last executing test programs: 6m32.865709385s ago: executing program 0 (id=1): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x4c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr', 0x3) socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000300)={0x0, 0x0, 0x100, 0x0, 0x2}) fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/2, 0x214000, 0x800}, 0x20) keyctl$search(0xa, 0x0, &(0x7f0000000440)='.request_key_auth\x00', 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4) ioctl$sock_FIOGETOWN(r8, 0x8903, &(0x7f00000001c0)) 6m28.088807216s ago: executing program 0 (id=10): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000240)='./file0\x00', 0x4000, &(0x7f0000008700)=ANY=[], 0x3, 0x5b2, &(0x7f0000008d40)="$eJzs3U9vG8cZx/HfKlQks4BbtIURGLIzsVtALhRmScUy1Jy2y6E0CckldleJdQqMmAoEU2lgtUCtS+tL2gLti8i1916L3nvt2wiaU9Ebi12SEiX+sy3ZlI3vh7B3NPvszOyS4KMVubMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADywqrvlz3VXXPnvpksrMZRY7RaBalX6LtzajGlX8nL/ml5We/0qt756cnqa9l/t7TS+2lFy9liWUc/uPajj35SWBhsP2XAr8Thk6NHDzqd9uN5D2ROtmzTJZFrBFvWuCQym1ckbdcSU3N1m+wmqW2YMLZBGsVmNbxjypub68aWdqOd5lY1qNtB5b33K76/YT4utWwQJ1Hzg49LSbjt6nXX3MpjstVZzL3shfiJS01qg4Yxe/ud9vqsQWZB5WcJqswKqviVSrlcqZQ37m7evef7hZEK/4Qn3/c1EjH/Fy3m64LfwYEXt9DP/6rLFQaVZswjVFWxIjXGrh3J/z//wE7tdzj/51m+q5Xs94But9uVdF15/r/ZC745Kf9PGMuUx+Kk/Xuux9uDNg71REd6pAfqqKO2Hp/ErF1IT5f8sSWrppwSRXJqKMhrTL/GaFMb2pCvz7WtmhIZ1eRUl1WiXSVKZfNXVKhYSwqUKlIso1WFuiOjsrpLm1qXkVVJu4q0o6a2VFWQt7Kn/fy4r08ZYxa0lAWVpwR9NnhhVqYEPVf+zw1v8i/yP8j/uEy6g/x/1lvzGA0AAAAAAHgZvPyv79n5/6JuSIueaq5u/XkPCwAAAAAAXKD8k/+VbJF/M+6GPM7/AQAAAAB403j5NXaepKLe7ZUG11T1/wjQ/eG8xwgAAAAAAM4n//z/ZrYoZqV35Z09/wcAAAAAAK+7P02aY/+fUrc/LeCS94//KI4Xvaet+z/zDoKsLjjoTxA4Mk9gWrvuXe03ki82Cv2fQrvi9We/PJ4E87v+Ym/WXP9eNoArks4xAP1F7/Vi3nvYWz4crOn1Uqy5ui2FUf2jsoLg6kJq76e//Wr/d8p3/8/NxlXv+739Trv0xa87D/OD8TRr5elB/0iNzKM4ZSy/0Y1ezI3xe7yYX4jR77foKevXH34CFnqbL0zsUzrb5ze61Yu5VTwOH97/5azPcmnS3vdGsSTpXHv+jW73Ym6v3u4tTj8Ly7XBPk0ZRbsyfPxnHosXGYWr2/Vpx2Jpv9NeP+coAGBe9qZnodxbpxP/C7zLPVt2P+evFypotRezej1/Yy1cH/OO7s/Ibv0cezq7LR93XxiMovv7CaP428g9kI6yVsbk2Kzfvx73W877/Tbb4NuJWTWpVzwtf/3fbvfga107fHL0/v7Bgy/bX7a/qlTWN/wPff9uRYv5bvQX5B4AwBiz77EzM8L7cMZZ9Y+Pv1JQ0hfS/7rdh1rLrzbIv3EwttVivs33+dcQ1s6etRbPnLUft1/W2oyzupPYynPErr+CZwIAgFfn1ow8PDn/e4O7+HlrM867i0NfKVwbPjt+OytMzuUAAODlsPF3XjH9oxfHrvV5eXOzHKTb1sRR+ImJXXXLGtdMbRxuB80ta1pxlEZhVM8Kn7qqTUyy02pFcWpqUWxaUeLu53d+N/1bvye2ETRTFyatug0Sa8KomQZhaqouCU1r51d1l2zbON84adnQ1VwYpC5qmiTaiUNbMiaxdijQVW0zdTWXFZumFbtGEO+aT6P6TsOaqk3C2LXSqNfgoC/XrEVxI2+2NO+DDQDAJXH45OjRg06n/fhQC1Kn0/YKxzUXVZj3PgIAgNPI0gAAAAAAAAAAAAAAAAAAAAAAXH4XdpHfG1VYehktf6bztfOLX45bdUXS9M3/XZSGa7rdZ+104TI8F6cKg0mnp8T8fcwqSX+Y/+Bfr8K4d4uR+agBvMb+HwAA//9nZFB8") syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000700)='./file2\x00', 0x100004e, &(0x7f0000000740)={[{@resgid}]}, 0x3, 0x53e, &(0x7f00000001c0)="$eJzs3dFrLFcZAPBvJtmb5N7UpOqDFqzFVm6qdpM03jb4UBXEt4JS8fW6JpsQssmWZNPehGJT/AMEES34ok++CP4BgvTFdxEK+i4qitRbfVBoOzK7sybZu5uk3N0dSH4/OHfnzMzO953duyfn7Aw7AVxbT0TEQkRMRMTTETFXrE+LEsedku/37v3X1vKSRJa99E4SSbGue6yp4vFW8bQonv/d5MG4+4dH27VGo75X1BdbO8l7WXb0zNZObbO+Wd9dWVl+bvX51TurS0Np53xEvPC1v/74B7/4+gu/+cKrf7r794Xv5Wn9N8tej552DFOn6ZWYPrVuMiL2RhGsJJPtFnbcKTkXAADOl4/3PxoRn2mP/+dioj2aAwAAAK6S7Muz8V4SkQEAAABXVhoRs5Gk1eJ639lI02q1cw3vx+Nm2mjutz6/0TzYXc+3RcxHJd3YatSXimsH5qOS5PXl4hrbbv3ZnvpKRDwaET+am2nXq2vNxnrZX34AAADANXGrZ/7/77nO/L/tuOTkAAAAgOGZLzsBAAAAYOTM/wEAAODqM/8HAACAK+0bL76Yl6x7/+v1Vw4PtpuvPLNe39+u7hysVdeaey9XN5vNzUa9uja9c9HxGs3my1+M3YN7i636fmtx//Do7k7zYLd1d+vMLbABAACAMXr002/9MYmI4y/NtEvuRrGtEpFNnN55sowMgVFJP8zOfxldHsD4nf77PlNiHsD4GdLD9VUpOwGgdMkF2zsX7/QZLfxuNPkAAADDd/uTg8//v7NRamrAiBXn/5OL5v/A1TNxmZ2mRp8HMH6d838fZB1lZwOMU+W8EYBJAVx56aXP//dxcv7/gksJEx0KAACUbLZdkrRazANmI02r1YhH2rcFqCQbW436UkR8JCL+MFeZyuvL7WcmRvMAAAAAAAAAAAAAAAAAAAAAAAAAcElZlkQGAAAAXGkR6d+6d+a6PffUbO/3AzeS/8y1HyPi1Z++9JN7tVZrbzlf/8//r2+9Wax/toxvMAAAAIBe3Xl6dx4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP07v3X1rplnHH/8dWImI+YOZVHZ2kyptuP01GJiJv/SmLy1POSiJgYQvzjNyLiE/3an+RpxXyRxZn4NyLSOMn5oeP3ff3PiR+d+LeGEB+us7fy/ucr/T5/aTzRfuz/+ZssysPq9n/94nf7v4kB/d8jgw5aOVt97O1fLQ6M/0bEY5P9+59u/CQ/Xp/4T16yjd/51tHRoG3ZzyNu9+v/krOxFrud7dZObbO+Wd9dWVl+bvX51TurS4sbW4168W/fGD/81K8/OKm9/0D7b57T/7bbP+D1f+qcNk+dWn7/7Xv3P9ZZ7HlnohI/y7KFJ/u//22fezB+92/fZ4u98nr+GqZvfrtvLo//8vePD8ozb//6gPZPX9D+hXPaf9rT3/z+ny+5KwAwBvuHR9u1RqO+Z6HkhaQY8T7McbrfiIw+53zcWfYrVk8iie1aYyrObKqVn1hn4fXi3ag1up+2IR35t8V/lVEmP+6OCAAAGLmTQX/vlpMTMM4zAwAAAAAAAAAAAAAAAAAAwGhd+DNggzalEXHJnxPrjXlcTlMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM71vwAAAP//7pvFXQ==") r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') lseek(r2, 0x1, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000400c000000000c5db709f8e4dfba75355d3bdcf00f4bcce98e42fff4fc41ce50000000000000000468a453727ac0000000000000000fc8729dbbee0073b06a526e34bc9a45cbb93b3f2bc7edac1c43ded5748995784264b9527407ee9b9ddf6f014b3671bd0f5f0810f877578e1d5f8726cc8bacadb68f779a41ae712d4e1a3b7d4744154895df01d4395c8178df2c055b987963ee2c4a14c8cc8ba9b55b41ad7cf27606bff076e141ba09c3be1e41b10139afff7ce61ca8741f7542c5322c9f2ac1a6b185f6ab895"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r4 = socket(0xa, 0x5, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x90) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x4}, 0x8) sendto$inet6(r4, &(0x7f0000000680)="9f", 0x1, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5d}, 0x1c) sendmsg$unix(r0, &(0x7f0000000880)={&(0x7f0000000780)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$nl_route_sched(r0, 0x0, 0x0) 6m22.816799329s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x1004, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 6m17.967618072s ago: executing program 0 (id=25): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x2, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 6m17.312402276s ago: executing program 32 (id=25): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000008c0)=@filter={'filter\x00', 0xc, 0xff03, 0x260, 0xffffffff, 0x130, 0x130, 0x98, 0x98, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0x98, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @multicast1, 0xffffffff, 0xff, 'ipvlan1\x00', 'sit0\x00', {}, {}, 0x62, 0x1c6a0dc5b9630812, 0x30}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'ip6tnl0\x00', 'macsec0\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x43, 0x2, 0x0, 0x3}, 0x10) sendmsg$tipc(r2, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 6m15.622815172s ago: executing program 3 (id=28): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000180), 0xfffffca8) close(0x3) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x86) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) setgroups(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000180)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000bc0)='\xff\x00l\x1e\xa00x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0x6}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x4, 0x7fffffff, 0x7ff}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6314}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x8, 0x1, 0x8}, {0x9, 0x0, 0xfffb, 0x4, 0x8, 0x2}}}]}]}]}}]}, 0x5c}}, 0x24040084) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800483, &(0x7f0000000940), 0x0, 0x5c8, &(0x7f0000000980)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 6m13.876510739s ago: executing program 3 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x240}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x1) r6 = socket$kcm(0xa, 0x7, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) 6m9.684081419s ago: executing program 3 (id=36): semtimedop(0x0, 0x0, 0xfffffffffffffd39, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xf}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x0, 0x10000, 0xffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x8, 0x0, 0x100000001, 0x0, 0x0, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x0, 0xffffffffffffffff}, 0xfffffffe}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x2c000010) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) r2 = socket$kcm(0x10, 0xf, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008010) socket$inet6(0xa, 0x80001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x84, 0x0) io_getevents(0x0, 0x5, 0x5, &(0x7f0000000bc0)=[{}, {}, {}, {}, {}], 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x50) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) pread64(r3, 0x0, 0x0, 0x1000000300) connect$rxrpc(r3, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x227f41c9, @local, 0x46}}, 0x24) 6m9.018099503s ago: executing program 3 (id=37): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = perf_event_open(0x0, 0x0, 0x2, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="30000000700001002abd700001dcdf2507000000", @ANYRES32=r4, @ANYBLOB="180001"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfe, 0x0, 0x0}}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ffffffff0000000003000000181200", @ANYBLOB="0000000000000000b703000000080000850000001b000000b700"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_stats}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x4040850) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x2000000000000022, 0x0, 0x0) fsetxattr$security_ima(r5, 0x0, &(0x7f00000002c0)=@v2={0x5, 0x1, 0x6, 0x3}, 0x9, 0x2) r10 = socket(0x2, 0x80805, 0x0) getsockname$tipc(0xffffffffffffffff, &(0x7f0000000300), &(0x7f00000003c0)=0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000001c0)='tracefs\x00', 0x2200890, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r10, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x4ab, 0x0, 0x7, 0x8}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000240)={r11, 0x0, &(0x7f0000000200)}, &(0x7f0000000280)=0x10) 6m7.896446607s ago: executing program 3 (id=40): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 5m52.417565887s ago: executing program 33 (id=40): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xe, 0x0, &(0x7f0000000080)="04000000df000000428b4c6588f5", 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x5, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x48000) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x70bd26, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3m54.583895759s ago: executing program 5 (id=655): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80614, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0x2}, 0x8a92, 0x4, 0x0, 0x2, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000340)={0x2, 0x1, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000000000000007000000890b040a1c01027f00000100000000001c00000000000000000000000800"], 0x40}, 0x20000000) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r7, 0x0, 0x17, &(0x7f00000008c0)=';', 0x1) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r9}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000b40)={0x1, &(0x7f0000000b00)=[{0x60, 0x9, 0xd, 0xf40}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r10, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r6, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0xe, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20}, 0x1b) r11 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0xa8, 0x30, 0x1, 0x0, 0x0, {}, [{0x94, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x64, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x40, 0xfffffffffffffffe, 0x4, 0x9}}}, @TCA_IFE_METALST={0x1c, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0xa8}}, 0x0) dup(r11) r13 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') preadv(r13, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/195, 0xc3}], 0x1, 0x2001, 0x2) 3m54.395405933s ago: executing program 5 (id=660): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f00000000c0), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, &(0x7f0000000040)=0x1, 0x4) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x1080b3, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x1, 0x8001}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x20040084) socket$netlink(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 3m53.491509882s ago: executing program 5 (id=671): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x208, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1e7, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, {0x4}, @device_a, @device_b, @from_mac=@broadcast, {0xa, 0x81}}, 0x2, 0x4, @device_b, {0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x464c7537aea1ed08}, {0x48, 0x1}, {0x1, 0x1}, {0xb}, {0x1b, 0x1}, {0xc}, {0x2, 0x1}, {0x12, 0x1}]}, @val={0x2d, 0x1a, {0x4000, 0x1, 0x2, 0x0, {0x715, 0x7, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1}, 0x300, 0xaced}}, [{0xdd, 0x2a, "6baf1d6a60e174c3a9f510edc1c6b1980a9b4a40e0e9bdad16bcaf2f600efb45820772be6e8721bc48f8"}, {0xdd, 0x5e, "5938f6478043492d6c362594d48c49c03bfe8e739dd5e609b6825bbe024d696338cfca0937852ec8fcfc83d5a9ecfc2ae6783ca1677a2ffdf8ebba04585353c0f177140e68e5d986750aad600674ee0b7344449c9b6bb3c41890ac970312"}, {0xdd, 0x65, "f868a9e942dac745e5e0900f8ea0298fc8a51bf828dbf793d2919210479a5adfb25dfc8d0a37ebcc059ec591edc9a535867600bef79d5164a2b5d9c25cceb421582fc9f0156ce1f01e8c672b5efa798be83ede631e954de83b34f06fa347749a7ca0c79eb6"}, {0xdd, 0xa, "a4217085981ec4d03557"}, {0xdd, 0x92, "e724514bd9432057efc9f8e8ab5a122e2db2e2455a1e46d7a40a6526182c789cd929341335015dc215dc65011a721a820267a95e3f688762b7bc7b211de297924984d7eaf9b8af389eb4b5d97a8bf87d77a8a7baca135a1aa677b8e99c0efe0f34298b277304ea64c94e180e04204b0d651930eef3ffd56b4aa5ad44a617cbc9afcf5927f5fac12f8b9e956df7debd883b27"}]}}]}, 0x208}, 0x1, 0x0, 0x0, 0x4000084}, 0x40080) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m53.372264075s ago: executing program 5 (id=674): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, 0x0, r1) r2 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0x0, r3, 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000340), 0x8, &(0x7f00000003c0)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in=@loopback, 0x2, 0x4}]}]}, 0xfc}}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x4, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3a}, 0x0, 0x0, 0x0, 0x2, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}, {@in=@private=0xa010101, @in6=@empty, @in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x34}, 0x6c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@grpid}]}, 0x3, 0x56c, &(0x7f0000000a80)="$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") statx(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2000, 0xffff4a9c0080ffff, &(0x7f0000000240)) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, r10, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048000) r11 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$GTP_CMD_GETPDP(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r10, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r11}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c4}, 0x40) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r5, 0x8983, &(0x7f0000000200)={0x8, 'vcan0\x00', {'ip6gretap0\x00'}, 0x1}) r13 = dup(r5) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd017111fffe80000000000000000000000000000fff0200000000000000000000000000018600907801"], 0x1ab) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m53.11911129s ago: executing program 5 (id=679): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) cachestat(r0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x6c, r2, 0x1, 0x0, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e26, 0x44, @loopback={0x5f0000000000002d, 0x2e}, 0x7f2a}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0xfffffff9, @mcast2, 0x5}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)=0x4) readv(r3, &(0x7f00000024c0)=[{&(0x7f00000010c0)=""/24, 0x18}, {0x0}], 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x7, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x8001}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008004}, 0x0) r5 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401c, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000140)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) r6 = open(&(0x7f0000000040)='./cgroup.net/cgroup.procs\x00', 0x16b442, 0xa9) write$binfmt_format(r6, &(0x7f0000000080)='-1\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) 3m52.712208759s ago: executing program 5 (id=683): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local}, "483d545dc3f6a10b"}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, 0x3, 0x100, 0x70bd27, 0x25dfdbfe, {0x5}, [@nested={0x16a, 0xb8, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xf7, 0x0, 0x0, @u64=0x7fffffffffffffff}, @generic="2e8104997de507d8394b2c4c37662e43dce20f10c00649c9facba24546f68c24d0a4ef45fc62d6e377a2ed1e3c7650ad07dbf84f204d822331ea929c7466a1cd0ad845b002", @generic="c73bcf77cfcef93651ea7a90a78e51e616aab46022239b87fe45699f1d33c47a27d59f6a9448eb3fd15790afc08ac30cee849b5dcb05ae32d368cc6fb3ec1706f4e7e6a96c7c2ceea20b9b0abacdb489c04247c2e2809826c5abf515a2374178cf0ff9a814ed6a202dd9759b021ebb50d60b709b227b705d738c9e3f5455d651b23bdf8129ee693241d5bfe5ff9bd18aa8794cc2972042a7fb0a4b7df2fdf535381dc0d60402c3c9d5cade5c9bfe637c1fef009e50ddcc9f99e78aee6030a72d6355d2c28fb7b67d1ff1d7370b39eb3190ef1168530b59b6d675459b421ab46c8f05bf4eb30f85c59aae58a7f1ea987668", @typed={0x12, 0x116, 0x0, 0x0, @str='+\\.&\'$\\&]):$+\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 3m51.71779307s ago: executing program 34 (id=683): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000340)) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_settime(0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000200)) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x300, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0xe0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3, 0x89, 0x0, @private, @local}, "483d545dc3f6a10b"}}}}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r1 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x180, 0x3, 0x100, 0x70bd27, 0x25dfdbfe, {0x5}, [@nested={0x16a, 0xb8, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x46, 0x0, 0x0, @fd=r1}, @typed={0xc, 0xf7, 0x0, 0x0, @u64=0x7fffffffffffffff}, @generic="2e8104997de507d8394b2c4c37662e43dce20f10c00649c9facba24546f68c24d0a4ef45fc62d6e377a2ed1e3c7650ad07dbf84f204d822331ea929c7466a1cd0ad845b002", @generic="c73bcf77cfcef93651ea7a90a78e51e616aab46022239b87fe45699f1d33c47a27d59f6a9448eb3fd15790afc08ac30cee849b5dcb05ae32d368cc6fb3ec1706f4e7e6a96c7c2ceea20b9b0abacdb489c04247c2e2809826c5abf515a2374178cf0ff9a814ed6a202dd9759b021ebb50d60b709b227b705d738c9e3f5455d651b23bdf8129ee693241d5bfe5ff9bd18aa8794cc2972042a7fb0a4b7df2fdf535381dc0d60402c3c9d5cade5c9bfe637c1fef009e50ddcc9f99e78aee6030a72d6355d2c28fb7b67d1ff1d7370b39eb3190ef1168530b59b6d675459b421ab46c8f05bf4eb30f85c59aae58a7f1ea987668", @typed={0x12, 0x116, 0x0, 0x0, @str='+\\.&\'$\\&]):$+\x00'}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x8000}, 0x4000001) 41.652451592s ago: executing program 1 (id=1845): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000000140)=0x2, 0x4) connect$rxrpc(r2, &(0x7f0000000080)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x24) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f00000001c0)="2f9f6c36eef46027ec136fffbe1ea2b69e21120548422a5bdba8b733ebd68be74c76fac13b1dc84fbe1dacf5534a03b3ef44c6dae7dd0749e4e35bf598f32a08d06373f55201a732a358b7d5d8f3777b1436e1f8cde2dba92d82965ebfd5d4dc42a479c37ae5a018693283e5ccd255906746cf5277237755e5a31809db79a5867c45c68114889745ca263aa659e05889fb855570617542928c27c51cdf2d245e8e97fee1d2726748889ccad5cbd8c9b6cd1c9e163e0208b959e5", 0xba) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) ftruncate(r0, 0xc17e) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x7, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x4}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 41.616905873s ago: executing program 1 (id=1846): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r4, 0x1) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r3) dup2(0xffffffffffffffff, r2) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000280), 0xd, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r7 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000022, 0x0, 0x0, 0x200000000003, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000149000/0x4000)=nil, 0x4000, 0x0, 0xc004032, r6, 0xff350000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) 40.647129064s ago: executing program 1 (id=1858): mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r0 = socket$key(0xf, 0x3, 0x2) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = syz_mount_image$vfat(&(0x7f0000000480), &(0x7f0000000180)='./file1\x00', 0x1008800, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x4, 0x272, &(0x7f0000001f40)="$eJzs3U9LW1kUAPDzYkRHGCLMgCgD8wb3QR1mrwwKMoGBkSxmViNjZAbjCApCu9B01XVX3bSbfoB2U+i20EXptl+gFIotdKNduSikxKRGY1L/lJhSf7+NB+8579773iMvWeTk7x9WV5bWNpb39nYiM5j0Z6fj4dh+EsORib6oqwQA8DXZr1Zjt1rX67UAAJfD8x8Arp7m8z858fxPKo33BN/dGx/txeIAgK7w+R8Arp6FP//6baZQmP1jNx2MWL25Wdws1v/Wx2eW478oRykmIhfvI6qH6vHt+cLsRFrzejiKq9uN+u3NYt/x+snIxfDJ+rn5wuxkWne8vj+GGvUvhqIUU5GL79vXT7Wr74+I8SPz5yMXz/+JtSjHUtRqm/Vbk2n66++FlvkHDvIAAAAAAAAAAAAAAAAAAAAAAKAb8pmD1jnVgTRt278nn08/ahmv1x/tD/RNm/5Ac4f9gVr7+2RjLNvbvQMAAAAAAAAAAAAAAAAAAMCXYuPa9ZXFcrm0/qng/2f3n5yWc8YgaczbNmcgIj5/ijMG3/706k7nnBvnOT8XCKY7Dz3+set7Px7UTvt5q57u/Dv688bIL51yItu1NWdOuSjZdtt5m+twazVuyMrF1/Pg8Jq+OzX51sJl3eF9rf8ZuTu9+Gjr5ZuzHqdXr0gAAAAAAAAAAAAAAAAAAHB1Nb/02+uVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvNH//v0OQRC3IRkTnnHJpPYnk4Hhthiq93iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwIAAD//7QZm14=") (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'bond0\x00'}) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) (rerun: 64) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syz_tun\x00', 0x0}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r6, r7}, 0x40) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e24, 0x5, @private2, 0x3ff}}}, &(0x7f00000008c0)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000b00)={r9, 0xf4, &(0x7f0000000a00)=[@in={0x2, 0x4e22, @private=0xa010101}, @in6={0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x34}, 0xb5}, @in6={0xa, 0x1, 0xfffffffd, @local, 0x6}, @in6={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x8}, @in={0x2, 0x4e23, @private=0xa010101}, @in6={0xa, 0x4e20, 0xf22, @dev={0xfe, 0x80, '\x00', 0x6}, 0xa}, @in={0x2, 0x4e22, @local}, @in6={0xa, 0x4e23, 0x2, @empty, 0xfffff000}, @in6={0xa, 0x4e24, 0xfffffff1, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x4}, @in6={0xa, 0x4e23, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}]}, &(0x7f0000000b40)=0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001b00)=ANY=[], 0x0) (async) r10 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x55) getdents64(r10, &(0x7f0000000f80)=""/4096, 0x1000) (async) sendmsg$nl_generic(r1, 0x0, 0x4000094) (async) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000980)=@filter={'filter\x00', 0xe, 0x2, 0x20c, [0x0, 0x2000000005c0, 0x2000000005f0, 0x200000000620], 0x0, &(0x7f0000000440), &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x284) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r5, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r8, {0xc}}, '\x00'}) ioctl$XFS_IOC_OPEN_BY_HANDLE(r11, 0xc038586b, &(0x7f0000000400)={r8, 0x0, 0x2001, &(0x7f00000002c0)={@_ha_fsid={[0x7, 0x9]}, {0x5, 0x0, 0x4, 0x3c87b766}}, 0x101, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x3}) (async, rerun: 64) sendmsg$key(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xa, 0x5, 0x2, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x40004) (async, rerun: 64) mlockall(0x7) 40.576172625s ago: executing program 1 (id=1861): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080030000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$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") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0800259c6646a425b65d399d6414b4a6ee07f06551bbf109c6b8fa9c6c3a9865b882adb67d46e8b65b6510e7966a920fcd469bce7c9e3366baeefba31314c00f628da1f381813f8b19e905ec97ca18a8f0386dfb384a01cb4b492f25912619518fee829b72c9f81861efdea84b6cc04c7450b097abf177e06aed38aab7e34aecf0d47d31994d2837f4da718a128575657a4cbe92fca8"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 40.230206543s ago: executing program 1 (id=1868): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x242, 0x161) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') write$P9_RLINK(r1, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000140)={r2, 0xfffffffffffffffd, 0x7f, 0x3889b588}) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) syz_usb_connect(0x3, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a5a2674995042fca33211f100400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffec7, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x6004c040) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="40c7cf7883838f84c684e5f213aad03240e5cf7bb4e7971deaf262825f3d3d4e86379491dae29479b97c11c7fb70af5c5b05a8939b29c7827b19", 0x3a}], 0x1, 0x3, 0x3d1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'sit0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x3}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x9, 0x2, 'sit0\x00'}}}, @NHA_OIF={0x8, 0x5, r9}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000400), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 39.948025609s ago: executing program 1 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x4000, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x2, 0xf00) 39.947899818s ago: executing program 35 (id=1871): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002a80)=[{{0x0, 0x0, 0x0, 0x4000, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000007"], 0x18}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x18}}], 0x2, 0xf00) 9.488422218s ago: executing program 6 (id=2113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0xff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000740), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40041}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, 0x0, 0x20) r0 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000eb3000/0x1000)=nil, 0x1000, 0x12) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$unix(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000022feeb797f959c751e48d29a4ef89af02bbf80af713d3af9461872206e0db4dc2c2e2fe7df654151b3240d4cdce52ff97795162eedb5abaad3d6cab96de49911818da6f2a001f7a973018db63429018b448e09efa4208a74ef46794c54f1900d09"], 0x18}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000f80)=@o_path={&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, 0x4000, r0}, 0x18) r3 = fcntl$dupfd(r0, 0x0, r0) recvmsg$kcm(r3, &(0x7f0000002900)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000ac0), 0xa, &(0x7f0000002d80)=""/4106, 0x1000}, 0x0) recvmsg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 8.532901758s ago: executing program 4 (id=2116): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2, 0x200000000000000}) 8.502773809s ago: executing program 4 (id=2118): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 8.45214947s ago: executing program 6 (id=2119): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x1) r6 = socket$kcm(0xa, 0x7, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 8.424585021s ago: executing program 4 (id=2120): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x1004, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 3.548522334s ago: executing program 2 (id=2144): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000004c0)='.\x00', &(0x7f0000000080), 0x218888, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) shutdown(r0, 0x2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}}, 0x1c) ioctl$RTC_AIE_ON(r2, 0x7001) (async) ioctl$RTC_AIE_ON(r2, 0x7001) 3.521279215s ago: executing program 8 (id=2145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="eb"], 0x1c}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20405, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x30}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003, 0x0, 0x3}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0), &(0x7f0000000340)) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) 3.272432391s ago: executing program 2 (id=2148): setreuid(0x0, 0xee01) r0 = io_uring_setup(0x2e9d, &(0x7f0000000300)={0x0, 0xa0b8, 0x2000, 0x0, 0x27b}) r1 = syz_io_uring_setup(0x2ac8, &(0x7f0000010400)={0x0, 0x9ce3, 0x40000, 0x1, 0xa3, 0x0, r0}, &(0x7f00000001c0), &(0x7f00000000c0), &(0x7f0000000180)) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000200)={0x1, 0x0, 0x9, 0x0, 0xffffffb5}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000002900)={0x53, 0xffffffffffffffff, 0x1000, 0x46, @buffer={0x0, 0x1000, &(0x7f0000000540)=""/4096}, &(0x7f0000001880)="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", &(0x7f0000000280), 0x1ff, 0xc, 0x3, &(0x7f00000028c0)}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="61157000000000006113480000000000bfa000000000000014000000ee0016055e03010000000000040500000001000069163e0000000000bf07000000000000260507000fff0720d706000020000000140600000ee60060bf500000000000002f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05002000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ace0600006e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc0da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d00c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932fb3bba54b3a6aa57f1ad2e99e0e67ab9ff16d20000009f0f53acbb40b4f8e2738270001562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000815266b2c9e1bfadc7498e9dda5d000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631822a11dc3c693962895496d4f6e9cc54db6c7205a6b26f92121ef53e553acdf42068fff496d2da7d6327f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710eec53f1b11cced7bc3c8da0c44d2fbf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db80300c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f8709d87b27f8a5d9121fdc058447b728f134f72062fc4b1ca0780b1a7af137ff7b4ff139604faf0453b65586f65c7943d56b52f06c870edf0c5d744b5272b44c23480b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61940aabc86b94f8cbde4d47060400e722a6a2af483ad0d3415ed0f9db009acaba9eaea93f811d434e00000000000000000000d154672fea96aedf346279ec00000000000000000000d535d41b0067f01e2e54b9154d876020b669640ead4ca44631fadf7c4ac39a1b331dbdcd52b36df021b731ef1f92330d347f88ced5c1aaadbcdd8d2257e3a9a7c7494fadf9be36f7a2334ee6e9446fa1fd486f85d672a77dc5bd21463994d49f12016305a1e394d292b66840fe32b40ad665d241a8b8a32b3100450c32832789aa8a096f41201b585cd76631c88cf958e9e9047f5af1730c5e83db12460a0768fd4b62be6c41eed307048bac8d1f7f164574241e06027654b248dcc38749eee0c1ee7c61b3f6411a559c3d45637b11e440ed5a99109b8e71d28c3d677af5f0499c6d3fc6a129775056958c9df824ebe5fa9fb306b24a8a8334910627d03efe69d4b61c4345f048c5da8aca16cea848fa77d2507c920a6bd654b00e07789382ed902c80deeff2fd5c78f42e4353e5360c3e55962efd1331e6736eaf4ee27736fa54803ee8ec1a15266ffcd8b30368740b584c2559e691e542cab3d49db327db62328f159d1e0900b3e23e84dedcd1377aa15dbeab7db181bd66980c3557c7d9f7377fcb6023accb5c368a121acf70e5f4c3f2a0ea07011c7149ea979cab2ee65cf7ffa29152b7a8fed89575e6e6fd77d4d9463d21775abac886ee6a1f2d7d8523840438a73d6307a87e2f525867fc3af7ab74520a773ae26bae74cdd405a211e8833e1ba523cde51d04a7ca6732"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) perf_event_open(0x0, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x0, @loopback, 0x7}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x24044004) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) 3.167605063s ago: executing program 8 (id=2149): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) fchown(r2, 0x0, 0x0) connect$inet(r2, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) unshare(0x20000400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x181341, 0x0) fallocate(r3, 0x0, 0x1, 0x2000404) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@empty, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000480)=0xffffffffffffffd2) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000d00)=@nat={'nat\x00', 0x19, 0x1, 0x21e, [0x200000002300, 0x0, 0x0, 0x2000000024be, 0x2000000024ee], 0x20, 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff01000000051100006b0000000016636169663000000000000000e3ff00007665746831000000000000000000000073797a5f74756e0039da0000f8ff0000000076657468310000000000000000001000aaaaaaaaaa3d000000ff00000180c2000003ff00ffffff00ae000000560100008e0100006f776e6572000000000000000000000000000000000000000000000000000000180000000000", @ANYRES32, @ANYRES32, @ANYRES32=0xee00, @ANYRES32, @ANYBLOB="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"]}, 0x296) socket$inet6_udp(0xa, 0x2, 0x0) setuid(r4) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$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") r6 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r6, 0x0, 0x0) lseek(r6, 0x6, 0x1) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) getdents(r6, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000080)=@flushsa={0x240, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfd, {0x3c}, [@user_kmaddress={0x2c, 0x13, {@in=@remote, @in6=@local, 0x0, 0xa}}, @algo_crypt={0x143, 0x2, {{'ctr(aes)\x00'}, 0x7d8, "a1db16e0eacbace18fa36e2830db0d00290fa47a1094b8487281d443deeb22afa2e5d218204baed945e42e28768e0d29b934f20f069104ea376a3a04d10b413b236a1fcf7b1842fa2567a003ab28c8902d34ae0e3ed4e3617e3e5d951f9778d7246faed46b17efb4ea67f718aef68b6b84d8b2f797c628c4c410db11cc688fd5c2304a3248e1d70616c8d570c15a60425a3f42ee2ada4b2be1a749af39e3000531764b45a40b3166d578a1a03f226acf671ebe9debf487abd0968c7725940a79e4adc2bf1bf471c43c6b9f6b4a0958c614c9c6881151a7060dcf71b991d2a73ca16681af665bf9e007e71c90227280dd156e94b16c014817133518"}}, @etimer_thresh={0x8, 0xc, 0x8000}, @policy={0xac, 0x7, {{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@multicast2, 0x4e21, 0x4a2, 0x4e22, 0x6, 0xa, 0xa0, 0x20, 0x3b, r1, r4}, {0x80000001, 0x0, 0x244000000000000, 0x1, 0x4, 0x101, 0x4, 0xa}, {0x49, 0x239, 0x6, 0x872d}, 0x2, 0x6e6bbb, 0x0, 0x0, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}]}, 0x240}, 0x1, 0x0, 0x0, 0x400c000}, 0x40840) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x64, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50083, 0x2c01}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @remote}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040}, 0x40850) 3.154785003s ago: executing program 2 (id=2150): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x1b3, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10eec8, 0x1224, 0x401, 0x3, 0x400, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x101c088, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x6, 0x2c3, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x8000, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000b02000/0x2000)=nil, 0x2000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000180)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x1, 0x0, 0x0, 0x1}, {0x2, 0x0, 0x1, 0x1}}], 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000400)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x8) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, 0x0, 0x0) 2.964296567s ago: executing program 7 (id=2152): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8800, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000180), 0xff, 0x517, &(0x7f0000001340)="$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") r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x80) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0x80000007, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x8020, 0x0, 0x0, 0x3, 0x800000000fff, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000003c0)=0x10000, 0x4) pselect6(0x40, &(0x7f0000000100)={0x6, 0x4, 0xfffffffffffffff8, 0x3f, 0xffffffffffffffff, 0x2d, 0xffffffff80000000, 0xf}, &(0x7f0000000140)={0x83, 0xffffffffffffffff, 0x7ff, 0x2, 0x2, 0x9, 0x3, 0x8000000}, &(0x7f00000001c0)={0x40000005, 0xd9e, 0x2, 0x3bc7, 0x400, 0x4, 0x4, 0x1ff}, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={[0xfffffffffffffffc]}, 0x8}) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x8000, 0x8000) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 1.786560842s ago: executing program 7 (id=2153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x3c, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 1.678233615s ago: executing program 7 (id=2154): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x1, 0x0, 0x0, 0x64}}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8800, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file2\x00', 0x0, &(0x7f0000000180), 0xff, 0x517, &(0x7f0000001340)="$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") r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)=0x1) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x80) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x6, 0x0, 0x80000007, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x9}, 0x8020, 0x0, 0x0, 0x3, 0x800000000fff, 0x8}, 0x0, 0x9, 0xffffffffffffffff, 0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000003c0)=0x10000, 0x4) pselect6(0x40, &(0x7f0000000100)={0x6, 0x4, 0xfffffffffffffff8, 0x3f, 0xffffffffffffffff, 0x2d, 0xffffffff80000000, 0xf}, &(0x7f0000000140)={0x83, 0xffffffffffffffff, 0x7ff, 0x2, 0x2, 0x9, 0x3, 0x8000000}, &(0x7f00000001c0)={0x40000005, 0xd9e, 0x2, 0x3bc7, 0x400, 0x4, 0x4, 0x1ff}, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={[0xfffffffffffffffc]}, 0x8}) writev(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) remap_file_pages(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x100000d, 0x8000, 0x8000) r7 = socket(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x25dfdbfc, {0x7a, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}]}}}]}, 0x3c}}, 0x0) 1.504293018s ago: executing program 8 (id=2155): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$HIDIOCGREPORTINFO(r0, 0xc00c4809, &(0x7f0000000080)={0x3, 0x200, 0x2}) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f80)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24008801}, 0x8000) (async) connect$pptp(r0, &(0x7f00000001c0)={0x18, 0x2, {0x1, @private=0xa010100}}, 0x1e) (async) recvmsg(r2, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x40000102) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) (async) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r7, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)='5x', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000600)="a7", 0x1}], 0x1}}], 0x3, 0x2401c444) sendmmsg$inet6(r7, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) (async) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="17fffffc2c0a57a98d", @ANYRES16=r4, @ANYBLOB="01002abd7000fedbdf250b00000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000080) 1.175052256s ago: executing program 2 (id=2156): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000000)={0xfe00, 0xd4, 0x3db1, 0x6c, 0x9, 0x4}) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB], 0x1c}}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20405, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x30}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003, 0x0, 0x3}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000000) 1.062882198s ago: executing program 4 (id=2157): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$eJzs3MtvG8UfAPDvOk6a9PFLfyU8GloIFETEI2nSBz1wAYHEAQQSHIo4BSetQt0GNUGiVQSBQxDigCpxRxyR+As4wQUBJySucEeVEMqlhZPR2rtp4tohDydO8ecjbTuzu+7Md2fHnp2xG0DHGkr/SCL2R8SvEdEfEcX6E4Zqf91cmi/9tTRfSqJSee3PJH1Z3FiaL2X/RHVL7avtqFSy/J4G5S6+GTFRLk9dzvKjcxffGZ29cvWp6YsT56fOT10aP3Pm5ImjPafHT7UkzjSuG4Pvzxw5/OIb114unb321o9fp/Xdnx3P42ilodrVbejRVhfWZgdWpJNiGyvChhzI+nt3tf/3R1f0LR/rjxc+amvlgG1VqVQqjT6fMwsV4D8siXbXAGiP/IM+ff7Ntx0aeuwKfzxbewBK476ZbbUjxShk53TXPd+2Um9EnF34+4t0i22ahwAAWOnbdPzzZKPxXyHuWXHe/7I1lIMR8f+IOBQRd0XEQETcHVE9996IuG+D5devkNw+/ilc31Rg65SO/57J1rZWj//y0V8c7MpyB6rxdyfnpstTx7NrMhzde9L82KqXrPbd8798Vr/v02yafWjF+C/d0vLzsWBWj+vFugm6yYm5iZYEn8b/YcRgsVH8yfI6YBIRhyNicJNlTD/+1ZFmx/49/jW0YJ2p8mXEY7X2X4i6+HNJ0/XJsadPj58a7Y3y1PHR/K643U8/L77arPwtxd8CafvvbXj/1+JPnxGT3ojZK1cvVNdrZzdexuJvH5eSJscGNnn/9ySvV9M92b73JubmLo9F9CQvpdm+VfvHb702z+fnp/EPH2vc/w/VHs+qV+L+iEhv4qMR8UBEPJi13UMR8XBEHFsj/h+ee+TtZseat/8as/ItlMY/uUb7p295aepW+2880XXh+2+alV9ZV/ufrKaGsz3ref9bbwW3cu0AAADgTlGofgc+KYwspwuFkZHad/gHYm+hPDM798S5mXcvTda+K38wugv5TFf/ivnQsWxuOM+P1+VPZPPGn3f1VfMjpZnyZLuDhw63r0n/T/3e1e7aAdvO77Wgc+n/0Ln0f+hc+j90Lv0fOlRP490f7HQ9gLbY+Od/77bUA9h5xv/QufR/6Fz6P3Skpr+NL2zpJ/93aqK4O6rRMNG3O6qRJ6KwK6rRusQrn9S6xG6pT54orvs/s9hkYk/DQ+1+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGiNfwIAAP//RwfmeQ==") (fail_nth: 5) 1.054813198s ago: executing program 6 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) (async) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async, rerun: 32) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async, rerun: 64) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@dev}}, {{@in6=@initdev}, 0x0, @in=@multicast1}}, &(0x7f0000000400)=0xe8) (rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r4, 0x0) setreuid(r4, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_delrule={0x1c, 0x21, 0x100, 0x70bd2c, 0x25dfdbfc, {0xa, 0x8c, 0xb4, 0x9, 0x4, 0x0, 0x0, 0x8, 0x16}, [@FRA_DST={0x0, 0x1, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 984.370079ms ago: executing program 4 (id=2159): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x44) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_open_pts(r3, 0x1) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r2) dup2(0xffffffffffffffff, r1) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000"], 0x50) set_mempolicy(0x3, &(0x7f0000000140)=0x3, 0x5) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) r5 = syz_open_dev$vcsn(&(0x7f0000000280), 0xd, 0x800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r6 = io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x2000008, 0xc1}) pselect6(0x40, &(0x7f0000000380)={0x101, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x8000000000008, 0x4, 0x0, 0x0, 0x1}, &(0x7f0000000000)={0x8000021000000022, 0x0, 0x0, 0x200000000003, 0x0, 0x401, 0x0, 0x3}, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000149000/0x4000)=nil, 0x4000, 0x0, 0xc004032, r5, 0xff350000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) syz_emit_ethernet(0x76, &(0x7f0000000480)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x40, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x6, {0xc, 0x6, "f6cd53", 0xffff, 0x3c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@srh={0x2f, 0x0, 0x4, 0x0, 0x3, 0x28, 0x2}], "13d86558da0a7f6b"}}}}}}}, 0x0) 950.4186ms ago: executing program 8 (id=2160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000005e0001", @ANYBLOB="eb"], 0x1c}}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0xa, 0x20405, 0x3, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x39}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}]}]}, 0x30}}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000001040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x20000003, 0x0, 0x3}}, 0x2e) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4000000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x3}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) getsockopt$sock_buf(r2, 0x1, 0x3d, &(0x7f00000002c0), &(0x7f0000000340)) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000001c0)={'batadv0\x00', &(0x7f0000000240)=@ethtool_gstrings={0x1b, 0x1}}) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="0bf600004e00075d"], 0xfe33) 880.007682ms ago: executing program 2 (id=2161): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x3fffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff80000000, 0x1000}, 0x100009, 0x0, 0x983, 0x7, 0xbe, 0x80, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_emit_ethernet(0x36, &(0x7f0000000780)={@local, @link_local, @void, {@ipv4={0x6000, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x81, 0x6, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0xfffc, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x44}}}}}}, 0x0) r3 = socket(0x23, 0x80805, 0x0) listen(r3, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x161040, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x14, &(0x7f00000001c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x6, 0xdc, &(0x7f00000002c0)=""/220, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0xe, 0x10, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000440)=[r7, r6, r6], &(0x7f0000000540)=[{0x3, 0x2, 0x0, 0xc}, {0x2, 0x5, 0xc, 0xa}, {0x1, 0x3, 0x1, 0x8}, {0x4, 0x2, 0x5, 0x5}, {0x5, 0x4, 0xf, 0xb}, {0x3, 0x1, 0x9, 0xc}, {0x3, 0x3, 0x3, 0x7}, {0x1, 0x4, 0xa, 0x1}]}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x7, &(0x7f00000000c0)=r8, 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000000000)=[{r3, 0x9081}], 0x1, 0x2) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x6}, 0x1c) r10 = fcntl$dupfd(r9, 0x406, r9) setsockopt$inet6_buf(r9, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) write$binfmt_elf64(r10, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xe3}}, './file0\x00'}) r11 = openat$full(0xffffffffffffff9c, &(0x7f00000005c0), 0x622000, 0x0) fcntl$dupfd(r11, 0x0, 0xffffffffffffffff) 836.244993ms ago: executing program 7 (id=2162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x1d}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 786.358104ms ago: executing program 7 (id=2163): socket$nl_route(0x10, 0x3, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffc, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f00000001c0), 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4000804, &(0x7f0000006300)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@grpid}, {@bh}, {@grpid}, {@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@init_itable}, {@usrjquota}, {@nolazytime}, {@norecovery}, {@resgid}]}, 0xfe, 0x4af, &(0x7f0000000940)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000004c0)={0x4, 0x80, 0x22, 0x0, 0xb, 0x6, 0x0, 0x9, 0xa16aa, 0xa, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xfff, 0x400}, 0x8084, 0xa2, 0xffffffff, 0x7, 0x7f, 0x9b9b, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x2, 0xffffffffffffffff, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) lremovexattr(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)=ANY=[@ANYBLOB]) socket$nl_route(0x10, 0x3, 0x0) fallocate(0xffffffffffffffff, 0x63, 0x0, 0x8001000f3) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x5, 0x54}, 0x2c) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x0, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 696.390135ms ago: executing program 2 (id=2164): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4, 0x240}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r4, 0x1) r6 = socket$kcm(0xa, 0x7, 0x0) close(r6) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000100)='X', 0x1, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, 0x0, 0x0) shutdown(r7, 0x1) recvmmsg(r7, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r8, &(0x7f0000000200), 0xfffffd9d) 695.855335ms ago: executing program 6 (id=2165): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x3, 0x80, 0x48, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4006, 0x0, @perf_bp={&(0x7f0000000000), 0x7}, 0x0, 0xe2b, 0x2000, 0x2, 0x10000000000003fe, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x40) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r1 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x9, 0xffffffffffffffff, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x8, 0x830b}, 0x110002, 0x200, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0), 0x12) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4c3904021d08007b490d4f0000f8d815001b001105142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8217cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x4000000000000000, 0x2668}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) r5 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) getsockname(r5, 0x0, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r4], 0x20}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f0000000f40)=""/4089, 0x0, 0xff9, 0xa, 0x32e}, 0x28) 418.714911ms ago: executing program 8 (id=2166): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x69a6eaab71d7421f}}}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) (fail_nth: 8) 339.157343ms ago: executing program 6 (id=2167): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) r4 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x4000080, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10040d, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xa, 0x0, 0x0, 0x7995}, 0x8416, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, 0x0) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca"], 0xdd12}, {&(0x7f0000000040)=ANY=[@ANYRES8], 0x10}], 0x2}, 0x20040041) 127.919817ms ago: executing program 4 (id=2168): sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x1004, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 51.568769ms ago: executing program 8 (id=2169): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0xff, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000740), &(0x7f0000001040)=0x8) sendmsg$nl_route(r2, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010825bd7000fedb0025240000"], 0x14}}, 0x20) r3 = socket$xdp(0x2c, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000eb3000/0x1000)=nil, 0x1000, 0x12) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x10, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000fc0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000022feeb797f959c751e48d29a4ef89af02bbf80af713d3af9461872206e0db4dc2c2e2fe7df654151b3240d4cdce52ff97795162eedb5abaad3d6cab96de49911818da6f2a001f7a973018db63429018b448e09efa4208a74ef46794c54f1900d09a2a5e5a3207f6586ad47818b1766b3c6c04703cfa74d732acfac7f2ba94c90e634"], 0x18}, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000600000000000000bf070000850000002100000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000850000002400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800002e0d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018110000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000c80)='GPL\x00', 0x4, 0x98, &(0x7f0000000cc0)=""/152, 0x41100, 0x8, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000dc0)={0x1, 0x1, 0x800, 0x4a}, 0x10, 0x8ff3, 0xffffffffffffffff, 0x5, &(0x7f0000000e00)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e40)=[{0x1, 0x3, 0xb, 0x8}, {0x3, 0x3, 0x9, 0xa}, {0x3, 0x2, 0xe, 0x3}, {0x8, 0x2, 0x3, 0xa}, {0x1, 0x3, 0x6, 0xc}], 0x10, 0x20000000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000f80)=@o_path={&(0x7f0000000340)='./file0\x00', r6, 0x4000, r3}, 0x18) fcntl$dupfd(r3, 0x0, r3) recvmsg(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x0) 50.930269ms ago: executing program 6 (id=2170): r0 = socket$kcm(0x10, 0x2, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002000004fe0000060000"], 0x1c}}, 0x0) syz_read_part_table(0x60d, &(0x7f0000002200)="$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") syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x50) r6 = syz_open_procfs(r1, &(0x7f0000000100)='mounts\x00') pread64(r6, &(0x7f0000000500)=""/15, 0xf, 0x40100000087) sendmsg$kcm(r0, 0x0, 0x0) 0s ago: executing program 7 (id=2171): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/sync_on_suspend', 0x242, 0x161) r0 = dup(0xffffffffffffffff) r1 = syz_open_procfs(0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r3 = openat$selinux_relabel(0xffffffffffffff9c, 0x0, 0x2, 0x0) recvmsg$kcm(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x202) r4 = syz_usb_connect(0x3, 0x3d, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="a5a2674995042fca33211f100400000004000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/18], 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xfffffffffffffec7, 0x2, {{0x3, 0xae0, 0x6361, 0xd03, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x6004c040) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x6c304000) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x3}, [@NHA_ENCAP={0x14, 0x8, 0x0, 0x1, @LWT_BPF_OUT={0x10, 0x2, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x9, 0x2, 'sit0\x00'}}}, @NHA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000400), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r3, @ANYBLOB="ddd3ecd4a254bd02985845d4db4ea76ff5f0d9c3cb3f755101bb13d4788bb4176a9d30", @ANYRESDEC, @ANYBLOB="70ce556f048ef4677c09f01cd35f41b13de631f0216be88010a870f027a47219b7173b8dc49386cbeca89252f7efc3e7321d3f1065148a21d9f034f0d8a9cd9e4219854b860805da42b340eccdb87ef4daeacb67c8ca2cb961b37c0bef32ad689c6ccaf3edbf358611c8c0ee188eea1b2173408d476a051e48c292a8bb3b", @ANYRES16=r4, @ANYRES8=r5, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x50) kernel console output (not intermixed with test programs): T9828] FAULT_INJECTION: forcing a failure. [ 352.385636][ T9828] name failslab, interval 1, probability 0, space 0, times 0 [ 352.400939][ T9828] CPU: 1 UID: 0 PID: 9828 Comm: syz.1.1662 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 352.400974][ T9828] Tainted: [W]=WARN [ 352.400980][ T9828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 352.400992][ T9828] Call Trace: [ 352.400998][ T9828] [ 352.401006][ T9828] __dump_stack+0x1d/0x30 [ 352.401032][ T9828] dump_stack_lvl+0x95/0xd0 [ 352.401084][ T9828] dump_stack+0x15/0x1b [ 352.401105][ T9828] should_fail_ex+0x25e/0x270 [ 352.401203][ T9828] should_failslab+0x8c/0xb0 [ 352.401225][ T9828] kmem_cache_alloc_noprof+0x7f/0x3c0 [ 352.401246][ T9828] ? skb_clone+0x151/0x1f0 [ 352.401277][ T9828] ? skb_clone+0x151/0x1f0 [ 352.401368][ T9828] skb_clone+0x151/0x1f0 [ 352.401394][ T9828] __netlink_deliver_tap+0x2be/0x510 [ 352.401420][ T9828] __netlink_sendskb+0xc3/0xd0 [ 352.401507][ T9828] netlink_dump+0x6f8/0x870 [ 352.401593][ T9828] __netlink_dump_start+0x435/0x520 [ 352.401619][ T9828] inet_diag_handler_cmd+0xf3/0x140 [ 352.401659][ T9828] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 352.401702][ T9828] ? __pfx_inet_diag_dump+0x10/0x10 [ 352.401733][ T9828] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 352.401757][ T9828] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 352.401865][ T9828] sock_diag_rcv_msg+0x288/0x2c0 [ 352.401884][ T9828] netlink_rcv_skb+0x11e/0x220 [ 352.401904][ T9828] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 352.401925][ T9828] sock_diag_rcv+0x1c/0x30 [ 352.401945][ T9828] netlink_unicast+0x5a7/0x680 [ 352.402032][ T9828] netlink_sendmsg+0x5be/0x6f0 [ 352.402056][ T9828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 352.402182][ T9828] sock_write_iter+0x2c5/0x2f0 [ 352.402205][ T9828] do_iter_readv_writev+0x4f6/0x5a0 [ 352.402230][ T9828] vfs_writev+0x2d1/0x8b0 [ 352.402253][ T9828] ? get_pid_task+0x92/0xc0 [ 352.402279][ T9828] do_writev+0xe9/0x210 [ 352.402323][ T9828] __x64_sys_writev+0x45/0x50 [ 352.402346][ T9828] x64_sys_call+0x1c0c/0x3020 [ 352.402424][ T9828] do_syscall_64+0x136/0x3c0 [ 352.402450][ T9828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.402474][ T9828] RIP: 0033:0x7f7dddbcde99 [ 352.402489][ T9828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.402570][ T9828] RSP: 002b:00007f7ddc627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 352.402593][ T9828] RAX: ffffffffffffffda RBX: 00007f7ddde55fa0 RCX: 00007f7dddbcde99 [ 352.402607][ T9828] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 352.402689][ T9828] RBP: 00007f7ddc627090 R08: 0000000000000000 R09: 0000000000000000 [ 352.402704][ T9828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.402717][ T9828] R13: 00007f7ddde56038 R14: 00007f7ddde55fa0 R15: 00007ffd300fec48 [ 352.402795][ T9828] [ 352.404964][ T9829] netlink: 'syz.4.1661': attribute type 27 has an invalid length. [ 352.684609][ T9829] netlink: 'syz.4.1661': attribute type 3 has an invalid length. [ 352.692466][ T9829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1661'. [ 352.772137][ T9837] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1664'. [ 352.798467][ T9842] 9pnet_fd: p9_fd_create_unix (9842): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 352.955356][ T28] audit: type=1326 audit(1784561921.917:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.076264][ T28] audit: type=1326 audit(1784561921.917:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.101734][ T28] audit: type=1326 audit(1784561921.917:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.133534][ T28] audit: type=1326 audit(1784561921.917:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.165389][ T28] audit: type=1326 audit(1784561921.917:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.198608][ T28] audit: type=1326 audit(1784561922.037:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.328440][ T28] audit: type=1326 audit(1784561922.037:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 353.354051][ T28] audit: type=1326 audit(1784561922.037:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9841 comm="syz.4.1667" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 355.291610][ T9870] netlink: 'syz.4.1676': attribute type 27 has an invalid length. [ 355.299831][ T9870] netlink: 'syz.4.1676': attribute type 3 has an invalid length. [ 355.307970][ T9870] __nla_validate_parse: 1 callbacks suppressed [ 355.307997][ T9870] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1676'. [ 356.681997][ T9879] xt_TCPMSS: Only works on TCP SYN packets [ 356.696648][ T9879] tipc: Enabling of bearer rejected, failed to enable media [ 357.376229][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 357.376288][ T28] audit: type=1400 audit(1784561926.337:836): avc: denied { sys_module } for pid=9878 comm="syz.4.1679" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 357.412530][ T9888] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.421481][ T9889] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1679'. [ 357.439019][ T9890] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1680'. [ 357.504466][ T9897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 357.539754][ T9899] loop1: detected capacity change from 0 to 512 [ 357.546653][ T9899] EXT4-fs: Ignoring removed bh option [ 357.561752][ T9899] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 357.588697][ T9899] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1684: iget: bad i_size value: 3298534883338 [ 357.601291][ T9899] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.601787][ T9899] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1684: couldn't read orphan inode 15 (err -117) [ 357.622780][ T9899] loop1: lost filesystem error report for type 5 error -117 [ 357.623423][ T9899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.643690][ T9905] netlink: 'syz.7.1686': attribute type 1 has an invalid length. [ 357.648985][ T9905] loop7: detected capacity change from 0 to 512 [ 357.676599][ T9899] EXT4-fs error (device loop1): ext4_lookup:1785: inode #15: comm syz.1.1684: iget: bad i_size value: 3298534883338 [ 357.703163][ T9905] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.1686: corrupted inode contents [ 357.715023][ T9905] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.715279][ T9905] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 357.732915][ T9905] loop7: lost filesystem error report for type 5 error -117 [ 357.733271][ T9905] EXT4-fs error (device loop7): ext4_do_update_inode:5742: inode #15: comm syz.7.1686: corrupted inode contents [ 357.746112][ C1] EXT4-fs (loop7): error count since last fsck: 2 [ 357.753007][ T9905] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.758940][ C1] EXT4-fs (loop7): initial error at time 1784561926: ext4_do_update_inode:5742 [ 357.762670][ T9905] EXT4-fs error (device loop7): ext4_evict_inode:315: inode #15: comm syz.7.1686: mark_inode_dirty error [ 357.768100][ C1] : inode 15 [ 357.776982][ T9905] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 357.777434][ T9905] EXT4-fs (loop7): 1 orphan inode deleted [ 357.788199][ C1] [ 357.791658][ T9905] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.800473][ C1] EXT4-fs (loop7): last error at time 1784561926: ext4_evict_inode:315: inode 15 [ 357.859332][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.884859][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.926218][ T28] audit: type=1400 audit(1784561926.887:837): avc: denied { nlmsg_read } for pid=9912 comm="syz.7.1688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 357.931665][ T9911] netlink: 'syz.6.1689': attribute type 27 has an invalid length. [ 357.955273][ T9911] netlink: 'syz.6.1689': attribute type 3 has an invalid length. [ 357.963292][ T9911] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1689'. [ 357.978973][ T9915] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1690'. [ 357.990717][ T9919] 9p: Bad value for 'rfdno' [ 358.062510][ T9915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9915 comm=syz.1.1690 [ 358.136552][ T9930] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1695'. [ 358.173542][ T28] audit: type=1400 audit(1784561927.127:838): avc: denied { create } for pid=9932 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 358.222783][ T28] audit: type=1400 audit(1784561927.137:839): avc: denied { write } for pid=9932 comm="syz.1.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 358.350092][ T9940] futex_wake_op: syz.1.1696 tries to shift op by -1; fix this program [ 358.360779][ T28] audit: type=1400 audit(1784561927.317:840): avc: denied { read } for pid=9932 comm="syz.1.1696" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 358.392496][ T9941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 358.402889][ T28] audit: type=1400 audit(1784561927.317:841): avc: denied { open } for pid=9932 comm="syz.1.1696" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 359.636075][ T9960] netlink: 'syz.6.1705': attribute type 27 has an invalid length. [ 359.655341][ T9960] netlink: 'syz.6.1705': attribute type 3 has an invalid length. [ 359.670825][ T9960] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1705'. [ 359.862511][ T9971] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1707'. [ 359.958478][ T9970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9970 comm=syz.2.1707 [ 359.986275][ T9980] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 360.048368][ T9983] loop2: detected capacity change from 0 to 512 [ 360.060709][ T9983] EXT4-fs: Ignoring removed bh option [ 360.067314][ T9983] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 360.146637][ T9983] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1710: iget: bad i_size value: 3298534883338 [ 360.161202][ T9983] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 360.162446][ T9983] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1710: couldn't read orphan inode 15 (err -117) [ 360.162853][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 360.162894][ C0] EXT4-fs (loop2): initial error at time 1784561929: ext4_orphan_get:1399: inode 15 [ 360.163045][ C0] EXT4-fs (loop2): last error at time 1784561929: ext4_orphan_get:1399: inode 15 [ 360.230643][ T9983] loop2: lost filesystem error report for type 5 error -117 [ 360.237328][ T9983] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.298418][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.515159][ T9990] __nla_validate_parse: 2 callbacks suppressed [ 360.515412][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 360.536455][ T28] audit: type=1400 audit(1784561929.497:842): avc: denied { read } for pid=9989 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 360.581653][ T28] audit: type=1400 audit(1784561929.537:843): avc: denied { accept } for pid=9989 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.604862][ T28] audit: type=1400 audit(1784561929.537:844): avc: denied { read } for pid=9989 comm="syz.4.1712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 360.720651][ T28] audit: type=1400 audit(1784561929.537:845): avc: denied { getattr } for pid=9989 comm="syz.4.1712" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=27476 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 361.168902][T10000] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1711'. [ 361.528660][T10006] loop6: detected capacity change from 0 to 2048 [ 361.584250][T10006] loop6: p1 < > p4 [ 361.613399][T10006] loop6: p4 size 8388608 extends beyond EOD, truncated [ 361.627089][T10010] netlink: 'syz.7.1720': attribute type 27 has an invalid length. [ 361.642956][T10006] netlink: 'syz.6.1716': attribute type 2 has an invalid length. [ 361.655240][T10006] 12: entered promiscuous mode [ 361.681404][T10010] netlink: 'syz.7.1720': attribute type 3 has an invalid length. [ 361.728245][T10010] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1720'. [ 362.139549][T10024] 9p: Bad value for 'rfdno' [ 362.261191][T10028] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.898436][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1726'. [ 362.932593][T10033] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.015074][T10034] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1727'. [ 363.270097][T10042] loop7: detected capacity change from 0 to 2048 [ 363.301530][T10041] netlink: 332 bytes leftover after parsing attributes in process `syz.1.1730'. [ 363.313339][T10042] loop7: p1 < > p4 [ 363.328924][T10042] loop7: p4 size 8388608 extends beyond EOD, truncated [ 363.345649][T10042] netlink: 'syz.7.1728': attribute type 2 has an invalid length. [ 363.358207][T10042] 6: entered promiscuous mode [ 363.847601][ T28] audit: type=1400 audit(1784561932.807:846): avc: denied { read append } for pid=10044 comm="syz.6.1731" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 364.956792][T10051] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1733'. [ 365.806384][T10061] loop7: detected capacity change from 0 to 512 [ 366.107667][T10061] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1733: inode has both inline data and extents flags [ 366.746503][T10061] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 366.749410][T10061] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1733: couldn't read orphan inode 15 (err -117) [ 366.758626][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 366.758649][ C0] EXT4-fs (loop7): initial error at time 1784561935: ext4_orphan_get:1399: inode 15 [ 366.758682][ C0] EXT4-fs (loop7): last error at time 1784561935: ext4_orphan_get:1399: inode 15 [ 366.970878][T10069] loop1: detected capacity change from 0 to 2048 [ 367.017750][T10061] loop7: lost filesystem error report for type 5 error -117 [ 367.019672][T10061] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.049175][ T28] audit: type=1400 audit(1784561936.007:847): avc: denied { write } for pid=10050 comm="syz.7.1733" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 367.901334][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.182859][T10070] netlink: 'syz.1.1736': attribute type 2 has an invalid length. [ 368.193267][T10070] 12: entered promiscuous mode [ 369.193405][T10069] loop1: p1 < > p4 [ 369.214223][T10069] loop1: p4 size 8388608 extends beyond EOD, truncated [ 369.268498][T10085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1743'. [ 369.307203][ T7913] udevd[7913]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 369.320215][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 369.481130][T10100] 9p: Bad value for 'rfdno' [ 369.571410][T10098] team0: Caught tx_queue_len zero misconfig [ 369.586960][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1750'. [ 369.596020][T10103] 8021q: VLANs not supported on ip6gre0 [ 369.667701][ T28] audit: type=1400 audit(1784561938.627:848): avc: denied { map } for pid=10097 comm=6B6672B66ABD58C8EFE17B03FE5D6B path="socket:[28357]" dev="sockfs" ino=28357 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 369.764786][T10113] warn_alloc: 1 callbacks suppressed [ 369.764813][T10113] syz.6.1753: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 369.796283][T10113] CPU: 1 UID: 0 PID: 10113 Comm: syz.6.1753 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 369.796317][T10113] Tainted: [W]=WARN [ 369.796327][T10113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 369.796394][T10113] Call Trace: [ 369.796400][T10113] [ 369.796410][T10113] __dump_stack+0x1d/0x30 [ 369.796440][T10113] dump_stack_lvl+0x95/0xd0 [ 369.796467][T10113] dump_stack+0x15/0x1b [ 369.796489][T10113] warn_alloc+0x145/0x1c0 [ 369.796576][T10113] ? __pfx_warn_alloc+0x10/0x10 [ 369.796602][T10113] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 369.796635][T10113] ? tick_program_event+0x79/0xc0 [ 369.796704][T10113] ? __hrtimer_rearm_deferred+0x571/0x650 [ 369.796811][T10113] ? __rcu_read_unlock+0x4e/0x70 [ 369.796850][T10113] ? should_fail_ex+0x30/0x270 [ 369.796880][T10113] ? xskq_create+0x36/0xe0 [ 369.796980][T10113] ? should_failslab+0x8c/0xb0 [ 369.797004][T10113] vmalloc_user_noprof+0x7d/0xb0 [ 369.797032][T10113] ? xskq_create+0x80/0xe0 [ 369.797148][T10113] xskq_create+0x80/0xe0 [ 369.797188][T10113] xsk_init_queue+0x70/0xb0 [ 369.797294][T10113] xsk_setsockopt+0x3ef/0x640 [ 369.797322][T10113] ? __pfx_xsk_setsockopt+0x10/0x10 [ 369.797350][T10113] __sys_setsockopt+0x184/0x200 [ 369.797422][T10113] __x64_sys_setsockopt+0x64/0x80 [ 369.797460][T10113] x64_sys_call+0x2327/0x3020 [ 369.797485][T10113] do_syscall_64+0x136/0x3c0 [ 369.797584][T10113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.797612][T10113] RIP: 0033:0x7f64fccfde99 [ 369.797633][T10113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 369.797712][T10113] RSP: 002b:00007f64fb757028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 369.797757][T10113] RAX: ffffffffffffffda RBX: 00007f64fcf85fa0 RCX: 00007f64fccfde99 [ 369.797775][T10113] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 369.797791][T10113] RBP: 00007f64fcd93eaf R08: 0000000000000004 R09: 0000000000000000 [ 369.797832][T10113] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.797845][T10113] R13: 00007f64fcf86038 R14: 00007f64fcf85fa0 R15: 00007ffcae83aa98 [ 369.797869][T10113] [ 369.798032][T10113] Mem-Info: [ 370.053208][T10113] active_anon:16062 inactive_anon:3 isolated_anon:0 [ 370.053208][T10113] active_file:1 inactive_file:25555 isolated_file:0 [ 370.053208][T10113] unevictable:0 dirty:393 writeback:0 [ 370.053208][T10113] slab_reclaimable:3593 slab_unreclaimable:20386 [ 370.053208][T10113] mapped:37659 shmem:7168 pagetables:3610 [ 370.053208][T10113] sec_pagetables:0 bounce:0 [ 370.053208][T10113] kernel_misc_reclaimable:0 [ 370.053208][T10113] free:1866467 free_pcp:1855 free_cma:0 [ 370.105397][T10113] Node 0 active_anon:70628kB inactive_anon:12kB active_file:4kB inactive_file:102220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:157016kB dirty:1572kB writeback:0kB shmem:35168kB kernel_stack:4480kB pagetables:14440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 370.174856][T10113] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 370.274144][T10117] loop2: detected capacity change from 0 to 2048 [ 370.283500][T10113] lowmem_reserve[]: 0 2878 7857 7857 [ 370.290197][T10113] Node 0 DMA32 free:2944148kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947672kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 370.325531][T10117] loop2: p1 < > p4 [ 370.341824][T10117] loop2: p4 size 8388608 extends beyond EOD, truncated [ 370.354911][T10117] netlink: 'syz.2.1754': attribute type 2 has an invalid length. [ 370.367472][T10117] 18: entered promiscuous mode [ 370.465845][T10113] lowmem_reserve[]: 0 0 4978 4978 [ 370.479543][ T2981] loop2: p1 < > p4 [ 370.503716][ T2981] loop2: p4 size 8388608 extends beyond EOD, truncated [ 370.521269][T10113] Node 0 Normal free:4494488kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72252kB inactive_anon:12kB active_file:4kB inactive_file:102220kB unevictable:0kB writepending:1688kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:8048kB local_pcp:5380kB free_cma:0kB [ 370.730600][T10113] lowmem_reserve[]: 0 0 0 0 [ 370.761374][T10113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 370.802050][T10113] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944148kB [ 370.852379][T10113] Node 0 Normal: 41*4kB (UE) 54*8kB (U) 104*16kB (UM) 143*32kB (UM) 169*64kB (M) 53*128kB (M) 35*256kB (UM) 17*512kB (UME) 10*1024kB (UME) 3*2048kB (UM) 1083*4096kB (UM) = 4494452kB [ 370.909578][T10113] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 370.939891][T10113] 34744 total pagecache pages [ 370.955167][T10113] 0 pages in swap cache [ 370.968218][T10113] Free swap = 124996kB [ 370.981788][T10113] Total swap = 124996kB [ 370.994859][T10113] 2097051 pages RAM [ 371.007843][T10113] 0 pages HighMem/MovableOnly [ 371.021418][T10113] 81734 pages reserved [ 371.947460][T10131] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1759'. [ 372.052009][T10137] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 372.192977][ T28] audit: type=1400 audit(1784561941.147:849): avc: denied { accept } for pid=10143 comm="syz.6.1765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 372.298466][T10144] loop6: detected capacity change from 0 to 512 [ 372.339791][T10144] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 372.360129][T10146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1766'. [ 372.381383][T10144] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 372.408525][T10144] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.1765: Corrupt directory, running e2fsck is recommended [ 372.629105][T10144] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2 [ 372.637308][T10151] loop2: detected capacity change from 0 to 1024 [ 372.646672][T10151] EXT4-fs: Ignoring removed bh option [ 372.672872][T10144] EXT4-fs error (device loop6): ext4_iget_extra_inode:5180: inode #15: comm syz.6.1765: corrupted in-inode xattr: invalid ea_ino [ 372.686196][T10144] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 372.686422][T10144] EXT4-fs (loop6): Remounting filesystem read-only [ 372.702604][T10144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.715148][T10144] SELinux: (dev loop6, type ext4) getxattr errno 117 [ 372.722317][T10144] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.751798][T10151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.773998][ T28] audit: type=1400 audit(1784561941.737:850): avc: denied { write } for pid=10150 comm="syz.2.1767" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 373.004390][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.039965][T10169] 9p: Bad value for 'rfdno' [ 373.151671][T10174] loop2: detected capacity change from 0 to 512 [ 373.175451][T10174] msdos: Bad value for 'uid' [ 373.182214][T10174] msdos: Bad value for 'uid' [ 373.660584][T10189] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1782'. [ 374.031822][T10189] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10189 comm=syz.2.1782 [ 374.080944][T10199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 374.250855][T10204] loop1: detected capacity change from 0 to 512 [ 374.271511][T10204] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1785: inode has both inline data and extents flags [ 374.300816][T10203] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1786'. [ 374.324332][T10204] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 374.325345][T10204] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1785: couldn't read orphan inode 15 (err -117) [ 374.342803][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 374.352200][T10204] loop1: lost filesystem error report for type 5 error -117 [ 374.352833][ C1] EXT4-fs (loop1): initial error at time 1784561943: ext4_orphan_get:1399: inode 15 [ 374.369514][ C1] EXT4-fs (loop1): last error at time 1784561943: ext4_orphan_get:1399: inode 15 [ 374.370217][T10204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.453236][ T28] audit: type=1400 audit(1784561943.357:851): avc: denied { write } for pid=10198 comm="syz.1.1785" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 374.716901][ T28] audit: type=1400 audit(1784561943.677:852): avc: denied { connect } for pid=10213 comm="syz.2.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.809279][ T28] audit: type=1400 audit(1784561943.727:853): avc: denied { write } for pid=10213 comm="syz.2.1790" path="socket:[28896]" dev="sockfs" ino=28896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.834777][ T28] audit: type=1400 audit(1784561943.727:854): avc: denied { ioctl } for pid=10213 comm="syz.2.1790" path="socket:[28896]" dev="sockfs" ino=28896 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 374.860015][ T28] audit: type=1400 audit(1784561943.727:855): avc: denied { read write } for pid=10213 comm="syz.2.1790" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.884666][ T28] audit: type=1400 audit(1784561943.727:856): avc: denied { open } for pid=10213 comm="syz.2.1790" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 374.909155][ T28] audit: type=1326 audit(1784561943.817:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.6.1791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fccfde99 code=0x7ffc0000 [ 374.934570][ T28] audit: type=1326 audit(1784561943.827:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.6.1791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fccfde99 code=0x7ffc0000 [ 374.959987][ T28] audit: type=1326 audit(1784561943.827:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.6.1791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fccfde99 code=0x7ffc0000 [ 374.985848][ T28] audit: type=1326 audit(1784561943.827:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.6.1791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f64fccfde99 code=0x7ffc0000 [ 375.012414][ T28] audit: type=1326 audit(1784561943.827:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10215 comm="syz.6.1791" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64fccfde99 code=0x7ffc0000 [ 375.041678][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.054266][T10218] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.205626][T10221] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1792'. [ 375.326006][T10223] loop1: detected capacity change from 0 to 2048 [ 375.435707][T10223] loop1: p1 < > p4 [ 375.440542][T10223] loop1: p4 size 8388608 extends beyond EOD, truncated [ 375.464170][T10223] netlink: 'syz.1.1793': attribute type 2 has an invalid length. [ 375.477018][T10223] 13: entered promiscuous mode [ 375.729123][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1794'. [ 376.099012][T10233] FAULT_INJECTION: forcing a failure. [ 376.099012][T10233] name failslab, interval 1, probability 0, space 0, times 0 [ 376.139745][T10233] CPU: 1 UID: 0 PID: 10233 Comm: syz.6.1796 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 376.139778][T10233] Tainted: [W]=WARN [ 376.139784][T10233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 376.139906][T10233] Call Trace: [ 376.139964][T10233] [ 376.139972][T10233] __dump_stack+0x1d/0x30 [ 376.139995][T10233] dump_stack_lvl+0x95/0xd0 [ 376.140017][T10233] dump_stack+0x15/0x1b [ 376.140119][T10233] should_fail_ex+0x25e/0x270 [ 376.140145][T10233] should_failslab+0x8c/0xb0 [ 376.140170][T10233] __kmalloc_noprof+0xd4/0x4a0 [ 376.140227][T10233] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 376.140259][T10233] ? genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 376.140410][T10233] genl_family_rcv_msg_attrs_parse+0x8c/0x1b0 [ 376.140443][T10233] genl_family_rcv_msg_doit+0x4b/0x1f0 [ 376.140484][T10233] ? selinux_capable+0x31/0x40 [ 376.140514][T10233] ? security_capable+0x7b/0x90 [ 376.140537][T10233] ? ns_capable+0x80/0xb0 [ 376.140576][T10233] genl_rcv_msg+0x42f/0x470 [ 376.140626][T10233] ? __pfx_wg_set_device_doit+0x10/0x10 [ 376.140659][T10233] netlink_rcv_skb+0x11e/0x220 [ 376.140691][T10233] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.140721][T10233] genl_rcv+0x28/0x40 [ 376.140783][T10233] netlink_unicast+0x5a7/0x680 [ 376.140804][T10233] netlink_sendmsg+0x5be/0x6f0 [ 376.140892][T10233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.140915][T10233] ____sys_sendmsg+0x532/0x580 [ 376.140993][T10233] ___sys_sendmsg+0x195/0x1e0 [ 376.141038][T10233] __x64_sys_sendmsg+0xd4/0x160 [ 376.141070][T10233] x64_sys_call+0x194c/0x3020 [ 376.141168][T10233] do_syscall_64+0x136/0x3c0 [ 376.141191][T10233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.141259][T10233] RIP: 0033:0x7f64fccfde99 [ 376.141277][T10233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.141298][T10233] RSP: 002b:00007f64fb757028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.141321][T10233] RAX: ffffffffffffffda RBX: 00007f64fcf85fa0 RCX: 00007f64fccfde99 [ 376.141336][T10233] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 376.141443][T10233] RBP: 00007f64fb757090 R08: 0000000000000000 R09: 0000000000000000 [ 376.141458][T10233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.141473][T10233] R13: 00007f64fcf86038 R14: 00007f64fcf85fa0 R15: 00007ffcae83aa98 [ 376.141494][T10233] [ 376.939274][T10241] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1799'. [ 376.972934][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1800'. [ 377.198884][T10268] 9p: Bad value for 'rfdno' [ 377.225368][T10270] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1807'. [ 377.349571][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1809'. [ 379.094344][T10293] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1815'. [ 379.122228][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1816'. [ 379.289414][T10301] loop7: detected capacity change from 0 to 512 [ 379.298835][T10301] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1816: inode has both inline data and extents flags [ 379.317216][T10301] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 379.317356][T10301] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1816: couldn't read orphan inode 15 (err -117) [ 379.326561][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 379.326586][ C0] EXT4-fs (loop7): initial error at time 1784561948: ext4_orphan_get:1399: inode 15 [ 379.326613][ C0] EXT4-fs (loop7): last error at time 1784561948: ext4_orphan_get:1399: inode 15 [ 379.372588][T10301] loop7: lost filesystem error report for type 5 error -117 [ 379.373294][T10301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.605683][T10306] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 379.962656][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.458522][T10331] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1827'. [ 380.537514][T10333] loop6: detected capacity change from 0 to 512 [ 380.554249][T10333] EXT4-fs: Ignoring removed bh option [ 380.564902][T10333] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 380.573754][T10333] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1828: iget: bad i_size value: 3298534883338 [ 380.586309][T10333] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 380.587127][T10333] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1828: couldn't read orphan inode 15 (err -117) [ 380.608057][T10333] loop6: lost filesystem error report for type 5 error -117 [ 380.608829][T10333] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.643540][ T4498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.769256][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1832'. [ 380.856823][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 380.905778][T10355] 9p: Bad value for 'rfdno' [ 380.960964][T10360] netlink: 'syz.1.1838': attribute type 30 has an invalid length. [ 381.017219][T10363] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1839'. [ 381.020614][T10364] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10364 comm=syz.1.1838 [ 381.049990][T10365] loop2: detected capacity change from 0 to 512 [ 381.062464][T10365] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1836: inode has both inline data and extents flags [ 381.083737][T10365] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 381.084632][T10365] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1836: couldn't read orphan inode 15 (err -117) [ 381.093812][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 381.093833][ C1] EXT4-fs (loop2): initial error at time 1784561950: ext4_orphan_get:1399: inode 15 [ 381.093867][ C1] EXT4-fs (loop2): last error at time 1784561950: ext4_orphan_get:1399: inode 15 [ 381.105980][T10370] loop1: detected capacity change from 0 to 1024 [ 381.113284][T10365] loop2: lost filesystem error report for type 5 error -117 [ 381.139989][T10370] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 381.141691][T10373] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1842'. [ 381.162757][T10370] EXT4-fs (loop1): orphan cleanup on readonly fs [ 381.174478][T10365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.188992][T10370] __quota_error: 59 callbacks suppressed [ 381.189009][T10370] Quota error (device loop1): v2_read_file_info: Free block number 131072 out of range (1, 6). [ 381.202776][ T28] audit: type=1326 audit(1784561950.157:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10366 comm="syz.7.1840" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57352cde99 code=0x0 [ 381.229951][ T28] audit: type=1400 audit(1784561950.167:922): avc: denied { write } for pid=10351 comm="syz.2.1836" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 381.234342][T10370] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 381.268595][T10370] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 381.275602][T10370] EXT4-fs error (device loop1): ext4_free_blocks:6718: comm syz.1.1841: Freeing blocks not in datazone - block = 0, count = 4096 [ 381.282828][T10373] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10373 comm=syz.4.1842 [ 381.289143][T10370] loop1: lost filesystem error report for type 5 error -117 [ 381.302027][T10370] EXT4-fs (loop1): 1 orphan inode deleted [ 381.315104][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 381.315137][ C1] EXT4-fs (loop1): initial error at time 1784561950: ext4_free_blocks:6718 [ 381.315161][ C1] EXT4-fs (loop1): last error at time 1784561950: ext4_free_blocks:6718 [ 381.338853][T10370] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 381.385714][T10383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1844'. [ 381.395976][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.405947][T10383] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1844'. [ 381.443758][ T28] audit: type=1400 audit(1784561950.407:923): avc: denied { setopt } for pid=10384 comm="syz.1.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 381.497674][T10388] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2570 sclass=netlink_tcpdiag_socket pid=10388 comm=syz.7.1840 [ 381.749175][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.811502][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1850'. [ 381.870971][ T28] audit: type=1400 audit(1784561950.827:924): avc: denied { getopt } for pid=10401 comm="syz.2.1852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 381.953842][T10408] netlink: 332 bytes leftover after parsing attributes in process `syz.7.1854'. [ 381.991501][T10408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10408 comm=syz.7.1854 [ 382.079401][T10418] netlink: 2 bytes leftover after parsing attributes in process `syz.7.1857'. [ 382.088628][T10418] FAULT_INJECTION: forcing a failure. [ 382.088628][T10418] name failslab, interval 1, probability 0, space 0, times 0 [ 382.101743][T10418] CPU: 1 UID: 0 PID: 10418 Comm: syz.7.1857 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 382.101828][T10418] Tainted: [W]=WARN [ 382.101836][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 382.101850][T10418] Call Trace: [ 382.101857][T10418] [ 382.101865][T10418] __dump_stack+0x1d/0x30 [ 382.101887][T10418] dump_stack_lvl+0x95/0xd0 [ 382.101912][T10418] dump_stack+0x15/0x1b [ 382.101934][T10418] should_fail_ex+0x25e/0x270 [ 382.101966][T10418] should_failslab+0x8c/0xb0 [ 382.102025][T10418] kmem_cache_alloc_lru_noprof+0x81/0x3d0 [ 382.102046][T10418] ? __d_alloc+0x34/0x320 [ 382.102072][T10418] ? __d_alloc+0x34/0x320 [ 382.102119][T10418] __d_alloc+0x34/0x320 [ 382.102214][T10418] d_alloc+0x2e/0x100 [ 382.102305][T10418] lookup_one_qstr_excl+0x95/0x240 [ 382.102380][T10418] start_dirop+0x3e/0x70 [ 382.102403][T10418] simple_start_creating+0xa2/0xd0 [ 382.102430][T10418] debugfs_start_creating+0xda/0x150 [ 382.102465][T10418] __debugfs_create_file+0x70/0x2b0 [ 382.102514][T10418] debugfs_create_file_full+0x3f/0x60 [ 382.102540][T10418] ? __pfx_veth_setup+0x10/0x10 [ 382.102616][T10418] ref_tracker_dir_debugfs+0x10e/0x220 [ 382.102656][T10418] alloc_netdev_mqs+0x1a9/0xa90 [ 382.102686][T10418] rtnl_create_link+0x239/0x720 [ 382.102720][T10418] rtnl_newlink_create+0x175/0x650 [ 382.102748][T10418] ? security_capable+0x7b/0x90 [ 382.102773][T10418] ? netlink_ns_capable+0x86/0xa0 [ 382.102796][T10418] rtnl_newlink+0x1181/0x1400 [ 382.102844][T10418] ? __pfx_rtnl_newlink+0x10/0x10 [ 382.102867][T10418] rtnetlink_rcv_msg+0x64b/0x720 [ 382.102890][T10418] netlink_rcv_skb+0x11e/0x220 [ 382.102963][T10418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.102990][T10418] rtnetlink_rcv+0x1c/0x30 [ 382.103044][T10418] netlink_unicast+0x5a7/0x680 [ 382.103070][T10418] netlink_sendmsg+0x5be/0x6f0 [ 382.103140][T10418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.103163][T10418] ____sys_sendmsg+0x532/0x580 [ 382.103273][T10418] ___sys_sendmsg+0x195/0x1e0 [ 382.103312][T10418] __x64_sys_sendmsg+0xd4/0x160 [ 382.103373][T10418] x64_sys_call+0x194c/0x3020 [ 382.103400][T10418] do_syscall_64+0x136/0x3c0 [ 382.103424][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.103515][T10418] RIP: 0033:0x7f57352cde99 [ 382.103530][T10418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.103548][T10418] RSP: 002b:00007f5733d27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.103570][T10418] RAX: ffffffffffffffda RBX: 00007f5735555fa0 RCX: 00007f57352cde99 [ 382.103587][T10418] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 382.103603][T10418] RBP: 00007f5733d27090 R08: 0000000000000000 R09: 0000000000000000 [ 382.103654][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.103667][T10418] R13: 00007f5735556038 R14: 00007f5735555fa0 R15: 00007ffdab9f7628 [ 382.103754][T10418] [ 382.539077][T10435] loop1: detected capacity change from 0 to 4096 [ 382.560842][T10435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 382.598007][ T28] audit: type=1400 audit(1784561951.537:925): avc: denied { execute } for pid=10434 comm="syz.1.1861" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 382.622255][ T28] audit: type=1400 audit(1784561951.537:926): avc: denied { remount } for pid=10434 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 382.650216][T10435] Quota error (device loop1): find_block_dqentry: Quota for id 0 referenced but not present [ 382.683193][T10435] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 382.696114][T10435] EXT4-fs error (device loop1): ext4_acquire_dquot:7041: comm syz.1.1861: Failed to acquire dquot type 1 [ 382.723429][T10435] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 382.756708][T10438] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 382.866075][ T3296] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 382.899608][ T3296] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 131109 [ 382.967295][T10448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10448 comm=syz.7.1867 [ 383.135068][ T2022] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.194980][ T2022] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.251561][ T2022] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.325089][ T2022] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.346426][T10459] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.353582][T10459] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.360866][T10459] bridge_slave_0: entered allmulticast mode [ 383.367508][T10459] bridge_slave_0: entered promiscuous mode [ 383.374366][T10459] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.381476][T10459] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.389218][T10459] bridge_slave_1: entered allmulticast mode [ 383.395666][T10459] bridge_slave_1: entered promiscuous mode [ 383.433200][ T2022] bridge_slave_1: left allmulticast mode [ 383.439172][ T2022] bridge_slave_1: left promiscuous mode [ 383.470794][ T2022] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.489864][ T2022] bridge_slave_0: left allmulticast mode [ 383.495561][ T2022] bridge_slave_0: left promiscuous mode [ 383.501257][ T2022] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.552739][ T2022] bond1 (unregistering): (slave geneve2): Releasing active interface [ 383.698264][ T2022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.717905][ T2022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.736030][ T2022] bond0 (unregistering): Released all slaves [ 383.745920][ T2022] bond1 (unregistering): Released all slaves [ 383.755753][ T2022] bond2 (unregistering): Released all slaves [ 383.765545][ T2022] bond3 (unregistering): Released all slaves [ 383.776401][ T2022] bond4 (unregistering): Released all slaves [ 383.787265][ T2022] bond5 (unregistering): Released all slaves [ 383.875668][T10459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.126583][T10484] bridge_slave_0: left allmulticast mode [ 384.126604][T10484] bridge_slave_0: left promiscuous mode [ 384.131253][T10484] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.142086][T10484] bridge_slave_1: left allmulticast mode [ 384.142105][T10484] bridge_slave_1: left promiscuous mode [ 384.142623][T10484] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.158485][T10484] bond0: (slave bond_slave_0): Releasing backup interface [ 384.212757][T10484] bond0: (slave bond_slave_1): Releasing backup interface [ 384.322502][T10484] team0: Port device team_slave_0 removed [ 384.371035][T10484] team0: Port device team_slave_1 removed [ 384.381336][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.381354][T10484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.393615][T10484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.395146][T10484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.576361][ T28] audit: type=1400 audit(1784561953.537:927): avc: denied { write } for pid=10489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 384.592652][T10484] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 384.595144][T10459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.613743][ T2022] 0: left promiscuous mode [ 384.647720][T10459] team0: Port device team_slave_0 added [ 384.648581][T10459] team0: Port device team_slave_1 added [ 384.766247][T10459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.766260][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.766329][T10459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.766953][T10459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.766963][T10459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.767001][T10459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.796683][ T2022] 1: left promiscuous mode [ 384.824373][T10459] hsr_slave_0: entered promiscuous mode [ 384.824845][T10459] hsr_slave_1: entered promiscuous mode [ 384.825023][T10459] debugfs: 'hsr0' already exists in 'hsr' [ 384.825034][T10459] Cannot create hsr debugfs directory [ 384.831265][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 384.871778][ T2022] 2: left promiscuous mode [ 384.916417][ T2022] 3: left promiscuous mode [ 384.928988][T10516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10516 comm=syz.7.1879 [ 384.969839][ T2022] 4: left promiscuous mode [ 384.972347][T10459] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 384.974593][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.975177][T10459] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 384.977245][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.977865][T10459] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 384.979647][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.980144][T10459] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 384.982257][T10459] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 385.003786][ T2022] 5: left promiscuous mode [ 385.057936][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.064022][T10459] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.064618][ T2022] 6: left promiscuous mode [ 385.068707][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.068741][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.084663][ T6652] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.084691][ T6652] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.103469][ T2022] 7: left promiscuous mode [ 385.154272][ T2022] 8: left promiscuous mode [ 385.193305][ T2022] 9: left promiscuous mode [ 385.233476][ T2022] 10: left promiscuous mode [ 385.252466][T10459] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 385.273776][ T2022] 11: left promiscuous mode [ 385.317799][ T2022] 12: left promiscuous mode [ 385.403861][ T2022] 13: left promiscuous mode [ 385.419715][T10459] veth0_vlan: entered promiscuous mode [ 385.582568][T10459] veth1_vlan: entered promiscuous mode [ 385.616274][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 385.640485][T10459] veth0_macvtap: entered promiscuous mode [ 385.650581][T10459] veth1_macvtap: entered promiscuous mode [ 385.661562][T10459] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 385.672566][T10459] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 385.685609][T10567] 9p: Bad value for 'rfdno' [ 385.700942][ T6652] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.711050][ T6652] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.720155][ T6652] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.730644][ T2022] tipc: Left network mode [ 385.750349][ T6652] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.767864][T10571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.832459][T10576] __nla_validate_parse: 4 callbacks suppressed [ 385.832474][T10576] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1882'. [ 385.896643][ T2022] hsr_slave_0: left promiscuous mode [ 385.935109][T10578] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1885'. [ 385.966102][ T2022] hsr_slave_1: left promiscuous mode [ 386.084022][ T2022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.091462][ T2022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.113856][ T2022] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.136686][ T2022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.145568][ T2022] batman_adv: batadv0: Removing interface: vlan2 [ 386.180186][ T2022] veth1_macvtap: left promiscuous mode [ 386.231454][ T2022] veth0_macvtap: left promiscuous mode [ 386.300183][ T2022] veth1_vlan: left promiscuous mode [ 386.338224][ T2022] veth0_vlan: left promiscuous mode [ 386.663893][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 386.664000][ T28] audit: type=1400 audit(1784561955.617:931): avc: denied { write } for pid=10587 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.765657][ T2022] team0 (unregistering): Port device team_slave_1 removed [ 386.780903][ T28] audit: type=1400 audit(1784561955.737:932): avc: denied { write } for pid=10600 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 386.824260][ T2022] team0 (unregistering): Port device team_slave_0 removed [ 386.901134][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 387.261266][ T28] audit: type=1400 audit(1784561956.217:933): avc: denied { write } for pid=10610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.301728][ T2022] IPVS: stop unused estimator thread 0... [ 387.333089][ T28] audit: type=1400 audit(1784561956.287:934): avc: denied { write } for pid=10627 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.428631][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 387.444455][ T28] audit: type=1400 audit(1784561956.397:935): avc: denied { name_bind } for pid=10632 comm="syz.4.1892" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 387.479257][ T28] audit: type=1326 audit(1784561956.397:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.1892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 387.505269][ T28] audit: type=1326 audit(1784561956.397:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.1892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 387.539930][T10639] loop7: detected capacity change from 0 to 512 [ 387.542040][ T28] audit: type=1326 audit(1784561956.397:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.1892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 387.577488][ T28] audit: type=1326 audit(1784561956.397:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.1892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 387.580851][T10639] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1891: inode has both inline data and extents flags [ 387.616348][T10639] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 387.616551][T10639] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1891: couldn't read orphan inode 15 (err -117) [ 387.628018][ T28] audit: type=1326 audit(1784561956.397:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10632 comm="syz.4.1892" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53d35cde99 code=0x7ffc0000 [ 387.648266][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 387.663967][T10639] loop7: lost filesystem error report for type 5 error -117 [ 387.669355][ C0] EXT4-fs (loop7): initial error at time 1784561956: ext4_orphan_get:1399 [ 387.669997][T10639] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.676696][ C0] : inode 15 [ 387.700819][ C0] EXT4-fs (loop7): last error at time 1784561956: ext4_orphan_get:1404 [ 387.756879][T10652] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 387.858768][T10658] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1898'. [ 388.173423][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.203963][T10673] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1903'. [ 388.348460][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1904'. [ 388.531648][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1907'. [ 388.696905][T10743] netlink: 332 bytes leftover after parsing attributes in process `syz.6.1909'. [ 388.757062][T10743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=10743 comm=syz.6.1909 [ 388.936899][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1910'. [ 389.510737][T10781] 9p: Bad value for 'rfdno' [ 389.837342][T10786] loop6: detected capacity change from 0 to 2048 [ 389.887811][T10786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.964567][T10804] loop8: detected capacity change from 0 to 1024 [ 389.988274][T10804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 390.014171][T10804] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.056901][T10459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 390.201634][ T4498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.277607][T10838] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1918'. [ 390.372542][T10845] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 390.508601][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1919'. [ 392.117575][T10909] __nla_validate_parse: 2 callbacks suppressed [ 392.117590][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1936'. [ 392.206880][T10911] bridge0: port 1(syz_tun) entered blocking state [ 392.213331][T10911] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 392.221568][T10911] bridge0: port 1(syz_tun) entered disabled state [ 392.228064][T10911] syz_tun: entered allmulticast mode [ 392.233928][T10911] syz_tun: entered promiscuous mode [ 392.239289][T10911] bridge0: port 1(syz_tun) entered blocking state [ 392.245770][T10911] bridge0: port 1(syz_tun) entered listening state [ 392.286560][T10907] netlink: 332 bytes leftover after parsing attributes in process `syz.8.1935'. [ 392.407836][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 392.407852][ T28] audit: type=1400 audit(1784561961.367:966): avc: denied { listen } for pid=10919 comm="syz.7.1941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 392.545808][ T28] audit: type=1400 audit(1784561961.497:967): avc: denied { read } for pid=10919 comm="syz.7.1941" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 392.579869][ T28] audit: type=1400 audit(1784561961.497:968): avc: denied { open } for pid=10919 comm="syz.7.1941" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 392.780993][T10926] bridge0: port 4(syz_tun) entered blocking state [ 392.791992][T10926] bridge0: port 4(syz_tun) entered disabled state [ 392.810328][T10926] syz_tun: entered allmulticast mode [ 392.816901][T10926] syz_tun: entered promiscuous mode [ 392.822382][T10926] bridge0: port 4(syz_tun) entered blocking state [ 392.828914][T10926] bridge0: port 4(syz_tun) entered listening state [ 393.008485][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1947'. [ 393.017638][T10940] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.024893][T10940] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.149438][T10946] 9p: Bad value for 'rfdno' [ 393.307748][T10948] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1949'. [ 393.383009][T10963] loop6: detected capacity change from 0 to 256 [ 393.396919][T10963] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 393.428690][T10966] FAULT_INJECTION: forcing a failure. [ 393.428690][T10966] name failslab, interval 1, probability 0, space 0, times 0 [ 393.441745][T10966] CPU: 1 UID: 0 PID: 10966 Comm: syz.7.1956 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 393.441845][T10966] Tainted: [W]=WARN [ 393.441851][T10966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 393.441862][T10966] Call Trace: [ 393.441869][T10966] [ 393.441878][T10966] __dump_stack+0x1d/0x30 [ 393.441901][T10966] dump_stack_lvl+0x95/0xd0 [ 393.441975][T10966] dump_stack+0x15/0x1b [ 393.441994][T10966] should_fail_ex+0x25e/0x270 [ 393.442026][T10966] should_failslab+0x8c/0xb0 [ 393.442049][T10966] __kvmalloc_node_noprof+0x15b/0x590 [ 393.442135][T10966] ? traverse+0x9c/0x3b0 [ 393.442169][T10966] ? traverse+0x9c/0x3b0 [ 393.442203][T10966] traverse+0x9c/0x3b0 [ 393.442238][T10966] seq_read_iter+0x7dc/0x8f0 [ 393.442320][T10966] seq_read+0x279/0x2c0 [ 393.442356][T10966] ? __pfx_seq_read+0x10/0x10 [ 393.442397][T10966] proc_reg_read+0x128/0x1c0 [ 393.442425][T10966] ? __pfx_proc_reg_read+0x10/0x10 [ 393.442476][T10966] vfs_read+0x18e/0x7c0 [ 393.442492][T10966] ? __rcu_read_unlock+0x4e/0x70 [ 393.442516][T10966] ? __fget_files+0x184/0x1c0 [ 393.442544][T10966] ? tick_program_event+0x79/0xc0 [ 393.442639][T10966] __x64_sys_pread64+0xfd/0x150 [ 393.442663][T10966] x64_sys_call+0x27b5/0x3020 [ 393.442690][T10966] do_syscall_64+0x136/0x3c0 [ 393.442714][T10966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.442805][T10966] RIP: 0033:0x7f57352cde99 [ 393.442824][T10966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.442845][T10966] RSP: 002b:00007f5733d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 393.442867][T10966] RAX: ffffffffffffffda RBX: 00007f5735555fa0 RCX: 00007f57352cde99 [ 393.442919][T10966] RDX: 0000000000018fc8 RSI: 0000200000019400 RDI: 0000000000000004 [ 393.443064][T10966] RBP: 00007f5733d27090 R08: 0000000000000000 R09: 0000000000000000 [ 393.443079][T10966] R10: 0010000000000005 R11: 0000000000000246 R12: 0000000000000001 [ 393.443094][T10966] R13: 00007f5735556038 R14: 00007f5735555fa0 R15: 00007ffdab9f7628 [ 393.443160][T10966] [ 393.509166][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1955'. [ 393.846965][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.854648][T10963] FAT-fs (loop6): Filesystem has been set read-only [ 393.861266][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.868936][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.876578][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.884314][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.891950][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.899612][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.907230][T10963] FAT-fs (loop6): error, corrupted file size (i_pos 196, 36262) [ 393.934511][T10975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 393.956710][T10982] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 394.028268][T10983] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1960'. [ 394.219969][T10989] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1963'. [ 394.539767][T11002] xt_connbytes: Forcing CT accounting to be enabled [ 394.564432][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1968'. [ 394.584847][T11004] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1968'. [ 394.752423][T11020] 9p: Bad value for 'rfdno' [ 394.861393][T11024] xt_connbytes: Forcing CT accounting to be enabled [ 394.928921][ T28] audit: type=1400 audit(1784561963.887:969): avc: denied { create } for pid=11029 comm="syz.7.1977" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 395.248778][T11046] SELinux: policydb magic number 0xfe7cff8c does not match expected magic number 0xf97cff8c [ 395.248811][ T28] audit: type=1400 audit(1784561964.207:970): avc: denied { load_policy } for pid=11045 comm="syz.7.1982" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 395.259214][T11046] SELinux: failed to load policy [ 395.315602][T11052] loop7: detected capacity change from 0 to 128 [ 395.347929][T11054] loop7: detected capacity change from 0 to 764 [ 395.525699][T11056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 395.718356][ T28] audit: type=1400 audit(1784561964.677:971): avc: denied { watch watch_reads } for pid=11064 comm="syz.8.1990" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 395.748068][ T28] audit: type=1400 audit(1784561964.707:972): avc: denied { ioctl } for pid=11062 comm="syz.6.1989" path="socket:[32065]" dev="sockfs" ino=32065 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 395.930634][ T28] audit: type=1400 audit(1784561964.887:973): avc: denied { create } for pid=11078 comm="syz.7.1993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 396.017050][T11068] loop6: detected capacity change from 0 to 2048 [ 396.041700][ T28] audit: type=1400 audit(1784561964.997:974): avc: denied { connect } for pid=11085 comm="syz.8.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 396.069777][ T28] audit: type=1400 audit(1784561965.027:975): avc: denied { ioctl } for pid=11085 comm="syz.8.1996" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 396.102970][T11068] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.115031][T11068] ext4 filesystem being mounted at /390/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.139328][ T4498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.161042][T11094] sctp: [Deprecated]: syz.8.1997 (pid 11094) Use of struct sctp_assoc_value in delayed_ack socket option. [ 396.161042][T11094] Use struct sctp_sack_info instead [ 396.246003][T11094] loop8: detected capacity change from 0 to 8192 [ 396.254616][T11094] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 396.439331][T11102] 9p: Bad value for 'rfdno' [ 397.939337][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 397.939353][ T28] audit: type=1400 audit(1784561966.897:980): avc: denied { write } for pid=11142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.091374][ T28] audit: type=1400 audit(1784561967.047:981): avc: denied { write } for pid=11163 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.127324][T11165] __nla_validate_parse: 7 callbacks suppressed [ 398.127344][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2016'. [ 398.481227][T11173] loop7: detected capacity change from 0 to 512 [ 399.309409][T11173] EXT4-fs: Ignoring removed bh option [ 399.345536][T11173] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 400.383067][T11173] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2019: iget: bad i_size value: 3298534883338 [ 400.408952][T11173] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 400.412808][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 400.428422][ C0] EXT4-fs (loop7): initial error at time 1784561969: ext4_orphan_get:1399: inode 15 [ 400.437850][ C0] EXT4-fs (loop7): last error at time 1784561969: ext4_orphan_get:1399: inode 15 [ 400.596750][T11183] netlink: 'syz.4.2020': attribute type 2 has an invalid length. [ 400.607189][T11183] 8: entered promiscuous mode [ 400.619364][T11173] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2019: couldn't read orphan inode 15 (err -117) [ 400.645561][T11173] loop7: lost filesystem error report for type 5 error -117 [ 400.650115][T11173] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.843521][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.000514][ T28] audit: type=1400 audit(1784561969.957:982): avc: denied { write } for pid=11171 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.006755][T11197] loop8: detected capacity change from 0 to 512 [ 401.062571][T11197] EXT4-fs: Ignoring removed bh option [ 401.095349][T11197] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 401.133262][ T28] audit: type=1400 audit(1784561970.087:983): avc: denied { write } for pid=11204 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.139112][T11197] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2023: iget: bad i_size value: 3298534883338 [ 401.181362][T11197] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 401.182096][T11197] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2023: couldn't read orphan inode 15 (err -117) [ 401.191606][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 401.191707][ C0] EXT4-fs (loop8): initial error at time 1784561970: ext4_orphan_get:1399: inode 15 [ 401.191887][ C0] EXT4-fs (loop8): last error at time 1784561970: ext4_orphan_get:1399: inode 15 [ 401.266761][T11197] loop8: lost filesystem error report for type 5 error -117 [ 401.272330][T11197] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.298588][T11214] loop2: detected capacity change from 0 to 512 [ 401.385130][T11214] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 401.398394][T11214] FAULT_INJECTION: forcing a failure. [ 401.398394][T11214] name failslab, interval 1, probability 0, space 0, times 0 [ 401.411054][T11214] CPU: 1 UID: 0 PID: 11214 Comm: syz.2.2026 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 401.411090][T11214] Tainted: [W]=WARN [ 401.411098][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 401.411166][T11214] Call Trace: [ 401.411174][T11214] [ 401.411183][T11214] __dump_stack+0x1d/0x30 [ 401.411252][T11214] dump_stack_lvl+0x95/0xd0 [ 401.411382][T11214] dump_stack+0x15/0x1b [ 401.411399][T11214] should_fail_ex+0x25e/0x270 [ 401.411426][T11214] ? __get_vm_area_node+0x106/0x1d0 [ 401.411533][T11214] should_failslab+0x8c/0xb0 [ 401.411559][T11214] __kmalloc_cache_node_noprof+0x81/0x3e0 [ 401.411652][T11214] ? __get_vm_area_node+0x106/0x1d0 [ 401.411674][T11214] __get_vm_area_node+0x106/0x1d0 [ 401.411697][T11214] __vmalloc_node_range_noprof+0x266/0x11e0 [ 401.411752][T11214] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 401.411784][T11214] ? preempt_schedule_irq+0x2d/0x50 [ 401.411811][T11214] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 401.411858][T11214] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 401.411895][T11214] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 401.412002][T11214] __vmalloc_noprof+0xa4/0xf0 [ 401.412036][T11214] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 401.412067][T11214] bpf_prog_alloc_no_stats+0x47/0x390 [ 401.412096][T11214] ? bpf_prog_alloc+0x2a/0x150 [ 401.412120][T11214] bpf_prog_alloc+0x3c/0x150 [ 401.412146][T11214] bpf_prog_load+0x54b/0x1100 [ 401.412184][T11214] ? avc_has_perm_noaudit+0xa3/0x120 [ 401.412215][T11214] __sys_bpf+0xbae/0xc30 [ 401.412252][T11214] __x64_sys_bpf+0x69/0x80 [ 401.412282][T11214] x64_sys_call+0x10cb/0x3020 [ 401.412369][T11214] do_syscall_64+0x136/0x3c0 [ 401.412448][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.412473][T11214] RIP: 0033:0x7fe77a80de99 [ 401.412492][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.412513][T11214] RSP: 002b:00007fe779225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.412535][T11214] RAX: ffffffffffffffda RBX: 00007fe77aa96180 RCX: 00007fe77a80de99 [ 401.412549][T11214] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 401.412588][T11214] RBP: 00007fe779225090 R08: 0000000000000000 R09: 0000000000000000 [ 401.412600][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.412612][T11214] R13: 00007fe77aa96218 R14: 00007fe77aa96180 R15: 00007ffdeb890078 [ 401.412630][T11214] [ 401.412721][T11214] syz.2.2026: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 401.671775][T11214] CPU: 1 UID: 0 PID: 11214 Comm: syz.2.2026 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 401.671873][T11214] Tainted: [W]=WARN [ 401.671880][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 401.671892][T11214] Call Trace: [ 401.671900][T11214] [ 401.671975][T11214] __dump_stack+0x1d/0x30 [ 401.671998][T11214] dump_stack_lvl+0x95/0xd0 [ 401.672017][T11214] dump_stack+0x15/0x1b [ 401.672078][T11214] warn_alloc+0x145/0x1c0 [ 401.672108][T11214] __vmalloc_node_range_noprof+0x28b/0x11e0 [ 401.672136][T11214] ? preempt_schedule_irq+0x2d/0x50 [ 401.672166][T11214] ? raw_irqentry_exit_cond_resched+0x4b/0x60 [ 401.672245][T11214] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 401.672288][T11214] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 401.672366][T11214] __vmalloc_noprof+0xa4/0xf0 [ 401.672387][T11214] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 401.672415][T11214] bpf_prog_alloc_no_stats+0x47/0x390 [ 401.672451][T11214] ? bpf_prog_alloc+0x2a/0x150 [ 401.672477][T11214] bpf_prog_alloc+0x3c/0x150 [ 401.672508][T11214] bpf_prog_load+0x54b/0x1100 [ 401.672593][T11214] ? avc_has_perm_noaudit+0xa3/0x120 [ 401.672646][T11214] __sys_bpf+0xbae/0xc30 [ 401.672721][T11214] __x64_sys_bpf+0x69/0x80 [ 401.672747][T11214] x64_sys_call+0x10cb/0x3020 [ 401.672778][T11214] do_syscall_64+0x136/0x3c0 [ 401.672886][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.672912][T11214] RIP: 0033:0x7fe77a80de99 [ 401.672930][T11214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.672963][T11214] RSP: 002b:00007fe779225028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.672983][T11214] RAX: ffffffffffffffda RBX: 00007fe77aa96180 RCX: 00007fe77a80de99 [ 401.672996][T11214] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 401.673008][T11214] RBP: 00007fe779225090 R08: 0000000000000000 R09: 0000000000000000 [ 401.673020][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.673097][T11214] R13: 00007fe77aa96218 R14: 00007fe77aa96180 R15: 00007ffdeb890078 [ 401.673114][T11214] [ 401.884371][T11214] Mem-Info: [ 401.887505][T11214] active_anon:43204 inactive_anon:3 isolated_anon:0 [ 401.887505][T11214] active_file:16 inactive_file:27771 isolated_file:0 [ 401.887505][T11214] unevictable:0 dirty:299 writeback:0 [ 401.887505][T11214] slab_reclaimable:3628 slab_unreclaimable:20407 [ 401.887505][T11214] mapped:43592 shmem:33917 pagetables:3803 [ 401.887505][T11214] sec_pagetables:0 bounce:0 [ 401.887505][T11214] kernel_misc_reclaimable:0 [ 401.887505][T11214] free:1835727 free_pcp:2283 free_cma:0 [ 401.933349][T11214] Node 0 active_anon:172816kB inactive_anon:12kB active_file:64kB inactive_file:111084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:174368kB dirty:1196kB writeback:0kB shmem:135668kB kernel_stack:4592kB pagetables:15212kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 401.963785][T11214] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 401.993548][T11214] lowmem_reserve[]: 0 2878 7857 7857 [ 401.998959][T11214] Node 0 DMA32 free:2944148kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947672kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 402.030241][T11214] lowmem_reserve[]: 0 0 4978 4978 [ 402.035308][T11214] Node 0 Normal free:4383400kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:172816kB inactive_anon:12kB active_file:64kB inactive_file:111084kB unevictable:0kB writepending:1196kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:5604kB local_pcp:2992kB free_cma:0kB [ 402.068274][T11214] lowmem_reserve[]: 0 0 0 0 [ 402.072831][T11214] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 402.085673][T11214] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944148kB [ 402.101780][T11214] Node 0 Normal: 2*4kB (UM) 24*8kB (UM) 23*16kB (UM) 13*32kB (UE) 7*64kB (UME) 2*128kB (E) 2*256kB (UM) 3*512kB (U) 5*1024kB (UE) 6*2048kB (UM) 1065*4096kB (UM) = 4383384kB [ 402.119325][T11214] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 402.128776][T11214] 61700 total pagecache pages [ 402.133477][T11214] 0 pages in swap cache [ 402.137619][T11214] Free swap = 124996kB [ 402.141822][T11214] Total swap = 124996kB [ 402.145989][T11214] 2097051 pages RAM [ 402.149854][T11214] 0 pages HighMem/MovableOnly [ 402.154542][T11214] 81734 pages reserved [ 402.204143][T11220] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2028'. [ 402.279008][T11229] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2030'. [ 402.339586][ T28] audit: type=1400 audit(1784561971.297:984): avc: denied { write } for pid=11210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.384382][T10459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.455953][ T28] audit: type=1400 audit(1784561971.417:985): avc: denied { write } for pid=11234 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.534774][T11229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11229 comm=syz.7.2030 [ 402.679798][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.783743][T11246] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2031'. [ 402.838481][T11248] loop7: detected capacity change from 0 to 512 [ 402.855830][T11248] EXT4-fs: Ignoring removed bh option [ 402.873945][T11252] loop2: detected capacity change from 0 to 764 [ 402.893164][T11248] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 402.938633][T11248] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2035: iget: bad i_size value: 3298534883338 [ 402.951467][T11248] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 402.952239][T11248] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2035: couldn't read orphan inode 15 (err -117) [ 402.973730][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 402.973886][ C1] EXT4-fs (loop7): initial error at time 1784561971: ext4_orphan_get:1399: inode 15 [ 402.989647][ C1] EXT4-fs (loop7): last error at time 1784561971: ext4_orphan_get:1399: inode 15 [ 402.990989][T11248] loop7: lost filesystem error report for type 5 error -117 [ 402.999602][T11248] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.068025][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.096864][T11266] loop7: detected capacity change from 0 to 512 [ 403.146198][T11266] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.2039: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 403.250616][T11266] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 403.299453][T11266] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.2039: Bad quota inode: 4, type: 1 [ 403.319366][T11266] loop7: lost filesystem error report for type 5 error -117 [ 403.319959][T11266] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 403.342100][T11266] EXT4-fs (loop7): mount failed [ 403.386140][T11266] netlink: 'syz.7.2039': attribute type 8 has an invalid length. [ 403.410532][T11276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.487471][T11280] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2042'. [ 403.668593][T11292] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.696494][T11294] loop6: detected capacity change from 0 to 512 [ 403.703753][T11294] EXT4-fs: Ignoring removed bh option [ 403.718148][T11294] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 403.727779][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2049: iget: bad i_size value: 3298534883338 [ 403.740399][T11294] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 403.743219][T11294] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2049: couldn't read orphan inode 15 (err -117) [ 403.765636][T11294] loop6: lost filesystem error report for type 5 error -117 [ 403.766186][T11294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.793149][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2048'. [ 403.814701][ T4498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.956411][T11305] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2053'. [ 404.619820][T11339] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2065'. [ 404.632426][ T28] audit: type=1400 audit(1784561973.547:986): avc: denied { write } for pid=11331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.667044][ T28] audit: type=1400 audit(1784561973.617:987): avc: denied { write } for pid=11345 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.716536][T11349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11349 comm=syz.4.2066 [ 404.761054][T11353] FAULT_INJECTION: forcing a failure. [ 404.761054][T11353] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.774267][T11353] CPU: 0 UID: 0 PID: 11353 Comm: syz.7.2068 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 404.774298][T11353] Tainted: [W]=WARN [ 404.774305][T11353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 404.774350][T11353] Call Trace: [ 404.774355][T11353] [ 404.774360][T11353] __dump_stack+0x1d/0x30 [ 404.774375][T11353] dump_stack_lvl+0x95/0xd0 [ 404.774406][T11353] dump_stack+0x15/0x1b [ 404.774450][T11353] should_fail_ex+0x25e/0x270 [ 404.774546][T11353] should_fail+0xb/0x20 [ 404.774561][T11353] should_fail_usercopy+0x1a/0x20 [ 404.774607][T11353] _copy_from_user+0x1c/0xb0 [ 404.774645][T11353] ___sys_sendmsg+0xc1/0x1e0 [ 404.774727][T11353] ? terminate_walk+0x1d5/0x200 [ 404.774818][T11353] __sys_sendmmsg+0x185/0x320 [ 404.774860][T11353] __x64_sys_sendmmsg+0x57/0x70 [ 404.774928][T11353] x64_sys_call+0x27aa/0x3020 [ 404.774961][T11353] do_syscall_64+0x136/0x3c0 [ 404.775053][T11353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.775066][T11353] RIP: 0033:0x7f57352cde99 [ 404.775077][T11353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.775088][T11353] RSP: 002b:00007f5733d27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 404.775129][T11353] RAX: ffffffffffffffda RBX: 00007f5735555fa0 RCX: 00007f57352cde99 [ 404.775138][T11353] RDX: 0000000000000002 RSI: 0000200000003bc0 RDI: 0000000000000003 [ 404.775146][T11353] RBP: 00007f5733d27090 R08: 0000000000000000 R09: 0000000000000000 [ 404.775154][T11353] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.775236][T11353] R13: 00007f5735556038 R14: 00007f5735555fa0 R15: 00007ffdab9f7628 [ 404.775247][T11353] [ 405.172471][T11365] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.282765][T11371] loop6: detected capacity change from 0 to 2048 [ 405.296864][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2072'. [ 405.327563][T11371] loop6: p1 < > p4 [ 405.332592][T11371] loop6: p4 size 8388608 extends beyond EOD, truncated [ 405.350953][T11371] netlink: 'syz.6.2071': attribute type 2 has an invalid length. [ 405.363397][T11371] 13: entered promiscuous mode [ 405.534638][T11373] loop2: detected capacity change from 0 to 512 [ 405.545323][T11373] EXT4-fs: Ignoring removed bh option [ 405.553610][T11373] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 405.565067][T11373] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2075: iget: bad i_size value: 3298534883338 [ 405.577626][T11373] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 405.578132][T11373] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2075: couldn't read orphan inode 15 (err -117) [ 405.599222][T11373] loop2: lost filesystem error report for type 5 error -117 [ 405.602951][T11373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.747869][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.790639][T11377] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2076'. [ 406.310476][T11386] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2078'. [ 406.753297][T11389] loop2: detected capacity change from 0 to 2048 [ 407.001623][T11393] netlink: 'syz.2.2077': attribute type 2 has an invalid length. [ 407.014189][T11393] 19: entered promiscuous mode [ 407.957520][T11389] loop2: p1 < > p4 [ 407.965056][T11389] loop2: p4 size 8388608 extends beyond EOD, truncated [ 408.095302][T11400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2082'. [ 408.168684][T11404] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2085'. [ 408.233652][T11407] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2086'. [ 408.243027][T11409] loop6: detected capacity change from 0 to 512 [ 408.301571][T11413] loop8: detected capacity change from 0 to 512 [ 408.306407][T11409] EXT4-fs: Ignoring removed bh option [ 408.308256][T11413] EXT4-fs: Ignoring removed bh option [ 408.330329][T11413] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 408.336858][T11409] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 408.371030][T11413] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2088: iget: bad i_size value: 3298534883338 [ 408.396079][T11409] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.2087: iget: bad i_size value: 3298534883338 [ 408.402935][T11413] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 408.422857][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 408.434199][T11413] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2088: couldn't read orphan inode 15 (err -117) [ 408.438461][ C0] EXT4-fs (loop8): initial error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.438495][ C0] EXT4-fs (loop8): last error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.450608][T11420] loop7: detected capacity change from 0 to 512 [ 408.482913][T11420] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2086: inode has both inline data and extents flags [ 408.496181][T11420] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 408.497671][T11420] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2086: couldn't read orphan inode 15 (err -117) [ 408.500694][T11409] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 408.506850][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 408.506872][ C0] EXT4-fs (loop7): initial error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.506904][ C0] EXT4-fs (loop7): last error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.507216][T11420] loop7: lost filesystem error report for type 5 error -117 [ 408.563492][T11420] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 408.582099][T11424] loop2: detected capacity change from 0 to 512 [ 408.600340][ T28] audit: type=1400 audit(1784561977.547:988): avc: denied { write } for pid=11405 comm="syz.7.2086" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 408.612973][T11413] loop8: lost filesystem error report for type 5 error -117 [ 408.643291][T11413] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.665586][T11409] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2087: couldn't read orphan inode 15 (err -117) [ 408.677631][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 408.677691][ C0] EXT4-fs (loop6): initial error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.677770][ C0] EXT4-fs (loop6): last error at time 1784561977: ext4_orphan_get:1399: inode 15 [ 408.708856][T11424] EXT4-fs error (device loop2): ext4_ext_check_inode:521: inode #4: comm syz.2.2089: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 408.729175][T11424] loop2: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 408.729329][T11424] EXT4-fs error (device loop2): ext4_quota_enable:7235: comm syz.2.2089: Bad quota inode: 4, type: 1 [ 408.738551][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 408.738572][ C0] EXT4-fs (loop2): initial error at time 1784561977: ext4_ext_check_inode:521: inode 4 [ 408.738601][ C0] EXT4-fs (loop2): last error at time 1784561977: ext4_ext_check_inode:521: inode 4 [ 408.785129][T11409] loop6: lost filesystem error report for type 5 error -117 [ 408.789906][T11409] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.818075][T11413] EXT4-fs error (device loop8): ext4_lookup:1785: inode #15: comm syz.8.2088: iget: bad i_size value: 3298534883338 [ 408.830472][T11424] loop2: lost filesystem error report for type 5 error -117 [ 408.830584][T11424] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 408.858995][ T3398] IPVS: starting estimator thread 0... [ 408.864570][T11424] EXT4-fs (loop2): mount failed [ 408.934102][ T4498] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.968829][T10459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.972901][T11427] IPVS: using max 2448 ests per chain, 122400 per kthread [ 409.004860][T11423] netlink: 'syz.2.2089': attribute type 8 has an invalid length. [ 409.167514][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.181632][T11438] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2094'. [ 409.282430][T11440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11440 comm=syz.6.2092 [ 409.318605][T11440] loop6: detected capacity change from 0 to 128 [ 409.530120][T11440] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 409.547319][T11440] ext4 filesystem being mounted at /411/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 409.621038][ T28] audit: type=1400 audit(1784561978.547:989): avc: denied { write } for pid=11434 comm="syz.6.2092" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 411.755880][T11449] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.193056][T11451] loop7: detected capacity change from 0 to 2048 [ 412.253906][T11451] loop7: p1 < > p4 [ 412.258973][T11451] loop7: p4 size 8388608 extends beyond EOD, truncated [ 412.270664][T11451] netlink: 'syz.7.2093': attribute type 2 has an invalid length. [ 412.282944][T11451] 7: entered promiscuous mode [ 412.500628][ T2981] loop7: p1 < > p4 [ 412.505195][ T2981] loop7: p4 size 8388608 extends beyond EOD, truncated [ 412.552344][ T4498] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 412.568783][ T6181] udevd[6181]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 412.581346][T11460] loop7: detected capacity change from 0 to 1024 [ 412.587827][T11458] loop2: detected capacity change from 0 to 512 [ 412.597723][T11458] EXT4-fs: Ignoring removed bh option [ 412.605305][ T7913] udevd[7913]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 412.608488][T11460] EXT4-fs: inline encryption not supported [ 412.624594][T11458] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 412.639692][T11458] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2100: iget: bad i_size value: 3298534883338 [ 412.652254][T11458] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 412.668865][ T6230] udevd[6230]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 412.671032][ T7913] udevd[7913]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 412.687814][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 412.687830][ C0] EXT4-fs (loop2): initial error at time 1784561981: ext4_orphan_get:1399: inode 15 [ 412.687876][ C0] EXT4-fs (loop2): last error at time 1784561981: ext4_orphan_get:1399: inode 15 [ 412.742321][T11458] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2100: couldn't read orphan inode 15 (err -117) [ 412.773968][T11460] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.786201][T11458] loop2: lost filesystem error report for type 5 error -117 [ 412.791578][T11458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.799149][T11467] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2104'. [ 412.837405][ T28] audit: type=1400 audit(1784561981.757:990): avc: denied { bind } for pid=11459 comm="syz.7.2101" lport=58021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 412.866346][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.875888][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.891216][ T28] audit: type=1400 audit(1784561981.757:991): avc: denied { name_bind } for pid=11459 comm="syz.7.2101" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 412.913968][ T28] audit: type=1400 audit(1784561981.757:992): avc: denied { node_bind } for pid=11459 comm="syz.7.2101" saddr=172.20.20.187 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 412.954139][ T28] audit: type=1400 audit(1784561981.757:993): avc: denied { write } for pid=11459 comm="syz.7.2101" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 412.958883][T11474] netlink: 'syz.2.2105': attribute type 8 has an invalid length. [ 412.976384][ T28] audit: type=1400 audit(1784561981.777:994): avc: denied { map } for pid=11459 comm="syz.7.2101" path="/292/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 413.016498][T11472] loop8: detected capacity change from 0 to 512 [ 413.025503][T11476] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2106'. [ 413.064007][T11472] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.2104: inode has both inline data and extents flags [ 413.098644][T11472] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 413.098790][T11472] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2104: couldn't read orphan inode 15 (err -117) [ 413.119828][T11472] loop8: lost filesystem error report for type 5 error -117 [ 413.154097][T11472] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.176741][T11480] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2107'. [ 413.197471][ T28] audit: type=1400 audit(1784561982.157:995): avc: denied { write } for pid=11466 comm="syz.8.2104" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.236685][T11480] devpts: Bad value for 'gid' [ 413.241412][T11480] devpts: Bad value for 'gid' [ 413.493189][T11496] netlink: 332 bytes leftover after parsing attributes in process `syz.4.2112'. [ 413.579529][T11497] loop7: detected capacity change from 0 to 2048 [ 413.615738][T11497] loop7: p1 < > p4 [ 413.620831][T11497] loop7: p4 size 8388608 extends beyond EOD, truncated [ 413.632106][T11497] netlink: 'syz.7.2111': attribute type 2 has an invalid length. [ 413.644811][T11497] 8: entered promiscuous mode [ 413.754813][T10459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.528141][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2114'. [ 414.576789][T11508] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2117'. [ 414.626795][T11510] netlink: 'syz.4.2118': attribute type 8 has an invalid length. [ 414.965090][T11519] loop7: detected capacity change from 0 to 128 [ 414.973145][T11519] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 414.987702][T11519] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.012732][T11507] syz.8.2117 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 415.043854][T11507] CPU: 1 UID: 0 PID: 11507 Comm: syz.8.2117 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 415.043886][T11507] Tainted: [W]=WARN [ 415.043893][T11507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 415.043972][T11507] Call Trace: [ 415.043979][T11507] [ 415.043987][T11507] __dump_stack+0x1d/0x30 [ 415.044012][T11507] dump_stack_lvl+0x95/0xd0 [ 415.044036][T11507] dump_stack+0x15/0x1b [ 415.044082][T11507] dump_header+0x80/0x240 [ 415.044107][T11507] oom_kill_process+0x295/0x350 [ 415.044137][T11507] out_of_memory+0x981/0xbc0 [ 415.044212][T11507] try_charge_memcg+0x621/0xa00 [ 415.044235][T11507] charge_memcg+0x6d/0x120 [ 415.044263][T11507] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 415.044378][T11507] swap_cache_alloc_folio+0x47b/0x5e0 [ 415.044416][T11507] swap_cluster_readahead+0x3d2/0x460 [ 415.044448][T11507] swapin_readahead+0xd8/0x8a0 [ 415.044474][T11507] ? _raw_spin_unlock+0x9/0x30 [ 415.044518][T11507] ? swap_put_entries_cluster+0x49c/0x4c0 [ 415.044556][T11507] ? __entry_text_end+0xf208/0x102179 [ 415.044587][T11507] ? __rcu_read_unlock+0x4e/0x70 [ 415.044658][T11507] ? swap_cache_get_folio+0x1f7/0x200 [ 415.044688][T11507] do_swap_page+0x2a2/0x1ec0 [ 415.044719][T11507] ? __css_rstat_updated+0xbb/0x280 [ 415.044750][T11507] ? __rcu_read_lock+0x36/0x50 [ 415.044798][T11507] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 415.044823][T11507] handle_mm_fault+0xb3c/0x2da0 [ 415.044995][T11507] do_user_addr_fault+0x634/0x1060 [ 415.045025][T11507] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 415.045097][T11507] ? trace_page_fault_user+0x1f/0xa0 [ 415.045231][T11507] exc_page_fault+0x62/0xa0 [ 415.045259][T11507] asm_exc_page_fault+0x26/0x30 [ 415.045282][T11507] RIP: 0033:0x7f07eb4eb80c [ 415.045299][T11507] Code: ca 31 13 00 eb 24 66 66 2e 0f 1f 84 00 00 00 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 81 c3 f0 00 00 00 48 39 dd 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 415.045335][T11507] RSP: 002b:00007fff5ac3ee80 EFLAGS: 00010202 [ 415.045351][T11507] RAX: 0000000000000000 RBX: 00007f07eb8a6090 RCX: 00005555683e3808 [ 415.045365][T11507] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 415.045376][T11507] RBP: 00007f07eb8a7da0 R08: 0000000000000000 R09: 0000000000000000 [ 415.045388][T11507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000065697 [ 415.045400][T11507] R13: 00007f07eb8a609c R14: 00000000000653fd R15: 00007f07eb8a6090 [ 415.045426][T11507] [ 415.048358][T11507] memory: usage 307200kB, limit 307200kB, failcnt 197 [ 415.294677][T11507] memory+swap: usage 271260kB, limit 9007199254740988kB, failcnt 0 [ 415.302586][T11507] kmem: usage 270080kB, limit 9007199254740988kB, failcnt 0 [ 415.311010][T11507] Memory cgroup stats for /syz8: [ 415.311319][T11507] cache 0 [ 415.319211][T11507] rss 0 [ 415.321975][T11507] shmem 0 [ 415.324926][T11507] mapped_file 0 [ 415.331050][T11507] dirty 0 [ 415.336079][T11507] writeback 0 [ 415.341940][T11507] workingset_refault_anon 5 [ 415.346581][T11507] workingset_refault_file 0 [ 415.351408][T11507] swap 204800 [ 415.354812][T11507] swapcached 225280 [ 415.358617][T11507] pgpgin 24370 [ 415.362302][T11507] pgpgout 24370 [ 415.365795][T11507] pgfault 26867 [ 415.369345][T11507] pgmajfault 3 [ 415.372705][T11507] inactive_anon 0 [ 415.376353][T11507] active_anon 0 [ 415.379815][T11507] inactive_file 0 [ 415.383468][T11507] active_file 0 [ 415.386924][T11507] unevictable 0 [ 415.390405][T11507] hierarchical_memory_limit 314572800 [ 415.395802][T11507] hierarchical_memsw_limit 9223372036854771712 [ 415.401950][T11507] total_cache 0 [ 415.405449][T11507] total_rss 0 [ 415.408837][T11507] total_shmem 0 [ 415.412296][T11507] total_mapped_file 0 [ 415.416293][T11507] total_dirty 0 [ 415.419746][T11507] total_writeback 0 [ 415.423570][T11507] total_workingset_refault_anon 5 [ 415.428646][T11507] total_workingset_refault_file 0 [ 415.433670][T11507] total_swap 204800 [ 415.437487][T11507] total_swapcached 225280 [ 415.441825][T11507] total_pgpgin 24370 [ 415.445721][T11507] total_pgpgout 24370 [ 415.449691][T11507] total_pgfault 26867 [ 415.453670][T11507] total_pgmajfault 3 [ 415.457550][T11507] total_inactive_anon 0 [ 415.461689][T11507] total_active_anon 0 [ 415.465823][T11507] total_inactive_file 0 [ 415.485391][T11507] total_active_file 0 [ 415.492278][T11507] total_unevictable 0 [ 415.499153][T11507] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.2117,pid=11507,uid=0 [ 415.539815][T11507] Memory cgroup out of memory: Killed process 11507 (syz.8.2117) total-vm:94180kB, anon-rss:1236kB, file-rss:22228kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 415.559868][T11508] syz.8.2117 (11508) used greatest stack depth: 9472 bytes left [ 415.674210][T11533] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2124'. [ 415.686200][T11533] vhci_hcd vhci_hcd.3: invalid port number 12 [ 415.693421][T11533] vhci_hcd vhci_hcd.3: default hub control req: 0017 v0007 i000c l4 [ 415.832103][T11537] loop7: detected capacity change from 0 to 512 [ 415.883669][T11537] EXT4-fs: Ignoring removed bh option [ 415.892228][T11537] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 415.906072][T11537] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2126: iget: bad i_size value: 3298534883338 [ 415.919296][T11537] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 415.919828][T11537] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2126: couldn't read orphan inode 15 (err -117) [ 415.929348][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 415.929398][ C0] EXT4-fs (loop7): initial error at time 1784561984: ext4_orphan_get:1399: inode 15 [ 415.929600][ C0] EXT4-fs (loop7): last error at time 1784561984: ext4_orphan_get:1399: inode 15 [ 415.968396][T11537] loop7: lost filesystem error report for type 5 error -117 [ 415.973578][T11537] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.006584][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2128'. [ 416.016395][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.090776][T11549] syzkaller0: entered promiscuous mode [ 416.104423][T11549] syzkaller0: entered allmulticast mode [ 416.114593][T11551] loop2: detected capacity change from 0 to 128 [ 416.179557][T11553] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2133'. [ 416.220083][T11555] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2134'. [ 416.292393][T11553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11553 comm=syz.2.2133 [ 416.739547][T11555] syz.7.2134 (11555) used greatest stack depth: 8704 bytes left [ 416.995521][T11568] netlink: 'syz.7.2137': attribute type 10 has an invalid length. [ 417.540832][T11568] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.573170][T11568] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 417.879200][T11570] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=11570 comm=syz.8.2136 [ 417.903770][T11570] loop8: detected capacity change from 0 to 128 [ 417.971915][T11570] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 417.986196][T11570] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 418.109272][ T28] audit: type=1400 audit(1784561987.047:996): avc: denied { write } for pid=11565 comm="syz.8.2136" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 418.739848][T11577] FAULT_INJECTION: forcing a failure. [ 418.739848][T11577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.797574][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.2.2139 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 418.797671][T11577] Tainted: [W]=WARN [ 418.797678][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 418.797689][T11577] Call Trace: [ 418.797697][T11577] [ 418.797706][T11577] __dump_stack+0x1d/0x30 [ 418.797734][T11577] dump_stack_lvl+0x95/0xd0 [ 418.797758][T11577] dump_stack+0x15/0x1b [ 418.797855][T11577] should_fail_ex+0x25e/0x270 [ 418.797887][T11577] should_fail+0xb/0x20 [ 418.797916][T11577] should_fail_usercopy+0x1a/0x20 [ 418.797963][T11577] _copy_from_user+0x1c/0xb0 [ 418.797986][T11577] __sys_bpf+0x1e2/0xc30 [ 418.798085][T11577] ? get_pid_task+0x92/0xc0 [ 418.798105][T11577] ? vfs_write+0x800/0x990 [ 418.798132][T11577] __x64_sys_bpf+0x69/0x80 [ 418.798164][T11577] x64_sys_call+0x10cb/0x3020 [ 418.798209][T11577] do_syscall_64+0x136/0x3c0 [ 418.798236][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.798263][T11577] RIP: 0033:0x7fe77a80de99 [ 418.798281][T11577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.798300][T11577] RSP: 002b:00007fe779267028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 418.798402][T11577] RAX: ffffffffffffffda RBX: 00007fe77aa95fa0 RCX: 00007fe77a80de99 [ 418.798419][T11577] RDX: 00000000000000a8 RSI: 0000200000000480 RDI: 0000000000000005 [ 418.798434][T11577] RBP: 00007fe779267090 R08: 0000000000000000 R09: 0000000000000000 [ 418.798448][T11577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.798525][T11577] R13: 00007fe77aa96038 R14: 00007fe77aa95fa0 R15: 00007ffdeb890078 [ 418.798547][T11577] [ 419.161507][T11580] loop2: detected capacity change from 0 to 512 [ 419.193270][T11580] EXT4-fs: Ignoring removed bh option [ 419.225647][T11580] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 419.298675][T11580] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.2140: iget: bad i_size value: 3298534883338 [ 419.345999][T11580] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 419.348109][T11580] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.2140: couldn't read orphan inode 15 (err -117) [ 419.357560][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 419.357589][ C0] EXT4-fs (loop2): initial error at time 1784561988: ext4_orphan_get:1399: inode 15 [ 419.357700][ C0] EXT4-fs (loop2): last error at time 1784561988: ext4_orphan_get:1399: inode 15 [ 419.428161][T10459] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4706-8c75-0525a5b65a09. [ 419.435813][T11580] loop2: lost filesystem error report for type 5 error -117 [ 419.459413][T11580] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.481235][T11585] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2143'. [ 419.505494][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.517446][T11587] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2142'. [ 419.606570][T11594] 9p: Bad value for 'rfdno' [ 419.619888][T11591] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2145'. [ 419.698751][T11591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11591 comm=syz.8.2145 [ 419.883161][ T28] audit: type=1400 audit(1784561988.797:997): avc: denied { name_connect } for pid=11602 comm="syz.2.2148" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 419.954662][T11608] loop2: detected capacity change from 0 to 256 [ 420.129370][T11615] loop8: detected capacity change from 0 to 512 [ 420.256944][ T28] audit: type=1400 audit(1784561989.157:998): avc: denied { create } for pid=11607 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.276430][ T28] audit: type=1400 audit(1784561989.167:999): avc: denied { setopt } for pid=11607 comm="syz.2.2150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 420.367747][T11615] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2149: corrupted in-inode xattr: e_value out of bounds [ 420.406699][T11614] loop7: detected capacity change from 0 to 512 [ 420.526766][T11614] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.2152: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 420.608764][T11615] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 420.609530][T11615] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2149: couldn't read orphan inode 15 (err -117) [ 420.618956][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 420.618992][ C1] EXT4-fs (loop8): initial error at time 1784561989: ext4_iget_extra_inode:5180: inode 15 [ 420.619042][ C1] EXT4-fs (loop8): last error at time 1784561989: ext4_iget_extra_inode:5180: inode 15 [ 420.708915][T11614] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 420.712794][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 420.728289][ C1] EXT4-fs (loop7): initial error at time 1784561989: ext4_ext_check_inode:521: inode 4 [ 420.737962][ C1] EXT4-fs (loop7): last error at time 1784561989: ext4_ext_check_inode:521: inode 4 [ 420.822279][T11614] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.2152: Bad quota inode: 4, type: 1 [ 420.885003][T11614] loop7: lost filesystem error report for type 5 error -117 [ 420.905600][T11614] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 421.052241][T11614] EXT4-fs (loop7): mount failed [ 421.126705][T11614] netlink: 'syz.7.2152': attribute type 8 has an invalid length. [ 421.238715][T11615] loop8: lost filesystem error report for type 5 error -117 [ 421.240108][T11615] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.545422][T10459] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 421.629058][T11623] loop7: detected capacity change from 0 to 512 [ 421.720011][T11623] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #4: comm syz.7.2154: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 421.798220][T11623] loop7: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 421.798961][T11623] EXT4-fs error (device loop7): ext4_quota_enable:7235: comm syz.7.2154: Bad quota inode: 4, type: 1 [ 421.808261][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 421.808290][ C1] EXT4-fs (loop7): initial error at time 1784561990: ext4_ext_check_inode:521: inode 4 [ 421.808462][ C1] EXT4-fs (loop7): last error at time 1784561990: ext4_ext_check_inode:521: inode 4 [ 421.914394][T11623] loop7: lost filesystem error report for type 5 error -117 [ 421.919250][T11623] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 421.986392][T11623] EXT4-fs (loop7): mount failed [ 422.000248][T11627] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2156'. [ 422.181803][T11623] netlink: 'syz.7.2154': attribute type 8 has an invalid length. [ 422.217829][T11642] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2160'. [ 422.481045][T11641] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11641 comm=syz.8.2160 [ 422.508741][T11654] loop7: detected capacity change from 0 to 512 [ 422.537980][T11659] netlink: 'syz.6.2165': attribute type 27 has an invalid length. [ 422.550835][T11659] netlink: 'syz.6.2165': attribute type 3 has an invalid length. [ 422.552457][T11654] EXT4-fs: Ignoring removed bh option [ 422.571427][T11659] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2165'. [ 422.581861][T11654] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 422.592583][T11654] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.2163: iget: bad i_size value: 3298534883338 [ 422.605595][T11654] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 422.606625][T11654] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.2163: couldn't read orphan inode 15 (err -117) [ 422.615838][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 422.615867][ C0] EXT4-fs (loop7): initial error at time 1784561991: ext4_orphan_get:1399: inode 15 [ 422.615957][ C0] EXT4-fs (loop7): last error at time 1784561991: ext4_orphan_get:1399: inode 15 [ 422.653656][T11654] loop7: lost filesystem error report for type 5 error -117 [ 422.662964][T11654] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.690707][T11669] FAULT_INJECTION: forcing a failure. [ 422.690707][T11669] name failslab, interval 1, probability 0, space 0, times 0 [ 422.722807][ C0] bridge0: port 1(syz_tun) entered learning state [ 422.726690][T11654] EXT4-fs error (device loop7): ext4_lookup:1785: inode #15: comm syz.7.2163: iget: bad i_size value: 3298534883338 [ 422.729611][T11669] CPU: 0 UID: 0 PID: 11669 Comm: syz.8.2166 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 422.729711][T11669] Tainted: [W]=WARN [ 422.729718][T11669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 422.729732][T11669] Call Trace: [ 422.729738][T11669] [ 422.729747][T11669] __dump_stack+0x1d/0x30 [ 422.729804][T11669] dump_stack_lvl+0x95/0xd0 [ 422.729856][T11669] dump_stack+0x15/0x1b [ 422.730036][T11669] should_fail_ex+0x25e/0x270 [ 422.730065][T11669] ? nf_tables_commit+0x71b/0x59f0 [ 422.730164][T11669] should_failslab+0x8c/0xb0 [ 422.730192][T11669] __kmalloc_cache_noprof+0x7b/0x3d0 [ 422.730219][T11669] ? nf_tables_commit+0x71b/0x59f0 [ 422.730249][T11669] nf_tables_commit+0x71b/0x59f0 [ 422.730280][T11669] ? static_key_slow_inc+0x21/0x30 [ 422.730315][T11669] ? __nla_parse+0x40/0x60 [ 422.730363][T11669] ? __kmalloc_cache_noprof+0x19a/0x3d0 [ 422.730388][T11669] ? __list_add_valid_or_report+0x38/0xe0 [ 422.730412][T11669] ? nft_trans_commit_list_add_tail+0x112/0x2d0 [ 422.730450][T11669] ? nf_tables_delflowtable+0xf7b/0xfc0 [ 422.730495][T11669] ? should_fail_ex+0xd9/0x270 [ 422.730523][T11669] ? nfnetlink_rcv+0xa41/0x1740 [ 422.730544][T11669] ? should_failslab+0x8c/0xb0 [ 422.730566][T11669] ? __kmalloc_cache_noprof+0x19a/0x3d0 [ 422.730678][T11669] ? nfnetlink_rcv+0xa41/0x1740 [ 422.730698][T11669] ? skb_pull+0x93/0x110 [ 422.730772][T11669] nfnetlink_rcv+0x10c9/0x1740 [ 422.730813][T11669] netlink_unicast+0x5a7/0x680 [ 422.730837][T11669] netlink_sendmsg+0x5be/0x6f0 [ 422.730865][T11669] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.730962][T11669] ____sys_sendmsg+0x532/0x580 [ 422.731002][T11669] ___sys_sendmsg+0x195/0x1e0 [ 422.731045][T11669] __x64_sys_sendmsg+0xd4/0x160 [ 422.731082][T11669] x64_sys_call+0x194c/0x3020 [ 422.731158][T11669] do_syscall_64+0x136/0x3c0 [ 422.731182][T11669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.731206][T11669] RIP: 0033:0x7f07eb61de99 [ 422.731287][T11669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.731307][T11669] RSP: 002b:00007f07ea077028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.731328][T11669] RAX: ffffffffffffffda RBX: 00007f07eb8a5fa0 RCX: 00007f07eb61de99 [ 422.731343][T11669] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 422.731358][T11669] RBP: 00007f07ea077090 R08: 0000000000000000 R09: 0000000000000000 [ 422.731372][T11669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.731432][T11669] R13: 00007f07eb8a6038 R14: 00007f07eb8a5fa0 R15: 00007fff5ac3ed18 [ 422.731453][T11669] [ 423.107076][ T6501] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.128556][ T6501] ================================================================== [ 423.136652][ T6501] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 423.144202][ T6501] [ 423.146519][ T6501] read-write to 0xffff888237d26528 of 1 bytes by task 11679 on cpu 1: [ 423.154670][ T6501] folio_add_lru+0xa4/0x250 [ 423.159177][ T6501] shmem_get_folio_gfp+0x7cc/0xd90 [ 423.164298][ T6501] shmem_fault+0xf6/0x250 [ 423.168630][ T6501] handle_mm_fault+0x167a/0x2da0 [ 423.173570][ T6501] __get_user_pages+0x129c/0x1f10 [ 423.178602][ T6501] __mm_populate+0x242/0x390 [ 423.183193][ T6501] vm_mmap_pgoff+0x23b/0x2d0 [ 423.187774][ T6501] ksys_mmap_pgoff+0xc1/0x310 [ 423.192459][ T6501] x64_sys_call+0x14df/0x3020 [ 423.197135][ T6501] do_syscall_64+0x136/0x3c0 [ 423.201704][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.207575][ T6501] [ 423.209876][ T6501] read to 0xffff888237d26528 of 1 bytes by task 6501 on cpu 0: [ 423.217392][ T6501] __lru_add_drain_all+0x17e/0x450 [ 423.222480][ T6501] lru_add_drain_all+0x10/0x20 [ 423.227223][ T6501] invalidate_bdev+0x47/0x70 [ 423.231790][ T6501] ext4_put_super+0x614/0x7c0 [ 423.236451][ T6501] generic_shutdown_super+0xee/0x220 [ 423.241722][ T6501] kill_block_super+0x2a/0x70 [ 423.246375][ T6501] ext4_kill_sb+0x42/0x80 [ 423.250688][ T6501] deactivate_locked_super+0x75/0x1c0 [ 423.256041][ T6501] deactivate_super+0x97/0xa0 [ 423.260714][ T6501] cleanup_mnt+0x2c3/0x340 [ 423.265131][ T6501] __cleanup_mnt+0x19/0x20 [ 423.269527][ T6501] task_work_run+0x130/0x1a0 [ 423.274097][ T6501] exit_to_user_mode_loop+0x1e4/0x8c0 [ 423.279450][ T6501] do_syscall_64+0x23c/0x3c0 [ 423.284035][ T6501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.289908][ T6501] [ 423.292212][ T6501] value changed: 0x02 -> 0x05 [ 423.296859][ T6501] [ 423.299164][ T6501] Reported by Kernel Concurrency Sanitizer on: [ 423.305290][ T6501] CPU: 0 UID: 0 PID: 6501 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 423.316304][ T6501] Tainted: [W]=WARN [ 423.320084][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 423.330115][ T6501] ================================================================== [ 423.362878][ C1] bridge0: port 4(syz_tun) entered learning state [ 423.492764][T11686] loop6: detected capacity change from 0 to 2048 [ 423.553993][T11686] loop6: p1 < > p4 [ 423.559166][T11686] loop6: p4 size 8388608 extends beyond EOD, truncated [ 423.589661][ T2981] loop6: p1 < > p4 [ 423.599526][T11687] 9p: Bad value for 'rfdno' [ 423.605979][ T2981] loop6: p4 size 8388608 extends beyond EOD, truncated