last executing test programs: 8.23937766s ago: executing program 1 (id=55): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) r0 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180)}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x5}, r0, 0x8, 0xffffffffffffffff, 0x11) rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000301800000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 7.160180342s ago: executing program 1 (id=60): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf8, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdff, 0x0, @perf_bp={0x0}, 0x3900, 0x5, 0x8000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'dummy0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20040040) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8931, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x7}, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$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") bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001cc0)={r5, &(0x7f0000001c80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8932, &(0x7f0000000080)) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000090601020000000000000000020000000900027757797a3100000000050001000700000004000780"], 0x2c}, 0x1, 0x0, 0x0, 0x100000c2}, 0x80) 6.485361459s ago: executing program 1 (id=61): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40}}, 0x0, 0x0, 0xd, 0x0, "68ea2b0a67f88fe018e0818b6ad58b24940dbc406650d6ec0564558bf4bdde54fea87220b58d4eafadec03fe7faf83cbb9180891f68da04f4b2f8cfbe96e7385944fb477fdfbf627fba155a53eac0c51"}, 0xd8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x1e, 0x4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) flock(r2, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000000)}}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000400)=0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000004) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x2, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x1}, 0x94) 6.317343171s ago: executing program 3 (id=64): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40}}, 0x0, 0x0, 0xd, 0x0, "68ea2b0a67f88fe018e0818b6ad58b24940dbc406650d6ec0564558bf4bdde54fea87220b58d4eafadec03fe7faf83cbb9180891f68da04f4b2f8cfbe96e7385944fb477fdfbf627fba155a53eac0c51"}, 0xd8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) flock(r2, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000000)}}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000400)=0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000004) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x2, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x1}, 0x94) 5.609589129s ago: executing program 1 (id=67): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000065be000000000000000000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000c000000180001801400020073797a5f74756e0000000000000000001c00038004000100"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r11 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r11, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) 5.262872183s ago: executing program 2 (id=72): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) 5.259968463s ago: executing program 2 (id=73): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x3, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) clock_gettime(0x6, &(0x7f0000000240)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 4.798215678s ago: executing program 3 (id=74): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) socket$unix(0x1, 0x5, 0x0) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x38, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 4.56856763s ago: executing program 4 (id=75): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0x4000000}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (fail_nth: 4) 4.490654861s ago: executing program 3 (id=76): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000065be000000000000000000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) add_key(&(0x7f00000006c0)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r7 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r1}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r7, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) 4.277719723s ago: executing program 1 (id=77): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r8 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r8, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 4.158927865s ago: executing program 4 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040), 0x44201, 0x0) fallocate(r1, 0x17, 0x254, 0x1250) setsockopt$inet6_group_source_req(r1, 0x29, 0x1, &(0x7f00000002c0)={0x4, {{0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}, {{0xa, 0x4e22, 0xcf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}}, 0x108) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x17, 0x6, 0xffffffff}, @TCA_TBF_PBURST={0x8, 0x7, 0xa0b}, @TCA_TBF_PTAB={0x0, 0x3, [0x3, 0x6, 0x200, 0x3, 0x7, 0x6, 0x1, 0x3, 0xfffffffc, 0x1, 0x7e, 0xff, 0x7f, 0x6, 0xf09e, 0x20000000, 0x80000001, 0x6, 0x3, 0x0, 0x963c, 0x9, 0x850, 0x1c, 0x100b, 0x5, 0x9, 0xffff, 0x5, 0x5, 0x2, 0x3ff, 0x2, 0x2, 0x56ce, 0x8001, 0x2, 0xb79, 0xfffffffc, 0x11fa2621, 0x1, 0x2, 0x10000, 0x9, 0xffff919e, 0x1000, 0x2248, 0x2, 0x47, 0x80000000, 0x9, 0x8, 0x1, 0x2, 0x9, 0x9, 0x101, 0x5, 0x6, 0x6b21, 0x3, 0x5, 0xc, 0x7f, 0x9, 0x3, 0x133e, 0x800, 0xf, 0x8, 0xfffffffd, 0x5, 0x4, 0x5, 0x400, 0x6, 0x4, 0x9, 0x3, 0x33, 0x56f, 0x9a, 0x2, 0xd, 0x7e, 0x3, 0x3, 0x2, 0x7, 0x10, 0x1, 0x93c, 0x3, 0x42, 0x7, 0x0, 0x3, 0x1, 0x0, 0x3a, 0x7, 0x7, 0x401, 0xffffff39, 0x7, 0x9, 0x7, 0x7, 0xc2e, 0x1, 0x1000, 0x40, 0x0, 0xd, 0x1, 0x2, 0x5, 0xffffffff, 0x0, 0x9, 0x0, 0x6, 0x6, 0x0, 0x8, 0x3, 0x4, 0x8, 0x10000, 0xc8, 0x3, 0x5, 0x4, 0x3, 0x7fff8, 0x3, 0x4, 0xa, 0x6, 0x1000, 0x1230, 0x5, 0x4, 0x1, 0x8, 0x7fffffff, 0xfffffffa, 0x9, 0x5, 0x0, 0x0, 0x0, 0x23, 0xa8e, 0x8eea, 0xa3, 0x8001, 0x800, 0x1, 0x40, 0x4, 0x4, 0x3, 0xd, 0x7f, 0x10001, 0x80, 0x400, 0xa7, 0x10, 0x0, 0x0, 0xfffffff8, 0x28f, 0x3, 0x0, 0x6, 0x1, 0x100, 0x3, 0x200, 0x0, 0x101, 0xf, 0x5, 0xfffffffe, 0x7, 0x2, 0x4, 0x6, 0x4, 0x0, 0x8, 0x9, 0x1, 0x3, 0x8, 0x6b7c, 0xf3e, 0x800, 0x80, 0x9, 0xb, 0x0, 0x1000, 0x4, 0x9, 0x3, 0x3, 0x1, 0x7d, 0xc, 0x5, 0xffffffff, 0x3, 0x0, 0x7e, 0x0, 0xfff, 0x0, 0x9, 0x0, 0x80, 0x3, 0x3ff, 0x400, 0x80000001, 0x3, 0x4, 0xa46, 0x0, 0x90000000, 0x101, 0x8, 0x3, 0x8d6, 0xfffffffb, 0x3, 0x6, 0x1, 0x2, 0x80000000, 0x9, 0x6f, 0xefd3, 0x8, 0x5, 0xad, 0x2, 0x2, 0xaa8f, 0x47f4, 0x80, 0x238890ad, 0x8, 0x4]}]}}]}, 0x68}}, 0x44080) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) fcntl$notify(r0, 0x402, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000200000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) socket$inet6(0xa, 0x3, 0x3) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000540)={r5, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.175769286s ago: executing program 3 (id=80): r0 = perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xe}, 0x8, 0x32, 0x43a1bd76, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) dup3(r1, r0, 0x80000) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff}) tee(r3, 0xffffffffffffffff, 0xf3a, 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) set_tid_address(0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3af, 0x4}, 0x100000, 0x0, 0x0, 0x7, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@block_validity}, {@block_validity}, {@block_validity}, {@quota}, {@noload}]}, 0x1, 0x459, &(0x7f0000000240)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x0) fsync(r4) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$key(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r7, &(0x7f0000000540), 0x0}, 0x20) sendmsg$key(r6, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f00000025c0)={0xfc, {"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", 0x1000}}, 0x1006) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r9, 0x0, 0x0}, 0x20) 3.167388345s ago: executing program 0 (id=81): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0x8001}, @TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x12}]}}]}, 0x40}}, 0x0) perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xff, 0xff, 0xfc, 0x0, 0x1, 0x4041, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x1590, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x8}}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f00000001c0)={@any, 0x40}) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000002030300000000000000000000000000080001000100000080f1e638555605f73653980600c281"], 0x1c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) connect$inet(r6, &(0x7f0000000340)={0x2, 0x4e21, @private=0xa010102}, 0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000000c0)={r9, 0xc21e, 0x30, 0x101, 0x9}, &(0x7f00000001c0)=0x18) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000300)=r9, 0x4) 3.153901056s ago: executing program 2 (id=82): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r8 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r8, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 3.031492707s ago: executing program 4 (id=83): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xb, 0x4, 0x4, 0x0, 0x1}, 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r3, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xd, 0x0, &(0x7f0000000600)="c9f7b986000000000000000000", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20) 2.7521244s ago: executing program 4 (id=84): socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0x40}}, 0x0, 0x0, 0xd, 0x0, "68ea2b0a67f88fe018e0818b6ad58b24940dbc406650d6ec0564558bf4bdde54fea87220b58d4eafadec03fe7faf83cbb9180891f68da04f4b2f8cfbe96e7385944fb477fdfbf627fba155a53eac0c51"}, 0xd8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioperm(0x7, 0x81, 0xfffffffffffffffe) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) flock(r2, 0x2) r4 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r4, 0x1) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) r5 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0xfffffffffffffffd}, 0x8000, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) get_robust_list(r0, &(0x7f00000003c0)=&(0x7f0000000380)={&(0x7f0000000240)={&(0x7f0000000200)={&(0x7f0000000000)}}, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)}}, &(0x7f0000000400)=0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x4000004) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f00000001c0)=0x20000088) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x2, 0x4002) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYRESDEC=r5], &(0x7f0000000340)='syzkaller\x00', 0x1}, 0x94) 1.870104689s ago: executing program 1 (id=85): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x280000b, 0x31, 0xffffffffffffffff, 0x231ca000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e9, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = fsmount(0xffffffffffffffff, 0x1, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) pread64(r1, &(0x7f00000000c0)=""/30, 0x1e, 0x800000000004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) capset(0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_emit_ethernet(0x2b3, &(0x7f00000003c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x27d, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2602"}, {0x1, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x2, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x22, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21}, {}]}}}}}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r2, 0x8004587d, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000340)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xe467}}, {@uni_xlateno}, {@uni_xlateno}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'macturkish'}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@fat=@errors_continue}, {@shortname_mixed}, {@shortname_win95}, {@fat=@sys_immutable}, {@shortname_mixed}]}, 0x1, 0x373, &(0x7f00000006c0)="$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") socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1, {{0x43, 0x3}, 0x4}}, 0x10) 1.83833767s ago: executing program 2 (id=86): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8001}, 0x4) mmap(&(0x7f00008f5000/0x4000)=nil, 0x4000, 0x2, 0x4008032, 0xffffffffffffffff, 0xffffd000) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b80)=@delchain={0x34, 0x2e, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6, 0x8}, {0x4, 0xffff}, {0x7, 0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008051}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000050000006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mmap$perf(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x1010, 0xffffffffffffffff, 0x4) r7 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="14000000000000002900000003"], 0x18}, 0x40440c0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000001500)={'\x00', 0x7, 0xf, 0x8, 0x8, 0x8, 0x0}) sched_setscheduler(r8, 0x0, &(0x7f0000001580)=0x7) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000a00), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$describe(0x6, r9, &(0x7f0000001640)=""/71, 0x27) 1.755176381s ago: executing program 4 (id=87): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x20, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast1}, {0x2001, 0x880b, 0x8}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x68, 0x10, 0x403, 0x1000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffff7, 0x3}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0x17}}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x68}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.727107771s ago: executing program 0 (id=88): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0xb, 0x4, 0x4, 0x0, 0x1}, 0x50) close(0x3) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000500), &(0x7f0000000000)=""/7, 0x2}, 0x20) (fail_nth: 2) 1.634559672s ago: executing program 0 (id=89): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff) lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000000840), 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000440)) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000180)}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x5}, r0, 0x8, 0xffffffffffffffff, 0x11) rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="01000000301800000300000000000000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r2, @ANYBLOB="0000004001000000000000002b000000f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"], 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.370899145s ago: executing program 4 (id=90): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffa000/0x3000)=nil) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x5, 0x0, 0x0, 0x0, 0x40000}, 0x4}], 0xf905db2d12e721d0, 0x10100, 0x0) connect$inet6(r1, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file1\x00', 0x0, 0x10}, 0x18) 1.333544075s ago: executing program 0 (id=91): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB='umask=00000000000000000000007,usefree,uid=', @ANYRESHEX=0x0, @ANYBLOB="0000000400", @ANYRESHEX=0xee00, @ANYBLOB=',dots,check=strict,nfs,nodots,dots,dots,nodots,nodots,nodots,debug,debug,nodots,nodots,dots,flush,dots,dots,dots,showexec,dots,nodots,check=relaxed,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x81800) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a439, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRESDEC, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8=r0], 0xb, 0x0, &(0x7f0000000000)) renameat2(r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f0000000f80)='./file0\x00', 0x4) 1.182624187s ago: executing program 0 (id=92): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000065be000000000000000000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r7 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r2}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r7, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 1.028481518s ago: executing program 2 (id=93): ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r4, 0x0, 0xee01) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x3, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup, 0x24, 0x0, 0xfffd, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) clock_gettime(0x6, &(0x7f0000000240)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 539.554534ms ago: executing program 3 (id=94): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080001000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r1 = syz_socket_connect_nvme_tcp() r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x408100, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f00000004c0)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0), 0x2, {0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x11}, 0x52}, r5}}, 0x38) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="0500736881f5065e491df2fa4600000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000200"/28], 0x50) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000380)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000500000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b70300000000000085001a0083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0xe, 0x0, 0x0, 0x40f00, 0x3f, '\x00', r3, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x6, 0x8, 0x6992}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[r6], 0x0, 0x10, 0x400}, 0x94) 394.727356ms ago: executing program 3 (id=95): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x4, 0x1, 0x15, 0x16, 0x42, &(0x7f0000001880)="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"}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[], 0x5c}}, 0x20084884) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x9, &(0x7f0000000000)={[{@sysvgroups}, {@jqfmt_vfsv0}, {@abort}, {@usrjquota}, {@debug}, {@usrjquota, 0x2e}], [], 0x2e}, 0x16, 0x48d, &(0x7f0000000980)="$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") socketpair(0x3f, 0x3, 0x38, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) syz_create_resource$binfmt(&(0x7f00000001c0)='./file1\x00') 322.874196ms ago: executing program 0 (id=96): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x38}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r8 = syz_ublk_setup_io_uring(0x1362, &(0x7f00000002c0)={0x0, 0xb320, 0x1000, 0x0, 0x129, 0x0, r3}, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f00000004c0)) io_uring_enter(r8, 0x4a63, 0x6d5e, 0x30, &(0x7f0000000500)={[0x9]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) 0s ago: executing program 2 (id=97): shmget(0x2, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000003c0), &(0x7f00000007c0)=ANY=[@ANYBLOB="656e633d706b6373850de5fe4d883120686173683d"], 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f00000000c0)={[{@nolazytime}, {@abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@inode_readahead_blks}, {@nomblk_io_submit}, {@auto_da_alloc}, {@nouid32}]}, 0x2, 0x47e, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x59b801, 0x1ce) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0x0, 0x6, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8, 0x0, 0xfffffffe, 0xe4c, 0xf2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x8e2e9a7a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. [ 31.621400][ T28] audit: type=1400 audit(1778176468.033:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.644509][ T28] audit: type=1400 audit(1778176468.053:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.645253][ T3285] cgroup: Unknown subsys name 'net' [ 31.672382][ T28] audit: type=1400 audit(1778176468.083:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.795339][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.801678][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.912741][ T28] audit: type=1400 audit(1778176468.323:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.936166][ T28] audit: type=1400 audit(1778176468.323:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.957201][ T28] audit: type=1400 audit(1778176468.323:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.977738][ T28] audit: type=1400 audit(1778176468.323:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.998186][ T28] audit: type=1400 audit(1778176468.323:124): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.024984][ T28] audit: type=1400 audit(1778176468.323:125): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.031375][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 32.048599][ T28] audit: type=1400 audit(1778176468.353:126): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 32.097842][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.359934][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.367106][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.374245][ T3297] bridge_slave_0: entered allmulticast mode [ 33.380952][ T3297] bridge_slave_0: entered promiscuous mode [ 33.396559][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.403708][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.411112][ T3297] bridge_slave_1: entered allmulticast mode [ 33.417522][ T3297] bridge_slave_1: entered promiscuous mode [ 33.477841][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.488255][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.515363][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.522568][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.529803][ T3304] bridge_slave_0: entered allmulticast mode [ 33.536268][ T3304] bridge_slave_0: entered promiscuous mode [ 33.557735][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.564873][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.572010][ T3304] bridge_slave_1: entered allmulticast mode [ 33.578710][ T3304] bridge_slave_1: entered promiscuous mode [ 33.591366][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.598656][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.605993][ T3306] bridge_slave_0: entered allmulticast mode [ 33.612302][ T3306] bridge_slave_0: entered promiscuous mode [ 33.619335][ T3297] team0: Port device team_slave_0 added [ 33.630087][ T3297] team0: Port device team_slave_1 added [ 33.641989][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.649270][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.656544][ T3306] bridge_slave_1: entered allmulticast mode [ 33.663031][ T3306] bridge_slave_1: entered promiscuous mode [ 33.677706][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.684865][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.691969][ T3301] bridge_slave_0: entered allmulticast mode [ 33.698506][ T3301] bridge_slave_0: entered promiscuous mode [ 33.716502][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.729876][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.737000][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.744275][ T3301] bridge_slave_1: entered allmulticast mode [ 33.750853][ T3301] bridge_slave_1: entered promiscuous mode [ 33.771151][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.780715][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.787752][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.813819][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.828695][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.835856][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.843061][ T3303] bridge_slave_0: entered allmulticast mode [ 33.849726][ T3303] bridge_slave_0: entered promiscuous mode [ 33.857387][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.871215][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.878489][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.904817][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.916686][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.925865][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.932952][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.940117][ T3303] bridge_slave_1: entered allmulticast mode [ 33.946656][ T3303] bridge_slave_1: entered promiscuous mode [ 33.953828][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.975774][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.994177][ T3304] team0: Port device team_slave_0 added [ 34.009172][ T3306] team0: Port device team_slave_0 added [ 34.015634][ T3304] team0: Port device team_slave_1 added [ 34.030992][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.040884][ T3306] team0: Port device team_slave_1 added [ 34.055751][ T3301] team0: Port device team_slave_0 added [ 34.062420][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.085996][ T3297] hsr_slave_0: entered promiscuous mode [ 34.091976][ T3297] hsr_slave_1: entered promiscuous mode [ 34.098715][ T3301] team0: Port device team_slave_1 added [ 34.112575][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.119601][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.145934][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.157184][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.164153][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.190460][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.206327][ T3303] team0: Port device team_slave_0 added [ 34.212208][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.219222][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.245238][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.256564][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.263552][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.289557][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.308234][ T3303] team0: Port device team_slave_1 added [ 34.333063][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.340101][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.366208][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.381516][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.388526][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.416469][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.428400][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.435410][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.462103][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.479667][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.486661][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.512745][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.554810][ T3304] hsr_slave_0: entered promiscuous mode [ 34.560784][ T3304] hsr_slave_1: entered promiscuous mode [ 34.566736][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.572479][ T3304] Cannot create hsr debugfs directory [ 34.585794][ T3306] hsr_slave_0: entered promiscuous mode [ 34.591778][ T3306] hsr_slave_1: entered promiscuous mode [ 34.597596][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.603336][ T3306] Cannot create hsr debugfs directory [ 34.624151][ T3301] hsr_slave_0: entered promiscuous mode [ 34.630153][ T3301] hsr_slave_1: entered promiscuous mode [ 34.636154][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.641874][ T3301] Cannot create hsr debugfs directory [ 34.649607][ T3303] hsr_slave_0: entered promiscuous mode [ 34.655543][ T3303] hsr_slave_1: entered promiscuous mode [ 34.661446][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.667195][ T3303] Cannot create hsr debugfs directory [ 34.860823][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.869620][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.877314][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.885950][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.895985][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.904476][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.912303][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.920812][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.942480][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.951028][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.959268][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.967806][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.975899][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.984543][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.992433][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.000907][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.035227][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.044982][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.052716][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.061541][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.069363][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.078196][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.086047][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.094808][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.135511][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.144019][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.152417][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.161090][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.173053][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.181856][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.189899][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.198699][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.221236][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.241338][ T3301] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.250056][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 35.258076][ T3301] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.267060][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 35.275062][ T3301] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.283731][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 35.295668][ T3301] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.304317][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 35.319870][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.335038][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.342698][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.349776][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.370206][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.377349][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.395857][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.421849][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.433350][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.440444][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.457943][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.465023][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.491243][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.515516][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.522748][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.534249][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.545208][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.552316][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.572618][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.582788][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.594154][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.601237][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.613966][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.621069][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.632614][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.651835][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.659159][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.671902][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.679099][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.745413][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.765669][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.953604][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.967458][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.986448][ T3297] veth0_vlan: entered promiscuous mode [ 36.013827][ T3297] veth1_vlan: entered promiscuous mode [ 36.035391][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.046164][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.070705][ T3297] veth0_macvtap: entered promiscuous mode [ 36.086823][ T3297] veth1_macvtap: entered promiscuous mode [ 36.110730][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.127322][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.153877][ T1617] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.185162][ T1617] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.197971][ T3306] veth0_vlan: entered promiscuous mode [ 36.205812][ T1617] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.220310][ T1617] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.245437][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.252769][ T3306] veth1_vlan: entered promiscuous mode [ 36.269312][ T3304] veth0_vlan: entered promiscuous mode [ 36.291422][ T3303] veth0_vlan: entered promiscuous mode [ 36.303478][ T3304] veth1_vlan: entered promiscuous mode [ 36.311844][ T3303] veth1_vlan: entered promiscuous mode [ 36.325514][ T3303] veth0_macvtap: entered promiscuous mode [ 36.332817][ T3303] veth1_macvtap: entered promiscuous mode [ 36.344506][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.353596][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.454544][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.463665][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.483227][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.496812][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.527292][ T3304] veth0_macvtap: entered promiscuous mode [ 37.366814][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 37.369841][ T28] audit: type=1400 audit(1778176472.973:162): avc: denied { prog_run } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.380215][ T3304] veth1_macvtap: entered promiscuous mode [ 37.421631][ T3512] hub 8-0:1.0: USB hub found [ 37.426622][ T3512] hub 8-0:1.0: 8 ports detected [ 37.445863][ T3512] netlink: 'syz.0.1': attribute type 36 has an invalid length. [ 37.453596][ T28] audit: type=1400 audit(1778176472.973:163): avc: denied { open } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.498465][ T3306] veth0_macvtap: entered promiscuous mode [ 37.507044][ T28] audit: type=1400 audit(1778176472.973:164): avc: denied { kernel } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.515739][ T3512] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 37.534870][ T28] audit: type=1400 audit(1778176473.333:165): avc: denied { write } for pid=3497 comm="syz.1.2" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.536224][ T3512] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 37.609434][ T28] audit: type=1400 audit(1778176473.333:166): avc: denied { connect } for pid=3497 comm="syz.1.2" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 37.641428][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.652391][ T28] audit: type=1400 audit(1778176473.333:167): avc: denied { name_connect } for pid=3497 comm="syz.1.2" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 37.676851][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.826970][ T28] audit: type=1400 audit(1778176473.333:168): avc: denied { allowed } for pid=3497 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.846360][ T28] audit: type=1400 audit(1778176473.343:169): avc: denied { create } for pid=3497 comm="syz.1.2" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.856670][ T3306] veth1_macvtap: entered promiscuous mode [ 37.884149][ T28] audit: type=1400 audit(1778176473.343:170): avc: denied { map } for pid=3497 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.908657][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.917630][ T28] audit: type=1400 audit(1778176473.343:171): avc: denied { read write } for pid=3497 comm="syz.1.2" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3769 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.917763][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.956298][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.997703][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.005158][ T3518] FAULT_INJECTION: forcing a failure. [ 38.005158][ T3518] name failslab, interval 1, probability 0, space 0, times 1 [ 38.021477][ T3301] veth0_vlan: entered promiscuous mode [ 38.022710][ T3518] CPU: 1 UID: 0 PID: 3518 Comm: syz.0.7 Not tainted syzkaller #0 PREEMPT(full) [ 38.022739][ T3518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 38.022752][ T3518] Call Trace: [ 38.022759][ T3518] [ 38.022767][ T3518] __dump_stack+0x1d/0x30 [ 38.022831][ T3518] dump_stack_lvl+0x95/0xd0 [ 38.022853][ T3518] dump_stack+0x15/0x1b [ 38.022874][ T3518] should_fail_ex+0x263/0x280 [ 38.022967][ T3518] should_failslab+0x8c/0xb0 [ 38.023000][ T3518] kmem_cache_alloc_noprof+0x66/0x3f0 [ 38.023033][ T3518] ? skb_clone+0x151/0x1f0 [ 38.023087][ T3518] skb_clone+0x151/0x1f0 [ 38.023111][ T3518] __netlink_deliver_tap+0x2c9/0x500 [ 38.023144][ T3518] netlink_unicast+0x653/0x680 [ 38.023258][ T3518] netlink_sendmsg+0x5c8/0x6f0 [ 38.023287][ T3518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 38.023316][ T3518] ____sys_sendmsg+0x563/0x5b0 [ 38.023342][ T3518] ___sys_sendmsg+0x195/0x1e0 [ 38.023453][ T3518] __x64_sys_sendmsg+0xd4/0x160 [ 38.023480][ T3518] x64_sys_call+0x194c/0x3020 [ 38.023559][ T3518] do_syscall_64+0x12c/0x3b0 [ 38.023586][ T3518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.023725][ T3518] RIP: 0033:0x7f99e81dcdd9 [ 38.023743][ T3518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 38.023825][ T3518] RSP: 002b:00007f99e6c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 38.023848][ T3518] RAX: ffffffffffffffda RBX: 00007f99e8455fa0 RCX: 00007f99e81dcdd9 [ 38.023864][ T3518] RDX: 0000000004004090 RSI: 0000200000000300 RDI: 0000000000000003 [ 38.023878][ T3518] RBP: 00007f99e6c37090 R08: 0000000000000000 R09: 0000000000000000 [ 38.023921][ T3518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.023935][ T3518] R13: 00007f99e8456038 R14: 00007f99e8455fa0 R15: 00007ffde5ae6f68 [ 38.023969][ T3518] [ 38.023994][ T3518] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7'. [ 38.226511][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.243870][ T3301] veth1_vlan: entered promiscuous mode [ 38.257676][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.294628][ T1617] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.309425][ T1617] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318621][ T1617] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.333220][ T3301] veth0_macvtap: entered promiscuous mode [ 38.342242][ T3492] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.356052][ T3301] veth1_macvtap: entered promiscuous mode [ 38.400620][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.419169][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.436680][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.451914][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.461092][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.480791][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.499939][ T3539] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9'. [ 38.660755][ T3544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10'. [ 38.690438][ T3543] hub 8-0:1.0: USB hub found [ 38.695773][ T3543] hub 8-0:1.0: 8 ports detected [ 38.741411][ T3543] netlink: 'syz.2.3': attribute type 36 has an invalid length. [ 38.809367][ T3543] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 38.819500][ T3543] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 40.990378][ T3554] syz.1.11 (3554) used greatest stack depth: 10304 bytes left [ 41.062830][ T3561] Zero length message leads to an empty skb [ 41.921515][ T3564] netlink: 'syz.0.12': attribute type 36 has an invalid length. [ 41.933314][ T3564] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 41.943336][ T3564] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 42.031912][ T3574] hub 8-0:1.0: USB hub found [ 42.036920][ T3574] hub 8-0:1.0: 8 ports detected [ 42.054746][ T3574] netlink: 'syz.4.14': attribute type 36 has an invalid length. [ 42.180644][ T3543] syz.2.3 (3543) used greatest stack depth: 10296 bytes left [ 42.193113][ T3570] loop3: detected capacity change from 0 to 512 [ 42.193238][ T3574] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 42.210207][ T3574] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 42.246523][ T3570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.519377][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 42.519396][ T28] audit: type=1400 audit(1778176478.933:196): avc: denied { create } for pid=3565 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=decnet_socket permissive=1 [ 42.572042][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.16: corrupted inode contents [ 42.574985][ T28] audit: type=1400 audit(1778176478.983:197): avc: denied { create } for pid=3580 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.604150][ T28] audit: type=1400 audit(1778176478.983:198): avc: denied { connect } for pid=3580 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.633840][ T28] audit: type=1400 audit(1778176478.983:199): avc: denied { write } for pid=3585 comm="syz.2.18" name="mcfilter6" dev="proc" ino=4026532833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 42.658600][ T3570] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 42.664614][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 42.670334][ T3570] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #3: comm syz.3.16: mark_inode_dirty error [ 42.673706][ C1] EXT4-fs (loop3): initial error at time 1778176479: ext4_do_update_inode:5690: inode 3 [ 42.701253][ C1] EXT4-fs (loop3): last error at time 1778176479: ext4_do_update_inode:5690: inode 3 [ 42.712218][ T3570] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 42.713800][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #3: comm syz.3.16: corrupted inode contents [ 42.737865][ T3579] loop1: detected capacity change from 0 to 512 [ 42.755127][ T3592] netlink: 'syz.0.17': attribute type 13 has an invalid length. [ 42.755786][ T3570] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 42.763198][ T3570] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #3: comm syz.3.16: mark_inode_dirty error [ 42.771107][ T3592] netlink: 'syz.0.17': attribute type 17 has an invalid length. [ 42.781604][ T3570] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 42.794527][ T28] audit: type=1400 audit(1778176479.183:200): avc: denied { append } for pid=3590 comm="syz.2.20" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.836028][ T3570] Quota error (device loop3): write_blk: dquota write failed [ 42.851550][ T3579] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e018, mo2=0002] [ 42.865293][ T3570] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 42.888124][ T3570] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.16: Failed to acquire dquot type 0 [ 42.899550][ T28] audit: type=1400 audit(1778176479.213:201): avc: denied { mounton } for pid=3565 comm="syz.1.15" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.922040][ T3579] System zones: 1-12 [ 42.930320][ T3579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #12: comm syz.1.15: missing EA_INODE flag [ 42.945192][ T3570] loop3: lost filesystem error report for type 5 error -117 [ 42.945888][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.16: corrupted inode contents [ 42.960089][ T28] audit: type=1400 audit(1778176479.273:202): avc: denied { read } for pid=3580 comm="syz.0.17" path="socket:[3911]" dev="sockfs" ino=3911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 42.980104][ T3579] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 42.988194][ T28] audit: type=1400 audit(1778176479.273:203): avc: denied { setopt } for pid=3580 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 43.016869][ T3570] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.028068][ T3579] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.15: error while reading EA inode 12 err=-117 [ 43.028238][ T3570] EXT4-fs error (device loop3): ext4_dirty_inode:6587: inode #16: comm syz.3.16: mark_inode_dirty error [ 43.038399][ T3579] loop1: lost filesystem error report for type 5 error -117 [ 43.049712][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 43.049753][ C1] EXT4-fs (loop1): initial error at time 1778176479: ext4_xattr_inode_iget:441: inode 12 [ 43.049783][ C1] EXT4-fs (loop1): last error at time 1778176479: ext4_xattr_inode_iget:441: inode 12 [ 43.050074][ T3581] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.064333][ T3579] EXT4-fs (loop1): 1 orphan inode deleted [ 43.068905][ T3581] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.078104][ T3579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.595097][ T3570] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.613021][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.16: corrupted inode contents [ 43.645946][ T3579] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.656737][ T3570] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.658472][ T3570] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #16: comm syz.3.16: mark_inode_dirty error [ 43.737243][ T3601] syz.4.21 (3601) used greatest stack depth: 9856 bytes left [ 43.789560][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.808749][ T3581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.820210][ T3570] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.820478][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.16: corrupted inode contents [ 43.961404][ T3570] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 43.961662][ T3570] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 44.023669][ T3570] loop3: lost filesystem error report for type 5 error -117 [ 44.040729][ T3570] EXT4-fs error (device loop3): ext4_do_update_inode:5690: inode #16: comm syz.3.16: corrupted inode contents [ 44.116402][ T3570] EXT4-fs error (device loop3): ext4_truncate:4690: inode #16: comm syz.3.16: mark_inode_dirty error [ 44.147288][ T3570] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 44.150214][ T3592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.158821][ T3570] loop3: lost filesystem error report for type 5 error -117 [ 44.169610][ T3570] EXT4-fs (loop3): 1 truncate cleaned up [ 44.175788][ T3592] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.182799][ T3570] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.208094][ T3570] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.222322][ T3592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.259521][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.266758][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.298471][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.305732][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.345219][ T3592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.362179][ T3570] syz.3.16 (3570) used greatest stack depth: 9712 bytes left [ 44.370686][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.381339][ T3592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.419543][ T3592] veth1_vlan: left promiscuous mode [ 44.479069][ T3592] veth0_vlan: left promiscuous mode [ 44.485753][ T3592] veth0_vlan: entered promiscuous mode [ 44.495733][ T3592] veth1_vlan: entered promiscuous mode [ 44.506321][ T3592] veth1_macvtap: left promiscuous mode [ 44.513451][ T3592] veth0_macvtap: left promiscuous mode [ 44.521564][ T3608] xt_hashlimit: size too large, truncated to 1048576 [ 44.526537][ T3592] veth0_macvtap: entered promiscuous mode [ 44.565405][ T3592] veth1_macvtap: entered promiscuous mode [ 44.579670][ T3592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 44.602035][ T3592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 44.625973][ T3592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 44.653741][ T3592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 44.727969][ T3614] tipc: Started in network mode [ 44.732958][ T3614] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 44.742132][ T3614] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 44.763178][ T3614] tipc: Enabled bearer , priority 10 [ 44.777945][ T3622] netlink: 'syz.0.27': attribute type 1 has an invalid length. [ 44.848273][ T3622] netlink: 'syz.0.27': attribute type 2 has an invalid length. [ 44.885747][ T3622] netlink: 'syz.0.27': attribute type 4 has an invalid length. [ 44.910584][ T3622] netlink: 132 bytes leftover after parsing attributes in process `syz.0.27'. [ 45.071272][ T3620] netlink: 20 bytes leftover after parsing attributes in process `syz.1.26'. [ 45.400633][ T3641] hub 8-0:1.0: USB hub found [ 45.405425][ T3641] hub 8-0:1.0: 8 ports detected [ 45.416297][ T3641] netlink: 'syz.2.32': attribute type 36 has an invalid length. [ 45.433410][ T3641] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 45.443387][ T3641] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 45.790736][ T3644] netlink: 'syz.4.33': attribute type 6 has an invalid length. [ 45.818073][ T3646] syz.3.34 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 45.893990][ T3644] netlink: 24 bytes leftover after parsing attributes in process `syz.4.33'. [ 46.028627][ T3399] tipc: Node number set to 1 [ 46.053074][ T3650] loop4: detected capacity change from 0 to 128 [ 46.071313][ T3653] FAULT_INJECTION: forcing a failure. [ 46.071313][ T3653] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 46.110233][ T3653] CPU: 1 UID: 0 PID: 3653 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(full) [ 46.110367][ T3653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.110379][ T3653] Call Trace: [ 46.110426][ T3653] [ 46.110434][ T3653] __dump_stack+0x1d/0x30 [ 46.110483][ T3653] dump_stack_lvl+0x95/0xd0 [ 46.110508][ T3653] dump_stack+0x15/0x1b [ 46.110532][ T3653] should_fail_ex+0x263/0x280 [ 46.110563][ T3653] should_fail+0xb/0x20 [ 46.110590][ T3653] should_fail_usercopy+0x1a/0x20 [ 46.110679][ T3653] _copy_from_user+0x1c/0xb0 [ 46.110814][ T3653] ___sys_sendmsg+0xc1/0x1e0 [ 46.110840][ T3653] ? path_openat+0x1b01/0x2050 [ 46.110892][ T3653] ? __rcu_read_unlock+0x4e/0x70 [ 46.110914][ T3653] __sys_sendmmsg+0x185/0x320 [ 46.110949][ T3653] __x64_sys_sendmmsg+0x57/0x70 [ 46.110976][ T3653] x64_sys_call+0x27aa/0x3020 [ 46.111004][ T3653] do_syscall_64+0x12c/0x3b0 [ 46.111094][ T3653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.111118][ T3653] RIP: 0033:0x7f99e81dcdd9 [ 46.111136][ T3653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.111232][ T3653] RSP: 002b:00007f99e6c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 46.111258][ T3653] RAX: ffffffffffffffda RBX: 00007f99e8455fa0 RCX: 00007f99e81dcdd9 [ 46.111284][ T3653] RDX: 0000000000000001 RSI: 00002000000029c0 RDI: 0000000000000004 [ 46.111298][ T3653] RBP: 00007f99e6c37090 R08: 0000000000000000 R09: 0000000000000000 [ 46.111350][ T3653] R10: 0000000004040040 R11: 0000000000000246 R12: 0000000000000001 [ 46.111366][ T3653] R13: 00007f99e8456038 R14: 00007f99e8455fa0 R15: 00007ffde5ae6f68 [ 46.111389][ T3653] [ 46.527816][ T3663] hub 8-0:1.0: USB hub found [ 46.533067][ T3663] hub 8-0:1.0: 8 ports detected [ 46.545880][ T3663] netlink: 'syz.0.39': attribute type 36 has an invalid length. [ 46.557310][ T3663] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 46.567264][ T3663] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 47.763798][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 47.763815][ T28] audit: type=1400 audit(1778176484.173:223): avc: denied { write } for pid=3667 comm="syz.2.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 47.892888][ T3671] FAULT_INJECTION: forcing a failure. [ 47.892888][ T3671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 47.919206][ T3671] CPU: 1 UID: 0 PID: 3671 Comm: syz.2.42 Not tainted syzkaller #0 PREEMPT(full) [ 47.919234][ T3671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 47.919246][ T3671] Call Trace: [ 47.919254][ T3671] [ 47.919263][ T3671] __dump_stack+0x1d/0x30 [ 47.919292][ T3671] dump_stack_lvl+0x95/0xd0 [ 47.919340][ T3671] dump_stack+0x15/0x1b [ 47.919359][ T3671] should_fail_ex+0x263/0x280 [ 47.919391][ T3671] should_fail+0xb/0x20 [ 47.919510][ T3671] should_fail_usercopy+0x1a/0x20 [ 47.919595][ T3671] _copy_from_user+0x1c/0xb0 [ 47.919626][ T3671] write_ldt+0x6e/0x4b0 [ 47.919650][ T3671] ? fput+0x8f/0xc0 [ 47.919738][ T3671] __se_sys_modify_ldt+0x6c/0x260 [ 47.919760][ T3671] x64_sys_call+0x2f50/0x3020 [ 47.919847][ T3671] do_syscall_64+0x12c/0x3b0 [ 47.919919][ T3671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.919946][ T3671] RIP: 0033:0x7f3c310ccdd9 [ 47.919965][ T3671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.919983][ T3671] RSP: 002b:00007f3c2fb06028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 47.920015][ T3671] RAX: ffffffffffffffda RBX: 00007f3c31346090 RCX: 00007f3c310ccdd9 [ 47.920031][ T3671] RDX: 0000000000000010 RSI: 0000200000000440 RDI: 0000000000000011 [ 47.920047][ T3671] RBP: 00007f3c2fb06090 R08: 0000000000000000 R09: 0000000000000000 [ 47.920063][ T3671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 47.920078][ T3671] R13: 00007f3c31346128 R14: 00007f3c31346090 R15: 00007ffe71ae85b8 [ 47.920100][ T3671] [ 48.117792][ T3674] netlink: 68 bytes leftover after parsing attributes in process `syz.0.43'. [ 48.119736][ T28] audit: type=1400 audit(1778176484.533:224): avc: denied { connect } for pid=3672 comm="syz.0.43" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.134852][ T3673] tipc: Started in network mode [ 48.160597][ T28] audit: type=1400 audit(1778176484.533:225): avc: denied { write } for pid=3672 comm="syz.0.43" path="socket:[4026]" dev="sockfs" ino=4026 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.174427][ T3673] tipc: Node identity 4, cluster identity 4711 [ 48.220931][ T28] audit: type=1400 audit(1778176484.633:226): avc: denied { create } for pid=3677 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 48.246577][ T28] audit: type=1400 audit(1778176484.663:227): avc: denied { create } for pid=3677 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.266071][ T3673] tipc: Node number set to 4 [ 48.278929][ T3680] netlink: 'syz.2.45': attribute type 21 has an invalid length. [ 48.286772][ T28] audit: type=1400 audit(1778176484.693:228): avc: denied { create } for pid=3677 comm="syz.3.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 48.294699][ T3680] netlink: 132 bytes leftover after parsing attributes in process `syz.2.45'. [ 48.306905][ T28] audit: type=1326 audit(1778176484.703:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.3.44" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 48.342295][ T28] audit: type=1326 audit(1778176484.703:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.3.44" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 48.372584][ T3684] netlink: 'syz.0.46': attribute type 6 has an invalid length. [ 48.385463][ T3684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.46'. [ 48.394451][ T28] audit: type=1326 audit(1778176484.703:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.3.44" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 48.417034][ T3678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 48.420273][ T28] audit: type=1326 audit(1778176484.703:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3677 comm="syz.3.44" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 48.564049][ T3691] loop1: detected capacity change from 0 to 512 [ 48.600754][ T3691] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.47: corrupted inode contents [ 48.612817][ T3691] fserror_report: 2 callbacks suppressed [ 48.612835][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.619160][ T3691] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.47: mark_inode_dirty error [ 48.634612][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 48.640696][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.646053][ C1] EXT4-fs (loop1): initial error at time 1778176485: ext4_do_update_inode:5690: inode 16 [ 48.646113][ C1] EXT4-fs (loop1): last error at time 1778176485: ext4_do_update_inode:5690: inode 16 [ 48.668267][ T3698] loop2: detected capacity change from 0 to 512 [ 48.668629][ T3698] EXT4-fs: Ignoring removed bh option [ 48.668944][ T3698] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 48.670925][ T3691] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.47: corrupted inode contents [ 48.670957][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.671161][ T3691] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.47: mark_inode_dirty error [ 48.671221][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.671460][ T3691] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.47: corrupted inode contents [ 48.671498][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.671586][ T3698] EXT4-fs error (device loop2): ext4_iget_extra_inode:5128: inode #15: comm syz.2.49: corrupted in-inode xattr: e_value size too large [ 48.671618][ T3698] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.673145][ T3691] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 48.673202][ T3691] loop1: lost filesystem error report for type 5 error -117 [ 48.673285][ T3698] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.49: couldn't read orphan inode 15 (err -117) [ 48.673315][ T3698] loop2: lost filesystem error report for type 5 error -117 [ 48.674610][ C0] EXT4-fs (loop2): error count since last fsck: 2 [ 48.674631][ C0] EXT4-fs (loop2): initial error at time 1778176485: ext4_iget_extra_inode:5128: inode 15 [ 48.674661][ C0] EXT4-fs (loop2): last error at time 1778176485: ext4_orphan_get:1402 [ 48.684314][ T3691] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.47: corrupted inode contents [ 48.684348][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.684566][ T3691] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.47: mark_inode_dirty error [ 48.684640][ T3691] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 48.685104][ T3691] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 48.685126][ T3691] loop1: lost filesystem error report for type 5 error -117 [ 48.685627][ T3691] EXT4-fs (loop1): 1 truncate cleaned up [ 48.705857][ T3691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.706083][ T3691] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.755565][ T3698] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.792860][ T3701] hub 8-0:1.0: USB hub found [ 48.793075][ T3701] hub 8-0:1.0: 8 ports detected [ 48.804240][ T3701] netlink: 'syz.3.50': attribute type 36 has an invalid length. [ 48.813584][ T3701] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 48.813727][ T3701] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 49.155662][ T69] EXT4-fs error (device loop1): ext4_release_dquot:7070: comm kworker/u8:4: Failed to release dquot type 1 [ 49.156876][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.199529][ T3703] loop1: detected capacity change from 0 to 512 [ 49.222842][ T3703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.222964][ T3703] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.379386][ T3711] netlink: 32 bytes leftover after parsing attributes in process `syz.0.54'. [ 49.381338][ T3711] netlink: 108 bytes leftover after parsing attributes in process `syz.0.54'. [ 49.395533][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.565134][ T3713] hub 8-0:1.0: USB hub found [ 49.565443][ T3713] hub 8-0:1.0: 8 ports detected [ 49.581615][ T3713] netlink: 'syz.4.53': attribute type 36 has an invalid length. [ 49.677686][ T3716] loop3: detected capacity change from 0 to 512 [ 49.716167][ T3713] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 49.716188][ T3713] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 49.729371][ T3716] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.56: inode has both inline data and extents flags [ 49.729400][ T3716] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 49.729752][ T3716] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.56: couldn't read orphan inode 15 (err -117) [ 49.729851][ T3716] loop3: lost filesystem error report for type 5 error -117 [ 49.730673][ T3716] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.986539][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.365265][ T3733] hub 8-0:1.0: USB hub found [ 50.365406][ T3733] hub 8-0:1.0: 8 ports detected [ 50.373552][ T3733] netlink: 'syz.4.59': attribute type 36 has an invalid length. [ 50.381585][ T3733] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.381604][ T3733] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.419156][ T3735] hub 8-0:1.0: USB hub found [ 50.419341][ T3735] hub 8-0:1.0: 8 ports detected [ 50.435673][ T3735] netlink: 'syz.0.58': attribute type 36 has an invalid length. [ 50.444261][ T3735] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 50.444279][ T3735] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 50.643708][ T3739] loop1: detected capacity change from 0 to 512 [ 50.666944][ T3739] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.691540][ T3739] EXT4-fs (loop1): 1 truncate cleaned up [ 50.701656][ T3739] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.088489][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.234521][ T3752] netlink: 'syz.0.63': attribute type 6 has an invalid length. [ 51.234571][ T3752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.63'. [ 51.957868][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.016394][ T3764] netlink: 144 bytes leftover after parsing attributes in process `syz.2.66'. [ 52.447460][ T3778] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 52.848587][ T3782] hub 8-0:1.0: USB hub found [ 52.853418][ T3782] hub 8-0:1.0: 8 ports detected [ 52.861265][ T3782] netlink: 'syz.2.73': attribute type 36 has an invalid length. [ 52.875844][ T3782] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 52.885758][ T3782] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 52.974639][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 52.974747][ T28] audit: type=1400 audit(1778176489.333:335): avc: denied { ioctl } for pid=3783 comm="syz.3.74" path="socket:[6265]" dev="sockfs" ino=6265 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.006427][ T3788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 53.019681][ T3789] netlink: 'syz.4.68': attribute type 6 has an invalid length. [ 53.027837][ T3789] netlink: 24 bytes leftover after parsing attributes in process `syz.4.68'. [ 53.072075][ T3793] FAULT_INJECTION: forcing a failure. [ 53.072075][ T3793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.095566][ T3793] CPU: 1 UID: 0 PID: 3793 Comm: syz.4.75 Not tainted syzkaller #0 PREEMPT(full) [ 53.095598][ T3793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 53.095663][ T3793] Call Trace: [ 53.095670][ T3793] [ 53.095678][ T3793] __dump_stack+0x1d/0x30 [ 53.095830][ T3793] dump_stack_lvl+0x95/0xd0 [ 53.095852][ T3793] dump_stack+0x15/0x1b [ 53.095874][ T3793] should_fail_ex+0x263/0x280 [ 53.095907][ T3793] should_fail+0xb/0x20 [ 53.095959][ T3793] should_fail_usercopy+0x1a/0x20 [ 53.096018][ T3793] _copy_to_iter+0x251/0xea0 [ 53.096056][ T3793] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 53.096084][ T3793] __skb_datagram_iter+0xc6/0x680 [ 53.096111][ T3793] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 53.096144][ T3793] skb_copy_datagram_iter+0x3f/0xf0 [ 53.096176][ T3793] netlink_recvmsg+0x1a8/0x550 [ 53.096210][ T3793] ? __pfx_netlink_recvmsg+0x10/0x10 [ 53.096279][ T3793] sock_recvmsg+0xf5/0x120 [ 53.096314][ T3793] ____sys_recvmsg+0xf5/0x280 [ 53.096345][ T3793] ___sys_recvmsg+0x11f/0x3b0 [ 53.096374][ T3793] do_recvmmsg+0x1ef/0x560 [ 53.096457][ T3793] ? get_timespec64+0xd2/0x100 [ 53.096491][ T3793] __x64_sys_recvmmsg+0xfb/0x170 [ 53.096516][ T3793] x64_sys_call+0x80f/0x3020 [ 53.096592][ T3793] do_syscall_64+0x12c/0x3b0 [ 53.096620][ T3793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.096693][ T3793] RIP: 0033:0x7fead809cdd9 [ 53.096713][ T3793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 53.096811][ T3793] RSP: 002b:00007fead6af7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 53.096837][ T3793] RAX: ffffffffffffffda RBX: 00007fead8315fa0 RCX: 00007fead809cdd9 [ 53.096854][ T3793] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 53.096868][ T3793] RBP: 00007fead6af7090 R08: 0000200000003700 R09: 0000000000000000 [ 53.096881][ T3793] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 53.096920][ T3793] R13: 00007fead8316038 R14: 00007fead8315fa0 R15: 00007fff10625718 [ 53.096938][ T3793] [ 53.493379][ T3800] netlink: 'syz.4.78': attribute type 6 has an invalid length. [ 53.504889][ T3800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 54.555261][ T28] audit: type=1326 audit(1778176490.973:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 54.582002][ T28] audit: type=1326 audit(1778176490.973:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 54.718537][ T28] audit: type=1326 audit(1778176490.973:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 54.806048][ T28] audit: type=1326 audit(1778176490.973:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 54.831435][ T28] audit: type=1326 audit(1778176490.973:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 55.478754][ T28] audit: type=1326 audit(1778176490.973:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 55.504082][ T28] audit: type=1326 audit(1778176490.973:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 55.571502][ T28] audit: type=1326 audit(1778176490.973:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=218 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 55.664084][ T28] audit: type=1326 audit(1778176490.973:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3808 comm="syz.3.80" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 55.844209][ T3809] loop3: detected capacity change from 0 to 512 [ 55.919647][ T3809] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.923155][ T3832] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 56.005746][ T3837] vlan2: entered allmulticast mode [ 56.014640][ T3837] veth0_to_bond: entered allmulticast mode [ 56.021571][ T3809] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.80: invalid indirect mapped block 4294967295 (level 0) [ 56.081117][ T3809] loop3: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 56.084608][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 56.100259][ C1] EXT4-fs (loop3): initial error at time 1778176492: ext4_free_branches:1023: inode 16 [ 56.110157][ C1] EXT4-fs (loop3): last error at time 1778176492: ext4_free_branches:1023: inode 16 [ 56.125195][ T3809] EXT4-fs (loop3): Remounting filesystem read-only [ 56.161408][ T3809] EXT4-fs (loop3): 1 orphan inode deleted [ 56.190980][ T3809] EXT4-fs (loop3): 1 truncate cleaned up [ 56.227871][ T3809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.321104][ T3845] loop0: detected capacity change from 0 to 256 [ 56.328595][ T3846] loop1: detected capacity change from 0 to 1024 [ 56.368589][ T3846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.370474][ T3849] netlink: 24 bytes leftover after parsing attributes in process `syz.2.86'. [ 56.858397][ T3861] hub 8-0:1.0: USB hub found [ 56.858504][ T3861] hub 8-0:1.0: 8 ports detected [ 56.861348][ T3861] netlink: 'syz.2.93': attribute type 36 has an invalid length. [ 56.864572][ T3861] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 56.864632][ T3861] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 57.073500][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.142094][ T3863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.94'. [ 57.223137][ T3865] loop3: detected capacity change from 0 to 512 [ 57.242165][ T3865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c018, mo2=0102] [ 57.253061][ T3865] System zones: 1-12 [ 57.320918][ T3865] EXT4-fs (loop3): orphan cleanup on readonly fs [ 57.344946][ T3865] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 57.376966][ T3865] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 57.394619][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 57.401100][ C0] EXT4-fs (loop3): initial error at time 1778176493: ext4_mb_generate_buddy:1317 [ 57.410378][ C0] EXT4-fs (loop3): last error at time 1778176493: ext4_mb_generate_buddy:1317 [ 57.424826][ T3865] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.95: attempt to clear invalid blocks 2 len 1 [ 57.445360][ T3865] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.445538][ T3865] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.95: invalid indirect mapped block 1819239214 (level 0) [ 57.483335][ T3865] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.483554][ T3865] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.95: invalid indirect mapped block 1819239214 (level 1) [ 57.518481][ T3865] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 57.518815][ T3865] EXT4-fs (loop3): 1 truncate cleaned up [ 57.543185][ T3865] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.573961][ T3865] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 57.587897][ T3865] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846c018, mo2=0102] [ 57.604666][ T3865] EXT4-fs error (device loop3): __ext4_remount:6837: comm syz.3.95: Abort forced by user [ 57.628034][ T3865] EXT4-fs (loop3): Remounting filesystem read-only [ 57.634722][ T3865] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 57.655325][ T3869] loop2: detected capacity change from 0 to 512 [ 57.673515][ T3869] ======================================================= [ 57.673515][ T3869] WARNING: The mand mount option has been deprecated and [ 57.673515][ T3869] and is ignored by this kernel. Remove the mand [ 57.673515][ T3869] option from the mount to silence this warning. [ 57.673515][ T3869] ======================================================= [ 57.726809][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.738070][ T3869] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.761584][ T3740] ================================================================== [ 57.769735][ T3740] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 57.777062][ T3740] [ 57.779401][ T3740] write to 0xffff88811b633148 of 4 bytes by task 117 on cpu 1: [ 57.786963][ T3740] touch_atime+0x1d7/0x330 [ 57.791418][ T3740] shmem_file_read_iter+0x3f4/0x4b0 [ 57.796663][ T3740] lo_rw_aio+0x67d/0x730 [ 57.801211][ T3740] loop_process_work+0x56c/0xac0 [ 57.806179][ T3740] loop_workfn+0x31/0x40 [ 57.810453][ T3740] process_scheduled_works+0x4f0/0x9c0 [ 57.815972][ T3740] worker_thread+0x58a/0x780 [ 57.820587][ T3740] kthread+0x22a/0x280 [ 57.824682][ T3740] ret_from_fork+0x146/0x330 [ 57.829308][ T3740] ret_from_fork_asm+0x1a/0x30 [ 57.834271][ T3740] [ 57.836606][ T3740] read to 0xffff88811b633148 of 4 bytes by task 3740 on cpu 0: [ 57.844245][ T3740] atime_needs_update+0x25f/0x3e0 [ 57.849299][ T3740] touch_atime+0x4a/0x330 [ 57.853733][ T3740] shmem_file_read_iter+0x3f4/0x4b0 [ 57.858953][ T3740] lo_rw_aio+0x67d/0x730 [ 57.863232][ T3740] loop_process_work+0x56c/0xac0 [ 57.868199][ T3740] loop_rootcg_workfn+0x22/0x30 [ 57.873254][ T3740] process_scheduled_works+0x4f0/0x9c0 [ 57.878740][ T3740] worker_thread+0x58a/0x780 [ 57.883346][ T3740] kthread+0x22a/0x280 [ 57.887427][ T3740] ret_from_fork+0x146/0x330 [ 57.892090][ T3740] ret_from_fork_asm+0x1a/0x30 [ 57.896882][ T3740] [ 57.899250][ T3740] value changed: 0x0a58e1e0 -> 0x0b008a7b [ 57.904996][ T3740] [ 57.907327][ T3740] Reported by Kernel Concurrency Sanitizer on: [ 57.913757][ T3740] CPU: 0 UID: 0 PID: 3740 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 57.923342][ T3740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 57.933417][ T3740] Workqueue: loop2 loop_rootcg_workfn [ 57.938832][ T3740] ================================================================== [ 58.120928][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 58.120972][ T28] audit: type=1326 audit(1778176494.523:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.152943][ T28] audit: type=1326 audit(1778176494.523:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.186378][ T3879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 58.189220][ T28] audit: type=1326 audit(1778176494.523:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.456658][ T3869] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.97: iget: bad extended attribute block 262144 [ 58.488318][ T3869] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.490224][ T3869] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.97: couldn't read orphan inode 15 (err -117) [ 58.499447][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 58.499485][ C0] EXT4-fs (loop2): initial error at time 1778176494: ext4_orphan_get:1397: inode 15 [ 58.499519][ C0] EXT4-fs (loop2): last error at time 1778176494: ext4_orphan_get:1397: inode 15 [ 58.644686][ T3869] loop2: lost filesystem error report for type 5 error -117 [ 58.646929][ T3869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.697955][ T28] audit: type=1326 audit(1778176494.523:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.723948][ T28] audit: type=1326 audit(1778176494.523:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.749339][ T28] audit: type=1326 audit(1778176494.533:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.774526][ T28] audit: type=1326 audit(1778176494.533:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.801247][ T3306] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.844250][ T28] audit: type=1326 audit(1778176494.533:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.869406][ T28] audit: type=1326 audit(1778176494.543:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 58.895017][ T28] audit: type=1326 audit(1778176494.543:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.3.99" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dad5bcdd9 code=0x7ffc0000 [ 59.254075][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.