last executing test programs: 11m10.713131521s ago: executing program 32 (id=21): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000004680)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x6, 0x0, 0x0, 0x13, 0x1, 0x4}]}}, &(0x7f0000003680)=""/4096, 0x26, 0x1000, 0x1, 0x1}, 0x28) r0 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xa) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x7, 0x2) getdents64(r2, 0x0, 0x4f) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2, 0x1027}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x8000700}]}}]}, 0x48}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380201a00800c000180060001"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) 10m52.166436567s ago: executing program 33 (id=75): socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp6(0xa, 0x3, 0x2) socket$igmp6(0xa, 0x3, 0x2) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000047000701ec"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) unlink(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000001814010000000000000000000800010200000000046f17d1c67c89dc31d1b630f36f08d9744eb99f97a530812c9098f68b4bb5280b0bbb0cfeeb7e1e6318398bcadb6a652b68e8b44505399c2ab4a057207d0508f1c9d96e8685f997c26eed0fd86123e56b4afc0ae4a21fdfc1fdb3615709e1599675138dd421cf13b89f38e2fed33edd15384740769d1657f558937f96342b679348ede2f7313b3575c5d22a82"], 0x18}}, 0x400c044) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) pwritev(r2, &(0x7f0000000800)=[{&(0x7f00000003c0)="d9abb26b6dfd0963234f795c2f2e90a4d97ab36d9326b7fabaae59ec4d29f1442d254e86779722b314239b52a6e9f6169aa0d5eb0850412ecdf13199a3bf65ab2f130ac1133e4b01516dc19c2260463295cad6292861a319a5c3b100e808cce49d1115fbdea26add2b63fae5960b0e9344ff2a0d70e2dd606cd9eef88fb83823a52b735cf54ef6efbc69ea7ee2f7ff3cbb3a0e23d97c28f0fc09c20e80d05102ba5758212dcc0b331dfcba2b6452fb68e4708c51ecfc55f761575bf4400b950e71be7f8cce3c3b03c735c19da283deaff60d3121585e56fa25619d9a", 0xdc}, {&(0x7f0000000700)="7b0f64f4ae75c270623369dcd0f264f32207003fa2d931b6ae70017b1718d36713c9e544af76f620549867d3aa9c128748d0bce8256dd2eada20f4db6445e36ebd78ca25d585f1236d80ba77024681da0af3df0ed7642ab44a7aad4c2d8c9d23b0f802fd5caf72859b3d36c970c7b6450e044411c6626d6f594c074e2619ec6314e3fa4a11c01f378e33676cde0fe421f967aa98aac039629ebcd213787065d7e5bc0fe3ec05b4b914b4d8b762c7bac4d475c482005aff8955b99f8f8808992479289f917f5f57f5514ff3b51c1c7ded6260f3f94cb2d54428b2343b584e", 0xde}], 0x2, 0x7ff, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r4, 0x0, 0x3ecf, 0x90002) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) 10m45.638044522s ago: executing program 34 (id=93): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, 0x0, &(0x7f00000003c0)=r3}, 0x20) 10m27.259464465s ago: executing program 35 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f00000001c0), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) unshare(0x6a040000) syz_usb_disconnect(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x0, 0x1}}, 0x26) bind$rds(r6, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{0x0}], 0x1, 0x1000000000000}}], 0x48}, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000180)=0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 8m38.785978761s ago: executing program 6 (id=517): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x3, 0x48000000, 0x0, 0x0, 0x0}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r7, 0xda90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x7, @mcast2, 0x3}]}, &(0x7f0000000180)=0x10) ioctl$USBDEVFS_REAPURB(r6, 0x4004550c, &(0x7f0000000380)) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@broadcast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m37.518510067s ago: executing program 6 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x403, 0xf5ff, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 8m37.167511605s ago: executing program 6 (id=525): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1223, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000001780)={&(0x7f0000000780)=""/4096, 0x1000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x4007fe, 0x0, 0xff, 0x1, 0x48}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4620, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000002900000036000000a12f"], 0x18}, 0x1400c0c0) r4 = getpgid(r0) sched_rr_get_interval(r4, &(0x7f00000003c0)) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x25dfdbfc, {{@in6=@mcast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8014}, 0x4004080) getsockopt(r5, 0x200000000114, 0x8, 0x0, &(0x7f0000000240)=0x38) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) syz_io_uring_setup(0x7d44, &(0x7f00000001c0)={0x0, 0x35b7, 0x200, 0x2, 0x17}, &(0x7f0000000280), &(0x7f0000000300), &(0x7f0000000340)) ioctl$OCFS2_IOC_GROUP_EXTEND(r3, 0x40046f01, &(0x7f0000000080)=0x5561) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r7, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x38}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000040)={[{@resuid}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x52a, &(0x7f0000000e80)="$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") syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xfd, 0x0, &(0x7f0000000140)) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 8m36.882960801s ago: executing program 6 (id=529): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0xc001100, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x25, 0x0, @val=@perf_event={0x5}}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be695bfd3ead0084f", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) bpf$ITER_CREATE(0x21, &(0x7f00000000c0)={r0}, 0x8) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x1018e59, &(0x7f0000000080), 0x6, 0x622, &(0x7f0000000180)="$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") keyctl$restrict_keyring(0x6, 0xfffffffffffffffc, 0x0, 0x0) munlockall() r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x3, 0x400000002}, 0xf582, 0x0, 0x10800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0xfe, 0x0, 0xe, 0x20000, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x1) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000100)) syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) 8m36.519736599s ago: executing program 6 (id=534): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@nobarrier}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@inlinecrypt}, {@grpid}, {@noauto_da_alloc}, {@nouid32}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) fallocate(r0, 0x10, 0x800, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x44) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x3}, 0x204, 0x0, 0x101, 0x4, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x100000200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mkdir(0x0, 0x190) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000580)={0x8000, 0x404f32a7, 0xfffffffd, 0x9, 0xb}) mount_setattr(r0, &(0x7f0000000180)='./file0\x00', 0x8100, &(0x7f00000001c0)={0x0, 0x70, 0x60000, {r4}}, 0x20) kcmp(0x0, 0x0, 0x6, r2, r2) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f0000000400)={0x0, 'pim6reg1\x00', {0x3}}) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') pread64(r5, &(0x7f0000019400)=""/102344, 0xfffffcbb, 0x1c2a) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001000400"/20, @ANYRES32=0x0, @ANYBLOB='\t\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x84, 0x0, 0x80000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 8m33.155265978s ago: executing program 6 (id=550): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x26, 0x80002, 0x802) 8m33.08157051s ago: executing program 36 (id=550): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x26, 0x80002, 0x802) 7m55.5718113s ago: executing program 8 (id=660): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000000)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20208, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xf2000e8f8e46b417, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="6043440a000040433cb17e060000000821f7622a00348973e77b00"/50], 0x2c}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000140), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") (async) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000080)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000740)="$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") openat$urandom(0xffffffffffffff9c, 0x0, 0x103902, 0x0) openat(0xffffffffffffff9c, 0x0, 0xc4042, 0x1ff) socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) (async) bind$vsock_stream(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) close(0x3) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) socket$inet6(0xa, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040040}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m55.472163552s ago: executing program 8 (id=662): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netlink\x00') preadv(r0, &(0x7f0000001c40)=[{&(0x7f0000000b00)=""/237, 0xed}, {&(0x7f00000018c0)=""/220, 0xdc}, {&(0x7f00000019c0)=""/46, 0x2e}, {&(0x7f0000001a00)=""/248, 0xf8}, {&(0x7f0000001b00)=""/148, 0x94}], 0x5, 0x6c, 0xffffffc) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r1, 0x0, r1) syz_usb_disconnect(0xffffffffffffffff) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x4) mknodat$loop(r2, &(0x7f0000000080)='./file0\x00', 0x40, 0x1) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') execveat$binfmt(r2, r3, 0x0, 0x0, 0x1000) select(0x20000088, &(0x7f0000000080), 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x300}, &(0x7f0000000200)={0x0, 0x2710}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x20, 0x1, 0x0) rseq(&(0x7f0000000040), 0x20, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b7030000000000008500000089"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r7, &(0x7f00000002c0)=""/108, 0x6c) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x1000000, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0xff00, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b05a89c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) 7m51.998064124s ago: executing program 8 (id=673): r0 = socket$phonet(0x23, 0x2, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000440)=ANY=[], 0x0, 0x24, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2c605, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setreuid(0xee01, 0xee01) mount$9p_unix(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000200)={'trans=unix,', {[{@cache_fscache}, {@ignoreqv}, {@cache_none}, {@version_u}, {@cache_mmap}, {@msize={'msize', 0x3d, 0x100000000}}, {@noextend}], [{@seclabel}, {@dont_appraise}]}}) ioprio_get$uid(0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x18, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}, @generic={0x4, 0x2}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000d, 0x32, 0xffffffffffffffff, 0x261c5000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000004000000851000000600000018000000", @ANYRES16=r0, @ANYBLOB="00000000000000116608ffff0000100018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r2, 0x2219, 0x771f, 0x33, 0x0, 0x0) 7m51.939620435s ago: executing program 8 (id=674): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x80010, r0, 0xffffffffffffff29) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x58, &(0x7f0000001c80)}, 0x33) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statx(0xffffffffffffff9c, &(0x7f0000003b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x10, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140), 0x480, 0x0) shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000180)=""/205) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r2, 0xffffffffffffffff, 0xee01) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(0xffffffffffffffff, 0x111, 0x3, 0x0, 0x4) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000040)={0x0}, 0x19}, 0x0) syz_clone(0x250c000, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000280), &(0x7f00000002c0)="1ebd8559") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$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") r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80042, 0x0) ioctl$TCSETAW(r4, 0x80045430, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$TIOCSIG(r4, 0x40045436, 0xa) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x292, @time={0x640, 0x2000}, 0x3, {0x1, 0xfc}}) syz_emit_ethernet(0x30, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb81003d000806030c88a2060400020000d9a3db299194fe2189e60000000060828466aaaa"], 0x0) syz_clone(0x20000, &(0x7f0000000780)="fde3559111f4c89ea5416e8ac4801d5372990c8264370c8c8a9c1c966091f627653bcbeb477a26dba6422243a97950bd6ea2ae79b7e4b1b5a9865b0f7add8bf2a2bde67f4d8065266d355113f3c6dc08be77bb79efb6c26e14ca6a8cb46fc02ea273ed6237daf44a9c4d095aee2e68f1f70c33220324738c7084027ace81c6b77d619063221dbb756073aa242f340911fc0ce941aaf39440fcb43b4fd00bd0fa5d44c364556102a36a6c07f7acb54861927e31dee2ad6d698dd1946a0c23d5881f049b144eb3fc31039ce9bdcfe3c644bdfc0ff81d65adf5fd", 0xd9, &(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)="6bd7") 7m48.734283432s ago: executing program 8 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x2, 0x2, 0x4, 0x4, 0x6, 0xffff29fe}) r1 = socket$inet6(0xa, 0x3, 0xe) sendmmsg$inet6(r1, &(0x7f0000000800)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x80000006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1, &(0x7f0000000000)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0xff}}}], 0x18}}], 0x1, 0x40000000) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=ANY=[@ANYBLOB="5401000010000100000000000000000000000000000000000000ffff7f000001ac1414aa0000000000000000000000000000000000040000000000005c000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x4004550d, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000001c0)='vegas', 0x5) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r3, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0xffffffffffffffff, 0x4, 0x18}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={&(0x7f0000000400)="139d30ac594c0c86ecc02929f98125126833fee1ad51e7e91f939465b54edb2af8c0c8e907c48886f45c4c9805cd2635d1a28f859af4e9e96bc93f56f72e1958cbd66b4e2ad862dc791d6fd5a68a50710a6a01622cfd78b1ede897b4b343ba0746a7d3a7a9d2f8af8052ef166b3aa5a02c500f59015b23e9631175852eb68f363c6cc63d521d4b449c9f5e974e8e09a9a8cc9485261bc21059d7c3ceaf1c3245906eb42bcb9251ddb528d6c117c6abb9c79b475d3c3a15c7", &(0x7f00000006c0)=""/137, &(0x7f0000000840)="603209bdb262756bd65f5510ea4a347f7218050726a5a0f804c738c37dd20be0861d352189dc29182093d6eda45a1bce81ccc779e102b16fe5fb3c45d11fbb159de6755d8059aa650dd43f125626b1e6c382170cc80de45eeab799ad67a646c02cffb7ba6005b22c7112ef25eaebaf036bb259f953d971dc3733e600be8cf2eb753d45938210013d26cec70b7a0b0f764463219cf0ae40db00ba930d28fae3990c9efcd8bf69d12a25716e5b65fe9202ebd9de", &(0x7f0000000900)="f28ce5f0fbf4bf0da42a3286919850736292bb64d373292e2b", 0x1, r6, 0x4}, 0x38) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f0000000000), 0x0, 0xbff, 0x1e, 0x0, 0x2e, 0x6e}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99f0}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[], 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 7m42.539777691s ago: executing program 8 (id=692): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x22}}, {@data_journal}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000640)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r1, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e23, @loopback}, {0x2, 0x0, @broadcast}, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000000}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d8000000000000000c01000000000000f6a14411b6aadef09849279c63bdb1adae2e7f331f4682170219b18c1fdcd45af033430b0c99b4f2a333697204897c6d3483c0fcbc2c0d8d0a22b94b51f540a7e2b152b75593149661a20edaea0febe1a00f4071b4a38807af471a45727e4fea9b7bdcc969ddb4371b11d37095fd1a0cabd799fb93d4996fc6376652bd21aedfd9b7ee0eeb1f5c56dd6a683092c139030e7c631fd97c294874e3df591499f4672066f18d928a2f7873cc50fd1ed7e6d796ad1dd61aa22bc6de8767e1899154060d8d00000000000000"], 0xd8}, 0x40001) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) socket$kcm(0x2, 0x1000000000000002, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) 7m42.539403141s ago: executing program 37 (id=692): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0xe000, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x22}}, {@data_journal}, {@usrjquota}, {@errors_remount}, {@jqfmt_vfsold}, {@nomblk_io_submit}]}, 0x0, 0x445, &(0x7f0000000640)="$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") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4000}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x8, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(r1, 0x1) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e22, @remote}, {0x2, 0x0, @private=0xa010101}, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x26}) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, {0x2, 0x4e23, @loopback}, {0x2, 0x0, @broadcast}, 0xc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40000000000}) ioctl$TIOCL_SELLOADLUT(0xffffffffffffffff, 0x541c, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r5 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="d8000000000000000c01000000000000f6a14411b6aadef09849279c63bdb1adae2e7f331f4682170219b18c1fdcd45af033430b0c99b4f2a333697204897c6d3483c0fcbc2c0d8d0a22b94b51f540a7e2b152b75593149661a20edaea0febe1a00f4071b4a38807af471a45727e4fea9b7bdcc969ddb4371b11d37095fd1a0cabd799fb93d4996fc6376652bd21aedfd9b7ee0eeb1f5c56dd6a683092c139030e7c631fd97c294874e3df591499f4672066f18d928a2f7873cc50fd1ed7e6d796ad1dd61aa22bc6de8767e1899154060d8d00000000000000"], 0xd8}, 0x40001) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) socket$kcm(0x2, 0x1000000000000002, 0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) 6m48.853984878s ago: executing program 9 (id=827): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) 6m46.34477344s ago: executing program 9 (id=831): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x5e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x80}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0xfffffffd, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x16bfc9754559bcb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff"], 0xfe78) setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x4, 0x4) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x10) socket$phonet(0x23, 0x2, 0x1) 6m44.927917049s ago: executing program 9 (id=833): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2bfef011, 0x1ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0x5d8ceabbeb611ade, 0x0, 0xffffffffffffffff, 0x54}, 0x42) 6m44.91721892s ago: executing program 9 (id=834): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r5, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000380)={'erspan0\x00', 0x0, 0xff47, 0x700, 0xf, 0x101, {{0x17, 0x4, 0x0, 0x2, 0x5c, 0x65, 0x0, 0x5, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x94, 0xf, "b7e66084c41c6a486b94e5e30d"}, @lsrr={0x83, 0x1b, 0x92, [@broadcast, @broadcast, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x26}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @end, @noop, @cipso={0x86, 0x19, 0xffffffffffffffff, [{0x6, 0x5, "409bba"}, {0x6, 0xe, "dbc30b5509f95a3e50668cb6"}]}]}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x0, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0xa, '\x00', r6}, 0x94) write$binfmt_register(r4, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x42428, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1e01010301906e1200183f2500000000000000000100007f0000017f000001"], 0x0) 6m35.867146288s ago: executing program 9 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) 6m34.455314397s ago: executing program 9 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r6 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r6}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setsig(r4, 0xa, 0x1c) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 6m33.475478107s ago: executing program 38 (id=854): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r5, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r6 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r6}) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) fcntl$setsig(r4, 0xa, 0x1c) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 5m31.573665335s ago: executing program 4 (id=1189): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0xc, 0xff}, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0x2, 0x0, [0x0, 0x0]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0700000004000000080000000300000020"], 0x48) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x20) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x51b, &(0x7f0000001000)="$eJzs3c9vI1cdAPDveOPEyaZNWnoABO3SFha0WufHtqtqD1BOCKFKiB5B2obEG0Wx4yh2ShP2sD1zRaISJzjyB3DuiTsXBDcu5YDEjwjUICExaMbj1Ju1s9FmY2fjz0cazXvzHH+/L9bMi1/seQGMrWsR8SAiJiPivYiYK44nxRZvd7bscZ8e3F89PLi/mkSavvuPJG/PjkXPz2SuFs9ZiYgffCfix8mjcVt7+5sr9Xptp6gvtBvbC629/ZsbjZX12nptK/vh24tv3Xpz+an19ZXGZFH68ie/f/CNn2ZpzRZHevvxJJJOl/sdj4jyUZzMRER87yzBLpArRX8mR50IT6QUES9GxKv5+T8XV/JXEwC4zNJ0LtK53joAcNmV8jmwpFQt5gJmo1SqVjtzeC/FTKnebLVv3Gvubq11/kyYj3Lp3ka9tljMFc5HOcnqS3n5s/pypz7Vrd+KiBci4udT03m9utqsr43yDx8AGGNXj43//57qjP8AwCVXGXUCAMDQGf8BYPwY/wFg/Bj/AWD8dMb/6VGnAQAM0Ynv/90PCAAuJfP/ADBWvv/OO9mWHhb3v157f293s/n+zbVaa7Pa2F2trjZ3tqvrzeZ6fs+exuOer95sbi+9EbsfzH9zu9VeaO3t3200d7fad/P7et+tlfNH9b1VNgAwJC+88vGfkmxEvjOdb9GzlkN5pJkB56006gSAkbky6gSAkTnTp3sqPhsEz7IzvMc3PQCXRJ8leh9S6fcFoTRN007pf+k55QWcn+tfMP8P46pn/t+ngGHMmP+H8WUGH8ZXmianXfM/TvtAAOBiM8cPDPj//4vF/jfFPwd+tHb8ER+dZ1YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsXXX/60Wa4HPRqlUrUY8FxHzUU7ubdRrixHxfET8cao8ldWXRpwzAHBWpb8mxfpf1+den32o6eWrR8XJiPjJL9/9xQcr7fbOHyImk39OdY+3PyqOLw8/ewDgZNl7/e44ne973sh/enB/tbsNM6e/fTsiKp34hweTcXgUfyIm8n0lyhEx86+kqHckPXMXZ/Hgw4j4fL/+JzGbz4F0Vj49Hj+L/dxQ45ceil/K2zr77HfxuaeQC4ybj7Prz9v9zr9SXMv3/c//Sn6FOrvi+pc91ephfg38LH73+ndlwPXv2mljvPG773ZK04+2fRjxxYmIbuzDnutPN34yIP7rp4z/5y+9/OqgtvRXEdfjTt/4vbEW2o3thdbe/s2Nxsp6bb22tbx8e+n24lu33lxeyOeoFwaPBn+/c+P5QW1Z/2eif/8rj+n/V0/Z/1//970ffuWE+F9/rV/8Urx0QvxsTPzaKeOvzPy2Mqgti782oP+Pe/1vnDL+J3/Zf2TZcABgdFp7+5sr9Xpt51kvzJY7Hboo+SicRyF7hS9AGn0L3xpWrMno3/Sz1zqnwLGmNH2iWIOuGE9j1g24CI5O+oj4z6iTAQAAAAAAAAAAAAAA+hrGN5ZG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAur/8HAAD//5enzt4=") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000019c0), r8) sendmsg$NL802154_CMD_DEL_SEC_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c0c4}, 0x20040002) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x4c}}, 0x0) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, 0x0, 0xc0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e30000000500000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r12, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000540)={0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1, r13}, 0x38) eventfd(0x171) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r14) 5m30.938591088s ago: executing program 4 (id=1194): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 5m29.067042377s ago: executing program 4 (id=1202): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x5, {0x0, 0x2, 0x2, 0x1, 0x0, [@remote]}}}], 0x28}, 0x0) r1 = openat$nvram(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x24045894) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x800) rt_tgsigqueueinfo(0x0, 0x0, 0xe, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x8, 0x1, 0x8, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x2, 0x8}, 0x8000, 0x7, 0x0, 0x8, 0x7ffd, 0x7fffffff}, 0x0, 0xffffffffffffffff, r0, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x24044010) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x400000000010, 0x3, 0x0) write(r5, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e100", 0x1b) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x4004}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r6 = fsopen(&(0x7f0000000280)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r6, 0x4, &(0x7f0000000140)='ro\x00', &(0x7f0000000180)='./file1\x00', r7) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, 0x0) r8 = socket$inet(0x2b, 0x6, 0x4) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x48f, &(0x7f0000000000)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x8010, 0xffffffffffffffff, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x1e0, 0x2e8, 0x2e8, 0x1e0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xe0, 0x108, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0xc, 0x61f4, 0x10000, 0xc, 0xffff}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xffff46ff}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x5, 0x2, 0x100, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 5m28.878527401s ago: executing program 4 (id=1206): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xfffffffffffffe5e, &(0x7f0000000640)={&(0x7f0000000380)={0x2b0, 0x12, 0x300, 0x70bd2b, 0x25dfdbfb, {0x2a, 0x7, 0x6, 0x9, {0x4e23, 0x4e24, [0x6, 0x8, 0xffff, 0x1], [0x7fff, 0x7, 0x1000000, 0x8], 0x0, [0x7, 0x5]}, 0x81, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x7d, 0x1, "9d50823d79dd75b137382dff089be8545bfae03b205476f9db468c44932cc5572f3966d6c9b5f16dd0e757de90992bbc7f5ae853ad65ed9b8ca5783f9311ec2701c5cc3adc273085370f12a496d68360ccbc29ad13be51444c21243ac74c76a9ba6e440305696eb0e13d5a2fcba5478d9a7617d167d5a5145c"}, @INET_DIAG_REQ_BYTECODE={0x102, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "569b3ecdfb017e3c13216171bc0d6fae28cbd0f1c56469e5d15cfe511b7655f3d811a4132ee0b4bf40ea58a07e6b047b25af3142859d40f17e0ea71eafe0010007b2260f2789c68eeaccb925da7408949021118d62338c1bdca32e49e912360bbd4ad8c416adcc22cd52a363c0f8c47c95697fd8606fe8b25b7ed3f89e45bb40cadce91764a69cbf291e4cda3cee7ab9cfd569594879a3f421935069bf05c2c0dd79abc68cfa118f1239c3cd83c02a6fc35cfee4347b839cb5a120a12c764320e85b7d8aa09af7a3f745f40a753cc1489986604b8a117cecd9"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x2000000}, 0x884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0xa, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x840) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2f) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff, 0xcaa7013517735b4c}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x4e20, 0x0, 0x4e23, 0x0, 0x2, 0x0, 0x0, 0x33}, {0x400000, 0x80000800, 0x9141, 0x0, 0x0, 0xf42, 0x5}, {0x0, 0x0, 0x0, 0xffffffffffffff81}, 0x1, 0x0, 0x1, 0x0, 0x4, 0x1}, {{@in=@empty, 0x4, 0x33}, 0xa, @in6=@private1, 0x3507, 0x5, 0x0, 0x4, 0x0, 0x10000000, 0xfffffffd}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xf}}, 0x200000}, 0x1c) chroot(&(0x7f0000000280)='./file0\x00') mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) lseek(r0, 0x10001, 0x0) 5m28.607649857s ago: executing program 4 (id=1209): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x8000, 0x1, 0x7ff, 0x200, {{0x5, 0x4, 0x1, 0xb, 0x14, 0x65, 0x0, 0xf, 0x0, 0x0, @loopback, @loopback}}}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x0, 0x5, 0xfbffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000003c0), 0x8) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0xa2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0xffe6, 0xc}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x4}]}}, @qdisc_kind_options=@q_red={{0x8}, {0x1c, 0x2, [@TCA_RED_MARK_BLOCK={0x8, 0x6, 0x8}, @TCA_RED_MAX_P={0x8, 0x3, 0x100}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x6c}}, 0x20000040) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000138998440a2cbd70000001000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20051045}, 0x4000) 5m28.44636486s ago: executing program 4 (id=1213): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4840, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000003c0)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) 5m28.44624182s ago: executing program 39 (id=1213): mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4840, 0x1) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f00000003c0)={[{@noblock_validity}, {@abort}, {@mb_optimize_scan}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x466, &(0x7f0000000ac0)="$eJzs3MtvG8UfAPDvbpr219cvoZRHH0CgICIeSZMW6IELCKRekJDgUI4hTavStEFNkGgV0RShckT9C4AjEn8BJ7gg4ATiCneEVKFcCBzQorV3U+PYwU7sOsWfj7TxzO6sd77eHXt2xk4AfWsk/5NE7ImInyJiKCIG6guMVB9Wlhen/1henE4iy177Lcl3i9+XF6fLoknxuLvIjKYR6QdJHGpw3PnLV85Pzc7OXCry4wsX3h6fv3zl6XMXps7OnJ25OHnixPFjE889O/lMR+Lcm9f14Htzhw+cfOPGK9Onbrz57ed5ffcU22vjqBre9DFHYmT1Nan32KaffWvZW5NOtvWwIrQlb+v56RqstP+hGIhbJ28oXn6/p5UDuirLsmzHmrWrPYClDPgPS6LXNQB6o/ygz+9/y+U2dj967uYL1RugPO6VYqlu2RZpUWaw7v62k0Yi4tTSnx/nSzQchwAA6Kwv8/7PU436f2ncW1Pu/8Xc0HBE3BUR+yLi7ojYHxH3RFTK3hcR97d5/JG6/Nr+zw87NxRYi/L+3/PF3NY/+39l7y+GB4rc3kr8g8mZc7MzR4vXZDQGd+T5iXWO8dVLP37UbFtt/y9fVgZjuuwLFvX4dVvdAN3pqYWpzcRc6+a1yhjg1bXxJ6szAUlEHIiIgxt4/vx6OffEZ4ebbV8T//JiXfzr6MA8U/ZpxOPV878UdfGXkvXnJ8f/F7MzR8fLq2Kt776//mqz428q/g7Iz/+uhtf/avzDSe187Xz7x7j+84dN72n+Pf7G1//25PVKenux7t2phYVLExHbk6W16ydv7Vvmy/J5/KNHGrf/fRF/fVLsdygi8ov4gYh4MCIeKur+cEQ8EhFH1on/mxcffWvj8XdXHv/pts5/+4mB819/0ez4rZ3/45XUaLGmlfe/Viu4mdcOAAAA7hRp5TvwSTq2mk7TsbHqd/j3x650dm5+4ckzc+9cPF39rvxwDKblSNdQzXjoRDHWV+Yn6/LHKuPGWZZlOyv5sem52W7NqQOt2d2k/ed+Geh17YCua2serdkv2oA7kt9rQv/S/qF/af/Qv7R/6F+N2v/ViJV1d7rWteoAt5HPf+hf2j/0L+0f+pf2D31pM7/rXy+x72Rrhct/QNilatwBiYGtUY22E5FuiWpsLJFujWpUEzsiotXCV29bS+nxGxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECH/B0AAP//tNHo8Q==") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xe024, 0xd000007}) 1m53.931194866s ago: executing program 7 (id=2461): perf_event_open(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x13c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_ACT={0x10c, 0x1, [@m_xt={0xd4, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xac, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_connmark={0x34, 0x9, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xffc3}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, 0x0, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000040)={0x72, 0x6, 0x8, 0x9, 0x101, 0xe, 0x1a66, 0xfffffffffffffc36}, &(0x7f00000000c0)={0x7, 0x7, 0x1, 0x37a, 0xb, 0x6, 0x4, 0x8000000000000000}, &(0x7f0000000100)={0x9, 0xffffffff, 0x2, 0x0, 0x3, 0xfb16, 0x800, 0x8}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={0x0}) getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="34000000da0b4af0352b1000ac68f814e379000a000000000000", @ANYRES32=0x0, @ANYBLOB="00410000900201000c001a80080002800400018008000500", @ANYRES32, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x240008e4) flock(0xffffffffffffffff, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) 1m53.822631298s ago: executing program 7 (id=2462): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r6, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 1m52.280840971s ago: executing program 7 (id=2471): open_tree(0xffffffffffffff9c, 0x0, 0x89001) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x3f}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0x8, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x5, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffefff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x6, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x3, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x4, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x100, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x101ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x3, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0x1, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r11) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45a, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 1m51.416834229s ago: executing program 7 (id=2477): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400200014000906000000000000e4001e000000"], 0x14}}, 0x8040) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) lseek(r0, 0x10001, 0x0) r2 = socket$l2tp(0x2, 0x2, 0x73) signalfd4(r2, 0x0, 0x0, 0x80800) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000880)={{{@in=@local, @in=@dev}}, {{@in6=@private2}, 0x0, @in6=@empty}}, &(0x7f0000000840)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000580)={{{@in=@multicast2, @in=@multicast1}}, {{@in6=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000380)=0xe8) fstat(r0, &(0x7f00000003c0)) unshare(0x28000600) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) getgroups(0xa, &(0x7f0000000440)=[0x0, 0xee01, 0x0, 0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0x0]) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a010101000000ffffffe00000000000000000004e210000000000ffffff8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffdfff0000000000000000000000000000000033000000fe8000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000004000000010000000000000000000a00000000000000"], 0x148}}, 0x20000000) 1m48.58768872s ago: executing program 7 (id=2481): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r4, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r5, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 1m47.123197521s ago: executing program 7 (id=2486): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x880) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40028, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4780, 0x0, 0x800000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbb1f06bbbbbb88a8030081003100080045089f072d0000001e0101ac1414aa0304907801000000450000400000000000110002000000000a0101020000000000"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r3 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x100000006) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x685c0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) preadv(r6, 0x0, 0x0, 0x2de, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m47.052830903s ago: executing program 40 (id=2486): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r0, &(0x7f0000000000), 0x0, 0x880) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40028, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4780, 0x0, 0x800000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffbb1f06bbbbbb88a8030081003100080045089f072d0000001e0101ac1414aa0304907801000000450000400000000000110002000000000a0101020000000000"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x50) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x10e) r3 = fsopen(&(0x7f0000000180)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x82) fchdir(r4) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x100000006) mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x685c0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, r1, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r6 = syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x64) preadv(r6, 0x0, 0x0, 0x2de, 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 10.175527444s ago: executing program 3 (id=3164): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xb7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") 9.454581939s ago: executing program 2 (id=3176): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000010400000000b03a0a000000bf0f2591dc3f6ddd6211204b15523ff65cee10fc7d104ff454b37292c5775aba9412d7f7743b7851f9c73c19a954a996ddfe347c461d2efd531fc995bac2d76bc58e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000200)={[], [{@dont_hash}]}, 0x0, 0x254, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7, 0x5, 0xffffffff, 0xc}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x14, r4, 0x801, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x4827e, 0x115) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 9.38459639s ago: executing program 3 (id=3178): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x15008}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xfc, 0x7, 0x0, 0x0, 0x0, 0x1004000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6}) 9.338345521s ago: executing program 2 (id=3180): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000006240"], 0x18}, 0x3400c8d4) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) pipe(0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4040040) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x200) syz_emit_ethernet(0x4a, &(0x7f0000000400)={@local, @random="72b5773ca0b8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "164508", 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) 9.248578713s ago: executing program 2 (id=3182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 9.051816878s ago: executing program 3 (id=3185): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) close_range(r1, r1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) 7.855824573s ago: executing program 3 (id=3186): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x1, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x400c}}, 0x20}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10008, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x830d}, 0x100, 0x2, 0xfffffffe, 0x7, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c13}], 0x75, 0x5000, 0x0, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)) r4 = socket(0x18, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00') lseek(r5, 0x401, 0x0) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x802) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) getpeername$l2tp(r4, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xb, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcffffff18010000756c6c2500000000002020200000f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e11e000085000000b9000000950000e3ffffff04"], &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r9, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="d4020000110001002bbd7000efdbdf2507000000", @ANYRES32=r3, @ANYBLOB="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"], 0x2d4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@getchain={0x24, 0x66, 0xfcd66a900070b75d, 0x70bd28, 0xf0, {0x0, 0x0, 0xffa6, r11, {0x4, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x841}, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) 6.294084836s ago: executing program 2 (id=3188): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 4.872612536s ago: executing program 3 (id=3200): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x1f3, 0x480602) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffe0, 0x6}}}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x84000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x34, 0x0, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'vcan0\x00'}}}}}, 0x34}}, 0x8000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r9) socket(0x10, 0x3, 0x0) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYRES16=r9, @ANYRES32=r8]) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r12, 0x0, 0x0, 0x50040, &(0x7f0000000500)={0x11, 0x1, r11, 0x1, 0xd8}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r7}, 0x20) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010100, @loopback, 0x1, 0x6, [@remote, @local, @multicast2, @private=0xa010101, @rand_addr=0x64010100, @rand_addr=0x64010100]}, 0x28) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040000000050017"], 0x50}}, 0x4080) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vxcan1\x00', 0x800}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000bc0)={{r5, &(0x7f0000000200)='/dev/net/tun\x00', 0x141000, &(0x7f0000000240)={@align=0x3, {0x9, 0x7a1, 0x200, 0x2}}, 0x8, &(0x7f00000008c0), &(0x7f0000000900)=0x1}, 0x2, &(0x7f0000000b80)=[{0x2, 0xa, &(0x7f0000000940)='erspan0\x00', &(0x7f0000000980)="fa09aacb831a1d4fdb350835b37e1c1355ce4ba959b1732b11b3b093fb9ad0c9784be1ec9032ea2732f6e3e6cdafbd26a48e45d9319bce76370c28584750bd2b1cc24c1e006a72ec0d087ab9ac46cc5d114e06db137a5d8630a3558d4f95d710048c07f3bf5d832378a85113df1365c5a60450fa59682eb9c78daa69c54eeb88ae30402efcfd483091003921f94401c991d106f2a2cf566711351f790fa2b70dba", 0xa1, 0x2}, {0x1, 0xa, &(0x7f0000000a40)='ext2\x00', &(0x7f0000000a80)="5f30eea4fe3d1424ef88090632f75892e37c663efac57471af8f6698a0fda89fe2bcddb971e5cea34b61dc4daeeca3e19195b19f516ae3e2e0af89f068a8f7b878d7f1f138334353c55c198403c48a4cf9e71b6e7a560eec7fe37382d857422bcd04529d90d62de86f6d5b13387f1789eb2a839e5518c54d6156a97bb725846d69a739f59db2ab4887f9380c3735741454f9f18dbc5f109d6be295189be6f5c89f3522053b6406d5bf7d0aebd1e83e953ac6329d478399db98ba2eabec1dca0cfa84c2e1b8ef", 0xc6, 0x8}]}) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r13, 0x110, 0x4, &(0x7f0000000c40), 0x4) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) syz_mount_image$ext4(&(0x7f0000000280)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x55a, &(0x7f0000000340)="$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") 3.144084573s ago: executing program 5 (id=3212): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) close_range(r1, r1, 0x0) 3.028423376s ago: executing program 0 (id=3215): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x16d}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001400add427323b472545b45602117fffffff81000e220e227f000008925a8e0013007b000b00984d000000000000008100ff0000f03a86100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.027814746s ago: executing program 5 (id=3217): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.953451537s ago: executing program 5 (id=3218): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000030525bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a091030032980000280012800b0001006d61637365630000180002800c0004000400000100c280001f0005000700000008000500", @ANYRESDEC], 0x50}, 0x1, 0x0, 0x0, 0x240488d4}, 0x8020) 2.910324438s ago: executing program 0 (id=3220): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0x7}, {0x0, 0xfff1}, {0x0, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000010}, 0x4041080) accept(r2, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000540)=0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)={0x24, r3, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) bind$l2tp(r11, &(0x7f0000000400)={0x2, 0x0, @multicast1, 0x3}, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = socket(0xa, 0x5, 0x0) getpeername$l2tp6(r12, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x20) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x680, 0x2c8, 0x4c0, 0x2c8, 0x4c0, 0x0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x5b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private0, [], [0xffffff00, 0x0, 0xffffff00, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x3, 0x100, 'system_u:object_r:syslogd_exec_t:s0\x00'}}}, {{@ipv6={@loopback, @dev={0xfe, 0x80, '\x00', 0x14}, [0x0, 0x0, 0xffffffff], [], 'batadv_slave_0\x00', 'macvlan1\x00', {}, {0xff}, 0x2b, 0x0, 0x0, 0x2}, 0x0, 0xd0, 0xf8, 0x7400, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ipv6header={{0x28}, {0x80, 0x48, 0x1}}, @common=@srh={{0x30}, {0x62, 0xb, 0x2, 0x0, 0x3, 0x424, 0x3022}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xb}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@multicast2, 0xb, 0x19, 0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6e0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r0, &(0x7f0000000140)={0x10000000}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r14 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/fscreate\x00') writev(r14, &(0x7f0000000500)=[{&(0x7f0000000800)='7', 0x1}], 0x1) setsockopt$inet6_IPV6_HOPOPTS(r8, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64=r4], 0x28) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000005c0)={0x0, 0x10, &(0x7f0000000580)=[@in={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0xa0}}]}, &(0x7f0000000280)=0x10) 2.859861089s ago: executing program 5 (id=3221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, &(0x7f0000000680)='GPL\x00', 0xb, 0x0, 0x0, 0x40f00, 0x28}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x6da7, 0x400000002}, 0x6d82, 0x0, 0x800000, 0x0, 0x3, 0x2, 0x39, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) pipe(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x8, 0xffff, 0x3fd, 0x0, 0xb2, 0x2, 0x6}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, 0x0, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 2.81261928s ago: executing program 1 (id=3223): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2, 0x4}}, 0x10) close_range(r1, r1, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x28e7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) creat(&(0x7f0000000180)='./file0/../file0\x00', 0x80) mount$bpf(0x200000000000, 0x0, 0x0, 0x8a9026, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) 2.715715533s ago: executing program 3 (id=3224): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x10, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {0x6, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x3f}}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0x8, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x5, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffefff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x6, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x3, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x4, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x100, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x101ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x3, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0x1, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x204001, 0x0) close(r11) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x14, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x45a, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) 1.792771332s ago: executing program 2 (id=3225): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) syz_usb_connect(0x2, 0x36, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 1.773899422s ago: executing program 1 (id=3226): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x400, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r0, &(0x7f0000000000)=[{0x1f, 0x0, 0x8, 0xfd, @time={0x3, 0xfffffffc}, {0x0, 0x2}, {0xff}, @ext={0x0, 0x0}}], 0x1c) r1 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) quotactl_fd$Q_SYNC(r2, 0xffffffff80000100, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x402, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) unlinkat(0xffffffffffffffff, &(0x7f0000000f80)='./file0\x00', 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) symlink(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000140)=0x800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r4 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) fcntl$dupfd(r3, 0x406, r3) ioctl$MON_IOCX_GETX(r4, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000940)=""/4105, 0x1009}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40050) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0x1, 0xc}, {0x8, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$netlink(0x10, 0x3, 0x0) 1.703365604s ago: executing program 1 (id=3227): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x10]}, 0x8) recvfrom$rxrpc(r0, &(0x7f0000000040)=""/196, 0xc4, 0x2100, &(0x7f0000000140)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x24) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x80, 0x7, 0x7, 0x9, {{0x23, 0x4, 0x1, 0x6, 0x8c, 0x64, 0x0, 0x20, 0x29, 0x0, @multicast2, @loopback, {[@timestamp_addr={0x44, 0x3c, 0x4b, 0x1, 0xe, [{@private=0xa010102, 0xfffffffc}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x50}, {@multicast2, 0xc8}, {@multicast1, 0x5}, {@multicast1, 0x6}, {@empty, 0x9}]}, @cipso={0x86, 0x2e, 0x3, [{0x0, 0x4, "2ad2"}, {0x1, 0xf, "ca04062fdbd605ed494c5774cb"}, {0x0, 0x5, "443e89"}, {0x6, 0xb, "74d9300aaaea75ad86"}, {0x6, 0x2}, {0x5, 0x3, "ce"}]}, @rr={0x7, 0x7, 0x1e, [@loopback]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={'ip_vti0\x00', r2, 0x7800, 0x7, 0x3, 0x75b6, {{0xa, 0x4, 0x0, 0x20, 0x28, 0x65, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @noop, @lsrr={0x83, 0xb, 0xa8, [@multicast1, @remote]}, @rr={0x7, 0x7, 0xd2, [@rand_addr=0x64010102]}]}}}}}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x7c, r5, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x24000000000000}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffff3}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '.'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7ff}]}, 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0xc8800) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup=r0, 0x63, 0x0, 0xac2, &(0x7f00000004c0)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r0, r0, 0x23, 0x4, 0x0, @void, @value=r0, @void, @void, r6}, 0x20) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r7, 0x89fb, &(0x7f0000000680)={'sit0\x00', &(0x7f0000000640)={@private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x2, 0xc}}) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc00100, 0x2) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000e40)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0xe3aeda7cf3988bd9}, 0xc, &(0x7f0000000e00)={&(0x7f0000000780)={0x65c, r8, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x238, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x68}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '${\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'A&-+W]\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '\'n$)-^\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '.'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '.'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x598}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa574}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9b}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "cce0ac9591cf518c1c3e7cbffc946268"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'erspan0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nbd\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0xe9, 0x4, "203b2ca50ff46ff79746e5d0dff00341dee42346174dfbade1772d29c4ab430dfce481ea25a73551524a42ec9a0e8f8672713f5dba3512e3d9c4f76e2a3d6418c8d9963f280dbc34d3c5a4b3cdadff01ea9379925ffd0d9e0b8b7ede4a9547ffc31adb5ff3d6bc0c2352b7cf876bc741acafa5d0977772b9e354243daea90cd802c90533175dfa923242af85b1331e8a6637cc3b932e0d144fd0e569f730ae1114de6a816775f692bfe4ffd2f37b34e3ffb168993ce4ff0664e2059aedba94378cbf456b952568e0132e69a8f862e3b5af2b2594bd3b2629449dbf874097e7516ce968d388"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x88, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6c, 0x4, "8ae4bec0b1e48fffeef75c93f393dfad4d89a28497da08f12d6ec99412cbbae263b571913722d00dc518f5d57432f9bf8015d03245e3708aba43fe0a39fba0f26e3993fa0017f8f88d9e52f2ba00d73736e0f360784d13ebb08d9d552bdcb1e19c0dae8d97bb4cdb"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '&!:)(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf9}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '*+:\'#$$&{(#&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xc0, 0x5, "a45991969e6819c42d9863bf1cde54b854f0f23ce30377808b43d8fbce996ca023fde52d990bdb2399987677d2d0ddaf6d9f6e3a7d8e79a958f59b3d5d7d39df21cc7ddfb67a53ac07c16c99c1a7e3ab394d634e5a3c3d8ce453044afacda974e74979399d146fda1b3bed6c215803bf651e2601e80d37f5db973a7843e7d039c131d06965297df10d19c5a5badfa5b3f41dff93a8531a2c34ab0d835ae5d74fce92a69c89f7e11cd37a741f2461477e170ad3ff10137c50b5ffa3d7"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x188, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x9c, 0x4, "b9bd0693cbb82d51ceecc7bf39d04ec8b7a910f65744b4b61c9ab377b50011e7e339983f005132cb49d2876737c79d6ab8fd09dae758a9af23dc3d0e2b8f0ff9f9a4194639515e2eeb611d79974f512e31f05de72cab6e0277918345da758b01ac8c61c50fefbff5867d0d4a51fc48d9bf2dc769f4fd19ac7f8085fa945e3af8a51df8f62e9eb22002ff0630837ae92d3343be076fa22430"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x400}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xd8, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '.'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '[-\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#@{.\x19]]!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '@.\'^\')\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}]}, 0x65c}, 0x1, 0x0, 0x0, 0x4}, 0x40) r9 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000e80), 0x400040, 0x0) r10 = syz_io_uring_complete(0x0, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r9) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x1c, r11, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x49}, @void, @void}}}, 0x1c}}, 0x0) getgroups(0x4, &(0x7f0000001040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff]) chown(&(0x7f0000001000)='./file1\x00', 0xee01, r12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={r0, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f00000011c0)={r0, &(0x7f00000010c0)='ethtool\x00', 0x284100, &(0x7f0000001100)={@_ha_fsid={[0xf, 0x1]}, {0x5, 0x6, 0x100, 0x9}}, 0x2, &(0x7f0000001140)={@_ha_fsid}, &(0x7f0000001180)}) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001400), 0x80580, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x10, 0x2d, &(0x7f0000001200)=@raw=[@map_idx={0x18, 0x0, 0x5, 0x0, 0xb}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xe}, @ldst={0x3, 0x3, 0x2, 0x0, 0xb, 0x4, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r13}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r14}}], &(0x7f0000001380)='syzkaller\x00', 0x18, 0xc, &(0x7f00000013c0)=""/12, 0x40f00, 0x9, '\x00', r3, @fallback=0x14, r15, 0x8, &(0x7f0000001440)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001480)={0x4, 0x5, 0x913, 0x3}, 0x10, 0x0, r0, 0x3, &(0x7f00000014c0)=[0x1, 0xffffffffffffffff, r10, r9, r10], &(0x7f0000001500)=[{0x2, 0x4, 0x4, 0x7}, {0x3, 0x4, 0xd, 0xe}, {0x0, 0x4, 0x8, 0x1}], 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x1b, 0x25, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xbc}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@call={0x85, 0x0, 0x0, 0x9c}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff8}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ldst={0x2, 0x5, 0x0, 0xb, 0xa, 0xfffffffffffffffc, 0xd}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x80000001}, @tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x87}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001740)='syzkaller\x00', 0x4, 0x0, &(0x7f0000001780), 0x41100, 0x41, '\x00', 0x0, @fallback=0x32, r9, 0x8, &(0x7f00000017c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001800)={0x0, 0x2, 0x8, 0x8}, 0x10, 0xffffffffffffffff, r9, 0x5, &(0x7f0000001840)=[r9, r15, r14, r9, r0, r10, r14, r13, r15], &(0x7f0000001880)=[{0x1, 0x3, 0x8, 0xa}, {0x0, 0x5, 0x6, 0xb}, {0x3, 0x2, 0xc, 0x9}, {0x1, 0x2, 0x9}, {0x3, 0x4, 0xa, 0xc}], 0x10, 0x6}, 0x94) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r15, 0x84, 0x12, &(0x7f00000019c0)=0x7, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000001a00)=r14, 0x4) write$P9_RFSYNC(r15, &(0x7f0000001a40)={0x7, 0x33, 0x1}, 0x7) sendmsg$NL80211_CMD_SET_WIPHY(r10, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x2c, r11, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x2}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x10}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xff}]}, 0x2c}}, 0x0) 1.692175214s ago: executing program 1 (id=3228): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0xffef, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}}, 0x0) 1.610127216s ago: executing program 1 (id=3229): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="340000001000010400000000b03a0a000000bf0f2591dc3f6ddd6211204b15523ff65cee10fc7d104ff454b37292c5775aba9412d7f7743b7851f9c73c19a954a996ddfe347c461d2efd531fc995bac2d76bc58e00000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100626174616476000004000280"], 0x34}}, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000200)={[], [{@dont_hash}]}, 0x0, 0x254, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x4800000, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$FIONCLEX(r1, 0x5450) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40e8662e, &(0x7f0000000040)={0x15fff, 0x100000000, 0x7, 0x5, 0xffffffff, 0xc}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001640)={0x14, r4, 0x801, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) open(0x0, 0x4827e, 0x115) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) 1.519743638s ago: executing program 0 (id=3230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.458062349s ago: executing program 0 (id=3231): r0 = io_uring_setup(0x6390, &(0x7f0000000000)={0x0, 0x621d, 0x842, 0x3, 0x39c}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000080), 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r0, 0xa, 0x2000000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x963, 0x1c00000000000000}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$IORING_OFF_SQ_RING(0x0, 0x7ffffffff000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x100000, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x4d}, {0x6}]}) 1.384920901s ago: executing program 1 (id=3232): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r6) r7 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r5, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r6, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 1.354895321s ago: executing program 0 (id=3233): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0xfec0ffff00000000}, 0x8000000, 0x0, 0x1, 0x9, 0x0, 0x4, 0xa4}, 0x23) 1.271759983s ago: executing program 0 (id=3234): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5434, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={&(0x7f0000000240)="666f7956d219fb3a734bd2ba0ee7c619a422d5b6c414a52ae3c9cda1719842ba0aa975008b2a02e06b62827473f4f4f1ae4fe6e44845f59e0c47c04676e768914a621683228f624af7110227d08e83c9a35bb0baae20de32f437b6b059d1d56fac5782075a919f2c", &(0x7f0000000300)=""/58, &(0x7f00000003c0)="6a4b60dc7649bdf1ea26efe1dc3ede61246d1fa6b564985a54335431ec5aefe46c19f93da5d0ed04981d3f6ad2095fa000f721ddc49f2eb2ec0ffe9a2a81c037d4e948c206ebd4690710cedb169ebcee8ed52a8a1b7fa2db2b51391505eb2bde19f658783325262e715948ac8a8699c103a99aee7905ee42d544140f588b8726cfb0df9af80ae5e9ab9849f95c3aef667329c94826cac932121ad10d35c52c21502a30831d992c183cfa", &(0x7f0000000480)="d834b5f4371b034f9db8d46af8dbbf890e124a8a33727d9968e1df6541983802591280e4b2067741a75e334f80ce52d5e137b13a62439cf85405456ffa95cccc082a9cebfda4b7430d2b0b110fe178c292fad8e55605a82d746c4e724a2727", 0x2, r3, 0x4}, 0x38) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x4, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) sendmmsg$inet6(r5, &(0x7f0000000e40)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x400, @loopback={0xff00000000000000}, 0x105}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000380)="a0002e7577d4017a", 0x8}], 0x1, &(0x7f0000000e80)=ANY=[], 0xd}}], 0x1, 0x4000880) setgroups(0x0, 0x0) setuid(0xee01) pread64(r4, &(0x7f00000024c0)=""/209, 0xd1, 0xa) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x82, &(0x7f0000000040)='\x00\'\x00\x00\x00\x00\x00\x00', 0x8) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @loopback, 0x9}, 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.058528528s ago: executing program 5 (id=3235): socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x42082, 0x0) pipe(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x840) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, 0x0, 0x0) epoll_create1(0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r5, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$sock_bt_hci(r2, 0x400448e6, 0x0) 944.82147ms ago: executing program 2 (id=3236): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xff, 0x7fff0000}]}) pivot_root(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa08009b00000000000000002f90780010000000000000248065580000070010000800260086dd080088be08000000100000000100000000000000080022eb00000000200000000200"], 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x10}, 0xc) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x200, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r8, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004091) write$cgroup_devices(r6, &(0x7f0000000040)=ANY=[], 0xfffffeff) getsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f0000000140)=""/123, &(0x7f0000000340)=0x7b) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x3406c096) 0s ago: executing program 5 (id=3237): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffff0001, 0xffff0000, 0x8003, 0x1, 0x10, 0x1f, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}}, 0x0) r5 = socket(0x23, 0x80002, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={0x0, 0x1d8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f0000000000)={[{@noinit_itable}, {@sysvgroups}]}, 0x1, 0x445, &(0x7f0000000600)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) lgetxattr(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x550, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$unix(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'ip6gretap0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0xffff0001, 0xffff0000, 0x8003, 0x1, 0x10, 0x1f, 0x6}}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8, 0x3, 0x2}]}}]}, 0x150}}, 0x0) (async) socket(0x23, 0x80002, 0x0) (async) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={0x0, 0x1d8}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x201080a, &(0x7f0000000000)={[{@noinit_itable}, {@sysvgroups}]}, 0x1, 0x445, &(0x7f0000000600)="$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") (async) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x1) (async) lgetxattr(&(0x7f00000007c0)='./file0\x00', 0x0, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x5) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) (async) futex(0x0, 0x85, 0x8, 0x0, 0x0, 0x40000000) (async) kernel console output (not intermixed with test programs): T14678] ? sget_fc+0x480/0xea0 [ 618.603793][T14678] sget_fc+0x480/0xea0 [ 618.603822][T14678] ? __pfx_set_anon_super_fc+0x10/0x10 [ 618.603857][T14678] ? mqueue_init_fs_context+0x38/0x2c0 [ 618.603882][T14678] ? __kmalloc_cache_noprof+0x30e/0x3d0 [ 618.603948][T14678] ? __pfx_mqueue_fill_super+0x10/0x10 [ 618.603969][T14678] get_tree_nodev+0x2a/0x100 [ 618.604001][T14678] mqueue_get_tree+0x5d/0x80 [ 618.604100][T14678] vfs_get_tree+0x57/0x1d0 [ 618.604121][T14678] fc_mount_longterm+0x18/0xb0 [ 618.604219][T14678] mq_init_ns+0x2db/0x370 [ 618.604237][T14678] copy_ipcs+0x26d/0x460 [ 618.604333][T14678] create_new_namespaces+0x121/0x420 [ 618.604364][T14678] unshare_nsproxy_namespaces+0x115/0x150 [ 618.604392][T14678] ksys_unshare+0x411/0x760 [ 618.604420][T14678] __x64_sys_unshare+0x1f/0x30 [ 618.604463][T14678] x64_sys_call+0x1cef/0x3020 [ 618.604489][T14678] do_syscall_64+0x136/0x3c0 [ 618.604531][T14678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.604553][T14678] RIP: 0033:0x7fb12f95de59 [ 618.604568][T14678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.604584][T14678] RSP: 002b:00007fb12e3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 618.604602][T14678] RAX: ffffffffffffffda RBX: 00007fb12fbe5fa0 RCX: 00007fb12f95de59 [ 618.604693][T14678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000000 [ 618.604708][T14678] RBP: 00007fb12e3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 618.604722][T14678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.604736][T14678] R13: 00007fb12fbe6038 R14: 00007fb12fbe5fa0 R15: 00007ffd20b3d048 [ 618.604758][T14678] [ 618.605264][T14668] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 618.994377][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 618.994397][ T28] audit: type=1400 audit(1783525566.456:2485): avc: denied { mounton } for pid=14681 comm="syz.2.2582" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 618.999424][T14680] loop5: detected capacity change from 0 to 1024 [ 619.009700][T14682] xt_l2tp: missing protocol rule (udp|l2tpip) [ 619.053777][T14680] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.074342][T14689] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14689 comm=syz.1.2583 [ 619.097656][T14687] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 619.135837][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.157229][T14695] loop0: detected capacity change from 0 to 512 [ 619.166094][T14695] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 619.183688][T14695] EXT4-fs (loop0): 1 truncate cleaned up [ 619.194729][T14695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.195812][T14687] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 619.207042][T14699] tc_dump_action: action bad kind [ 619.227184][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.318385][T14708] loop3: detected capacity change from 0 to 512 [ 619.331593][T14708] EXT4-fs: Ignoring removed nobh option [ 619.545237][T14713] netlink: 'syz.5.2590': attribute type 1 has an invalid length. [ 620.303117][T14713] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2590'. [ 620.312974][T14713] 8021q: adding VLAN 0 to HW filter on device bond17 [ 620.418323][T14715] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2590'. [ 620.761828][ C1] net_ratelimit: 4 callbacks suppressed [ 620.761843][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 621.801795][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.198364][T14708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.212211][T14708] ext4 filesystem being mounted at /359/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.627803][T14747] loop5: detected capacity change from 0 to 512 [ 622.634731][T14747] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 622.667391][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.716786][T14747] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.739562][T14747] ext4 filesystem being mounted at /530/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 622.759471][ T28] audit: type=1400 audit(1783525570.216:2486): avc: denied { write } for pid=14738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.834751][ T28] audit: type=1400 audit(1783525570.276:2487): avc: denied { write } for pid=14755 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 622.841803][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.947034][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.078204][ T28] audit: type=1400 audit(1783525570.536:2488): avc: denied { setattr } for pid=14763 comm="syz.1.2600" name="" dev="pipefs" ino=44084 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 623.219285][T14767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2601'. [ 623.315620][T14776] netlink: 'syz.1.2605': attribute type 1 has an invalid length. [ 623.337823][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.352752][T14776] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2605'. [ 623.362556][T14776] 8021q: adding VLAN 0 to HW filter on device bond5 [ 623.558430][T14781] loop0: detected capacity change from 0 to 1024 [ 623.587702][T14781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 623.634438][T14785] netlink: 'syz.5.2607': attribute type 1 has an invalid length. [ 623.783646][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.855643][T14789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2609'. [ 623.866573][T14785] loop5: detected capacity change from 0 to 1024 [ 623.881788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.903148][T14789] loop0: detected capacity change from 0 to 128 [ 623.911478][T14785] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 623.925166][T14789] ext2: Unknown parameter 'dont_hash' [ 623.958031][T14785] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 624.045033][T14785] JBD2: no valid journal superblock found [ 624.053248][T14785] EXT4-fs (loop5): Could not load journal inode [ 624.155147][ T28] audit: type=1400 audit(1783525571.616:2489): avc: denied { write } for pid=14793 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.221719][ T28] audit: type=1400 audit(1783525571.656:2490): avc: denied { write } for pid=14792 comm="syz.3.2599" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 624.284738][ T28] audit: type=1400 audit(1783525571.716:2491): avc: denied { write } for pid=14813 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 624.433813][T14825] loop2: detected capacity change from 0 to 512 [ 624.435950][ T28] audit: type=1400 audit(1783525571.896:2492): avc: denied { create } for pid=14826 comm="syz.1.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 624.464404][T14825] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 624.484789][ T28] audit: type=1400 audit(1783525571.936:2493): avc: denied { setopt } for pid=14826 comm="syz.1.2617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 624.524776][T14825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.539541][T14825] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.559822][T14833] loop0: detected capacity change from 0 to 512 [ 624.592041][T14833] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.609021][T14833] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 624.627123][ T28] audit: type=1400 audit(1783525572.086:2494): avc: denied { write } for pid=14832 comm="syz.0.2618" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.650320][T14833] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.0.2618: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 624.670861][ T28] audit: type=1400 audit(1783525572.106:2495): avc: denied { write } for pid=14832 comm="syz.0.2618" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.695477][T14833] EXT4-fs error (device loop0): ext4_get_first_dir_block:3548: inode #12: comm syz.0.2618: directory missing '.' [ 624.741935][ T28] audit: type=1400 audit(1783525572.106:2496): avc: denied { write } for pid=14832 comm="syz.0.2618" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 624.791809][ T28] audit: type=1400 audit(1783525572.106:2497): avc: denied { write } for pid=14832 comm="syz.0.2618" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 624.794243][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.844974][T14840] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2621'. [ 624.922115][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.961046][ T28] audit: type=1400 audit(1783525572.416:2498): avc: denied { name_bind } for pid=14843 comm="syz.0.2622" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 624.989160][T14846] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2623'. [ 625.110870][T14785] loop5: detected capacity change from 0 to 8192 [ 625.190935][T14848] pim6reg: entered allmulticast mode [ 625.209431][T14852] pim6reg: left allmulticast mode [ 625.236443][T14848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2624'. [ 625.246613][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.283569][T14854] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2625'. [ 625.305187][T14854] loop2: detected capacity change from 0 to 2048 [ 625.354164][T14865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14865 comm=syz.1.2629 [ 625.375010][T14854] loop2: p2 p3 p7 [ 625.411195][T14857] loop0: detected capacity change from 0 to 512 [ 625.904641][T11873] udevd[11873]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 625.905437][T11108] udevd[11108]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 625.907574][T13697] udevd[13697]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 625.957151][T14873] bond0: entered promiscuous mode [ 625.957168][T14873] bond_slave_0: entered promiscuous mode [ 625.957289][T14873] bond_slave_1: entered promiscuous mode [ 625.959178][T14873] batadv0: entered promiscuous mode [ 625.960301][T14873] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 626.162085][T14857] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.2626: dx entry: limit 1024 != root limit 124 [ 626.162199][T14857] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.2626: Corrupt directory, running e2fsck is recommended [ 626.163016][T14857] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 626.163241][T14857] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.2626: corrupted in-inode xattr: invalid ea_ino [ 626.163304][T14857] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 626.163578][T14857] EXT4-fs (loop0): Remounting filesystem read-only [ 626.163986][T14857] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.265759][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 626.290944][T14867] lo speed is unknown, defaulting to 1000 [ 626.372505][T14881] loop2: detected capacity change from 0 to 512 [ 626.382039][T14881] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 626.406443][T14881] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 626.434536][T14881] EXT4-fs error (device loop2): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.2.2630: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 626.464702][T14881] EXT4-fs error (device loop2): ext4_get_first_dir_block:3548: inode #12: comm syz.2.2630: directory missing '.' [ 626.664442][T14892] syzkaller0: entered promiscuous mode [ 627.007332][T14900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 627.134908][T14900] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2631: bad orphan inode 131083 [ 627.143707][T14892] syzkaller0: entered allmulticast mode [ 627.145576][T14900] loop3: lost filesystem error report for type 5 error -117 [ 627.151452][T14900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.321869][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.361825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 628.858128][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.895933][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.957193][T14921] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2633'. [ 629.009274][T14924] set_capacity_and_notify: 1 callbacks suppressed [ 629.009288][T14924] loop2: detected capacity change from 0 to 128 [ 629.043930][T14924] ext2: Unknown parameter 'dont_hash' [ 629.106808][T14923] syzkaller0: entered promiscuous mode [ 629.112468][T14923] syzkaller0: entered allmulticast mode [ 629.205484][T14928] netlink: 'syz.1.2635': attribute type 10 has an invalid length. [ 629.334737][T14933] loop5: detected capacity change from 0 to 512 [ 629.371886][T14933] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 629.381169][T14933] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 629.391640][T14933] FAT-fs (loop5): Filesystem has been set read-only [ 629.401869][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.459118][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.470827][T14926] tipc: Started in network mode [ 629.476387][T14926] tipc: Node identity a25f7438863f, cluster identity 2 [ 629.485375][T14926] tipc: Enabled bearer , priority 0 [ 629.495122][T14937] loop5: detected capacity change from 0 to 128 [ 629.505637][T14928] team0: Device wg2 is of different type [ 629.541388][T14937] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 629.568480][T14922] tipc: Resetting bearer [ 629.584737][T14922] tipc: Disabling bearer [ 629.603295][T14937] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.616663][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 629.616675][ T28] audit: type=1400 audit(1783525577.076:2510): avc: denied { write } for pid=14936 comm="syz.5.2638" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 629.647017][ T28] audit: type=1400 audit(1783525577.106:2511): avc: denied { setattr } for pid=14936 comm="syz.5.2638" path="/536/file1/file1" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 630.076230][T14944] lo speed is unknown, defaulting to 1000 [ 630.141952][T13750] nci: nci_rsp_packet: unknown rsp opcode 0xd00 [ 630.441835][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.681784][T14937] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 631.005596][T14958] loop0: detected capacity change from 0 to 512 [ 631.023622][T14958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.041355][ T3584] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 631.050523][T14958] ext4 filesystem being mounted at /369/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 631.173831][ T28] audit: type=1400 audit(1783525578.636:2512): avc: denied { write } for pid=14957 comm="syz.0.2643" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.196672][T14958] EXT4-fs error (device loop0): ext4_get_first_dir_block:3545: inode #12: block 32: comm syz.0.2643: bad entry in directory: inode out of bounds - offset=0, inode=67108867, rec_len=2048, size=2048 fake=0 [ 631.216753][ T28] audit: type=1400 audit(1783525578.656:2513): avc: denied { write } for pid=14957 comm="syz.0.2643" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.309646][T14958] EXT4-fs error (device loop0): ext4_get_first_dir_block:3548: inode #12: comm syz.0.2643: directory missing '.' [ 631.323466][ T28] audit: type=1400 audit(1783525578.656:2514): avc: denied { write } for pid=14957 comm="syz.0.2643" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 631.367354][ T28] audit: type=1400 audit(1783525578.656:2515): avc: denied { write } for pid=14957 comm="syz.0.2643" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 631.401411][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.481794][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.709909][T14967] lo speed is unknown, defaulting to 1000 [ 631.933778][ T28] audit: type=1400 audit(1783525579.396:2516): avc: denied { create } for pid=14968 comm="syz.5.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 631.971186][ T28] audit: type=1400 audit(1783525579.416:2517): avc: denied { setopt } for pid=14968 comm="syz.5.2645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 632.017868][ T23] IPVS: starting estimator thread 0... [ 632.085640][ T28] audit: type=1400 audit(1783525579.546:2518): avc: denied { setopt } for pid=14979 comm="syz.5.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 632.137910][T14985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2653'. [ 632.164668][T14985] lo speed is unknown, defaulting to 1000 [ 632.202151][T14972] IPVS: using max 2352 ests per chain, 117600 per kthread [ 632.229176][ T28] audit: type=1400 audit(1783525579.566:2519): avc: denied { ioctl } for pid=14979 comm="syz.5.2651" path="socket:[43422]" dev="sockfs" ino=43422 ioctlcmd=0x8912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 632.521802][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 633.561790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.585349][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2662'. [ 634.601788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.923250][T15028] netlink: 'syz.2.2666': attribute type 1 has an invalid length. [ 634.994197][T15032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 635.095735][T15035] loop0: detected capacity change from 0 to 512 [ 635.187637][T15039] loop3: detected capacity change from 0 to 128 [ 635.214977][T15043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=15043 comm=syz.5.2671 [ 635.238538][T15042] loop0: detected capacity change from 0 to 4096 [ 635.242940][T15043] lo speed is unknown, defaulting to 1000 [ 635.254760][T15042] EXT4-fs: Ignoring removed nomblk_io_submit option [ 635.259103][T15039] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 635.277486][T15042] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 635.285085][T15044] 9p: Bad value for 'wfdno' [ 635.292992][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 635.293098][ T28] audit: type=1400 audit(1783525582.746:2523): avc: denied { mount } for pid=15040 comm="syz.5.2671" name="/" dev="ramfs" ino=43547 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 635.339651][T15042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 635.342845][ T28] audit: type=1400 audit(1783525582.746:2524): avc: denied { mounton } for pid=15040 comm="syz.5.2671" path="/file0" dev="ramfs" ino=43549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 635.387215][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.406227][ T28] audit: type=1400 audit(1783525582.816:2525): avc: denied { write } for pid=15041 comm="syz.0.2670" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.430027][T15039] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 635.455187][ T28] audit: type=1400 audit(1783525582.816:2526): avc: denied { write } for pid=15041 comm="syz.0.2670" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 635.504398][ T28] audit: type=1400 audit(1783525582.816:2527): avc: denied { unlink } for pid=15041 comm="syz.0.2670" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 635.641786][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.907226][T15063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2678'. [ 635.961807][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 635.968201][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 636.150948][T15068] Invalid logical block size (35465) [ 636.279599][T15072] netlink: 'syz.0.2682': attribute type 1 has an invalid length. [ 636.340359][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2682'. [ 636.358398][T15074] 8021q: adding VLAN 0 to HW filter on device bond9 [ 636.377328][T15072] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2682'. [ 636.681792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.001784][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 637.008197][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 637.096372][T15084] loop0: detected capacity change from 0 to 512 [ 637.135888][T15084] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.172915][T15084] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2684'. [ 637.194327][ T28] audit: type=1400 audit(1783525584.626:2528): avc: denied { write } for pid=15080 comm="syz.0.2684" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.269164][ T28] audit: type=1400 audit(1783525584.726:2529): avc: denied { ioctl } for pid=15093 comm="syz.5.2687" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 637.353831][T15076] syzkaller0: entered promiscuous mode [ 637.359484][T15076] syzkaller0: entered allmulticast mode [ 637.379014][T15102] lo speed is unknown, defaulting to 1000 [ 637.615667][T15075] loop3: detected capacity change from 0 to 512 [ 637.645826][T15075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 637.685675][T15075] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.2677: bad orphan inode 131083 [ 637.721873][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.808879][T15075] loop3: lost filesystem error report for type 5 error -117 [ 637.811743][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 637.825475][ C1] EXT4-fs (loop3): initial error at time 1783525585: ext4_orphan_get:1425 [ 637.834034][ C1] EXT4-fs (loop3): last error at time 1783525585: ext4_orphan_get:1425 [ 637.875985][T15075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 637.894267][ T28] audit: type=1400 audit(1783525585.356:2530): avc: denied { write } for pid=15058 comm="syz.3.2677" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 637.946218][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.051784][ C0] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 638.058206][ C0] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 638.117577][T15115] netlink: 'syz.5.2692': attribute type 10 has an invalid length. [ 638.587395][T15124] loop0: detected capacity change from 0 to 512 [ 638.636203][T15124] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 638.686736][T15124] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.710096][T15124] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 638.740896][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.761865][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.280779][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.378540][T15144] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2703'. [ 639.449424][T15153] lo speed is unknown, defaulting to 1000 [ 639.772211][ T28] audit: type=1400 audit(1783525587.226:2531): avc: denied { ioctl } for pid=15149 comm="syz.0.2704" path="socket:[45114]" dev="sockfs" ino=45114 ioctlcmd=0x48e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 639.801868][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.854649][ T28] audit: type=1400 audit(1783525587.276:2532): avc: denied { ioctl } for pid=15149 comm="syz.0.2704" path="socket:[45119]" dev="sockfs" ino=45119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 640.035517][T15163] syzkaller0: entered promiscuous mode [ 640.041438][T15163] syzkaller0: entered allmulticast mode [ 640.141187][T15163] loop0: detected capacity change from 0 to 512 [ 640.189521][T15163] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 640.222887][T15163] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2708: bad orphan inode 131083 [ 640.253325][T15163] loop0: lost filesystem error report for type 5 error -117 [ 640.261793][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 640.275653][ C1] EXT4-fs (loop0): initial error at time 1783525587: ext4_orphan_get:1425 [ 640.284203][ C1] EXT4-fs (loop0): last error at time 1783525587: ext4_orphan_get:1425 [ 640.326786][T15163] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.359513][ T28] audit: type=1400 audit(1783525587.816:2533): avc: denied { write } for pid=15162 comm="syz.0.2708" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 640.486757][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.846020][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 640.980139][T15185] loop5: detected capacity change from 0 to 128 [ 641.012318][T15181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2713'. [ 641.245541][T15195] loop3: detected capacity change from 0 to 512 [ 641.255916][T15195] EXT4-fs: Ignoring removed mblk_io_submit option [ 641.437192][T15199] netlink: 'syz.5.2717': attribute type 10 has an invalid length. [ 641.881788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.242839][T15207] netlink: 'syz.1.2719': attribute type 10 has an invalid length. [ 642.270482][T15207] team0: Device wg2 is of different type [ 642.730719][T15195] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 642.771092][T15206] loop0: detected capacity change from 0 to 8192 [ 642.921779][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 643.380248][ T28] audit: type=1400 audit(1783525590.836:2534): avc: denied { write } for pid=15213 comm="syz.5.2722" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 643.961792][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.362531][T15229] loop0: detected capacity change from 0 to 512 [ 644.389002][T15229] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 644.550630][T15229] EXT4-fs (loop0): 1 truncate cleaned up [ 644.574852][T15229] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 644.600316][ T28] audit: type=1400 audit(1783525592.056:2535): avc: denied { write } for pid=15225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.649772][ T28] audit: type=1400 audit(1783525592.086:2536): avc: denied { write } for pid=15228 comm="syz.0.2729" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.717654][ T28] audit: type=1400 audit(1783525592.086:2537): avc: denied { write } for pid=15228 comm="syz.0.2729" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.779730][ T28] audit: type=1400 audit(1783525592.086:2538): avc: denied { rename } for pid=15228 comm="syz.0.2729" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 644.831376][ T28] audit: type=1400 audit(1783525592.086:2539): avc: denied { rmdir } for pid=15228 comm="syz.0.2729" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 644.886721][ T28] audit: type=1400 audit(1783525592.106:2540): avc: denied { write } for pid=15246 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 644.957106][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.976839][ T28] audit: type=1400 audit(1783525592.436:2541): avc: denied { write } for pid=15249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.001787][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.184323][ T28] audit: type=1400 audit(1783525592.646:2542): avc: denied { write } for pid=15263 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.301424][T15264] netlink: 'syz.3.2724': attribute type 1 has an invalid length. [ 646.041781][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 646.269828][T15264] bond8: entered promiscuous mode [ 646.275311][T15264] 8021q: adding VLAN 0 to HW filter on device bond8 [ 646.294918][ T28] audit: type=1400 audit(1783525593.756:2543): avc: denied { setopt } for pid=15258 comm="syz.3.2724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 646.881108][T15289] FAULT_INJECTION: forcing a failure. [ 646.881108][T15289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.907668][T15289] CPU: 0 UID: 0 PID: 15289 Comm: syz.2.2738 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 646.907698][T15289] Tainted: [W]=WARN [ 646.907705][T15289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 646.907718][T15289] Call Trace: [ 646.907726][T15289] [ 646.907809][T15289] __dump_stack+0x1d/0x30 [ 646.907835][T15289] dump_stack_lvl+0x95/0xd0 [ 646.907920][T15289] dump_stack+0x15/0x1b [ 646.907941][T15289] should_fail_ex+0x25e/0x270 [ 646.907971][T15289] should_fail+0xb/0x20 [ 646.907997][T15289] should_fail_usercopy+0x1a/0x20 [ 646.908066][T15289] _copy_from_user+0x1c/0xb0 [ 646.908092][T15289] ___sys_sendmsg+0xc1/0x1e0 [ 646.908121][T15289] ? terminate_walk+0x1d5/0x200 [ 646.908162][T15289] __sys_sendmmsg+0x185/0x320 [ 646.908200][T15289] __x64_sys_sendmmsg+0x57/0x70 [ 646.908229][T15289] x64_sys_call+0x27aa/0x3020 [ 646.908254][T15289] do_syscall_64+0x136/0x3c0 [ 646.908283][T15289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.908417][T15289] RIP: 0033:0x7fb12f95de59 [ 646.908432][T15289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.908448][T15289] RSP: 002b:00007fb12e3b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 646.908483][T15289] RAX: ffffffffffffffda RBX: 00007fb12fbe5fa0 RCX: 00007fb12f95de59 [ 646.908523][T15289] RDX: 0000000000034000 RSI: 00002000000008c0 RDI: 0000000000000005 [ 646.908535][T15289] RBP: 00007fb12e3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 646.908547][T15289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.908559][T15289] R13: 00007fb12fbe6038 R14: 00007fb12fbe5fa0 R15: 00007ffd20b3d048 [ 646.908579][T15289] [ 647.081795][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.246152][T15293] loop2: detected capacity change from 0 to 1024 [ 647.296826][T15293] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.364165][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.413820][T15307] netlink: 'syz.2.2743': attribute type 3 has an invalid length. [ 647.431968][T15307] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2743'. [ 647.472583][T15309] bridge0: port 3(macvlan2) entered disabled state [ 647.479169][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.486397][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.493978][T15309] bridge0: entered allmulticast mode [ 647.502590][T15309] macvlan2: left allmulticast mode [ 647.535874][T15309] batadv0: left allmulticast mode [ 647.541136][T15309] macvlan2: left promiscuous mode [ 647.546716][T15309] bridge0: port 3(macvlan2) entered disabled state [ 647.802334][T15309] bridge_slave_1: left allmulticast mode [ 647.811796][T15309] bridge_slave_1: left promiscuous mode [ 647.827022][T15309] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.855355][T15309] bridge_slave_0: left allmulticast mode [ 647.871821][T15309] bridge_slave_0: left promiscuous mode [ 647.877686][T15309] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.937967][T15322] loop5: detected capacity change from 0 to 512 [ 647.968008][T15322] EXT4-fs: Ignoring removed nobh option [ 648.047008][T15322] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 648.064035][T15322] ext4 filesystem being mounted at /561/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 648.122972][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 648.317311][T15348] netlink: 'syz.2.2750': attribute type 10 has an invalid length. [ 648.388198][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.410731][T15348] team0: Device wg2 is of different type [ 648.930304][T15364] netlink: 'syz.5.2755': attribute type 10 has an invalid length. [ 649.161799][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 649.486646][T15350] netlink: 'syz.3.2751': attribute type 10 has an invalid length. [ 650.176247][ T28] audit: type=1400 audit(1783525597.636:2544): avc: denied { ioctl } for pid=15370 comm="syz.1.2761" path="socket:[45506]" dev="sockfs" ino=45506 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 650.201790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.282773][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2762'. [ 650.848313][T15350] team0: Device wg2 is of different type [ 651.147859][T15384] syzkaller1: entered promiscuous mode [ 651.153500][T15384] syzkaller1: entered allmulticast mode [ 651.241826][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 651.339389][T15387] loop0: detected capacity change from 0 to 512 [ 651.352445][T15387] EXT4-fs: Ignoring removed nobh option [ 651.394816][T15387] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.422279][T15387] ext4 filesystem being mounted at /408/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 651.856895][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.281803][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.321842][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 653.946243][T15417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'. [ 653.955493][T15417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2774'. [ 654.361788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.711191][T15429] loop5: detected capacity change from 0 to 2048 [ 654.836091][T15444] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 654.882261][T15450] netlink: 'syz.5.2785': attribute type 1 has an invalid length. [ 654.939767][T15450] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2785'. [ 654.962337][T15450] 8021q: adding VLAN 0 to HW filter on device bond18 [ 655.059000][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2788'. [ 655.072670][T15459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2788'. [ 655.082398][T15459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2788'. [ 655.097588][T15459] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 655.110239][T15459] bond6 (unregistering): Released all slaves [ 655.214227][T15463] netlink: 'syz.2.2783': attribute type 10 has an invalid length. [ 655.274121][T15463] team0: Device wg2 is of different type [ 655.401798][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 656.153246][T15470] syzkaller0: entered promiscuous mode [ 656.182263][T15470] syzkaller0: entered allmulticast mode [ 656.211976][T15474] loop5: detected capacity change from 0 to 512 [ 656.220058][T15474] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 656.236403][T15474] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.2791: bad orphan inode 131083 [ 656.246920][T15474] loop5: lost filesystem error report for type 5 error -117 [ 656.248348][T15474] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 656.441791][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.009107][ T28] audit: type=1400 audit(1783525604.446:2545): avc: denied { write } for pid=15467 comm="syz.5.2791" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 657.100877][T15501] netlink: 'syz.3.2801': attribute type 1 has an invalid length. [ 657.166049][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.179365][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2801'. [ 657.203563][T15502] 8021q: adding VLAN 0 to HW filter on device bond9 [ 657.481831][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.501298][T15507] loop0: detected capacity change from 0 to 512 [ 657.549314][T15507] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 657.585486][T15507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 657.614153][T15507] ext4 filesystem being mounted at /419/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 657.637064][T15514] netlink: 'syz.5.2804': attribute type 10 has an invalid length. [ 658.132278][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 658.275385][T15518] loop0: detected capacity change from 0 to 764 [ 658.315850][ T28] audit: type=1400 audit(1783525605.776:2546): avc: denied { mount } for pid=15517 comm="syz.0.2805" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 658.521805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 659.334885][ T28] audit: type=1400 audit(1783525606.796:2547): avc: denied { unmount } for pid=7949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 659.375438][ T28] audit: type=1400 audit(1783525606.826:2548): avc: denied { write } for pid=15537 comm="syz.2.2815" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 659.534364][ T28] audit: type=1400 audit(1783525606.996:2549): avc: denied { getopt } for pid=15545 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 659.561770][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.514168][ T28] audit: type=1400 audit(1783525607.186:2550): avc: denied { create } for pid=15545 comm="syz.0.2817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 660.533858][ T28] audit: type=1400 audit(1783525607.356:2551): avc: denied { write } for pid=15554 comm="syz.0.2822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 660.553615][ T28] audit: type=1400 audit(1783525607.516:2552): avc: denied { getattr } for pid=15558 comm="syz.0.2824" lport=44476 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 660.611837][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.787716][T15575] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 660.952480][T15582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2818'. [ 660.971214][T15582] 8021q: adding VLAN 0 to HW filter on device bond10 [ 661.343066][T15586] lo speed is unknown, defaulting to 1000 [ 661.538900][T15596] loop0: detected capacity change from 0 to 512 [ 661.547008][T15596] EXT4-fs: Ignoring removed nobh option [ 661.575279][T15598] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 661.586962][T15594] loop2: detected capacity change from 0 to 512 [ 661.590497][T15594] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 661.602490][T15596] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.615957][T15596] ext4 filesystem being mounted at /431/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 661.617048][T15594] EXT4-fs (loop2): orphan cleanup on readonly fs [ 661.638177][T15594] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.2835: bg 0: block 16: invalid block bitmap [ 661.641808][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 661.650728][T15594] loop2: lost filesystem error report for type 5 error -117 [ 661.657670][T15594] EXT4-fs (loop2): Remounting filesystem read-only [ 661.665023][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 661.665045][ C0] EXT4-fs (loop2): initial error at time 1783525609: ext4_validate_block_bitmap:432 [ 661.665072][ C0] EXT4-fs (loop2): last error at time 1783525609: ext4_validate_block_bitmap:432 [ 661.697349][T15594] EXT4-fs (loop2): 1 truncate cleaned up [ 661.703971][T15594] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 661.737040][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.773560][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.013200][T15611] loop0: detected capacity change from 0 to 764 [ 662.013239][T15625] 9pnet_fd: p9_fd_create_unix (15625): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 662.074266][T15625] netlink: 'syz.5.2846': attribute type 10 has an invalid length. [ 662.681790][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 662.886090][T15631] netlink: 'syz.2.2841': attribute type 10 has an invalid length. [ 662.913119][T15631] team0: Device wg2 is of different type [ 663.659707][ T28] audit: type=1400 audit(1783525611.116:2553): avc: denied { wake_alarm } for pid=15637 comm="syz.0.2848" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 663.716724][T15643] loop5: detected capacity change from 0 to 512 [ 663.721775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 663.728711][T15643] EXT4-fs: Ignoring removed nobh option [ 663.766901][T15643] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.792184][T15643] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 663.805502][T15645] loop0: detected capacity change from 0 to 1024 [ 663.836623][T15645] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 663.875906][T15634] loop3: detected capacity change from 0 to 512 [ 663.878750][T15645] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 663.891529][T15634] ext4: Bad value for 'auto_da_alloc' [ 663.917894][ T3584] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 663.936563][T15645] EXT4-fs error (device loop0): ext4_get_journal_inode:5900: inode #32: comm syz.0.2851: iget: special inode unallocated [ 663.967205][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 663.988290][T15645] loop0: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 663.988445][T15645] EXT4-fs (loop0): no journal found [ 663.997599][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 663.997620][ C0] EXT4-fs (loop0): initial error at time 1783525611: ext4_get_journal_inode:5900: inode 32 [ 663.997656][ C0] EXT4-fs (loop0): last error at time 1783525611: ext4_get_journal_inode:5900: inode 32 [ 664.037053][T15645] EXT4-fs (loop0): can't get journal size [ 664.056066][T15657] netlink: 'syz.5.2854': attribute type 1 has an invalid length. [ 664.060833][T15645] EXT4-fs (loop0): filesystem is read-only [ 664.077818][T15645] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 664.107106][T15657] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2854'. [ 664.112761][T15645] netlink: 'syz.0.2851': attribute type 29 has an invalid length. [ 664.138761][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.160424][T15661] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2854'. [ 664.185598][T15657] 8021q: adding VLAN 0 to HW filter on device bond19 [ 664.290979][T15669] lo speed is unknown, defaulting to 1000 [ 664.690460][T15634] loop3: detected capacity change from 0 to 4096 [ 664.703323][T15634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 664.714752][T15634] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 664.732167][T15634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 664.748501][ T28] audit: type=1400 audit(1783525612.206:2554): avc: denied { write } for pid=15633 comm="syz.3.2847" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 664.761824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 664.787831][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.940163][T15678] loop3: detected capacity change from 0 to 128 [ 664.950968][T15678] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 664.963718][T15678] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 665.645507][T15687] loop2: detected capacity change from 0 to 764 [ 665.801805][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.806792][T15691] loop0: detected capacity change from 0 to 512 [ 665.890442][T15691] EXT4-fs: Ignoring removed nobh option [ 666.073061][T15701] ext4: Unknown parameter '' [ 666.842022][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.868311][T15691] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.996742][T15691] ext4 filesystem being mounted at /437/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 667.139555][T15714] lo speed is unknown, defaulting to 1000 [ 667.454694][ T28] audit: type=1400 audit(1783525614.916:2555): avc: denied { create } for pid=15720 comm="syz.2.2871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 667.489389][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 667.506593][T15724] netlink: 'syz.1.2870': attribute type 10 has an invalid length. [ 667.549298][T15724] team0: Device wg2 is of different type [ 667.780523][ T28] audit: type=1400 audit(1783525615.236:2556): avc: denied { read } for pid=15732 comm="syz.0.2874" path="socket:[47431]" dev="sockfs" ino=47431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 667.804221][T15735] set_capacity_and_notify: 1 callbacks suppressed [ 667.804238][T15735] loop2: detected capacity change from 0 to 512 [ 667.881838][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 667.952004][T15735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 667.964855][T15735] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.993397][T15735] EXT4-fs error (device loop2): mb_free_blocks:2049: group 0, inode 16: block 44:freeing already freed block (bit 44); block bitmap corrupt. [ 668.008066][T15735] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.2873: corrupted inode contents [ 668.021514][T15735] EXT4-fs error (device loop2): ext4_dirty_inode:6639: inode #16: comm syz.2.2873: mark_inode_dirty error [ 668.034545][T15735] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.2873: corrupted inode contents [ 668.062961][T15735] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2873: mark_inode_dirty error [ 668.074567][T15735] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.2873: corrupted inode contents [ 668.088743][T15735] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.2873: mark_inode_dirty error [ 668.118192][T15735] EXT4-fs error (device loop2): ext4_do_update_inode:5742: inode #16: comm syz.2.2873: corrupted inode contents [ 668.131436][T15735] EXT4-fs error (device loop2): ext4_truncate:4691: inode #16: comm syz.2.2873: mark_inode_dirty error [ 668.144507][T15735] EXT4-fs error (device loop2) in ext4_setattr:6172: Corrupt filesystem [ 668.183873][ T28] audit: type=1400 audit(1783525615.446:2557): avc: denied { write } for pid=15727 comm="syz.2.2873" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.205750][ T28] audit: type=1400 audit(1783525615.516:2558): avc: denied { write } for pid=15727 comm="syz.2.2873" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.227632][ T28] audit: type=1400 audit(1783525615.516:2559): avc: denied { write } for pid=15727 comm="syz.2.2873" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 668.261208][T15743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2875'. [ 668.292581][T15745] netlink: 'syz.5.2876': attribute type 28 has an invalid length. [ 668.301173][T15745] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2876'. [ 668.366740][T15745] loop5: detected capacity change from 0 to 256 [ 668.436609][T15745] msdos: Bad value for 'time_offset' [ 668.506488][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.921829][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.035200][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 669.044163][T15751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 669.056680][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2878'. [ 669.065652][T15751] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 669.086482][ T3950] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.126778][ T3950] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.186118][ T3950] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.265316][ T3950] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 669.788778][ T28] audit: type=1400 audit(1783525617.246:2560): avc: denied { sqpoll } for pid=15763 comm="syz.2.2882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 669.869608][ T28] audit: type=1326 audit(1783525617.326:2561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15763 comm="syz.2.2882" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12f95de59 code=0x0 [ 669.961785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 669.979159][ T28] audit: type=1400 audit(1783525617.436:2562): avc: denied { create } for pid=15768 comm="syz.3.2880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 669.987214][T15769] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2880'. [ 670.087161][T15767] loop2: detected capacity change from 0 to 512 [ 670.150244][T15767] EXT4-fs: Ignoring removed nobh option [ 670.240717][T15767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.287152][T15767] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 670.647336][ T28] audit: type=1400 audit(1783525618.106:2563): avc: denied { connect } for pid=15775 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 670.694393][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.706986][ T28] audit: type=1400 audit(1783525618.166:2564): avc: denied { read } for pid=15775 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 670.754386][T15779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2886'. [ 670.786849][T15779] loop5: detected capacity change from 0 to 128 [ 670.795890][T15779] ext2: Unknown parameter 'dont_hash' [ 671.001821][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 671.039762][T15791] Invalid argument reading file caps for ./file0 [ 672.041786][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 672.298984][T15802] loop2: detected capacity change from 0 to 128 [ 672.324679][T15802] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 672.371024][T15802] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 672.499368][T15806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2894'. [ 672.522048][ T28] audit: type=1400 audit(1783525619.956:2565): avc: denied { bind } for pid=15805 comm="syz.3.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.542898][ T28] audit: type=1400 audit(1783525619.956:2566): avc: denied { setopt } for pid=15805 comm="syz.3.2894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 672.930328][T15816] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2897'. [ 672.953277][T15816] loop5: detected capacity change from 0 to 128 [ 672.972128][T15816] ext2: Unknown parameter 'dont_hash' [ 673.044618][T15820] loop5: detected capacity change from 0 to 128 [ 673.051553][T15820] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 673.069454][T15820] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 673.081765][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 673.184249][T15824] loop5: detected capacity change from 0 to 764 [ 673.199901][T15823] bridge0: port 3(team0) entered blocking state [ 673.207729][T15823] bridge0: port 3(team0) entered disabled state [ 673.215813][T15823] team0: entered allmulticast mode [ 673.221526][T15823] team_slave_0: entered allmulticast mode [ 673.227846][T15823] team_slave_1: entered allmulticast mode [ 673.255328][T15823] team0: entered promiscuous mode [ 673.261023][T15823] team_slave_0: entered promiscuous mode [ 673.268142][T15823] team_slave_1: entered promiscuous mode [ 673.277549][T15823] bridge0: port 3(team0) entered blocking state [ 673.284331][T15823] bridge0: port 3(team0) entered forwarding state [ 673.324043][ T28] audit: type=1400 audit(1783525620.786:2567): avc: denied { append } for pid=15825 comm="syz.3.2902" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 673.437274][T15835] 9pnet_fd: p9_fd_create_unix (15835): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 673.452243][T15835] netlink: 'syz.5.2905': attribute type 10 has an invalid length. [ 673.612197][T15841] loop5: detected capacity change from 0 to 128 [ 673.624309][T15841] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 673.641002][T15841] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 673.691647][T15845] __nla_validate_parse: 1 callbacks suppressed [ 673.691665][T15845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2909'. [ 673.708511][T15845] loop5: detected capacity change from 0 to 128 [ 673.716647][T15845] ext2: Unknown parameter 'dont_hash' [ 673.779470][T15843] loop2: detected capacity change from 0 to 512 [ 673.811940][T15843] EXT4-fs: Ignoring removed nobh option [ 673.842622][T15855] loop5: detected capacity change from 0 to 1024 [ 673.849640][T15843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 673.850509][T15855] ext4: Unknown parameter 'nouser_xattr' [ 673.863456][T15843] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 673.920121][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.048500][ T28] audit: type=1400 audit(1783525621.506:2568): avc: denied { append } for pid=15859 comm="syz.2.2913" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 674.113187][T15866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.121768][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 674.123841][T15866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.380383][T15866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.391390][T15866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.485122][T15866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.512249][T15881] netlink: 'syz.1.2919': attribute type 10 has an invalid length. [ 674.515314][T15866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.530697][T15883] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2920'. [ 674.570794][T15884] loop0: detected capacity change from 0 to 128 [ 674.593118][T15884] ext2: Unknown parameter 'dont_hash' [ 674.634877][T15866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.645856][T15866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.764954][ T3950] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.796422][ T3950] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.796475][T15894] loop0: detected capacity change from 0 to 512 [ 674.836001][T13750] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.841519][T15894] EXT4-fs: Ignoring removed nobh option [ 674.846240][T13750] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.871190][T13750] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.886509][T15894] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 674.910704][T13750] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.913306][T15894] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 674.937622][T13750] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 674.953178][T13750] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.048164][T15906] netlink: 'syz.1.2927': attribute type 6 has an invalid length. [ 675.088328][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 675.161796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.220853][T15917] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2932'. [ 675.223326][T15917] loop0: detected capacity change from 0 to 128 [ 675.223918][T15917] ext2: Unknown parameter 'dont_hash' [ 675.253642][T15919] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 675.355353][T15924] FAULT_INJECTION: forcing a failure. [ 675.355353][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 675.355384][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.0.2935 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 675.355412][T15924] Tainted: [W]=WARN [ 675.355420][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 675.355432][T15924] Call Trace: [ 675.355440][T15924] [ 675.355477][T15924] __dump_stack+0x1d/0x30 [ 675.355501][T15924] dump_stack_lvl+0x95/0xd0 [ 675.355519][T15924] dump_stack+0x15/0x1b [ 675.355536][T15924] should_fail_ex+0x25e/0x270 [ 675.355563][T15924] should_failslab+0x8c/0xb0 [ 675.355628][T15924] __kmalloc_noprof+0xd4/0x4a0 [ 675.355650][T15924] ? sock_kmalloc+0x85/0xc0 [ 675.355673][T15924] ? sock_kmalloc+0x85/0xc0 [ 675.355706][T15924] sock_kmalloc+0x85/0xc0 [ 675.355730][T15924] ____sys_sendmsg+0xf0/0x580 [ 675.355798][T15924] ___sys_sendmsg+0x195/0x1e0 [ 675.355891][T15924] __x64_sys_sendmsg+0xd4/0x160 [ 675.355923][T15924] x64_sys_call+0x194c/0x3020 [ 675.356012][T15924] do_syscall_64+0x136/0x3c0 [ 675.356041][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.356063][T15924] RIP: 0033:0x7f62da34de59 [ 675.356128][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.356143][T15924] RSP: 002b:00007f62d8da7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.356161][T15924] RAX: ffffffffffffffda RBX: 00007f62da5d5fa0 RCX: 00007f62da34de59 [ 675.356174][T15924] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 675.356187][T15924] RBP: 00007f62d8da7090 R08: 0000000000000000 R09: 0000000000000000 [ 675.356200][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.356246][T15924] R13: 00007f62da5d6038 R14: 00007f62da5d5fa0 R15: 00007ffdb51b7268 [ 675.356342][T15924] [ 675.558959][T15926] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 675.582158][T15926] ext4 filesystem being mounted at /453/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 675.626244][ T7949] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 675.728912][T15931] EXT4-fs: Ignoring removed nobh option [ 675.760059][T15931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.773354][T15931] ext4 filesystem being mounted at /454/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 675.861244][T15940] lo speed is unknown, defaulting to 1000 [ 676.201760][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 676.233422][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.241774][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.402098][T15960] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 677.448435][T15960] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2946: bad orphan inode 131083 [ 677.472775][T15960] loop0: lost filesystem error report for type 5 error -117 [ 677.485487][T15960] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 677.755046][ T28] audit: type=1400 audit(1783525625.016:2569): avc: denied { write } for pid=15959 comm="syz.0.2946" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 677.817595][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 677.856178][T15982] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2948'. [ 678.281767][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 678.525347][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 678.534279][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2951'. [ 678.543377][T15992] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2951'. [ 678.552289][T15992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2951'. [ 678.717912][T16002] set_capacity_and_notify: 3 callbacks suppressed [ 678.717948][T16002] loop3: detected capacity change from 0 to 512 [ 678.752310][T16002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 678.765473][T16002] ext4 filesystem being mounted at /392/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 678.777514][ T28] audit: type=1400 audit(1783525626.236:2570): avc: denied { write } for pid=16001 comm="syz.3.2956" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 678.778015][T16002] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.2956: corrupted inode contents [ 678.871494][T16003] netlink: 'syz.1.2953': attribute type 10 has an invalid length. [ 678.886925][T16003] team0: Device wg2 is of different type [ 678.891836][T16009] EXT4-fs (loop3): shut down requested (2) [ 678.900481][T16002] EXT4-fs error (device loop3): ext4_dirty_inode:6639: inode #2: comm syz.3.2956: mark_inode_dirty error [ 678.912662][T16002] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #2: comm syz.3.2956: corrupted inode contents [ 678.939517][T16002] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.2956: mark_inode_dirty error [ 679.131892][T16015] loop0: detected capacity change from 0 to 512 [ 679.150064][T16015] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 679.179396][T16015] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.2958: bad orphan inode 131083 [ 679.193184][T16015] loop0: lost filesystem error report for type 5 error -117 [ 679.197029][T16015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 679.225711][ T28] audit: type=1400 audit(1783525626.686:2571): avc: denied { write } for pid=16014 comm="syz.0.2958" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 679.259307][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 679.321870][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 679.404173][T16031] lo speed is unknown, defaulting to 1000 [ 679.883853][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 680.202089][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 680.210997][T16067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 680.299276][T16067] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2967'. [ 680.308287][T16067] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2967'. [ 680.361763][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 680.879559][T16092] lo speed is unknown, defaulting to 1000 [ 681.017661][T16092] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.024803][T16092] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.032072][T16092] bridge_slave_0: entered allmulticast mode [ 681.038428][T16092] bridge_slave_0: entered promiscuous mode [ 681.045176][T16092] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.052755][T16092] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.061533][T16092] bridge_slave_1: entered allmulticast mode [ 681.068231][T16092] bridge_slave_1: entered promiscuous mode [ 681.085180][ T4196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.097655][ T4196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.109285][ T4196] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.131494][T16092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.142212][T16092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.162955][T16092] team0: Port device team_slave_0 added [ 681.169604][T16092] team0: Port device team_slave_1 added [ 681.189950][ T4196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.200757][ T4196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.215402][ T4196] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.230276][T16092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.237317][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.263861][T16092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.275277][T16092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.282464][T16092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.311424][T16092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.327720][ T4196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.338339][ T4196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.349835][ T4196] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.387426][T16092] hsr_slave_0: entered promiscuous mode [ 681.395742][T16092] hsr_slave_1: entered promiscuous mode [ 681.401775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.410056][T16092] debugfs: 'hsr0' already exists in 'hsr' [ 681.416108][T16092] Cannot create hsr debugfs directory [ 681.461095][ T4196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.471974][ T4196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.482715][ T4196] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.703690][T16121] netlink: 'syz.0.2983': attribute type 10 has an invalid length. [ 682.441786][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.607872][T16121] team0: Device wg2 is of different type [ 682.759215][ T4196] bond0 (unregistering): Released all slaves [ 682.773454][ T4196] bond1 (unregistering): Released all slaves [ 682.782263][ T4196] bond2 (unregistering): left promiscuous mode [ 682.798242][ T4196] bond2 (unregistering): Released all slaves [ 682.807678][ T4196] bond3 (unregistering): Released all slaves [ 682.819890][ T4196] bond4 (unregistering): Released all slaves [ 682.829554][ T4196] bond5 (unregistering): Released all slaves [ 682.844132][ T4196] bond6 (unregistering): Released all slaves [ 682.862237][ T4196] bond7 (unregistering): Released all slaves [ 682.876198][ T4196] bond8 (unregistering): Released all slaves [ 682.885936][ T4196] bond9 (unregistering): Released all slaves [ 682.895512][ T4196] bond10 (unregistering): Released all slaves [ 682.905649][ T4196] bond11 (unregistering): Released all slaves [ 682.939273][ T4196] bond12 (unregistering): Released all slaves [ 682.954377][ T4196] bond13 (unregistering): Released all slaves [ 682.964898][ T4196] bond14 (unregistering): Released all slaves [ 682.981190][ T4196] bond15 (unregistering): Released all slaves [ 683.000671][ T4196] bond16 (unregistering): Released all slaves [ 683.029149][ T4196] bond17 (unregistering): Released all slaves [ 683.147401][ T4196] bond18 (unregistering): Released all slaves [ 683.156756][ T4196] bond19 (unregistering): Released all slaves [ 683.219079][ T4196] tipc: Left network mode [ 683.481779][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.955911][T16152] loop2: detected capacity change from 0 to 8192 [ 683.977893][ T28] audit: type=1400 audit(1783525630.736:2572): avc: denied { accept } for pid=16139 comm="syz.2.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 684.105384][ T4196] hsr_slave_0: left promiscuous mode [ 684.114582][ T28] audit: type=1400 audit(1783525631.496:2573): avc: denied { write } for pid=16126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.184592][ T4196] hsr_slave_1: left promiscuous mode [ 684.207029][ T28] audit: type=1400 audit(1783525631.646:2574): avc: denied { write } for pid=16156 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 684.521771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 684.952278][ T4196] veth1_vlan: left promiscuous mode [ 684.960447][ T4196] veth0_vlan: left promiscuous mode [ 685.094950][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'. [ 685.103905][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2991'. [ 685.447139][ T4196] team0 (unregistering): Port device wg2 removed [ 685.467468][ T3018] 8021q: adding VLAN 0 to HW filter on device eth13 [ 685.475467][T16164] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2991'. [ 685.484381][T16164] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2991'. [ 685.561780][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 685.616585][T16176] loop0: detected capacity change from 0 to 764 [ 685.687429][ T28] audit: type=1400 audit(1783525633.146:2575): avc: denied { write } for pid=16174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.741731][ T28] audit: type=1400 audit(1783525633.186:2576): avc: denied { write } for pid=16188 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 685.805754][T16191] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2996'. [ 685.912397][T16194] netlink: 'syz.1.2994': attribute type 10 has an invalid length. [ 686.018025][T16200] netlink: 'syz.0.2999': attribute type 1 has an invalid length. [ 686.035838][T16201] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 686.048904][T16194] team0: Device wg2 is of different type [ 686.104218][T16200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2999'. [ 686.115581][T16092] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 686.126407][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 686.137267][T16200] 8021q: adding VLAN 0 to HW filter on device bond10 [ 686.163514][T16092] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 686.174316][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 686.207595][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 686.235072][T16092] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 686.277598][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 686.319583][T16092] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 686.571792][ T28] audit: type=1400 audit(1783525633.956:2577): avc: denied { write } for pid=16213 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.601827][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 686.609860][ T28] audit: type=1400 audit(1783525633.986:2578): avc: denied { write } for pid=16227 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.675855][T16092] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 686.692832][ T28] audit: type=1400 audit(1783525634.146:2579): avc: denied { write } for pid=16229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.874548][ T28] audit: type=1400 audit(1783525634.196:2580): avc: denied { write } for pid=16241 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 686.915764][ T4196] IPVS: stop unused estimator thread 0... [ 687.186735][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 687.195747][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3004'. [ 687.205942][T16251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3004'. [ 687.214843][T16251] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3004'. [ 687.305839][T16092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.318434][T16092] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.334073][T13750] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.341175][T13750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.355093][ T28] audit: type=1326 audit(1783525634.816:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16255 comm="syz.2.3006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12f95de59 code=0x0 [ 687.364683][T13750] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.387341][T13750] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.422534][T16092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 687.504220][T16254] loop3: detected capacity change from 0 to 764 [ 687.553261][T16092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.641827][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.744526][T16092] veth0_vlan: entered promiscuous mode [ 687.755865][T16092] veth1_vlan: entered promiscuous mode [ 687.899926][T16304] lo speed is unknown, defaulting to 1000 [ 688.681771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 688.833699][T16092] veth0_macvtap: entered promiscuous mode [ 688.856286][T16092] veth1_macvtap: entered promiscuous mode [ 688.909207][T16092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.000493][T16311] loop3: detected capacity change from 0 to 8192 [ 689.193583][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 689.193596][ T28] audit: type=1400 audit(1783525636.656:2585): avc: denied { watch watch_reads } for pid=16310 comm="syz.3.3017" path="/399/file0/control" dev="loop3" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 689.233695][T16092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.263194][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.272185][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.281643][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.335020][ T68] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.394229][T16328] loop2: detected capacity change from 0 to 164 [ 689.418084][T16328] rock: corrupted directory entry. extent=458780 out of volume (nzones=41) [ 689.455456][T16328] isofs_fill_super: root inode is not a directory. Corrupted media? [ 689.569730][T16333] loop5: detected capacity change from 0 to 764 [ 689.620630][T16335] 9pnet_fd: p9_fd_create_unix (16335): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 689.634265][T16337] 9pnet_fd: p9_fd_create_unix (16337): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 689.639178][T16335] netlink: 'syz.2.3024': attribute type 10 has an invalid length. [ 689.736110][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.810039][T16337] netlink: 'syz.0.3025': attribute type 10 has an invalid length. [ 689.917534][ T28] audit: type=1400 audit(1783525637.376:2586): avc: denied { create } for pid=16341 comm="syz.2.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 689.939642][ T28] audit: type=1400 audit(1783525637.376:2587): avc: denied { setopt } for pid=16341 comm="syz.2.3027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 689.961208][ T28] audit: type=1400 audit(1783525637.376:2588): avc: denied { ioctl } for pid=16341 comm="syz.2.3027" path="socket:[49491]" dev="sockfs" ino=49491 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 689.996335][ T28] audit: type=1400 audit(1783525637.376:2589): avc: denied { read } for pid=16343 comm="syz.5.3028" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 690.023667][T16352] loop2: detected capacity change from 0 to 1024 [ 690.036569][T16352] EXT4-fs (loop2): blocks per group (1048576) and clusters per group (32) inconsistent [ 690.127551][T16366] 9pnet_fd: p9_fd_create_unix (16366): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 690.148867][T16363] loop0: detected capacity change from 0 to 512 [ 690.202044][T16370] netlink: 'syz.5.3037': attribute type 10 has an invalid length. [ 690.265083][T16372] netlink: 'syz.2.3039': attribute type 1 has an invalid length. [ 690.287065][T16372] bond1: (slave geneve2): making interface the new active one [ 690.295583][T16372] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 690.306369][T16363] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 690.308047][T16372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3039'. [ 690.343455][ T49] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.346115][T16363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 690.351991][ T49] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.352096][ T49] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.352132][ T49] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 690.353382][T16372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 690.365919][T16363] ext4 filesystem being mounted at /481/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 690.454957][ T28] audit: type=1400 audit(1783525637.916:2590): avc: denied { bind } for pid=16380 comm="syz.1.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.474773][ T28] audit: type=1400 audit(1783525637.916:2591): avc: denied { listen } for pid=16380 comm="syz.1.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.494767][ T28] audit: type=1400 audit(1783525637.916:2592): avc: denied { getopt } for pid=16380 comm="syz.1.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.514731][ T28] audit: type=1400 audit(1783525637.916:2593): avc: denied { accept } for pid=16380 comm="syz.1.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.534732][ T28] audit: type=1400 audit(1783525637.916:2594): avc: denied { write } for pid=16380 comm="syz.1.3040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 690.584996][T16384] __nla_validate_parse: 1 callbacks suppressed [ 690.585057][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 690.600198][T16384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3041'. [ 690.619056][T16384] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3041'. [ 690.629626][T16384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 690.761797][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.937964][T16409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3051'. [ 690.962773][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.138991][T16423] loop2: detected capacity change from 0 to 4096 [ 691.163265][T16423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 691.199067][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.300180][T16438] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 691.346011][T16438] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3061'. [ 691.369003][T16438] 8021q: adding VLAN 0 to HW filter on device bond11 [ 691.472727][T16441] syzkaller0: entered promiscuous mode [ 691.478463][T16441] syzkaller0: entered allmulticast mode [ 691.498786][T16443] loop2: detected capacity change from 0 to 512 [ 691.521741][T16443] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 691.547968][T16443] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.3063: bad orphan inode 131083 [ 691.558540][T16443] loop2: lost filesystem error report for type 5 error -117 [ 691.559691][T16443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 691.624547][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3065'. [ 691.654393][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 691.714633][T16448] loop3: detected capacity change from 0 to 256 [ 691.801830][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 692.035203][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3072'. [ 692.084772][T16468] loop0: detected capacity change from 0 to 128 [ 692.092344][T16468] ext3: Unknown parameter 'smackfshat' [ 692.152347][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 692.152410][T16471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3070'. [ 692.152621][T16471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3070'. [ 692.157447][T16472] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16472 comm=syz.0.3073 [ 692.529241][T16477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=16477 comm=syz.3.3075 [ 692.578096][T16477] loop3: detected capacity change from 0 to 512 [ 692.590438][T16477] EXT4-fs: Ignoring removed i_version option [ 692.619013][T16477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.632475][T16477] ext4 filesystem being mounted at /404/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 692.660780][T16477] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 692.683618][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.837569][T16485] EXT4-fs: Ignoring removed bh option [ 692.841771][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 692.843576][T16485] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 692.883650][T16485] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce028, mo2=0000] [ 692.895265][T16485] System zones: 0-1, 3-12 [ 692.900509][T16485] EXT4-fs error (device loop3): ext4_map_blocks:833: inode #3: block 1: comm syz.3.3076: lblock 1 mapped to illegal pblock 1 (length 1) [ 692.935263][T16485] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 692.935453][T16485] EXT4-fs (loop3): Remounting filesystem read-only [ 692.944569][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 692.944586][ C0] EXT4-fs (loop3): initial error at time 1783525640: ext4_map_blocks:833: inode 3: block 1 [ 692.944644][ C0] EXT4-fs (loop3): last error at time 1783525640: ext4_map_blocks:833: inode 3: block 1 [ 693.014397][T16485] EXT4-fs (loop3): 1 orphan inode deleted [ 693.021495][T16485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.266686][T16506] netlink: 'syz.2.3082': attribute type 10 has an invalid length. [ 693.288532][T16506] team0: Device wg2 is of different type [ 693.299886][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.598382][T16526] netlink: 'syz.3.3086': attribute type 10 has an invalid length. [ 693.607966][T16526] wg2: entered promiscuous mode [ 693.612970][T16526] wg2: entered allmulticast mode [ 693.617996][T16526] team0: Device wg2 is of different type [ 693.731694][T16532] 9pnet_fd: p9_fd_create_unix (16532): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 693.853400][T16534] netlink: 'syz.1.3091': attribute type 10 has an invalid length. [ 693.881783][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.403095][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 694.403111][ T28] audit: type=1326 audit(1783525641.866:2610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16548 comm="syz.2.3097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12f95de59 code=0x0 [ 694.580867][T16558] set_capacity_and_notify: 1 callbacks suppressed [ 694.580894][T16558] loop0: detected capacity change from 0 to 764 [ 694.630403][T16563] lo speed is unknown, defaulting to 1000 [ 694.808216][T16566] netlink: 'syz.3.3103': attribute type 10 has an invalid length. [ 694.818894][T16566] team0: Device wg2 is of different type [ 694.901023][ T28] audit: type=1326 audit(1783525642.356:2611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16572 comm="syz.3.3105" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88634dde59 code=0x0 [ 694.926091][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 695.404591][T16590] netlink: 'syz.5.3109': attribute type 10 has an invalid length. [ 695.607638][T16593] __nla_validate_parse: 9 callbacks suppressed [ 695.607654][T16593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3110'. [ 695.636563][T16590] team0: Device wg2 is of different type [ 695.755219][ T28] audit: type=1326 audit(1783525643.206:2612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16596 comm="syz.0.3111" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62da34de59 code=0x0 [ 695.788662][T16600] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 695.798249][T16600] ref_ctr increment failed for inode: 0x259 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881046ae900 [ 695.825334][T16600] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 695.842715][T16600] ref_ctr decrement failed for inode: 0x259 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881046ae900 [ 695.861060][T16600] uprobe: syz.2.3112:16600 failed to unregister, leaking uprobe [ 695.961857][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 695.989044][T16605] loop2: detected capacity change from 0 to 764 [ 696.120065][ T28] audit: type=1326 audit(1783525643.576:2613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16607 comm="syz.0.3116" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62da34de59 code=0x0 [ 696.206473][T16611] netlink: 'syz.3.3115': attribute type 10 has an invalid length. [ 696.216616][T16611] team0: Device wg2 is of different type [ 696.324842][ T28] audit: type=1326 audit(1783525643.786:2614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16637 comm="syz.3.3123" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88634dde59 code=0x0 [ 696.450070][T16641] netlink: 'syz.0.3121': attribute type 10 has an invalid length. [ 696.462759][T16641] team0: Device wg2 is of different type [ 696.481589][T16648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3122'. [ 696.489316][T16647] netlink: 'syz.2.3125': attribute type 1 has an invalid length. [ 696.510273][T16644] netlink: 'syz.3.3124': attribute type 2 has an invalid length. [ 696.519942][T16644] netlink: 'syz.3.3124': attribute type 1 has an invalid length. [ 696.528762][T16644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3124'. [ 696.530216][T16647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3125'. [ 696.548566][T16647] 8021q: adding VLAN 0 to HW filter on device bond2 [ 696.579715][T16655] 9pnet_fd: p9_fd_create_unix (16655): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 696.642448][T16658] netlink: 'syz.1.3127': attribute type 10 has an invalid length. [ 696.805619][T16660] netlink: 'syz.3.3128': attribute type 10 has an invalid length. [ 696.815120][T16660] team0: Device wg2 is of different type [ 697.001825][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.038980][T16663] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3129'. [ 697.230116][T16672] loop2: detected capacity change from 0 to 256 [ 697.343647][T16670] syzkaller0: entered promiscuous mode [ 697.360022][T16675] loop5: detected capacity change from 0 to 512 [ 697.368091][T16670] syzkaller0: entered allmulticast mode [ 697.384110][T16675] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 697.420796][T16675] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3132: bad orphan inode 131083 [ 697.441752][T16675] loop5: lost filesystem error report for type 5 error -117 [ 697.442267][T16675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.495332][ T28] audit: type=1400 audit(1783525644.956:2615): avc: denied { write } for pid=16669 comm="syz.5.3132" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.618694][T16092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.707620][T16679] loop2: detected capacity change from 0 to 512 [ 697.748298][T16679] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 697.765138][T16681] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3136'. [ 697.801598][T16679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 697.833479][T16679] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 698.041796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.975283][T14117] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.040077][T16695] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3138'. [ 699.081752][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 699.387071][T16704] netlink: 'syz.1.3141': attribute type 10 has an invalid length. [ 699.396290][T16704] team0: Device wg2 is of different type [ 699.482785][T16709] loop3: detected capacity change from 0 to 764 [ 699.812182][T16723] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3146'. [ 699.858885][T16724] netlink: 'syz.2.3145': attribute type 10 has an invalid length. [ 699.875416][ T28] audit: type=1400 audit(1783525647.266:2616): avc: denied { read } for pid=16722 comm="syz.3.3146" name="event3" dev="devtmpfs" ino=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 699.901112][T16724] team0: Device wg2 is of different type [ 699.991215][T16721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3147'. [ 700.031564][T16732] 9pnet_fd: p9_fd_create_unix (16732): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 700.037347][T16732] netlink: 'syz.5.3150': attribute type 10 has an invalid length. [ 700.131367][T16730] loop0: detected capacity change from 0 to 512 [ 700.139951][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 700.145732][T16730] EXT4-fs: Ignoring removed nobh option [ 700.210590][T16728] loop3: detected capacity change from 0 to 512 [ 700.232757][T16728] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 700.254176][T16738] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3152'. [ 700.264677][T16738] loop5: detected capacity change from 0 to 128 [ 700.271327][T16738] ext2: Unknown parameter 'dont_hash' [ 700.275289][T16730] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.299533][T16730] ext4 filesystem being mounted at /502/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.360704][T16728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.374464][T16728] ext4 filesystem being mounted at /420/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 700.388618][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.630905][T16757] __nla_validate_parse: 1 callbacks suppressed [ 700.631052][T16757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3156'. [ 700.972349][T16760] loop2: detected capacity change from 0 to 764 [ 701.161878][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.173642][ T28] audit: type=1326 audit(1783525648.626:2617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16761 comm="syz.1.3158" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f924c3ade59 code=0x0 [ 701.525556][T16769] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3159'. [ 701.577545][T16771] netlink: 'syz.1.3161': attribute type 10 has an invalid length. [ 701.589441][T16771] team0: Device wg2 is of different type [ 701.640542][T16773] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3160'. [ 701.769754][T16777] netlink: 'syz.2.3162': attribute type 2 has an invalid length. [ 701.777774][T16777] netlink: 'syz.2.3162': attribute type 1 has an invalid length. [ 701.785855][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3162'. [ 701.846510][T16779] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3163'. [ 701.856660][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.856706][T16779] loop5: detected capacity change from 0 to 128 [ 701.882553][T16779] ext2: Unknown parameter 'dont_hash' [ 702.005780][T16783] loop2: detected capacity change from 0 to 764 [ 702.028321][T16783] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 702.059245][T16785] syzkaller0: entered promiscuous mode [ 702.079458][T16785] syzkaller0: entered allmulticast mode [ 702.201816][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.244543][T16792] loop3: detected capacity change from 0 to 512 [ 702.296963][T16792] EXT4-fs (loop3): 1 orphan inode deleted [ 702.303479][T16792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 702.304802][T16788] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: 1 [ 702.318027][T16794] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 702.318096][T16794] vhci_hcd vhci_hcd.0: invalid port number 255 [ 702.318888][T16794] netlink: 'syz.5.3170': attribute type 10 has an invalid length. [ 702.356599][T16794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.371172][T16801] blktrace: Concurrent blktraces are not allowed on loop10 [ 702.382349][T16794] team0: Port device bond0 added [ 702.388214][ T28] audit: type=1326 audit(1783525649.846:2618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16796 comm="syz.0.3172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62da34de59 code=0x0 [ 702.393157][T16801] loop5: detected capacity change from 0 to 512 [ 702.423759][T16788] ref_ctr increment failed for inode: 0x2af offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104738000 [ 702.425637][ T28] audit: type=1400 audit(1783525649.886:2619): avc: denied { mounton } for pid=16793 comm="syz.5.3170" path="/27/file0" dev="tmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 702.459518][T16801] EXT4-fs: old and new quota format mixing [ 702.472810][T16802] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22741, delta: -1 [ 702.490760][T16802] ref_ctr decrement failed for inode: 0x2af offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888104738000 [ 702.508701][T16802] uprobe: syz.2.3168:16802 failed to unregister, leaking uprobe [ 702.600906][T16812] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3176'. [ 702.618455][T16812] loop2: detected capacity change from 0 to 128 [ 702.627419][T16812] ext2: Unknown parameter 'dont_hash' [ 702.637381][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 702.710875][T16808] loop0: detected capacity change from 0 to 512 [ 702.753273][T16808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 702.801601][T16808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 702.901682][T16808] ext4 filesystem being mounted at /505/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 703.241765][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.926627][ T28] audit: type=1326 audit(1783525651.386:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16830 comm="syz.3.3185" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88634dde59 code=0x0 [ 704.281828][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.958687][ T28] audit: type=1400 audit(1783525651.656:2621): avc: denied { setopt } for pid=16824 comm="syz.5.3183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 704.994323][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.321748][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 705.393745][T16843] loop5: detected capacity change from 0 to 512 [ 705.408655][T16843] EXT4-fs: Ignoring removed mblk_io_submit option [ 705.655353][T16845] loop3: detected capacity change from 0 to 4096 [ 705.683583][T16843] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 705.695825][T16843] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 705.704146][T16843] EXT4-fs (loop5): orphan cleanup on readonly fs [ 705.712855][T16843] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3183: Invalid block bitmap block 0 in block_group 0 [ 705.726743][T16843] loop5: lost filesystem error report for type 5 error -117 [ 705.727817][T16843] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3183: Invalid block bitmap block 0 in block_group 0 [ 705.735484][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 705.735513][ C1] EXT4-fs (loop5): last error at time 1783525653: ext4_read_block_bitmap_nowait:483 [ 705.767814][T16843] loop5: lost filesystem error report for type 5 error -117 [ 705.768741][T16843] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.3183: Invalid block bitmap block 0 in block_group 0 [ 705.790599][T16843] loop5: lost filesystem error report for type 5 error -117 [ 705.799503][T16843] Quota error (device loop5): write_blk: dquota write failed [ 705.815092][T16843] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 705.825312][T16843] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.3183: Failed to acquire dquot type 1 [ 705.837074][T16843] loop5: lost filesystem error report for type 5 error -28 [ 705.838700][T16843] EXT4-fs (loop5): 1 orphan inode deleted [ 705.852476][ T4196] Quota error (device loop5): do_check_range: Getting block 0 out of range 1-5 [ 705.877344][ T4196] EXT4-fs error (device loop5): ext4_release_dquot:7077: comm kworker/u8:10: Failed to release dquot type 1 [ 705.897747][ T4196] loop5: lost filesystem error report for type 5 error -117 [ 705.898601][T16843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 705.931925][T16852] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 705.972687][T16856] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3191'. [ 705.995281][T16856] loop0: detected capacity change from 0 to 128 [ 705.997678][T16845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 706.012067][T16856] ext2: Unknown parameter 'dont_hash' [ 706.097620][ T28] audit: type=1400 audit(1783525653.546:2622): avc: denied { map } for pid=16853 comm="syz.1.3190" path="socket:[50783]" dev="sockfs" ino=50783 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 706.361764][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 706.376159][T16092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.381886][ T28] audit: type=1400 audit(1783525653.836:2623): avc: denied { write } for pid=16844 comm="syz.3.3186" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 706.485528][T16869] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8) [ 706.492163][T16869] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 706.511080][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.534521][T16876] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(11) [ 706.538200][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.541253][T16876] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 706.546723][T16876] vhci_hcd vhci_hcd.0: Device attached [ 706.556031][T16869] vhci_hcd vhci_hcd.0: Device attached [ 706.593890][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.603773][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.616112][T16874] vhci_hcd: connection closed [ 706.616246][T16877] vhci_hcd: connection closed [ 706.621520][ T49] vhci_hcd vhci_hcd.5: stop threads [ 706.646264][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.656235][ T49] vhci_hcd vhci_hcd.5: release socket [ 706.663108][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.676518][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 706.683596][ T49] vhci_hcd vhci_hcd.5: stop threads [ 706.689106][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.698666][ T49] vhci_hcd vhci_hcd.5: release socket [ 706.704594][ T49] vhci_hcd vhci_hcd.5: disconnect device [ 706.710712][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.721345][T16872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3195'. [ 706.731745][ T4846] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 706.798347][T16881] syzkaller0: entered promiscuous mode [ 706.812854][T16881] syzkaller0: entered allmulticast mode [ 706.855916][T16891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 706.889865][T16880] loop0: detected capacity change from 0 to 512 [ 706.930742][T16880] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 706.955291][T16880] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.3196: bad orphan inode 131083 [ 706.973787][T16880] loop0: lost filesystem error report for type 5 error -117 [ 706.978937][T16880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 707.030004][ T28] audit: type=1400 audit(1783525654.486:2624): avc: denied { write } for pid=16844 comm="syz.3.3186" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 707.065117][ T28] audit: type=1400 audit(1783525654.496:2625): avc: denied { write } for pid=16878 comm="syz.0.3196" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 707.145935][ T7949] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.401785][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.790246][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.983982][T16902] loop5: detected capacity change from 0 to 128 [ 707.994721][T16902] ext2: Unknown parameter 'dont_hash' [ 708.195701][ T28] audit: type=1400 audit(1783525655.646:2626): avc: denied { read } for pid=16909 comm="syz.5.3205" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 708.262751][T16914] netlink: 'syz.0.3206': attribute type 1 has an invalid length. [ 708.318206][T16914] 8021q: adding VLAN 0 to HW filter on device bond12 [ 708.326232][ T28] audit: type=1400 audit(1783525655.786:2627): avc: denied { write } for pid=16915 comm="syz.5.3207" path="socket:[51757]" dev="sockfs" ino=51757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 708.441763][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 708.608334][T16925] loop5: detected capacity change from 0 to 512 [ 708.642798][T16925] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 708.715274][T16925] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3210: bad orphan inode 131083 [ 708.734674][T16924] syzkaller0: entered promiscuous mode [ 708.740794][T16924] syzkaller0: entered allmulticast mode [ 708.750637][T16925] loop5: lost filesystem error report for type 5 error -117 [ 708.751189][T16925] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 708.830736][T16931] syzkaller0: entered promiscuous mode [ 708.836555][T16931] syzkaller0: entered allmulticast mode [ 708.848905][T16931] loop3: detected capacity change from 0 to 512 [ 708.851921][T16928] futex_wake_op: syz.1.3211 tries to shift op by -1; fix this program [ 708.879234][T16931] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 708.889231][T16931] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 708.902035][T16092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 708.958843][T16938] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 709.259113][T16961] xt_SECMARK: invalid mode: 3 [ 709.481780][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.246332][T16966] netlink: 'syz.2.3225': attribute type 1 has an invalid length. [ 710.306507][T16972] 8021q: adding VLAN 0 to HW filter on device bond3 [ 710.454083][T16970] syzkaller0: entered promiscuous mode [ 710.461182][T16970] syzkaller0: entered allmulticast mode [ 710.521754][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 710.595956][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 710.595972][ T28] audit: type=1326 audit(1783525658.056:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16982 comm="syz.0.3231" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62da34de59 code=0x0 [ 711.229167][T16996] syzkaller0: entered promiscuous mode [ 711.275598][T16996] syzkaller0: entered allmulticast mode [ 711.317921][ T28] audit: type=1400 audit(1783525658.766:2631): avc: denied { relabelfrom } for pid=16995 comm="syz.5.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 711.476324][ T28] audit: type=1400 audit(1783525658.766:2632): avc: denied { relabelto } for pid=16995 comm="syz.5.3235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 711.561770][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 711.998553][ T28] audit: type=1400 audit(1783525659.456:2633): avc: denied { append } for pid=17004 comm="syz.5.3237" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 712.186323][T17005] loop5: detected capacity change from 0 to 512 [ 712.230778][T17005] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 712.280902][T17005] EXT4-fs (loop5): 1 truncate cleaned up [ 712.309435][T17005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 712.358131][T17013] ================================================================== [ 712.366252][T17013] BUG: KCSAN: data-race in mas_wr_store_entry / mtree_range_walk [ 712.373973][T17013] [ 712.376282][T17013] write to 0xffff888102835a10 of 8 bytes by task 17004 on cpu 1: [ 712.383981][T17013] mas_wr_store_entry+0x33c0/0x5a90 [ 712.389176][T17013] mas_store_prealloc+0x421/0x670 [ 712.394219][T17013] commit_merge+0x69f/0x720 [ 712.398715][T17013] vma_expand+0x2ce/0x430 [ 712.403037][T17013] vma_merge_new_range+0x295/0x310 [ 712.408140][T17013] mmap_region+0x109c/0x20c0 [ 712.412726][T17013] do_mmap+0x970/0xbc0 [ 712.416786][T17013] vm_mmap_pgoff+0x183/0x2d0 [ 712.421458][T17013] ksys_mmap_pgoff+0xc1/0x310 [ 712.426128][T17013] x64_sys_call+0x14df/0x3020 [ 712.430798][T17013] do_syscall_64+0x136/0x3c0 [ 712.435381][T17013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.441297][T17013] [ 712.443608][T17013] read to 0xffff888102835a10 of 8 bytes by task 17013 on cpu 0: [ 712.451223][T17013] mtree_range_walk+0x210/0x480 [ 712.456064][T17013] mas_walk+0x1ac/0x340 [ 712.460216][T17013] lock_vma_under_rcu+0xc9/0x210 [ 712.465156][T17013] do_user_addr_fault+0x237/0x1060 [ 712.470263][T17013] exc_page_fault+0x62/0xa0 [ 712.474762][T17013] asm_exc_page_fault+0x26/0x30 [ 712.479690][T17013] [ 712.482008][T17013] value changed: 0x00007fb611d81fff -> 0x00007fb611d60fff [ 712.489099][T17013] [ 712.491406][T17013] Reported by Kernel Concurrency Sanitizer on: [ 712.497546][T17013] CPU: 0 UID: 0 PID: 17013 Comm: syz.5.3237 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 712.508474][T17013] Tainted: [W]=WARN [ 712.512263][T17013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 712.522305][T17013] ================================================================== [ 712.601868][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 712.729044][T16092] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.641761][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 714.681788][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 715.721796][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 716.761824][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 717.801821][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 718.841780][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 719.881784][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 720.921775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 721.961775][ C1] IPVS: wrr: UDP 224.0.0.2:0 - no destination available