity change from 0 to 512 [ 190.072233][ T7389] loop2: detected capacity change from 0 to 128 [ 190.091974][ T7388] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 190.110622][ T7384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 190.127941][ T7388] System zones: 0-2, 18-18, 34-34 [ 190.133111][ T7384] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 190.162383][ T7388] EXT4-fs (loop1): 1 orphan inode deleted [ 190.169007][ T7388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.182513][ T7388] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.224973][ T12] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 190.274894][ T12] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:0: Failed to release dquot type 1 [ 190.321657][ T7394] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1088'. [ 190.342818][ T12] EXT4-fs (loop1): Remounting filesystem read-only [ 190.350634][ T7384] loop6: detected capacity change from 0 to 512 [ 190.368910][ T7388] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.391188][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.428625][ T7398] netlink: 'syz.4.1090': attribute type 4 has an invalid length. [ 190.448531][ T7384] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.450118][ T7394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=7394 comm=syz.2.1088 [ 190.478332][ T7384] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.557934][ T7409] Cannot find add_set index 0 as target [ 190.604713][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.767364][ T7418] loop6: detected capacity change from 0 to 256 [ 190.820136][ T7420] loop2: detected capacity change from 0 to 128 [ 190.970281][ T7426] lo speed is unknown, defaulting to 1000 [ 191.137044][ T7436] loop6: detected capacity change from 0 to 512 [ 191.155517][ T7436] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 191.204912][ T7438] loop5: detected capacity change from 0 to 4096 [ 191.232823][ T7438] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.267149][ T7443] loop2: detected capacity change from 0 to 512 [ 191.278799][ T7443] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.303416][ T7443] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 191.321980][ T7443] EXT4-fs (loop2): 1 truncate cleaned up [ 191.341982][ T6078] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.364354][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.536285][ T7452] macsec1: entered promiscuous mode [ 191.547300][ T7454] loop5: detected capacity change from 0 to 256 [ 191.807462][ T7472] netlink: 'syz.1.1116': attribute type 32 has an invalid length. [ 191.835323][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1116'. [ 191.855479][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.894324][ T7472] bond3: option coupled_control: invalid value (3) [ 191.902694][ T7472] bond3 (unregistering): Released all slaves [ 191.961426][ T7475] lo speed is unknown, defaulting to 1000 [ 192.130378][ T7480] vfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff0xffffffffffffffff' [ 192.342418][ T7493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 192.360896][ T7493] FAT-fs (loop4): Filesystem has been set read-only [ 192.371373][ T7493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 192.394960][ T7498] netlink: 'syz.5.1126': attribute type 13 has an invalid length. [ 192.406995][ T7493] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 192.420970][ T7498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 192.446617][ T7498] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 192.477522][ T7498] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 192.517315][ T7498] EXT4-fs (loop5): failed to initialize system zone (-117) [ 192.529924][ T7498] EXT4-fs (loop5): mount failed [ 192.552880][ T7498] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1126'. [ 192.578206][ T7509] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1128'. [ 192.588332][ T7509] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1128'. [ 192.650663][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1128'. [ 192.909031][ T7512] lo speed is unknown, defaulting to 1000 [ 192.968934][ T7526] EXT4-fs: inline encryption not supported [ 192.982022][ T7526] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 193.019677][ T7526] System zones: 0-5 [ 193.030393][ T7526] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.055494][ T6078] bond0: (slave syz_tun): Releasing backup interface [ 193.080733][ T7526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12820 sclass=netlink_route_socket pid=7526 comm=syz.6.1135 [ 193.103288][ T7529] dvmrp0: entered allmulticast mode [ 193.118431][ T7526] netlink: 1363 bytes leftover after parsing attributes in process `syz.6.1135'. [ 193.213689][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.232176][ T1012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.234378][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 193.234424][ T29] audit: type=1400 audit(1778650875.329:1550): avc: denied { mounton } for pid=7540 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 193.252278][ T1012] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.300603][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.319792][ T7542] ext4 filesystem being mounted at /208/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.346535][ T29] audit: type=1400 audit(1778650875.449:1551): avc: denied { bind } for pid=7545 comm="syz.6.1141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.392333][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.415289][ T29] audit: type=1400 audit(1778650875.509:1552): avc: denied { remount } for pid=7550 comm="syz.4.1143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 193.447462][ T1012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.457946][ T1012] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.543895][ T1012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.560536][ T1012] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.654770][ T29] audit: type=1400 audit(1778651131.758:1553): avc: denied { read } for pid=7574 comm="syz.6.1150" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 193.676546][ T1012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.701352][ T1012] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 193.713786][ T7561] lo speed is unknown, defaulting to 1000 [ 193.724521][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.728778][ T7540] lo speed is unknown, defaulting to 1000 [ 193.739359][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.831957][ T29] audit: type=1400 audit(1778651131.938:1554): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 193.880620][ T29] audit: type=1326 audit(1778651131.988:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.1154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 193.911950][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 193.920998][ T29] audit: type=1326 audit(1778651131.988:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.1154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 193.940722][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 193.950452][ T29] audit: type=1326 audit(1778651131.988:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.1154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 193.983212][ T29] audit: type=1326 audit(1778651131.988:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.1154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 194.011968][ T29] audit: type=1326 audit(1778651131.988:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7587 comm="syz.2.1154" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa7b8c6ce59 code=0x7ffc0000 [ 194.091962][ T1012] bridge_slave_1: left allmulticast mode [ 194.103959][ T1012] bridge_slave_1: left promiscuous mode [ 194.122905][ T1012] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.137527][ T1012] bridge_slave_0: left allmulticast mode [ 194.143718][ T1012] bridge_slave_0: left promiscuous mode [ 194.151223][ T1012] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.177842][ T7593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.198042][ T7593] ext4 filesystem being mounted at /232/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.239789][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.319417][ T1012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.338937][ T1012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.378863][ T1012] bond0 (unregistering): Released all slaves [ 194.454619][ T1012] hsr_slave_0: left promiscuous mode [ 194.492423][ T1012] hsr_slave_1: left promiscuous mode [ 194.499505][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.510092][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.524118][ T1012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.536975][ T1012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.551372][ T1012] veth1_macvtap: left promiscuous mode [ 194.557668][ T1012] veth0_macvtap: left promiscuous mode [ 194.569137][ T1012] veth1_vlan: left promiscuous mode [ 194.594750][ T1012] veth0_vlan: left promiscuous mode [ 194.614049][ T7632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.716799][ T1012] team0 (unregistering): Port device team_slave_1 removed [ 194.727472][ T1012] team0 (unregistering): Port device team_slave_0 removed [ 194.768085][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 194.782854][ T7613] lo speed is unknown, defaulting to 1000 [ 194.909923][ T7647] hsr0: entered promiscuous mode [ 194.919903][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.938300][ T7647] hsr_slave_0: left promiscuous mode [ 194.944593][ T7647] hsr_slave_1: left promiscuous mode [ 194.953129][ T7647] hsr0 (unregistering): left promiscuous mode [ 195.010880][ T7540] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.028686][ T7540] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.036441][ T7540] bridge_slave_0: entered allmulticast mode [ 195.046299][ T7540] bridge_slave_0: entered promiscuous mode [ 195.047102][ T7659] set_capacity_and_notify: 11 callbacks suppressed [ 195.047195][ T7659] loop2: detected capacity change from 0 to 512 [ 195.062057][ T7540] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.073168][ T7540] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.080569][ T7540] bridge_slave_1: entered allmulticast mode [ 195.087254][ T7540] bridge_slave_1: entered promiscuous mode [ 195.094783][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 195.107391][ T7659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.148478][ T7659] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.170824][ T7540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.187312][ T7668] loop6: detected capacity change from 0 to 2048 [ 195.204915][ T7540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.228315][ T7540] team0: Port device team_slave_0 added [ 195.250638][ T7540] team0: Port device team_slave_1 added [ 195.284052][ T7668] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.304017][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.314141][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.344069][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.354206][ T7540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.373095][ T7668] __nla_validate_parse: 4 callbacks suppressed [ 195.373176][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1168'. [ 195.403349][ T7668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1168'. [ 195.484397][ T7540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.532769][ T7540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 195.826644][ T7540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.880138][ T7692] netlink: 'syz.1.1172': attribute type 21 has an invalid length. [ 195.957444][ T6378] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.038246][ T7540] hsr_slave_0: entered promiscuous mode [ 196.044425][ T7540] hsr_slave_1: entered promiscuous mode [ 196.084951][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 196.124449][ T7713] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 196.132296][ T7713] netlink: 'syz.4.1176': attribute type 25 has an invalid length. [ 196.164354][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 196.181445][ T7717] loop4: detected capacity change from 0 to 128 [ 196.190695][ T7717] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 196.206070][ T7717] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.234771][ T7717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1177'. [ 196.285639][ T2982] ================================================================== [ 196.286189][ T12] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 196.293874][ T2982] BUG: KCSAN: data-race in set_nlink / set_nlink [ 196.293899][ T2982] [ 196.293912][ T2982] read to 0xffff888107ac0b60 of 4 bytes by task 3595 on cpu 0: [ 196.293932][ T2982] set_nlink+0x29/0xb0 [ 196.293950][ T2982] kernfs_iop_permission+0x1e5/0x220 [ 196.293974][ T2982] inode_permission+0x31f/0x3b0 [ 196.293991][ T2982] link_path_walk+0x779/0xe30 [ 196.294010][ T2982] path_openat+0x1c6/0x2050 [ 196.342684][ T2982] do_file_open+0x16c/0x290 [ 196.347217][ T2982] do_sys_openat2+0x94/0x130 [ 196.351829][ T2982] __x64_sys_openat+0xf2/0x120 [ 196.356638][ T2982] x64_sys_call+0x1e39/0x3020 [ 196.361340][ T2982] do_syscall_64+0x12c/0x3b0 [ 196.366050][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.371987][ T2982] [ 196.374355][ T2982] write to 0xffff888107ac0b60 of 4 bytes by task 2982 on cpu 1: [ 196.382612][ T2982] set_nlink+0x99/0xb0 [ 196.386732][ T2982] kernfs_iop_permission+0x1e5/0x220 [ 196.392068][ T2982] inode_permission+0x31f/0x3b0 [ 196.397124][ T2982] link_path_walk+0x779/0xe30 [ 196.401912][ T2982] path_openat+0x1c6/0x2050 [ 196.406478][ T2982] do_file_open+0x16c/0x290 [ 196.411200][ T2982] do_sys_openat2+0x94/0x130 [ 196.415819][ T2982] __x64_sys_openat+0xf2/0x120 [ 196.420922][ T2982] x64_sys_call+0x1e39/0x3020 [ 196.425712][ T2982] do_syscall_64+0x12c/0x3b0 [ 196.430423][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 196.436338][ T2982] [ 196.438679][ T2982] value changed: 0x00000004 -> 0x00000003 [ 196.444409][ T2982] [ 196.446746][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 196.452920][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 196.463373][ T2982] Tainted: [W]=WARN [ 196.467195][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.477368][ T2982] ================================================================== [ 196.503075][ T7719] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1178'. [ 196.593332][ T7700] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.681151][ T7700] syz_tun (unregistering): left allmulticast mode [ 196.736799][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.777882][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 196.845296][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.868777][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 196.946680][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.957363][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.014865][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.025319][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.204766][ T12] bond0 (unregistering): Released all slaves [ 197.258880][ T12] veth1_macvtap: left promiscuous mode [ 197.264676][ T12] veth0_macvtap: left promiscuous mode [ 197.270227][ T12] veth1_vlan: left promiscuous mode [ 197.275551][ T12] veth0_vlan: left promiscuous mode [ 197.454337][ T3021] 8021q: adding VLAN 0 to HW filter on device eth9 [ 197.563143][ T3021] 8021q: adding VLAN 0 to HW filter on device eth10 [ 197.682951][ T3021] 8021q: adding VLAN 0 to HW filter on device eth11 [ 197.736198][ T3446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.746669][ T3446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.757287][ T3446] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 197.817685][ T3446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.828144][ T3446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.838576][ T3446] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 197.851452][ T3021] 8021q: adding VLAN 0 to HW filter on device eth12 [ 197.896218][ T3446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.906710][ T3446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.917096][ T3446] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 197.955812][ T3446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.966291][ T3446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 197.976648][ T3446] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 198.054562][ T3446] bridge_slave_1: left allmulticast mode [ 198.060455][ T3446] bridge_slave_1: left promiscuous mode [ 198.066362][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.074107][ T3446] bridge_slave_0: left allmulticast mode [ 198.079772][ T3446] bridge_slave_0: left promiscuous mode [ 198.085513][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.135084][ T3446] bond1 (unregistering): (slave gre1): Releasing backup interface [ 198.143155][ T3446] gre1 (unregistering): left promiscuous mode [ 198.153355][ T3446] bond3 (unregistering): (slave geneve3): Releasing active interface [ 198.169436][ T3446] bond1 (unregistering): Released all slaves [ 198.178470][ T3446] bond2 (unregistering): Released all slaves [ 198.187897][ T3446] bond3 (unregistering): Released all slaves [ 198.255733][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.266439][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.276273][ T3446] bond0 (unregistering): Released all slaves [ 198.321456][ T3446] hsr_slave_0: left promiscuous mode [ 198.327219][ T3446] hsr_slave_1: left promiscuous mode [ 198.333191][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.340921][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.349417][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.357207][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.367763][ T3446] hsr_slave_0: left promiscuous mode [ 198.374493][ T3446] hsr_slave_1: left promiscuous mode [ 198.380342][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.395921][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.408485][ T3446] veth1_macvtap: left promiscuous mode [ 198.414501][ T3446] veth0_macvtap: left promiscuous mode [ 198.420226][ T3446] veth1_vlan: left promiscuous mode [ 198.426059][ T3446] veth0_vlan: left promiscuous mode [ 198.427209][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 198.427237][ T29] audit: type=1400 audit(1778651648.533:1632): avc: denied { write } for pid=7849 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.471764][ T29] audit: type=1400 audit(1778651648.573:1633): avc: denied { write } for pid=7860 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.544417][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 198.554415][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 198.616815][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 198.627458][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 198.661760][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 198.750207][ T29] audit: type=1400 audit(1778651648.853:1634): avc: denied { write } for pid=7865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.783817][ T29] audit: type=1400 audit(1778651648.893:1635): avc: denied { write } for pid=7876 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.821559][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 198.900290][ T29] audit: type=1400 audit(1778651649.003:1636): avc: denied { write } for pid=7879 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.933241][ T29] audit: type=1400 audit(1778651649.043:1637): avc: denied { write } for pid=7890 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 198.966570][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 199.048276][ T29] audit: type=1400 audit(1778651649.153:1638): avc: denied { write } for pid=7893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.081907][ T29] audit: type=1400 audit(1778651649.183:1639): avc: denied { write } for pid=7904 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.115621][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 199.175277][ T3446] IPVS: stop unused estimator thread 0...