last executing test programs: 5m37.051018681s ago: executing program 3 (id=4): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x1400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) ioctl$EVIOCGKEY(r0, 0x8040453f, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={0x0, 0x0, 0x2d}, 0x28) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x1e, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x24}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0xffffffffffffffff, 0x6, 0xffffffffffffffff, 0x8) clock_gettime(0x3, &(0x7f0000000280)) timer_create(0x1, 0x0, 0x0) r2 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x0) process_madvise(0xffffffffffffffff, &(0x7f00000024c0)=[{&(0x7f0000001200)="8d93aff3fe76d7ec6367aa196c537fa685e122628d5512f2a190afd5c8cf125754cfe926dfec443b73636d9eaeb9319cd8fa7c4c1073942ae0c2872f0449072527e86f8e4a8c7851f172c6d8aa659ae13fe41d5c2aea937a69f26edcdbb6c763d63c5d027a5e1329561a010515006a92d86514310b6eba77d85c7b6350a57ce017b94b2d6fdbb6ec0ea7d4fbc08e1fd191e26871726283a9f6f8939714691a9008fcf8e9d0b02ce298a51d1b9098cd1229f2e3cf94336ea519c971363b7e7f9cc3431dc5166f0a3e6d140a37920ec51b759a7ec3af6402e940cc5e2d1e472edc17a440b171c8baf7673923044e98d9a8097c42aae71c935ff94dc26ebccc9043d1f196cffd70c54f065fbfa226fc34ce6b7a5ae4979e2169d225be12289ae4745e6e8139da83e2a6dab3ba6c42eed016f3303682c8e4cb9b485014851578dfb8c0c964f15565a6bfbd0d4d039a0d4461213e34180f87acdf7bbb5194ce2d7d99f868cb6c8fb3c94c2e5353eeaa36f718f245c487e32c6d1c1f6717661b45c8df2c204d52d47ad5766fd18cda3750ee30234649ab4b83a4af4f6a3291cb7a89f01a4dab0ac3a71ba4ca16f389e3a655ff948657df5c012a5d4af929678f08c3545827e9d375562a5c8186924bc4486373433308dbfd2445c3fbbcac8e2291d8172b6f6ce397b2803528b2c19e5e8c52925eef071cf94e30165dc5b9260c015cf8e7c8eba479ecc1e8ed9e6e989cd8b77574e12b2be8675929742c8238b7cecf50bc256cb21fa0bdd3ece1dac82888c9dcbce859653b6281817bd116c2b89cf629b205e2552c29df9d83c92696edb1b60322de28531917b19c873829238031b1d2f5d031338fe6730f4726d4bee84dd3027b1bca58c2a2a66bdcde291bbdbd8d4ce7dc6ca4742768e07f8d06c6204de1a1d9a86d5dc568a4b639f70191243e75161893d49438c3d595211542dcf6665cc8d538a9d6f45622859638f2ce3faa092b3bf289d13e6f2b80774bfe3f67fa9a9cba6d59f4422fcd03b8fceae2f040287b2d8e6078b6b411536ad0b86c1c42636afa94e0de451b5c772dbb49d607791d5b8f56d9d7cc2531c9bb7be149bed91386eaca9880d8e792dbb25fd4aa171c757ab891a6419bf2a5c73d7f6314477dea44ea3be81c172189fe9f4a0ef9105665e080fc99ca2ef55ae9bb9fd5645a914500a5f5b0ca72c088d9ea4637e2627df488f4b8ae25c3de66b7fc46db4f1fb5001d4c4fb4c9d2b04f46350538fd59ccc23271fc55a4dca548811f964a6b0a8ed3817c1e5e34883fc3b03193131b3eff05a16a3e9ac2c26b2862c386fa9b9f69a096544dace31be4a3515173aa110a74ff5531a0a53989bda351d8ea269c0437c3fc7100796cfdac8b4be78fb21a8430d9c7bc08bf2d6f17a63cd445d72133df714cc1773aabfb5b6360be9c6283e7a5337eb7a59ea38661bf268d20452c7c5c78b1e1e63635d9f6827bc2e5e37151812e6caed39e0dd60243136244aa98f37b90b9adc06ca466e0b5a183ea0d86a61f9516b3561e80cf9856b2b061e96c8563e9c3d0881993195e0bb7af74c5e266b7892cc9919929b633a9757759ded4bb19f2686a1fe4968d1d08dbe37e7f921eee05bd42b902d3698f843c270fce608522a97e1aca6290075e27c4523559020700b786875f738b5e68dc4779572a00ccf50227809291b3d97408af9aeda97bcd50", 0x4be}, {&(0x7f0000002200)="6ba32fe44142fcef827a1853498dee11a3ffbf8f2cebf8d4ff0fe73231d5fa36832e27937efac61c211049d735ed3a68ce", 0x31}, {&(0x7f0000002240)="3a49bcb121c5e95d1a282e9ae5a893284af45a37c90f0c1221cba28a47a09ab96bcfe1ca06be41d1e3bc3e98bab4b188d842da94c3c525a07e", 0x39}, {&(0x7f00000023c0)}], 0x4, 0x14, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') write$cgroup_int(r3, &(0x7f0000000000)=0x40000000001, 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r3, 0x24, &(0x7f0000000080)={0x7}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/exec\x00') 5m34.007259457s ago: executing program 3 (id=11): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc8, 0x3}, 0x100100, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000090002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) mknodat(0xffffffffffffff9c, 0x0, 0x11c0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000280)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x24, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x10, 0x0, @opaque="3196b913fb8ebb82"}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000240), 0x1, 0xb9f, &(0x7f0000000c00)="$eJzs3E9vVFUbAPDn3k5LS/vS8ubNqxATmxjUaBwKJZiwAtdGTXThktpOSdPhj21NbMOi4F5dGOOCxPARTNzLxpWJC1wofgJiJIboBliMufOnjEyn1DLtgfL7JWfuOXNm7vM8c2HuucncBvDUGi8e8ogDEXE6ixhtPp9HxEC9Nxix2njd3dsXp4uWRa327h9ZZBFx5/bF6da+suZ2uDkYjIjrb2Tx30864y4ur8xPVauVheb48NLZC4cXl1demzs7daZypnLu2OTrxyaPT072sNabFz746rmf3nrx8tVPJ97+ct8PWZyMkeZcex29Mh7ja59Ju1JETPU6WCJ9zXra68xKCRMCAGBDedsa7v8xGn1xf/E2Gt//nDQ5AAAAoCdqfRE1AAAAYJfLXP8DAADALtf6HcCd2xenWy3tLxJ21q1TETHWqL91f3NjphSr9e1g9EfE3j+zaL+tNWu87ZGNF5G+/bFStNim+5A3snopIp5d7/hn9frH6ndxd9afR8RED+KPPzB+kuo/2YP4qesH4Ol07VTjRNZ5/svX1j+xzvmvtM65aytSn/9a67+7Heu/+/X3dVn/vbPJGAfvvXK921z7+u/9z36dKeIX20cq6l+4dSniYGm9+rO1+rMu9Z/eZIzh6ZtXus0V9Rf1ttpO11+7GnGovprrrL8l2+jvEx2enatWJhqP6+x/+fjG8duPf9GK+K1rgZ1QHP+9sbXjf2GTMcae+f1At7mH15//NpC9V+8NNJ/5eGppaeFIxED2ZufzRzfOpfWa1j6K+l9+YeP//+vVX3wnrDY/h+Jfz6XmthhffiDm8KGj32y9/u1V1D+zxeP/+SZjfP3dlQ+7zaWuHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAnQx4RI5Hl5bV+npfLEcMR8b/Ym1fPLy69Onv+o3MzxVzEWPTns3PVykREjDbGWTE+Uu/fHx99YDwZEfsj4ovRofq4PH2+OpO6eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANYMR8RIZHk5IvKI+Gs0z8vl1FkBAAAAPTeWOgEAAABg27n+BwAAgN2v4/q/9I/R4E7mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwK60//lrN7KIWD0xVG+FgeZcf9LMgO2Wp04ASKYvdQJAMqW2fq1WqyVMBdhhrvGB7CHzg11n9vQ8FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeXy8duHYji4jVE0P1VhhozvUnzQzYbnnqBIBk+jaazHYuD2DnlVInACTjGh9oLPXv1Ro65we7vnPPdqYFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGNmpN6yvBwReb2f5+VyxH8iYiz6s9m5amUiIvZFxC+j/XuK8ZHUSQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBzi8sr81PVamVBR0enh52heCzS2HIn9TcTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApLC6vzE9Vq5WFxdSZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKktLq/MT1WrlYVt7KSuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAdP4OAAD//1rfDrQ=") r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="0800259c6646a425b65d399d6414b4a6ee07f06551bbf109c6b8fa9c6c3a9865b882adb67d46e8b65b6510e7966a920fcd469bce7c9e3366baeefba31314c00f628da1f381813f8b19e905ec97ca18a8f0386dfb384a01cb4b492f25912619518fee829b72c9f81861efdea84b6cc04c7450b097abf177e06aed38aab7e34aecf0d47d31994d2837f4da718a128575657a4cbe92fca8"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$binfmt_register(r2, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 5m31.275902636s ago: executing program 3 (id=24): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r4}}]}, 0x3c}, 0x1, 0x600, 0x0, 0x408d0}, 0x30) r7 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r9, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x9, 0x38}, 0x80, &(0x7f0000000640)=[{&(0x7f00000006c0)="c8", 0x1}], 0x1}, 0x0) 5m30.891386054s ago: executing program 3 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 5m30.890986834s ago: executing program 32 (id=27): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) syz_emit_ethernet(0xaf, &(0x7f00000000c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c002f9fa33d3a6430270000000000000000ff00000000000000010004c91000000000"], 0x0) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) recvmmsg(0xffffffffffffffff, &(0x7f0000005180), 0x400000000000166, 0x1a000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket$kcm(0x11, 0x2, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x38}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) 3m9.444742603s ago: executing program 4 (id=988): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) sysinfo(&(0x7f0000001280)=""/4) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f00000001c0)=""/12, 0xc}], 0x2) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xfffffffffffffec8) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=r4, @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x840) (async) unshare(0x22020600) write$nci(r2, &(0x7f00000006c0)=ANY=[@ANYRES16=r4], 0x115) (async) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x47) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) (async) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000000)={0x0, 0x8, 0x2, 0x1}, 0x8) (async) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) (async) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") (async) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380c07b, 0x0, 0x1, 0x0, &(0x7f0000000140)) (async) mkdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x22) 3m8.741379338s ago: executing program 4 (id=995): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000010018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3m8.66333215s ago: executing program 4 (id=996): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) socket$kcm(0x2, 0xa, 0x2) (async) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\v\x00\x00\x00B\x00\x00\x00>'], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x3, 0x0, 0x0, 0x7fff}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000100)=0x5) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) (async) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000380)={0x0, @private, @dev}, &(0x7f0000000580)=0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000b0601040000000000000000010000000500010007000000050001000700000008000940000000050900020073797a31000000000800094000000008540007"], 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x40) (async) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="940000000b0601040000000000000000010000000500010007000000050001000700000008000940000000050900020073797a31000000000800094000000008540007"], 0x94}, 0x1, 0x0, 0x0, 0x8001}, 0x40) r9 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x6a4fbca0687807bb, &(0x7f00000000c0), 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x20048894) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000980)={'tunl0\x00', r2, 0x40, 0x7, 0x9, 0x9, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, {[@rr={0x7, 0xb, 0x41, [@empty, @multicast1]}, @rr={0x7, 0xb, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @rr={0x7, 0x7, 0x60, [@empty]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x15, 0x1, 0x0, [{@empty, 0x2}, {@empty, 0x6}]}, @ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000700)={'ip_vti0\x00', &(0x7f0000000980)={'tunl0\x00', r2, 0x40, 0x7, 0x9, 0x9, {{0x15, 0x4, 0x0, 0x6, 0x54, 0x67, 0x0, 0x0, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @multicast1, {[@rr={0x7, 0xb, 0x41, [@empty, @multicast1]}, @rr={0x7, 0xb, 0x4d, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @rr={0x7, 0x7, 0x60, [@empty]}, @noop, @ra={0x94, 0x4, 0x1}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x15, 0x1, 0x0, [{@empty, 0x2}, {@empty, 0x6}]}, @ra={0x94, 0x4}]}}}}}) pipe(&(0x7f00000045c0)) (async) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r11, &(0x7f0000000900)=[{&(0x7f0000000680)="f802f9a32485a6870d76f1602da04126b3989aef", 0x14}], 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff8}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000780)={0x2, 0xf, 0x7fff, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000800), &(0x7f0000000840)=[{0x1, 0x4, 0xc, 0x7}, {0x5, 0x2, 0xb, 0x5}, {0x5, 0x2, 0xe, 0x7}, {0x3, 0x1, 0x5, 0x8}, {0x2, 0x5, 0x3, 0x6}, {0x4, 0x2, 0x10, 0xb}, {0x2, 0x5, 0xd, 0xa}, {0x0, 0x5, 0xb}], 0x10, 0x80000000}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000001fc0)=@filter={'filter\x00', 0x42, 0x4, 0x358, 0xffffffff, 0x1e8, 0xb0, 0xb0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x0, 0x70, 0xb0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "6b07000000000000005b4809088400ed0000006c0000040500"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x29}, @multicast2, 0x0, 0x0, 'bond_slave_1\x00', 'batadv_slave_1\x00', {0x836b636e4bafbd70}, {}, 0x62, 0x2, 0x6}, 0x287, 0x110, 0x138, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'macvtap0\x00', {}, 'vxcan1\x00', {0xff}, 0x1b, 0x18}}, @common=@unspec=@statistic={{0x38}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x6, 0x34, "9c4b4435910fbfcf24e0fae0e0bfd3b90000000000000000000000000001"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x75, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r13, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m8.410747975s ago: executing program 4 (id=1002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0xffffffffffffffc0}, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) creat(&(0x7f0000000040)='./file2\x00', 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{}, "e4b2f3d08191d3ac", "6d2aecb2a9533ce818de8b49df95a408", "03debcd1", "7632f456c9604598"}, 0x28) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) socket$inet(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, 0x0, 0x20004010) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffe, 0x0, 0x100}, 0x1c) mount_setattr(r2, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r2}}, 0x20) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x4044454) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m5.376540381s ago: executing program 4 (id=1010): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x57, 0x1, 0x8, {0xffff}, {0x4c, 0x2}, @cond=[{0x8, 0x53c8, 0x8, 0x800, 0x80cb, 0x7}, {0xfffe, 0x5, 0x1, 0x4, 0x6, 0x1}]}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0xfffffffffffffffc, 0x822b01) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000000000)=0x401) write$char_usb(r4, &(0x7f0000000040)="e2", 0xff0f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r3) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x1, 0xfffffffe, 0x1}}) r5 = socket$inet(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) sendmsg$IEEE802154_ASSOCIATE_RESP(0xffffffffffffffff, 0x0, 0x4004c0d0) socket$vsock_stream(0x28, 0x1, 0x0) futex(0x0, 0x8, 0x2, 0x0, 0x0, 0x1) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000060601080000003422cdf031f17d"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40004) 3m5.023428249s ago: executing program 4 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000055466673bb510d72a5311f91602d2e36b0000000000000000040000850000205600000095000000000026cfe38adbf973a7d8dcc5bb7831205ea8ffec0520b1dedaf5ea99a5bea36d42ada5ddf92950bb50c2965a7752a26816d5e98f6343e44f81fc1b905731c2d94b71a94936e341cf4cdf4fa1a38eb4346818b3a243dadad3e81165"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x1, 0x800000c1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m5.023047169s ago: executing program 33 (id=1016): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1000000}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r2, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000055466673bb510d72a5311f91602d2e36b0000000000000000040000850000205600000095000000000026cfe38adbf973a7d8dcc5bb7831205ea8ffec0520b1dedaf5ea99a5bea36d42ada5ddf92950bb50c2965a7752a26816d5e98f6343e44f81fc1b905731c2d94b71a94936e341cf4cdf4fa1a38eb4346818b3a243dadad3e81165"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a3, 0xc000, 0x1, 0x800000c1}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 14.977005406s ago: executing program 5 (id=2213): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001ff0)={0x1d, r2}, 0x10) sendmsg$can_raw(r1, &(0x7f0000001fc8)={0x0, 0xfffffffffffffd2c, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x1}, 0x6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0xfe68}, 0xee}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)={0x40, r3, 0xf22cbce20af0f23f, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffff8000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8800) 14.907150607s ago: executing program 5 (id=2214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x1c, 0xf, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x7, 0x2, 0xfe, 0x4, 0x88, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, 0x0) futex(0x0, 0x5, 0x300, 0x0, &(0x7f0000004000), 0xb0024000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast1, 0x8000}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x800) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000780)={0x1, 0x1}) shutdown(r0, 0x1) 14.110454795s ago: executing program 5 (id=2218): socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x200) (async) epoll_create(0x200) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="b50400bd4aae9e0a6bed471dcc727e790000040000000400000005000100000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xffdc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) (async) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r4}]}, 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) socket(0x10, 0x3, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x10}, @timestamp], 0x2) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911073000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="911073000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, 0x0, &(0x7f00000004c0)=r1}, 0x20) accept(r3, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000840)=0x80) (async) r7 = accept(r3, &(0x7f00000007c0)=@pptp={0x18, 0x2, {0x0, @loopback}}, &(0x7f0000000840)=0x80) pwritev2(r7, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0x10a}, {&(0x7f0000000400)="c92d", 0x2}, {&(0x7f0000000440)="79c37136fb320bf9c72099eb2d885441e9d28fbc5c73d477e40695e6cada641b731c8ec3f36af24633975fbee991bb8048ef4edd86983c9792b35afbc51fc3daa152973c645e56dddc19ace026be1543029be41746afb56513", 0x59}], 0x3, 0xb, 0x9, 0x2) 13.927167489s ago: executing program 5 (id=2221): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x1018ed8, &(0x7f0000000440)={[{@sysvgroups}, {@noload}, {@mblk_io_submit}, {@jqfmt_vfsv0}, {@discard}, {@usrjquota}, {@grpquota}, {@quota}]}, 0x6, 0x659, &(0x7f00000013c0)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb0100180000000000000044000000440000000a000000000000000100000d0a00000004000000000000000600000003000013080000000900ef1578370000b602000006000000050000004e0000000300000008000000830d000000005f00002e6130"], &(0x7f0000000f40)=""/4089, 0x66, 0xff9, 0x4, 0x10}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000005bc0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0x0, 0x7, 0x6, 0x807e9, 0x2000000000, 0x2000000000002, 0x3, 0x100000000003, 0x7ffd}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000000000000b00000000140d1462726f6164ee4b930315788963617374c8c18e02"], 0x30}}, 0x0) syz_emit_ethernet(0xe2, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x40000000000002ce, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}]}}, {"6ec26a96d1d8cbc81406dffdd9109f2fd95a8825ee9dead6195ca50000000000000000537ddcd3080f1ee2c9ffeac934ed0a530a1cb40aaaa34898291e47aea3ee27b7e900f08207521dc4ce3feca880868c5eb45fb1f8174c7656f310f1646f67b0b021fa1fe7778f78c31d08c4d4de58f8d0593ab46fed2adaac7246c577a10d5245397facf9acf144a39c6ec6baae5a6b3173181c129d"}}}}}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c3040, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0x2, 0x1, 0x0, 0x8}, 0x20) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000000, 0x0, 0x2, 0x5, 0x0, 0x5}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000340)=[0x5], 0x0, 0x200000000000, 0x1, 0x1, r0}}, 0x40) creat(&(0x7f0000000140)='./file0\x00', 0x4) 13.203751594s ago: executing program 5 (id=2222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="40000000105e93a39fffffff000202000000000090b8d3563d52fbb95858d84d4044a5a03345a5b7ab5ae389eabf310bcb944bea3e75b4e268", @ANYRES32=0x0, @ANYBLOB="270201001001040008000a00", @ANYRES32=r4, @ANYBLOB="1800128008000100677470000c00028008000100", @ANYRES32, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="440000006a0002002abd7000ffdbdf25020000000000000008000a000200000008000a00000000000400090008000500", @ANYRES32=r2, @ANYBLOB="08000a000000000008000500", @ANYRES32=r4, @ANYBLOB="fbd38a792064a51d24bcbc415e9da9fa130e735e28246cac2514a84327767b0c02e4d8ffcac824d0ecb535d90cbd552c890147fe6f7b75c8fc6661187b0cb551db918960b81999a96d9741dad0a524af4753ebab5eeee56bb0b28600a200709c479c25e1cadb162d857abfa2f5936683a5f237d5bb517aa4cde5d647b21bb81201d4dad98c44"], 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x9, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = syz_open_procfs(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r6, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) listns(&(0x7f0000000040)={0x20, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xf4240, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.freeze\x00', 0x0, 0x0) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000045c0), 0x1012e, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x3, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40440}, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000480)={[{@grpquota}, {@bsdgroups}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") rename(&(0x7f0000000000)='./file2\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x5, 0x0) 12.720877405s ago: executing program 5 (id=2227): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2a1, 0x0, 0x10000]}}) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x23, 0x3, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000)="da25", &(0x7f0000000080)=@tcp=r3, 0x2}, 0x20) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 12.706337345s ago: executing program 34 (id=2227): openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0x400}, 0x3c06, 0x0, 0x4, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x3c, 0x3ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x2a1, 0x0, 0x10000]}}) r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x48) socketpair(0x23, 0x3, 0xff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000000)="da25", &(0x7f0000000080)=@tcp=r3, 0x2}, 0x20) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 3.806801067s ago: executing program 0 (id=2308): socket$kcm(0x2, 0x200000000000001, 0x0) unshare(0x22020600) close(0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x145042, 0x52) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r1, 0x0, 0x0, 0x8800000) mmap$IORING_OFF_SQ_RING(0x0, 0x4000, 0x1000002, 0x2013, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x19, 0x4, 0x8, 0x2e320c8d}, 0x48) 3.405852286s ago: executing program 2 (id=2312): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file2\x00', 0x2800000, &(0x7f0000000140), 0x1, 0xbe0, &(0x7f0000001000)="$eJzs3N1rXGkZAPDnnHy3qZOKiPWmEZEWxGlaSbFFsJWKN14Ieis0pJMSMv0gE6lJA070HxD1WvBGUIvSC3vdGwVvvXG7t1v2YqEs2WYXlmU3y5mPZJrM5KOZycmmvx+8Oe/HOed9npzMnPNCZgJ4Y41nP9KIMxFxM4koNPrTiBis1YYjqvX91laXpz9aXZ5OYn39Z+8nkUTEy9Xl6ea5ksb2ZKMxHBH/+2ESX/7t9nkri0tzU+Vyab7RvrBw5/6FyuLSd2bvTN0u3S7dvXj5e5OXJi9PXJnsWq4fv3PtyYff+PG71U/+9umjD/7wlySuxWhjrDWPRtYHNh7jG7+TVv0RMdWF8x8FfY18WvNM+nc5KO1xUAAAdJS2PMN9NQrRF5sPb4X49/9zDQ4AAADoivW+iHUAAADgmEus/wEAAOCYa/4fwMvV5elmyfc/Eg7Xi+sRMVbPf61R6iP9Ua1th2MgIk68TKL1Y61J/bADG4+I529f+WdWos3nkHutuhIRX2t3/ZNa/mONT0JvzT+NiIkuzD++pf1Fyv9aF+bPO38A3kxPr9dvZNvvf+nG80+0uf/1t7l3vY6873/N57+1bc9/m/n3dXj+++ke53j41z896DSW5f/9Jz/6R7Nk82fbAyW1Dy9WIr7e3y7/ZCP/pEP+N3c5dxL1UxQ+e1DqtM9e8u/Gd/F0sv7niHPRPv+WPHb6fqILM7Pl0kT9Z9s5Vv47+fdO8x+F63+iQ/47XP/hrO/+K2fq/KU+v7hx4/G2zsbuu+efvjeY/LxWG2z0/GpqYWH+YsRg8pPt/Zd2zre5T/McWf7nv7nz67/d33/2nlBt/G1kqaw0tln7N1vm/MGjh//qFE9z/Zfn9b+1/+tf6/vdHuf41n9+f35rX/M13br+zUo2//OkvhYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKY0IkYjSYsRkdTqaVosRpyMiK/EibR8r7Lw7Zl7v7x7KxuLGIuBdGa2XJqIiEK9nWTti7X6ZvvSlvZ3I+J0RPyxMFJrF6fvlW/lnTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbTkbEaCRpMSLSiFgrpGmxmHdUAAAAQNeN5R0AAAAA0HPW/wAAAHD8Wf8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY6fPPn2WRET16kitZAYbYwO5Rgb0Wpp3AEBu+vIOAMhNf94BALnZ5xrf4wIcQ8ku48Nte7N3j6GexAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0XTuzNNnSURUr47USmawMTbQ9oizhxgd0Etp3gEAuenbabD/8OIADt9rv8RPdTcO4PC1X+MDb5Jkl/HhzX2qr44M9SwmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6e0VpJ0mJEpLV6mhaLEaciYiwGkpnZcmkiIr4UEW8VBoay9lDeQQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANB1lcWlualyuTT/OpXkYIerqHSq/Hq+sjgSuYdxuJXkaIRRr+T9zgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQB4qi0tzU+Vyab6SdyQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3iqLS3NT5XJpfg+Vx/vZuaWSd44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOTn8wAAAP//XiMNCQ==") perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='smaps_rollup\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$tipc(r2, &(0x7f0000000340)=@id, &(0x7f0000000380)=0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, 0x0, 0x0) preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, 0x300, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x482042, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r4, &(0x7f0000000140)='2', 0xfdef, 0xfecc) copy_file_range(r4, &(0x7f0000000000)=0x7, r4, 0x0, 0x2, 0x0) 2.994366895s ago: executing program 1 (id=2317): socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000018c0)=@raw={'raw\x00', 0x8, 0x3, 0x540, 0x0, 0x11, 0x148, 0x340, 0x0, 0x4a8, 0x2a8, 0x2a8, 0x4a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, '\x00', {0x7}}}}, {{@uncond, 0x0, 0x128, 0x168, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'erspan0\x00', {0xff}, 0x4, 0x1e}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0xd, 0x0, 0x2}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x5, 0x3, {0xff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x1f4, 0xd50, 0x1000000, &(0x7f0000000100)="ff412f66b0833efc8864968781", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x20}, 0x50) 2.898850767s ago: executing program 1 (id=2318): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0xdd) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES16], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000c000000000000000000008018110000", @ANYRES32=r1, @ANYBLOB="0000000000b70300003f0000008500000083000000bf09201aec0000005509010020000050adc4590000000000bf91000000000000b70200000000000085000085000000b70000000000e7009500000000000000003300438a402d4d8eef7727a4a3488a326f2299b47ec2e41bfb2f7fb73b4972753a177cbc127526b349bd9b8d6a83f7b606c13d54b2716bb0bec1ee15210c77541120e7825fe5afd30f1a0478c7cc0ae2"], &(0x7f00000000c0)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41000, 0x47, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x3}}, './file0\x00'}) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) (async) ptrace$getregset(0x4204, 0x0, 0x201, &(0x7f0000001a00)={&(0x7f0000000a00)=""/4096, 0x1000}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000001ff0)={0x1d, r5}, 0x10) (async, rerun: 32) sendmsg$can_raw(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) (async, rerun: 32) recvfrom(r3, 0x0, 0x0, 0x100, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async, rerun: 32) r8 = fsmount(r7, 0x0, 0x80) (rerun: 32) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r6, r8, 0x16, 0x0, @void}, 0x10) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x8016, &(0x7f0000000140), 0xfc, 0x515, &(0x7f0000000c40)="$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") (rerun: 32) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x2}) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) (async, rerun: 64) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x3, 0x8, 0xff, 0x0, 0x0, 0x2, 0x40008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x10832, 0x2, 0x2, 0x5, 0xfffffefffdf7bbfe, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x7c00}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000100)={[{@abort}]}, 0xf7, 0x491, &(0x7f00000005c0)="$eJzs3MtvVNUfAPDvnba8of3xQxQEHUUj8dHSgsrChRpNXGhiogtc1rYgMlBDayKk0WoMLg2Je+PSxL/AnRsjLoyJW01cGhKijQnFVc190WE6A21pO7bz+STTOec+5pzvvffMPfee3gmgY1XTP0nEjoj4NSJ68+ytC1Tzt9mZqZEbM1MjSczNvfFnki13fWZqpFy0XG97kTlciah8msTzycJyJy5cPDNcq42dz3JXtkScfW9g4sLFp06fHT41dmrs3NDx48eODj77zNDTKxJnGtf1/R+OH9j3yluXXxs5cfntK9+k1dp7MJ9fH8cd3WgSUBPVdKv9NZdpnPfoEuq+HuysSyfdbawIS9IVEenu6snaf290xfzO642XP2lr5YBVlZ6bNreePT0HbGBJtLsGQHuUJ/r0+rd8rVHX4z/h2gsRm4r07MzUyOzN+LujUkzvWcXyqxFxYvqfL9NXLPU+BADAMmR9myeb9f8qsTd7z8c6dhVjKH0R8b+I2B0R/4+IPRFxT0S27L0RcV++8lzvIsuvNuQX9n8qV5vWeYWk/b/n6vp+s3XxF299XUVuZxZ/T3LydG3sSLFNDkfP5jQ/eJsyvnvpl89bzavv/6WvtPyyL1hU4Gp3ww260eHJ4ZXaCNc+jtjf3Sz+5OZIQHoE7IuI/Uv76F1l4vTjXx9otdCd428uOypXYJxp7quIx/L9Px0N8deXNTDZcnxyYEvUxo4MlEfFQj/+fOn1VuUvN/6Vku7/bbce/w1L9P6d5OO1PVGrjZ2fWHoZl377rOU1zXKP/03Jm9mY9U/v5NM+GJ6cPD8YsSl5NcuX13TZ9KH5dct8uXwa/+FDzdv/7mKdNP77IyI9iA9GxAMR8WBR94ci4uGIOHSb+H948ZF3bxN/Ekm1rft/tOn3383jvy+pH69fRqLrzPffthoxX9z+PxbT2XdtLvv+u4PFVvAuNx8AAACsC5WI2BFJpT9PV3dEpdLfn/8P/57YVqmNT0w+cXL8/XOj+TMCfdFTKe909dbdDx1MpotPzPNDxb3icv7R4r7xF11bs3z/yHhttM2xQ6fbfmv7j7L9p/7oanftgFXneS3oXI3tv9KmegBrbzHnf9cCsDE1af9b21EPYO25/ofO1az9f9SQ1/+HjWlh+/+9yU/WARuR/j90riW3f3cHYcNw/oeOdDfP9S8/UT4ssPzP2bLoJ/w7JVH+4sVqlrU15qdEpe0hd1AibTFrW+j8b6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsZ/8GAAD//3GU5zM=") creat(&(0x7f0000000300)='./file0\x00', 0x0) (async, rerun: 32) socket(0x10, 0x3, 0x0) (rerun: 32) 2.797960939s ago: executing program 1 (id=2319): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@sysvgroups}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 2.72746719s ago: executing program 1 (id=2320): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x220000, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000200)={0x4, 0x25, 0xa9e4}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x8400, &(0x7f0000000380)={[{@uid}, {@session={'session', 0x3d, 0x5f}}, {@map_acorn}, {@hide}, {@check_relaxed}, {@nocompress}, {@mode={'mode', 0x3d, 0x10001}}, {@session={'session', 0x3d, 0x35}}, {@nojoliet}, {@gid}]}, 0x0, 0x691, &(0x7f0000000f00)="$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") mmap(&(0x7f00005d1000/0x2000)=nil, 0x2000, 0x5, 0x12, r0, 0x2d640000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) unshare(0x64000600) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x8050) 2.448537987s ago: executing program 7 (id=2321): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x4800000000000007, 0x9549, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x2}, 0x11efa, 0x4, 0xffffff81, 0x0, 0x1002, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000300)='(pu&00\t||~\"pg\xbdu\xdbl$\xa0jT\xee\xc60\xa2\x1b\x13\f\xaeY\a\xc4\xbb\r\x03\xd1\t^\xbah\xe0\xde\x8c\xfb\xb7\xc3\x80}\xef\x99E\x0f\b\x0e\xa4F\x96\xf2\xb7\x14\xeb\xb9Z\x15\xf5 Lk\xe4\x11\"\x91$\xd7Uv\xa5n\xb1\x19\xe1\xdd') setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}, 0x1}, 0xd3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000040), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0x4, r3}, 0x38) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r2, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) 2.364444029s ago: executing program 2 (id=2323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/sem\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f0000000600)=""/156, 0x9c) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000500)={&(0x7f00000000c0)="ff96762ca412d1107a55f4f84e6660e21519f40b590c1a94ed9ac12f982cd4867fe97ac30b798cf96a694cc1ee5018c4af06d4254c2a81799d8ecadf8897d2aa70ad2da1326c99540ff04f04d3ca818ae8c3edfa43ba1ca0ddadbe34f20a5aa2a829413946136564ddcd7fe7db4a79cc5d392039bb3e610341336fff775c682eda0b36405ee7b6dfcfd403ec997cc1bfa69cb6f3e6017c4f03b0e6eabb29d3933d89c80866b6a901d9590f4f2a41680d4a6d5ea15f9b9b4a", &(0x7f0000000180)=""/151, &(0x7f0000000240)="02e04847a90e1b623b0abb4da213dffea8b2fe7b84a457d0edb9503c017a1b21d2335894193a5e14d4e142314789a0e0895ba7404faf2f6b9d9269c7f1ef93fd318feee85ad340d55928739dcdc42ac7d65a863c86cb3ce53bb0458fe54626779619b21e83be40427c5ffb5bee459b2b06a8ea11a8b62dfe2c07c332b7f0a547a4eabc2152cb53407c8a1a0e030ebd5bfaff8c62a00e", &(0x7f0000000440)="c309d5060f2c2568bce7c7526074cad85b558df70869d72aeadde2994b3ef08300c8928144aa23e56d661f017d7a5377a9932a9e4d0b83dd06decfb2ff13ddc5097a7bc2e9e594597783c41ff62a9b7144e3fa4f9f8cc4fbebdf9e40562e1da46147ca5137b7949bb1b84a868df920f551a7c25ac5028dd227c97beb352087d8ceae6591dc1023a5b36afff1db302d926d302e2023488833e9d2c7c7bc179a902db22d974213e3cbc651f2bf80f5c28ddf1bb9f9", 0x6, r1}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8931, &(0x7f0000000400)={'hsr0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="680000001000370406000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0088000000000000340012800900010069706970000000002400028008000300ac1eff010800140001000000050005000300000005000900040000001400030074756e6c30"], 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x40020) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000300)=0x0) ioprio_set$pid(0x0, r4, 0x2007) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 2.107246534s ago: executing program 0 (id=2325): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "0cbeb67c876b6de6", "dec5441e1fbf4ca771bbdfa10bf4708a", "2ce23716", "afe9312ecf5bb974"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x40, 0x1}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000080)={0x40, 0x1}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x0) 2.058850055s ago: executing program 2 (id=2326): ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, &(0x7f00000015c0)) unshare(0x100000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0xd, 0x4, &(0x7f0000000240)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x24}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) unshare(0x60000600) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80800) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000801000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00000b0000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$msr(r1, &(0x7f0000000d40)=""/43, 0x2b) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001d0001000000000004086aa42d"], 0x30}}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x4000002) recvmmsg(r3, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000280)=""/245, 0xf5}, {&(0x7f00000004c0)=""/4088, 0xff8}, {&(0x7f0000000100)=""/189, 0xbd}], 0x3}, 0x60}], 0x1, 0x22, 0x0) r4 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xaec8, 0x10, 0x2, 0x1a0}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB="5c000000020603000000000000000000000000020900020073797a3200000000050004000100000014000780080013005607497408001240000000030500010007000000050005000a0000000d000300686173683a6e6574000000000e73a8b50df69ce5c29ef150a9842a172e9f2b634d446deb63fc3f338af4e08e75c0f0cb5f73591057ddd7a29ed77f8d57d3795fd8c941f9a8775b4130e3b7fa16f7de33e46cbf19a4e9fc"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000380)={{0x3, 0x2, 0x8, 0x3, 0xa5eb}}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x70bd2a, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_OPERSTATE={0x5, 0x10, 0xde}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r8 = dup(r5) socket$nl_route(0x10, 0x3, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x19c) quotactl_fd$Q_QUOTAOFF(r9, 0xffffffff80000301, 0x0, 0x0) write$binfmt_elf32(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="7f454c4605085308070000000000000002000600030000fb0f0100003800000008010000e80b000001802000010006000000080000000000020000000080000000000000040000000a000000010100006c00080000000080"], 0x58) close_range(r4, 0xffffffffffffffff, 0x0) 1.943535168s ago: executing program 7 (id=2327): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfa, 0x8, 0x7fffffff}]}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2000000000000021, 0x2, 0x10000000000002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="9372616e730266642c7266646e6f3d71aed1c3821fb70d7116035f39314f6ad780cca592d7aa0176ed00db41cebc58ee07a9c26f35ea78ba27e06d63db03158dafd88d74514b83ec6a687b268c8c120f5c0faeca06a32b5a99d2577bb660f58f4eb05dbb96197df124dfd4ac67ef1614cc36cc7e114f892a233cc96c735d2e148cf758609775485be4480fef46b8a5a33bad2033b297d2d4d20146b19f35ab31260951553cbdec2eb6b7932300fe51", @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYBLOB=',\x00']) r3 = fcntl$getown(r1, 0x9) sched_setscheduler(r3, 0x6, &(0x7f0000000080)=0xffffffff) 1.943116248s ago: executing program 0 (id=2328): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = mq_open(&(0x7f0000000100)='&\x14', 0x40, 0x118, 0x0) mq_notify(r2, &(0x7f0000000000)={0x110c230000, 0x3, 0x1, @thr={0x0, 0x0}}) mq_notify(r2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100), r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x1010000, 0x71, 0x10, 0x41}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r4, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x814) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100000042abd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a84800002318000018002200adb03a3a560dad85b57f80fcc7201d94ebf2e5a508001b0009000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x24000800) r7 = gettid() r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x94, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x4c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x48, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x1ffe5}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0x300}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x94}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) fcntl$lock(r2, 0x26, &(0x7f0000000140)={0x0, 0x4, 0x56d, 0x1, r7}) 1.892619269s ago: executing program 6 (id=2329): r0 = syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000580)={[{@fat=@errors_continue}, {@utf8no}, {@fat=@usefree}, {@fat=@sys_immutable}, {@utf8}, {@uni_xlateno}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}]}, 0x0, 0x275, &(0x7f0000000600)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x1000, 0xe17e, {{0x40, 0x4, 0x0, 0xf, 0x100, 0x66, 0x0, 0xb, 0x2f, 0x0, @remote, @multicast2, {[@cipso={0x86, 0x20, 0x1, [{0x2, 0xf, "8c48dd27e4bcc11470fd485581"}, {0x2, 0xb, "a3d23c987dba6a9628"}]}, @cipso={0x86, 0x1a, 0x2, [{0x0, 0xe, "c74f386ed7490978bba86df0"}, {0x6, 0x6, "59112595"}]}, @timestamp_prespec={0x44, 0x3c, 0x20, 0x3, 0x4, [{@loopback, 0x9}, {@rand_addr=0x64010100, 0x81}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x43}, 0xc5f0}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xea}, {@private=0xa010102, 0x6}]}, @end, @timestamp_addr={0x44, 0x14, 0x16, 0x1, 0x6, [{@dev={0xac, 0x14, 0x14, 0x36}, 0x7fff}, {@loopback, 0x2}]}, @timestamp={0x44, 0x10, 0x8a, 0x0, 0x9, [0xb, 0xffff, 0x10]}, @timestamp_prespec={0x44, 0x4c, 0x87, 0x3, 0x0, [{@rand_addr=0x64010101, 0xb}, {@empty, 0x4}, {@multicast2, 0xfffffff9}, {@private=0xa010100, 0x8001}, {@multicast1, 0x2}, {@local, 0x3}, {@multicast1, 0x1}, {@broadcast, 0xe}, {@rand_addr=0x64010101}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@delqdisc={0x80, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x9, 0x5}, {0xa, 0xb}, {0xf, 0x6}}, [@q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2c}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x811}, 0x4000040) r3 = openat(r0, &(0x7f0000000040)='./file0\x00', 0xe8c80, 0x20) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002080)=@newtaction={0x894, 0x30, 0x12f, 0x0, 0x0, {}, [{0x880, 0x1, [@m_police={0x87c, 0x1, 0x0, 0x0, {{0xb}, {0x850, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x81, 0x8c4b, 0x800, 0xa1, 0x4, 0x8, 0x3, 0x7, 0x1, 0x3, 0x8, 0x1000003, 0x7, 0xfffffe01, 0x1, 0x2, 0x4, 0x81, 0x9, 0x1, 0xb3b0, 0x5, 0x69, 0x8, 0x1000, 0x5, 0x8c0, 0x2, 0x75, 0x9, 0x7f, 0x4, 0x9, 0x0, 0xce, 0x1, 0xb, 0x0, 0xc4ff, 0x9436, 0x8, 0x3, 0x1, 0xa3f, 0x9, 0x200, 0xaaa, 0x2, 0x9, 0x200, 0x2, 0x86, 0xfffffff9, 0x100, 0x0, 0x3, 0xfffffffe, 0x6, 0x6, 0xd, 0xfd1, 0x8, 0x6, 0xff, 0x0, 0x7, 0x235, 0x1, 0x10001, 0xeec, 0x0, 0x4, 0xdbdf, 0x8, 0x5, 0x6, 0xee3a, 0x9a, 0x0, 0xffff, 0x9, 0x10001, 0x4, 0x5, 0x8001, 0x4, 0x0, 0x7, 0x1, 0x6, 0x200, 0x101, 0x0, 0x4, 0x7, 0x1000, 0x1, 0x4, 0x1, 0xfffffffa, 0x8, 0xd27, 0xf6, 0x4, 0xe48, 0x100, 0x9, 0x6, 0xfffffff7, 0xa6, 0x9, 0x59, 0x8, 0x5, 0x9, 0x9, 0xfffffff7, 0x723, 0xbc6, 0x4, 0x7, 0x10000, 0x7, 0xffff, 0x1, 0x0, 0xbb8, 0x3, 0xb, 0x2, 0xffffffff, 0x9, 0x5, 0x9, 0x1, 0x80000001, 0x80000000, 0x8800000, 0x4, 0x40, 0x0, 0x6789, 0x40, 0xdd9, 0x7ff, 0x800, 0xe, 0x1, 0x2, 0x5347, 0x5, 0x9, 0x9, 0x8, 0x5, 0x101, 0x8, 0x3, 0x3, 0x1ff, 0x8004, 0x7, 0x1, 0x9, 0x801, 0x9, 0x54aa3579, 0x1, 0xfffffffe, 0x4, 0xdbdd, 0x4, 0x8000, 0x4, 0x4, 0x4, 0x3, 0xfffffff8, 0x1000, 0x200005, 0x400, 0xb, 0x0, 0x8, 0x6, 0x3f800000, 0x8, 0x810a, 0x6f5334a4, 0x29ad, 0xffffffff, 0x4822, 0x4, 0x4, 0xff, 0x368, 0x0, 0x9, 0x7f, 0xfffffffe, 0xac9, 0x8, 0x4, 0x5, 0x5, 0x3, 0x30000000, 0xb5000000, 0x4, 0x3, 0x4, 0x0, 0x3, 0xeb4, 0x8, 0x3, 0x5, 0x1, 0x7f, 0x7, 0x6, 0x3ff, 0x1, 0x1, 0x1, 0xfff, 0x3, 0x4, 0x3ff, 0x8000, 0x8, 0x9, 0x7, 0xa, 0xfff, 0x4, 0x6, 0x1, 0x8, 0x2, 0x10001, 0x4, 0x9, 0x0, 0x1, 0x25, 0x0, 0x6, 0x40, 0x6, 0x6, 0x6, 0x13, 0x6, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x2, 0x1, 0x7ff, 0x7, {0x5, 0x1, 0xfffe, 0x0, 0x3, 0x6}, {0x3, 0x1, 0xff, 0x2, 0x7, 0x239c}, 0x5, 0x7}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8000, 0x6, 0x1, 0xffff000, 0xfd, 0x3, 0x4d, 0x3, 0x9, 0x4, 0xffffff15, 0x2, 0x48, 0x9, 0x100, 0x6, 0x0, 0xfffff943, 0x4, 0x7ff, 0x8, 0x5, 0x40, 0x400, 0x0, 0x2, 0x6, 0x8, 0x7fffffff, 0x6, 0x401, 0x8, 0x3, 0x0, 0x7, 0xfffff1b2, 0x3af6, 0xb, 0x8, 0x2, 0x8, 0x2, 0x6, 0x6942, 0x54740000, 0xbd, 0x0, 0x1, 0x8, 0x1, 0x7fff, 0xca, 0x2, 0x0, 0x9, 0x8, 0x81, 0x3, 0x5, 0x3, 0x9, 0x77e, 0xb95, 0x8, 0x0, 0x0, 0xdcb, 0xfffffff7, 0x1, 0xffffffff, 0x800, 0x3, 0x38e, 0xfffffffd, 0x4, 0x7fffffff, 0x5, 0x8000, 0xa, 0x6, 0x4, 0xdffffff8, 0xd2, 0x4, 0x9, 0x2, 0xa170, 0x81, 0x8000, 0x1687, 0x8, 0x4, 0xb, 0x0, 0xffffffff, 0x7ff, 0x4, 0x7b, 0x183cf332, 0x8, 0x7f, 0x80000001, 0x8, 0xf41849fd, 0xfffffffd, 0x7, 0x6c, 0x5, 0x6, 0x3, 0x6, 0xfffffff9, 0x9, 0x6, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0xf3, 0x8, 0x1, 0x7fffffff, 0x6, 0xd0c9, 0xa6d, 0x0, 0x3, 0xd6, 0x4, 0x7bf6, 0xffffffa1, 0x73c, 0x6, 0x6, 0x5, 0x200, 0x5, 0x2, 0xe2df, 0xfffffff6, 0x100, 0x1000, 0xa1d4, 0xd4, 0xd, 0x5, 0x1, 0x5, 0x0, 0x3, 0x0, 0x401, 0xd53, 0xfff, 0x10, 0x4, 0x8, 0x6, 0x1f1, 0x9, 0xfffffffe, 0x0, 0x1, 0x5, 0x8, 0x1, 0x5, 0xa, 0x5, 0x5, 0xffffff35, 0x8, 0xd, 0x101, 0xffffffff, 0x8, 0xc24, 0xd84, 0x6, 0x3, 0xa, 0x10001, 0x3, 0x1, 0xfffffffa, 0x7, 0xc8, 0x8, 0x5, 0xffffffff, 0xb, 0x6, 0x4, 0xfffffff7, 0x20e, 0x7, 0x7fffffff, 0x10001, 0x4, 0x400, 0x8, 0x2, 0x9, 0x6, 0x5, 0xfffffff9, 0x5, 0x1, 0xe, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x72, 0x1, 0x8, 0xf, 0x80, 0x6, 0x3, 0x8, 0xda4, 0x81e, 0x1, 0x3, 0x1, 0x1, 0x7, 0x9, 0x4, 0xa, 0x81, 0xeb1, 0xfff, 0x80000001, 0x5, 0x7, 0x0, 0x3, 0x1, 0x9, 0x1, 0xe7, 0xfffffff5, 0x4, 0x3, 0xccb4, 0x400, 0xa51, 0x8, 0x3, 0x4155, 0xedb]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x894}}, 0x0) unshare(0x8040480) recvmsg$can_raw(r4, 0x0, 0x40000000) open(&(0x7f0000000000)='./file0\x00', 0xc000, 0x162) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1e, 0x100, 0x4, 0x9, 0x4216, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xfffffffe}, 0x50) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x1, 0x30, 0xfffffff9, 0x0, 0xf}) 1.876864589s ago: executing program 1 (id=2330): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) set_mempolicy(0x4005, 0x0, 0xd) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x809, 0x10402, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xbb69}, 0x100e10, 0x7, 0x6, 0x1, 0xffff, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2de, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4000, 0xf, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, r5, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xb8) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x44a401, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r7, 0x0) 1.82358399s ago: executing program 7 (id=2331): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@noblock_validity}, {@sysvgroups}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x6}}, {@block_validity}]}, 0x1, 0x5d4, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x4fed0) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.797846491s ago: executing program 0 (id=2332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) set_mempolicy(0x4005, 0x0, 0xd) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x809, 0x10402, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xbb69}, 0x100e10, 0x7, 0x6, 0x1, 0xffff, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2de, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4000, 0xf, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, r5, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xb8) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x44a401, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r7, 0x0) 1.711759093s ago: executing program 6 (id=2333): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x140, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_config_ext={0x8417, 0x1}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000440)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) set_mempolicy(0x4005, 0x0, 0xd) socket$can_j1939(0x1d, 0x2, 0x7) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x809, 0x10402, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xbb69}, 0x100e10, 0x7, 0x6, 0x1, 0xffff, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x13) preadv(0xffffffffffffffff, 0x0, 0x0, 0x2de, 0x0) r5 = getpgid(0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x4000, 0xf, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, r5, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x8) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0xb8) close(0xffffffffffffffff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x44a401, 0x1c3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r7, 0x0) 1.663469373s ago: executing program 2 (id=2334): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 766.429193ms ago: executing program 1 (id=2335): request_key(&(0x7f0000000400)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f0000000340)=')\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x100100, 0x0, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c0cd5a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x1c3880) syz_usb_disconnect(r1) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @time_exceed={0x2, 0x1, 0x0, 0x0, '\x00', {0x0, 0x6, "000006", 0xff81, 0x3a, 0x0, @mcast1, @empty}}}}}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[], 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000680)='net\x00') getdents64(r4, &(0x7f00000000c0)=""/54, 0x36) getdents(r4, 0xffffffffffffffff, 0x5a) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in6=@dev={0xfe, 0x80, '\x00', 0x24}, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x2, 0x9, 0x80}, 0x5000000}, [@tmpl={0x84, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6e}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x0, 0x4, 0x0, 0xabb}]}]}, 0x13c}}, 0x80c4) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) read$msr(r3, &(0x7f0000000200)=""/13, 0xd) syz_usb_connect$uac1(0x1, 0xbc, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b00)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x100, 0x9, 0x6c, 0x6, 0x10, 0x6}, 0x111, &(0x7f00000006c0)={0x5, 0xf, 0x111, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x3, 0xe, 0x8, 0x4}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x5, 0xf, 0xfffc, [0xfe7fcf, 0xf0, 0xc0c0]}, @ss_container_id={0x14, 0x10, 0x4, 0xfe, "67b371bb8376f01b775e6c2e3f5de22e"}, @generic={0xd3, 0x10, 0x4, "2848359cf594256707fffb7f3af3fdd8d232c75ee7195d29fe13d2c19638efe01ab5087a13d723d37c512eb4e283ab8f90a19141a2679aa038b2bdb7db7e5498907582afa4fd68b091d69beebe5313dfb713a6232dd1a38b49e9c9addb4de46c3a6b135a96daaa044c7fc3045f9f6d86e0c76e92d7d147e468e1c2e8416d720068aca8a68904d5dcb8e257983e82156dc2f43c7900889b6c3920374e48549c907f4b1fc3bfd28253fe2c0ce6da80a3d7591db6eef8e2ba0866ac557323a006e9d47575d28beb20faf9c5b5cd2a15acda"}]}, 0x7, [{0x4, &(0x7f0000000800)=@lang_id={0x4, 0x3, 0x415}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x3401}}, {0x100, &(0x7f00000008c0)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x423}}, {0x7a, &(0x7f0000000a00)=@string={0x7a, 0x3, "62e2c80996a6d5980d2fcd605332a025c19c8da5d8fbc2fb8ec70a3c6eee98a2af2c30ecc13cfd862690573fbbd21cd1610354d5c80c1bd78fc8e05825e98f3ceba764f896312d63f05e0c4511860b92c69b3ac5b153a128e469d7116e2246cc8fa40447d01ae8d9f7835d711a02e915cc823463de6ca6b8"}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x300a}}]}) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x0) 760.834243ms ago: executing program 2 (id=2336): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x9, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1, 0x2, 0xc, 0x5, 0xfffffffc, 0x808000, 0x7ff, 0xff}}}}]}, 0x58}}, 0x4890) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r8, 0xf, 0x70bd2d, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x3c, r8, 0xf, 0x70bd2d, 0x25dfdc02, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x3}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xc2, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffff6c7621d7cc948100000086dd6000000000883a00fc000000000000000000000000000000ff02000000000000000000000000000102009078000000006018b08800000000fe8000000000000000000000000000bbfc0100000000000000000000000000002c090000000000000019d7897ecdf7133b3e03ab65762dcf02a95b38f5f35b434e6b81000eeb446a13d537b723e69524086158c20400000000c910ff010000000000000000000000000001c20400"/194], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r12, 0x40345410, &(0x7f00000001c0)={{0x0, 0x3, 0xcc}}) ioctl$SNDRV_TIMER_IOCTL_STOP(r12, 0x54a1) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f00000003c0)=0x8) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000240)={r13, 0x2}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=r13, @ANYBLOB="d5073e75"], 0x8) 620.156527ms ago: executing program 7 (id=2337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) io_setup(0x600, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000000)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)=' ', 0x1}]) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES8, @ANYBLOB="28d7000300000000000000", @ANYRES64], 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000068d000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x88, 0xffd, 0x1, 0x3}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r4], 0x28}}, 0x0) r5 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x353}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000210704000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d"], 0x50}}, 0xc080) 430.5151ms ago: executing program 0 (id=2338): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000001300)="b461802305624431ed33", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x83a7}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') syz_clone(0x200000, &(0x7f0000000000)="6cad099cb307e50cf1380bb4b320904fc8578940a734d334b9421de44802fadfba91450a46e573b09ba128ef68d5be4c024e4960ed64a23bdb5de94d275a5d6a5fccd199ecaa586b6b11635d7b73c1", 0x4f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="991ea06cb789e06bf272d6fe185c9bb03a963e0fea130f8423b87afd2ad3f60a4f") madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lseek(r3, 0x2004, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x40010, 0xffffffffffffffff, 0x0) (async) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000001300)="b461802305624431ed33", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x83a7}, 0x50) (async) syz_open_dev$sg(&(0x7f0000000140), 0xffffffffffff1810, 0xa482) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) (async) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000140)='smaps\x00') (async) syz_clone(0x200000, &(0x7f0000000000)="6cad099cb307e50cf1380bb4b320904fc8578940a734d334b9421de44802fadfba91450a46e573b09ba128ef68d5be4c024e4960ed64a23bdb5de94d275a5d6a5fccd199ecaa586b6b11635d7b73c1", 0x4f, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="991ea06cb789e06bf272d6fe185c9bb03a963e0fea130f8423b87afd2ad3f60a4f") (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) (async) lseek(r3, 0x2004, 0x0) (async) 260.317914ms ago: executing program 0 (id=2339): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x31, 0x0, 0x100000000) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000400)={[], [{@fsmagic={'fsmagic', 0x3d, 0xfff}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@fsname={'fsname', 0x3d, 'ext4\x00'}}]}, 0xfa, 0x4b4, &(0x7f0000000600)="$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") bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000200)=0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@sr0, r4, &(0x7f0000000300)={0xe8, 0xfff, 0x1ebe, 0xe, 0xc, 0x6, 0xffc0000000000000, 0xfffffffffffffff8, 0xfb0}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) pidfd_send_signal(0xffffffffffffffff, 0x15, 0x0, 0x0) unshare(0x100000) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000040)) syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f0000000280)='./bus\x00', 0x3d7cdb, 0x0, 0x80, 0x0, &(0x7f0000000600)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, 0x0) pread64(r7, 0x0, 0x0, 0x6) sigaltstack(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 258.800954ms ago: executing program 6 (id=2340): getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@volatile={0x10}, @var={0x1, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x2e]}}, &(0x7f0000000240)=""/200, 0x37, 0xc8, 0x1, 0xaf30, 0x10000}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/240, 0xf0, 0x0, &(0x7f00000004c0)=""/118, 0x76}}, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x11, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xac4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='syzkaller\x00', 0x10000, 0x0, &(0x7f00000006c0), 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0x0, 0xe6, 0x6e59}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x7fff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0x1, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000940)={0x1, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000980)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)='syzkaller\x00', 0xf4d, 0xf9, &(0x7f0000000080)=""/249, 0x41000, 0x1, '\x00', r0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x0, 0x3, 0x101, 0xffff}, 0x10, r2, r3, 0x6, &(0x7f0000000ac0)=[r4, r5, r6, r7], &(0x7f0000000b00)=[{0x3, 0x3, 0x5, 0x3}, {0x3, 0x2, 0xa, 0xa}, {0x1, 0x5, 0xa, 0x7}, {0x1, 0x3, 0x0, 0x8}, {0x5, 0x1, 0xc, 0xf}, {0x0, 0x2, 0x7, 0x7}], 0x10, 0x5}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r9, 0x89e0, &(0x7f0000000c80)={0x4, 0x1}) r10 = socket$key(0xf, 0x3, 0x2) getsockname(r10, &(0x7f0000000d00)=@alg, &(0x7f0000000d80)=0x80) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f0000000dc0)={0x5, 0x7, 0x1, 0x800}) ioctl$XFS_IOC_FSCOUNTS(r8, 0x80205871, &(0x7f0000000e00)) mmap$IORING_OFF_SQES(0x0, 0x1, 0x300000c, 0x10010, 0xffffffffffffffff, 0x10000000) r11 = openat$full(0xffffffffffffff9c, &(0x7f0000000e40), 0x800480, 0x0) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e80)='./cgroup/syz1\x00', 0x200002, 0x0) poll(&(0x7f0000000ec0)=[{r3, 0x2011}, {0xffffffffffffffff, 0x346}, {r11, 0x1000}, {r12, 0x4}, {r6, 0x2040}], 0x5, 0xff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r8, 0x0, 0xa2, 0x2d, &(0x7f0000000f00)="e6dfdda52971c6a58eb2bc3f7597574ffea8b8aeb1a2eef5cc83ed49d26b252b5da208f464f7c3effe27956e4543e33fdf8a9e1baaa099a020b28758ff23cd884c05c1a2bf54c7398d9ced2b1477359486ca2ea772cb81590d5cdd3233fedb7148a43f4e66064986bf241780735b36263c24fdb07acab1ee240d72cae22fca623305269f4e3d2993096f20356b5bd625db9ecf945eb194072479fa4c2afb7c5fa89a", &(0x7f0000000fc0)=""/45, 0xfff, 0x0, 0x42, 0xda, &(0x7f0000001000)="c923122083222e9feaeee753d30d3f006147b478566f3f3cacf7cd4c7d0ecfa73f60d5d2224368998704f29d659845c0e1686fc0f2762c79839450ae5495248d70dc", &(0x7f0000001080)="b1d2c7b498d8b12947fac92e085070af2c903ecaa88264e8bac0fd5117de72682f9205439299f9a2777de2f9401abf64bab36e9bf1b595c375fd53f69c11b554e84f71f96736e77b02e8d55e022a3ee8bc648318f0921412fe600830d77ecb4da2388be11cef423aa33f60e3732cb57546182657b411b1ff22482a3fb6d4229215db09d54ca6587e523f2e3a3fe0c9bc2dcf6a2930ca32da6947fda12687cbae12878d62e6322ca0989cbe2bbc0c305f80c7c12323d5113f02ae31803b979d40491a03e7ba177a8cb78f7737d304e956b4d7eac10bd6d23f097a", 0x4, 0x0, 0x8}, 0x50) r13 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r13, 0x0, 0x48c, &(0x7f0000001200)={0x2, 'bridge_slave_1\x00', 0x1}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r11, 0x40042408, r11) write$binfmt_elf32(r11, &(0x7f0000001240)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x47, 0x7, 0xff, 0x80000001, 0x2, 0x6, 0x9a75, 0x1cd, 0x38, 0x16c, 0x0, 0x4, 0x20, 0x2, 0xee, 0x3, 0x5}, [{0x6474e551, 0x2, 0x29a, 0x57f, 0x889d, 0xfffffffc, 0x9, 0x1}, {0x60000000, 0xfffffffb, 0x0, 0x54, 0x0, 0xfff, 0x5, 0x2}], "7e89d8e619499c213844a7bb9b06951f4a1e87e7ce974d41e58cb839c95255ad28617595e3b53f1bf761e067389bd07d2909163649bf4a9ca783eab84b49e7087831e34ce197e0c9d8daf370685b996dfdcddcc4164ab7261509ae6cf7b96c33323495a356705462ce15f21335122a3ef2639ed8fdce6e61a862c9e6b274dc45acd129d533b132082e4e9240b014376b2f26faefb6d1cbb1dcd0ac89891f8b037c5791ca697124ff9334d7c9a1809e169583f7d2b9fa74f825830a6752adc6676805072fbcef3daf9af4249858b23b49ea", ['\x00']}, 0x249) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SEC_TRIM_FILE(r9, 0x4018f514, &(0x7f00000014c0)={0x1, 0x0, 0x3}) getsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001500)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f0000001600)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r11, 0x29, 0x23, &(0x7f0000001640)={{{@in6=@loopback, @in=@local, 0x4e21, 0x0, 0x4e20, 0x6, 0xa, 0x0, 0x20, 0x87, r14, r15}, {0xffffffffffffff81, 0x800, 0x7fffffffffffffff, 0x81, 0x2, 0x8, 0x4, 0x1000}, {0x0, 0x38, 0xe, 0x1b2}, 0x80000000, 0x6e6bba, 0x0, 0x1, 0x2}, {{@in=@multicast2, 0x4d2, 0x3c}, 0xa, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3502, 0x2, 0x0, 0x5, 0x8, 0x5, 0xf1}}, 0xe8) setpriority(0x2, 0xffffffffffffffff, 0x8) ioctl$SG_GET_RESERVED_SIZE(r11, 0x2272, &(0x7f0000001740)) 214.556375ms ago: executing program 2 (id=2341): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x181341, 0x84) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000004c0)=@md0, 0x0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0xc}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@noblock_validity}, {@nomblk_io_submit}]}, 0xfe, 0x566, &(0x7f00000015c0)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x7008b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x1, 0x4d1a}, 0x1, 0x35, 0x3, 0x9, 0xb, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffdfffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x34, 0x18, 0x1, 0x1070bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb6}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4085}, 0x20040844) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt(r2, 0xfffffff9, 0x1, &(0x7f00000006c0)=""/145, &(0x7f0000000780)=0x91) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x2c600, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) rmdir(&(0x7f0000000080)='./bus\x00') socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x6}, 0x10) listen(r4, 0x0) readv(r4, &(0x7f0000001600)=[{&(0x7f0000000040)=""/41, 0x29}], 0x1) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4000400}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x48, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x4f}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x48004}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r5, 0x0, 0x20040040) r6 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="20002900ff00fddbdf256b0000006fa126be", @ANYRES32=r8, @ANYBLOB="0c009900810000000c0000000a00060008021100000100000a001a0008021100000100000a0006000802110000010000"], 0x4c}}, 0x20004040) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x64, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x24d}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x388}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x80) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000026bd7000fcdbdf253000000008000300", @ANYRES32=r8, @ANYBLOB="0c0099003f0d00003d0000000600502706680000060036007c000000060036003e000000"], 0x40}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000090) sigaltstack(0x0, 0x0) fstat(r3, &(0x7f0000001740)) 214.278105ms ago: executing program 6 (id=2342): r0 = syz_ublk_setup_io_uring(0x6c7b, &(0x7f0000000240)={0x0, 0x2e24, 0x1000, 0x2, 0x34d}, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f0000000380)={0xffffffffffffffff, 0x1, 0xfff, 0xffffffff, 0x25}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 110.390327ms ago: executing program 7 (id=2343): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) (rerun: 64) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[], 0x24}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x28e2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c0000000000850000001c0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000080), 0x2a) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x2}, 0x20) (async) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r6, &(0x7f0000000040)=[{&(0x7f0000000180)=""/88, 0x58}], 0x1, 0x78, 0x6000000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, &(0x7f0000000080)) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) socket$inet(0x2, 0x2, 0x73) (async) shutdown(0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r2, 0x0, 0xa2, 0x30, &(0x7f0000000500)="9e09db699d403af5f1d6ea7a5550c5c40db80859daa33751003f43a8c7342d3af6ee510fe8f5b77706794a888f49e3eca6afa2086ff4a22d83f041fd74be087d8ce9655887861a00b6db7eabfe45e6c5e3e6fa418682144d38c0eae0ccca3aa540487dfa1ce78a11f704d2fa307605080763dbc3ccd9726f4bdfd6816cf5e846eda8f9e4cd594765d1d405a733fd44f35b2cd9842b7baac12cfcf07a721aca778f40", &(0x7f0000000680)=""/48, 0x6, 0x0, 0xa3, 0xe8, &(0x7f00000006c0)="4c97ac4691e9d31d75cf8fe9813b1e457d4bb88dd1cbbfe1f1182a4b9cb2cf6a45f65771eb069eda15fe377a2f1cf66379d346da27bcee210d84a8b2a385339518d91efd4f67e87971b99852f673beed800df56b27ba1a66f73e0643216b96fa00e4101f7ca5fdf1a81c7c87a7cb9bb36d81825afc2b52a82443af6c8e40c8ccd7753f65657257c3f350e7dd40ec339182a9d21442ff71c3c5f225af51d7709dd12543", &(0x7f00000007c0)="b48762bae51c7879e69d6c9d5325cd65c5c56b23a9a8f1de0ffc5e4f8b6470c899114c4499ecd3b81cabbde7f686095b1b60682115ec5310ce6ec228a019d23478def14a39384416332d6691db1d72b7bb4aa027266d1ba5c56ea8b3889b043f5b0bc094d7259c7997c3a38f1182be48b8cbf68ef48bb96a62ec3bdc7f704dbf26076eae72870a9914a04f4d9f5e6a5a78e0c1840e9ca52d979fa8bc880c94f1c2daa413595a14559669c5a87ff56b8fcdc4764441bf24cf269070dcfb819e2929b3f46e95d8692a16e0fa37805f64b87a504d6f90d38edc4615055e2d0e0e53b20c165da851a375", 0x4, 0x0, 0x3}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000001800010000000000fedbdf25020000000001000900b96d3965a136e6ab000000060015000400000088001680840008"], 0xac}}, 0x0) 110.143307ms ago: executing program 6 (id=2344): r0 = memfd_create(&(0x7f0000000600)='\xf3e\t\x9f8\xc0y\x01c\x1fnux\xfd\xd7\x8e\x7f\x89\xb8\xc5I~\x04\x03~K\xfbP\x00\x00\xfa\x81\f\x1et\x00'/50, 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) lseek(r0, 0x0, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x10, 0xfe, 0x0, 0x0, 0x0, 0x9, 0x68048, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xed1f, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x8, 0x0, 0x8, 0x2}, 0x0, 0x5, 0xffffffffffffffff, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000025, &(0x7f0000000200), 0x4) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a88000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac4200083f0afb9fdd672bad09dfb78c7699c74e82fa0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000050}, 0x20040040) r8 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r8, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r9, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x81, 0x2e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}}, 0x20004040) r11 = openat$random(0xffffffffffffff9c, &(0x7f0000001f40), 0x0, 0x0) ioctl$RNDADDENTROPY(r11, 0x40085203, &(0x7f0000001f80)={0xfffffff9}) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)={0x6c, r6, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x48, 0xbe, "62b1462be81b8cb2cb58f5648e9b95ba7f99db5c77f66386c38beb6a1d78dab571df7e6e435c6943c23094a8833de1ef4fcccf7a79c5bac6419f0be3eb8925d9e3fd422c"}]}, 0x6c}}, 0x20000000) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000504fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="02550400f7385bac5c1c07194d998cd56ed304000000180012800b00019ad37036746e6c00000800028004001300"], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r12) sendmsg$BATADV_CMD_GET_NEIGHBORS(r12, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x14, r13, 0x331, 0x70bd2c, 0x25dfdbfc, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4000000) 46.974709ms ago: executing program 7 (id=2345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2, &(0x7f00000001c0)=[{}], 0x8, 0x10, &(0x7f0000000200), 0x0, 0x0, 0x20020, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) (async, rerun: 64) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) getpid() r2 = syz_open_dev$evdev(0x0, 0x2, 0x2002) write$evdev(r2, 0x0, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) (rerun: 32) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xfffffe04, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xa, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) (async) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0xfdf9, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x4e, 0x1}, {0x0, 0xc0, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0x20000000) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010040, 0x0) (async, rerun: 64) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10104, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xe}, 0x1d146, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r5, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="700000001000100000000000fcdbdf250000ffff", @ANYRES32=0x0, @ANYBLOB="59680000008100003c0012800b0001000900657461700000000600e000000106001800070000000500170001020000060010004e230000050008005a00000000000000000000000000000000fe9d2f3cada753d3ebc7a4d9e28dc5f234b2000000"], 0x70}}, 0x4008894) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000c0d0) (rerun: 64) 0s ago: executing program 6 (id=2346): openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/slabinfo\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r2}, &(0x7f0000000540), &(0x7f0000000740)=r0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) kernel console output (not intermixed with test programs): 283.077575][ T9259] loop6: detected capacity change from 0 to 4096 [ 283.702805][ T9259] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 283.828300][ T9259] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 283.892375][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.039319][ T6348] page_pool_release_retry() stalled pool shutdown: id 40, 51 inflight 121 sec [ 284.185030][ T9288] netlink: 'syz.2.1591': attribute type 3 has an invalid length. [ 284.385254][ T9296] loop2: detected capacity change from 0 to 512 [ 284.466342][ T9296] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 284.693308][ T9296] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 285.372917][ T9296] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1591: bg 0: block 248: padding at end of block bitmap is not set [ 285.460711][ T9296] loop2: lost filesystem error report for type 5 error -117 [ 285.464620][ T9296] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1591: Failed to acquire dquot type 1 [ 285.471996][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 285.472019][ C0] EXT4-fs (loop2): last error at time 1784589433: ext4_validate_block_bitmap:441 [ 285.522441][ T9296] loop2: lost filesystem error report for type 5 error -28 [ 285.522914][ T9296] EXT4-fs (loop2): 1 truncate cleaned up [ 285.536599][ T9296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 285.555466][ T9296] EXT4-fs (loop2): shut down requested (1) [ 285.577860][ T9311] team0 (unregistering): Port device team_slave_0 removed [ 285.605206][ T9311] team0 (unregistering): Port device team_slave_1 removed [ 285.649859][ T9314] loop6: detected capacity change from 0 to 512 [ 285.721570][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 285.788297][ T9322] loop2: detected capacity change from 0 to 512 [ 285.808154][ T9322] EXT4-fs (loop2): 1 orphan inode deleted [ 285.832008][ T9322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.869544][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.910032][ T9326] loop6: detected capacity change from 0 to 4096 [ 285.919777][ T9326] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.950412][ T9326] vcan0 speed is unknown, defaulting to 1000 [ 286.004472][ T9326] hsr0 speed is unknown, defaulting to 1000 [ 286.021155][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 286.021168][ T28] audit: type=1400 audit(1784589434.049:2184): avc: denied { write } for pid=9327 comm="syz.2.1602" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 286.092364][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.407561][ T28] audit: type=1400 audit(1784589434.439:2185): avc: denied { read } for pid=9351 comm="syz.0.1610" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 286.858766][ T9367] vcan0 speed is unknown, defaulting to 1000 [ 287.093524][ T9372] tipc: Enabled bearer , priority 24 [ 287.132522][ T9367] hsr0 speed is unknown, defaulting to 1000 [ 287.143116][ T9372] loop5: detected capacity change from 0 to 1024 [ 287.196078][ T9372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.528320][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.762276][ T9388] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 287.805123][ T28] audit: type=1400 audit(1784589435.839:2186): avc: denied { read } for pid=9386 comm="syz.5.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 287.809004][ T9388] No such timeout policy "syz0" [ 287.965551][ T28] audit: type=1400 audit(1784589435.999:2187): avc: denied { ioctl } for pid=9393 comm="syz.0.1622" path="socket:[25402]" dev="sockfs" ino=25402 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 288.226427][ T9388] macsec2: entered allmulticast mode [ 288.248255][ T9388] geneve1: entered allmulticast mode [ 288.401124][ T9388] geneve1: left allmulticast mode [ 288.486105][ T9402] vcan0 speed is unknown, defaulting to 1000 [ 288.549183][ T9402] hsr0 speed is unknown, defaulting to 1000 [ 288.688445][ T28] audit: type=1400 audit(1784589436.719:2188): avc: denied { read } for pid=9407 comm="syz.6.1625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 288.774779][ T9413] No such timeout policy "syz1" [ 288.980976][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'. [ 289.117754][ T9426] tmpfs: Bad value for 'mpol' [ 289.172991][ T9425] vcan0 speed is unknown, defaulting to 1000 [ 289.255652][ T9425] hsr0 speed is unknown, defaulting to 1000 [ 289.429275][ T28] audit: type=1400 audit(1784589437.439:2189): avc: denied { execute } for pid=9428 comm="syz.5.1632" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=25480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 289.459212][ T9430] random: crng reseeded on system resumption [ 289.467800][ T28] audit: type=1400 audit(1784589437.489:2190): avc: denied { write } for pid=9428 comm="syz.5.1632" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.502167][ T9429] support for the xor transformation has been removed. [ 289.542949][ T9434] loop2: detected capacity change from 0 to 1024 [ 289.543937][ T28] audit: type=1400 audit(1784589437.489:2191): avc: denied { open } for pid=9428 comm="syz.5.1632" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 289.574984][ T9434] EXT4-fs (loop2): filesystem is read-only [ 289.614368][ T9434] No control pipe specified [ 289.764236][ T9444] loop2: detected capacity change from 0 to 128 [ 289.783959][ T9444] /dev/loop2: Can't open blockdev [ 290.224625][ T9457] loop2: detected capacity change from 0 to 764 [ 290.233611][ T9457] rock: directory entry would overflow storage [ 290.239825][ T9457] rock: sig=0x5245, size=8, remaining=5 [ 290.262165][ T9457] vcan0 speed is unknown, defaulting to 1000 [ 290.329084][ T9457] hsr0 speed is unknown, defaulting to 1000 [ 290.485094][ T9458] ip6gretap1: entered allmulticast mode [ 290.575467][ T9458] batman_adv: batadv0: Adding interface: ip6gretap1 [ 290.593331][ T9458] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.619028][ T9458] batman_adv: batadv0: Interface activated: ip6gretap1 [ 290.708145][ T28] audit: type=1326 audit(1784589438.739:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 290.730271][ T9440] binfmt_misc: register: failed to install interpreter file ./file2 [ 290.780580][ T9469] tipc: Enabling of bearer rejected, already enabled [ 290.953805][ T28] audit: type=1326 audit(1784589438.739:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.004497][ T9472] loop2: detected capacity change from 0 to 512 [ 291.060773][ T9472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.085157][ T28] audit: type=1326 audit(1784589438.739:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.118967][ T28] audit: type=1326 audit(1784589438.739:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.124631][ T9472] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.144467][ T28] audit: type=1326 audit(1784589438.739:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.144499][ T28] audit: type=1326 audit(1784589438.739:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.228206][ T28] audit: type=1326 audit(1784589438.739:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.253954][ T28] audit: type=1326 audit(1784589438.739:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 291.280091][ T28] audit: type=1326 audit(1784589438.739:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7c694f707 code=0x7ffc0000 [ 291.306411][ T28] audit: type=1326 audit(1784589438.739:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd7c690e6ce code=0x7ffc0000 [ 291.329375][ T9487] tipc: Enabling of bearer rejected, already enabled [ 291.333426][ T28] audit: type=1326 audit(1784589438.739:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd7c690e6ce code=0x7ffc0000 [ 291.366520][ T28] audit: type=1326 audit(1784589438.739:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9462 comm="syz.6.1643" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd7c690e6ce code=0x7ffc0000 [ 291.409782][ T9472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1645'. [ 291.468804][ T9494] loop6: detected capacity change from 0 to 512 [ 291.485830][ T9494] ext3: Unknown parameter 'nouser_xattr' [ 291.548292][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.572099][ T9463] sctp: [Deprecated]: syz.6.1643 (pid 9463) Use of int in max_burst socket option. [ 291.572099][ T9463] Use struct sctp_assoc_value instead [ 292.414287][ T9536] loop6: detected capacity change from 0 to 512 [ 292.435194][ T9536] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.444889][ T9537] netlink: 'syz.1.1659': attribute type 28 has an invalid length. [ 292.472983][ T9536] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 292.485305][ T9536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 292.503631][ T9536] System zones: 1-12 [ 292.509944][ T9536] EXT4-fs (loop6): orphan cleanup on readonly fs [ 292.519477][ T9536] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1660: bg 0: block 361: padding at end of block bitmap is not set [ 292.576694][ T9536] loop6: lost filesystem error report for type 5 error -117 [ 292.576829][ T9536] EXT4-fs (loop6): Remounting filesystem read-only [ 292.584172][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 292.584204][ C0] EXT4-fs (loop6): initial error at time 1784589440: ext4_validate_block_bitmap:441 [ 292.584231][ C0] EXT4-fs (loop6): last error at time 1784589440: ext4_validate_block_bitmap:441 [ 292.701413][ T9536] EXT4-fs (loop6): 1 truncate cleaned up [ 292.722194][ T9557] netlink: 'syz.0.1666': attribute type 2 has an invalid length. [ 292.722837][ T9536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 292.793090][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 292.955537][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1671'. [ 292.985685][ T9575] vlan2: left allmulticast mode [ 293.007444][ T9575] geneve0: left allmulticast mode [ 293.027404][ T9575] vlan2: left promiscuous mode [ 293.045397][ T9575] geneve0: left promiscuous mode [ 293.056384][ T9575] bridge0: port 3(vlan2) entered disabled state [ 293.096992][ T9575] bridge_slave_1: left allmulticast mode [ 293.113494][ T9575] bridge_slave_1: left promiscuous mode [ 293.139435][ T9575] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.248395][ T9575] bridge_slave_0: left allmulticast mode [ 293.264657][ T9575] bridge_slave_0: left promiscuous mode [ 293.327172][ T9575] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.724972][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1677'. [ 293.778597][ T9602] loop5: detected capacity change from 0 to 256 [ 294.118529][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.128139][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.138368][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.167382][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.180530][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.199056][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.210776][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.228748][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.238589][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.250525][ T9599] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1677'. [ 294.251580][ T9623] loop2: detected capacity change from 0 to 7 [ 294.614612][ T9650] loop5: detected capacity change from 0 to 512 [ 294.622121][ T9659] syzkaller0: entered promiscuous mode [ 294.639345][ T9659] syzkaller0: entered allmulticast mode [ 294.641205][ T9650] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 294.669183][ T9650] EXT4-fs: error: could not find journal device path [ 294.687775][ T9659] loop6: detected capacity change from 0 to 256 [ 294.791210][ T9663] xt_hashlimit: invalid rate [ 295.155069][ T3300] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 295.175299][ T9672] netdevsim netdevsim5 netdevsim0: left allmulticast mode [ 295.188372][ T9672] xfrm1: left allmulticast mode [ 295.200425][ T9672] bridge1: left promiscuous mode [ 295.225595][ T9672] bridge1: left allmulticast mode [ 295.232068][ T3300] CPU: 0 UID: 0 PID: 3300 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(lazy) [ 295.232175][ T3300] Tainted: [W]=WARN [ 295.232183][ T3300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 295.232197][ T3300] Call Trace: [ 295.232204][ T3300] [ 295.232211][ T3300] __dump_stack+0x1d/0x30 [ 295.232303][ T3300] dump_stack_lvl+0x95/0xd0 [ 295.232323][ T3300] dump_stack+0x15/0x1b [ 295.232340][ T3300] dump_header+0x80/0x240 [ 295.232364][ T3300] oom_kill_process+0x295/0x350 [ 295.232393][ T3300] out_of_memory+0x981/0xbc0 [ 295.232427][ T3300] try_charge_memcg+0x621/0xa00 [ 295.232454][ T3300] charge_memcg+0x6d/0x120 [ 295.232490][ T3300] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 295.232526][ T3300] swap_cache_alloc_folio+0x47b/0x5e0 [ 295.232640][ T3300] swap_cluster_readahead+0x2b1/0x460 [ 295.232675][ T3300] swapin_readahead+0xd8/0x8a0 [ 295.232709][ T3300] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 295.232824][ T3300] ? __rcu_read_unlock+0x4e/0x70 [ 295.232848][ T3300] ? swap_cache_get_folio+0x1f7/0x200 [ 295.232874][ T3300] do_swap_page+0x2a2/0x1ec0 [ 295.232935][ T3300] ? mtree_range_walk+0x1aa/0x480 [ 295.233019][ T3300] ? __rcu_read_lock+0x36/0x50 [ 295.233041][ T3300] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 295.233067][ T3300] handle_mm_fault+0xb3c/0x2da0 [ 295.233107][ T3300] do_user_addr_fault+0x634/0x1060 [ 295.233202][ T3300] ? trace_page_fault_user+0x1f/0xa0 [ 295.233231][ T3300] exc_page_fault+0x62/0xa0 [ 295.233280][ T3300] asm_exc_page_fault+0x26/0x30 [ 295.233300][ T3300] RIP: 0033:0x7f2727369017 [ 295.233316][ T3300] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 295.233334][ T3300] RSP: 002b:00007ffd8d1453c0 EFLAGS: 00010202 [ 295.233496][ T3300] RAX: 0000000000000000 RBX: 00005555646e1500 RCX: 00007f2727369017 [ 295.233556][ T3300] RDX: 00007ffd8d145400 RSI: 0000000000000000 RDI: 0000000000000000 [ 295.233569][ T3300] RBP: 00007ffd8d14546c R08: 0000000000000000 R09: 0000000000000000 [ 295.233581][ T3300] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 295.233593][ T3300] R13: 00000000000927c0 R14: 0000000000047fed R15: 00007ffd8d1454c0 [ 295.233672][ T3300] [ 295.236715][ T3300] memory: usage 299400kB, limit 307200kB, failcnt 146 [ 295.484127][ T9672] bond3: left promiscuous mode [ 295.489895][ T9672] ipvlan2: left allmulticast mode [ 295.496710][ T9672] bond3: left allmulticast mode [ 295.502648][ T3300] memory+swap: usage 39028kB, limit 9007199254740988kB, failcnt 0 [ 295.523888][ T3300] kmem: usage 1712kB, limit 9007199254740988kB, failcnt 0 [ 295.557327][ T3300] Memory cgroup stats for /syz2: [ 295.557635][ T3300] cache 7864320 [ 295.584210][ T3300] rss 21450752 [ 295.597724][ T3300] shmem 0 [ 295.611661][ T3300] mapped_file 135168 [ 295.629719][ T3300] dirty 8192 [ 295.638544][ T3300] writeback 0 [ 295.652604][ T3300] workingset_refault_anon 229 [ 295.676596][ T3300] workingset_refault_file 7 [ 295.693455][ T3300] swap 950272 [ 295.701854][ T3300] swapcached 1900544 [ 295.705800][ T3300] pgpgin 278377 [ 295.709283][ T3300] pgpgout 269324 [ 295.713197][ T3300] pgfault 293775 [ 295.719336][ T3300] pgmajfault 36 [ 295.724764][ T3300] inactive_anon 0 [ 295.729878][ T3300] active_anon 7712768 [ 295.734354][ T3300] inactive_file 0 [ 295.736158][ T9689] netlink: 'syz.1.1707': attribute type 4 has an invalid length. [ 295.738064][ T3300] active_file 7864320 [ 295.752060][ T3300] unevictable 21504000 [ 295.756181][ T3300] hierarchical_memory_limit 314572800 [ 295.761621][ T9689] netlink: 'syz.1.1707': attribute type 1 has an invalid length. [ 295.761844][ T3300] hierarchical_memsw_limit 9223372036854771712 [ 295.781334][ T3300] total_cache 7864320 [ 295.786692][ T3300] total_rss 21450752 [ 295.790883][ T3300] total_shmem 0 [ 295.794398][ T3300] total_mapped_file 135168 [ 295.798834][ T3300] total_dirty 8192 [ 295.802805][ T3300] total_writeback 0 [ 295.806682][ T3300] total_workingset_refault_anon 229 [ 295.812507][ T3300] total_workingset_refault_file 7 [ 295.817694][ T3300] total_swap 950272 [ 295.821689][ T3300] total_swapcached 1900544 [ 295.826134][ T3300] total_pgpgin 278377 [ 295.830363][ T3300] total_pgpgout 269324 [ 295.834464][ T3300] total_pgfault 293775 [ 295.838652][ T3300] total_pgmajfault 36 [ 295.842819][ T3300] total_inactive_anon 0 [ 295.847080][ T3300] total_active_anon 7712768 [ 295.851708][ T3300] total_inactive_file 0 [ 295.856095][ T3300] total_active_file 7864320 [ 295.861716][ T3300] total_unevictable 21504000 [ 295.866407][ T3300] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1685,pid=9631,uid=0 [ 295.883310][ T3300] Memory cgroup out of memory: OOM victim 9631 (syz.2.1685) is already exiting. Skip killing the task [ 295.922539][ T9706] netlink: 'syz.2.1711': attribute type 17 has an invalid length. [ 295.935198][ T9706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.045093][ T9708] team0: Port device syz_tun added [ 296.115838][ T28] kauditd_printk_skb: 163 callbacks suppressed [ 296.115852][ T28] audit: type=1400 audit(1784589444.149:2367): avc: denied { read } for pid=9723 comm="syz.6.1716" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 296.145302][ T28] audit: type=1400 audit(1784589444.149:2368): avc: denied { open } for pid=9723 comm="syz.6.1716" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 296.349546][ T9724] SELinux: security_context_str_to_sid (}) failed with errno=-22 [ 296.390601][ T28] audit: type=1400 audit(1784589444.429:2369): avc: denied { getopt } for pid=9739 comm="syz.0.1721" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 296.521665][ T28] audit: type=1400 audit(1784589444.559:2370): avc: denied { mount } for pid=9753 comm="syz.5.1726" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 296.562692][ T28] audit: type=1400 audit(1784589444.589:2371): avc: denied { create } for pid=9753 comm="syz.5.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 296.582911][ T9754] vcan0 speed is unknown, defaulting to 1000 [ 296.607969][ T9763] IPVS: lc: FWM 3 0x00000003 - no destination available [ 296.625418][ T9754] hsr0 speed is unknown, defaulting to 1000 [ 296.689547][ T28] audit: type=1400 audit(1784589444.719:2372): avc: denied { ioctl } for pid=9765 comm="syz.5.1729" path="socket:[27713]" dev="sockfs" ino=27713 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 296.715436][ T28] audit: type=1326 audit(1784589444.749:2373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.5.1729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 296.741980][ T28] audit: type=1326 audit(1784589444.759:2374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.5.1729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 296.768037][ T28] audit: type=1326 audit(1784589444.759:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.5.1729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 296.793657][ T28] audit: type=1326 audit(1784589444.759:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9765 comm="syz.5.1729" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 296.797763][ T9772] netlink: 'syz.0.1731': attribute type 2 has an invalid length. [ 296.844128][ T9766] syzkaller0: entered promiscuous mode [ 296.849691][ T9766] syzkaller0: entered allmulticast mode [ 296.956062][ T9787] loop6: detected capacity change from 0 to 512 [ 297.362467][ T9806] loop6: detected capacity change from 0 to 4096 [ 297.485338][ T9825] loop2: detected capacity change from 0 to 764 [ 297.511514][ T9806] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 297.525518][ T9825] rock: directory entry would overflow storage [ 297.531710][ T9825] rock: sig=0x5245, size=8, remaining=5 [ 297.553759][ T9825] vcan0 speed is unknown, defaulting to 1000 [ 297.617363][ T9825] hsr0 speed is unknown, defaulting to 1000 [ 297.813851][ T9806] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 297.883031][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.936802][ T9833] loop6: detected capacity change from 0 to 256 [ 297.946883][ T9833] vfat: Bad value for 'shortname' [ 298.002964][ T9835] loop5: detected capacity change from 0 to 2048 [ 298.019071][ T9835] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 298.341721][ T9855] syzkaller0: entered promiscuous mode [ 298.362910][ T9855] syzkaller0: entered allmulticast mode [ 298.376874][ T9863] veth0_macvtap: Caught tx_queue_len zero misconfig [ 298.442516][ T9862] loop2: detected capacity change from 0 to 1024 [ 298.457895][ T9862] EXT4-fs: Ignoring removed bh option [ 298.465365][ T9858] loop5: detected capacity change from 0 to 256 [ 298.490906][ T9862] EXT4-fs (loop2): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 298.508006][ T9858] vfat: Unknown parameter '0xffffffffffffffff' [ 298.527149][ T9862] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.626229][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.660210][ T9870] loop2: detected capacity change from 0 to 2048 [ 298.668650][ T9870] EXT4-fs: inline encryption not supported [ 298.712928][ T9870] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 299.007470][ T9870] netlink: 'syz.2.1758': attribute type 7 has an invalid length. [ 299.078800][ T9870] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:169: inode #12: comm syz.2.1758: inline data xattr refers to an external xattr inode [ 299.347055][ T6348] IPVS: starting estimator thread 0... [ 299.414381][ T9895] vcan0 speed is unknown, defaulting to 1000 [ 299.482263][ T9895] hsr0 speed is unknown, defaulting to 1000 [ 299.569776][ T9894] IPVS: using max 2448 ests per chain, 122400 per kthread [ 299.594597][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 299.617043][ T9893] __nla_validate_parse: 83 callbacks suppressed [ 299.627476][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1764'. [ 299.968374][ T9876] binfmt_misc: register: failed to install interpreter file ./file2 [ 300.250649][ T9927] batadv_slave_0: Caught tx_queue_len zero misconfig [ 300.615684][ T9953] loop2: detected capacity change from 0 to 764 [ 300.630562][ T9953] rock: directory entry would overflow storage [ 300.636816][ T9953] rock: sig=0x5245, size=8, remaining=5 [ 300.660038][ T9953] vcan0 speed is unknown, defaulting to 1000 [ 300.731926][ T9953] hsr0 speed is unknown, defaulting to 1000 [ 301.037983][ T9947] loop6: detected capacity change from 0 to 512 [ 301.054128][ T9947] EXT4-fs: Ignoring removed orlov option [ 301.118765][ T9947] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.150101][ T28] kauditd_printk_skb: 118 callbacks suppressed [ 301.150134][ T28] audit: type=1400 audit(1784589449.179:2495): avc: denied { write } for pid=9944 comm="syz.6.1782" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.250071][ T28] audit: type=1400 audit(1784589449.279:2497): avc: denied { firmware_load } for pid=9962 comm="syz.1.1785" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 301.286126][ T9966] Invalid ELF header type: 2 != 1 [ 301.347760][ T9970] netlink: 'syz.2.1787': attribute type 1 has an invalid length. [ 301.370220][ T9970] bond2: option mode: invalid value (9) [ 301.382879][ T28] audit: type=1400 audit(1784589449.269:2496): avc: denied { module_load } for pid=9965 comm="syz.5.1786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 301.406589][ T9970] bond2 (unregistering): Released all slaves [ 301.408252][ T28] audit: type=1400 audit(1784589449.349:2498): avc: denied { setopt } for pid=9962 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.432130][ T28] audit: type=1400 audit(1784589449.349:2499): avc: denied { connect } for pid=9962 comm="syz.1.1785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 301.432163][ T28] audit: type=1400 audit(1784589449.379:2500): avc: denied { connect } for pid=9969 comm="syz.2.1787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 301.462461][ T9977] netlink: 'syz.2.1787': attribute type 10 has an invalid length. [ 301.462479][ T9977] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1787'. [ 301.464055][ T9978] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 301.625581][ T28] audit: type=1400 audit(1784589449.659:2501): avc: denied { mounton } for pid=9981 comm="syz.5.1788" path="/316/file0" dev="tmpfs" ino=1718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 301.650405][ T9983] loop5: detected capacity change from 0 to 128 [ 301.688048][ T9983] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 301.713580][ T9983] ext4 filesystem being mounted at /316/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 301.748738][ T9983] ip6gre1: entered allmulticast mode [ 301.756241][ T310] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 301.765894][ T28] audit: type=1400 audit(1784589449.799:2502): avc: denied { write } for pid=9981 comm="syz.5.1788" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 301.793115][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.849605][ T28] audit: type=1400 audit(1784589449.879:2503): avc: denied { bind } for pid=9990 comm="syz.0.1790" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 301.894342][ T3623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.114894][T10009] loop6: detected capacity change from 0 to 512 [ 302.129894][T10009] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.1798: inode has both inline data and extents flags [ 302.160417][T10009] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 302.160963][T10009] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1798: couldn't read orphan inode 15 (err -117) [ 302.170145][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 302.170165][ C1] EXT4-fs (loop6): initial error at time 1784589450: ext4_orphan_get:1399: inode 15 [ 302.170198][ C1] EXT4-fs (loop6): last error at time 1784589450: ext4_orphan_get:1399: inode 15 [ 302.240342][T10009] loop6: lost filesystem error report for type 5 error -117 [ 302.240823][T10009] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.314845][ T28] audit: type=1400 audit(1784589450.349:2504): avc: denied { setopt } for pid=10008 comm="syz.6.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 302.378462][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.601418][T10007] loop5: detected capacity change from 0 to 4096 [ 302.658759][T10007] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.697136][T10007] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 302.716421][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.729772][T10024] loop2: detected capacity change from 0 to 512 [ 302.753929][T10024] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 302.796377][T10024] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1801: bad orphan inode 131072 [ 302.844678][T10024] loop2: lost filesystem error report for type 5 error -117 [ 302.845266][T10024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.936251][T10038] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 302.977508][T10040] loop6: detected capacity change from 0 to 256 [ 302.988396][T10040] vfat: Unknown parameter '0xffffffffffffffff' [ 303.072429][T10040] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=10040 comm=syz.6.1806 [ 303.131194][T10053] x_tables: duplicate underflow at hook 2 [ 303.380001][T10061] loop5: detected capacity change from 0 to 4096 [ 303.408846][T10061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 303.435751][T10061] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 303.454789][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.505852][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.637622][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1820'. [ 303.862061][T10110] netlink: 'syz.6.1825': attribute type 2 has an invalid length. [ 303.873122][T10110] .d: entered promiscuous mode [ 303.902971][T10112] loop6: detected capacity change from 0 to 512 [ 303.917997][T10112] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 303.936453][T10112] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1826: bad orphan inode 131083 [ 303.947281][T10112] loop6: lost filesystem error report for type 5 error -117 [ 303.951195][T10112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.986411][T10112] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #12: block 7: comm syz.6.1826: bad entry in directory: directory entry overrun - offset=16, inode=1560281102, rec_len=1024, size=56 fake=0 [ 304.091117][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 304.096175][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.207077][T10117] vcan0 speed is unknown, defaulting to 1000 [ 304.250136][T10117] hsr0 speed is unknown, defaulting to 1000 [ 304.474674][T10136] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24080 sclass=netlink_route_socket pid=10136 comm=syz.0.1832 [ 305.102911][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 305.163169][ T361] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.176341][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 305.189710][ T361] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.211952][ T361] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.224802][ T361] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.240029][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1831'. [ 305.488560][T10167] loop6: detected capacity change from 0 to 764 [ 305.507793][T10167] rock: directory entry would overflow storage [ 305.514069][T10167] rock: sig=0x5245, size=8, remaining=5 [ 305.536075][T10167] vcan0 speed is unknown, defaulting to 1000 [ 305.600166][T10167] hsr0 speed is unknown, defaulting to 1000 [ 306.078694][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1845'. [ 306.110188][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 306.207426][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 306.207442][ T28] audit: type=1400 audit(1784589710.239:2528): avc: denied { write } for pid=10186 comm="syz.6.1846" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 306.290300][T10190] can: request_module (can-proto-3) failed. [ 306.302250][T10190] tap0: tun_chr_ioctl cmd 21731 [ 306.563291][T10195] bond4: entered allmulticast mode [ 306.568687][T10195] 8021q: adding VLAN 0 to HW filter on device bond4 [ 306.687272][ T28] audit: type=1400 audit(1784589710.589:2529): avc: denied { accept } for pid=10192 comm="syz.0.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 307.825584][T10205] loop6: detected capacity change from 0 to 512 [ 307.897281][T10205] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 308.013820][T10205] EXT4-fs: error: could not find journal device path [ 308.238972][T10213] tipc: Enabling of bearer rejected, already enabled [ 308.311999][T10219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10219 comm=syz.0.1857 [ 308.394361][T10222] loop5: detected capacity change from 0 to 4096 [ 308.410109][T10222] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.461148][ T28] audit: type=1400 audit(1784589712.489:2530): avc: denied { write } for pid=10221 comm="syz.5.1852" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.523117][ T28] audit: type=1400 audit(1784589712.519:2531): avc: denied { write } for pid=10221 comm="syz.5.1852" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.527527][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.557810][T10242] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1864'. [ 308.630098][ T28] audit: type=1400 audit(1784589712.659:2532): avc: denied { create } for pid=10234 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 308.686821][T10249] netlink: 'syz.0.1861': attribute type 10 has an invalid length. [ 308.723699][T10239] loop2: detected capacity change from 0 to 256 [ 308.758088][T10239] vfat: Unknown parameter '0xffffffffffffffff' [ 308.805121][T10252] xt_hashlimit: max too large, truncated to 1048576 [ 309.081334][T10248] loop5: detected capacity change from 0 to 1024 [ 309.091540][ T28] audit: type=1400 audit(1784589713.129:2533): avc: denied { create } for pid=10262 comm="syz.2.1869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 309.160683][T10248] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.188404][T10248] ext4 filesystem being mounted at /328/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.205051][T10272] loop6: detected capacity change from 0 to 1024 [ 309.213258][T10273] x_tables: duplicate underflow at hook 1 [ 309.219106][ T28] audit: type=1400 audit(1784589713.249:2534): avc: denied { write } for pid=10247 comm="syz.5.1865" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.254574][ T28] audit: type=1400 audit(1784589713.249:2535): avc: denied { accept } for pid=10269 comm="syz.1.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.255237][T10263] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1869'. [ 309.274458][ T28] audit: type=1400 audit(1784589713.289:2536): avc: denied { ioctl } for pid=10274 comm="syz.0.1872" path="socket:[29207]" dev="sockfs" ino=29207 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 309.311723][T10272] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.326008][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 309.340120][ T28] audit: type=1400 audit(1784589713.359:2537): avc: denied { write } for pid=10271 comm="syz.6.1871" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 309.362866][T10272] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 309.405227][T10272] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 309.437811][T10272] EXT4-fs (loop6): This should not happen!! Data will be lost [ 309.437811][T10272] [ 309.450911][T10289] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 28 with max blocks 8 with error 28 [ 309.463230][T10289] EXT4-fs (loop6): This should not happen!! Data will be lost [ 309.463230][T10289] [ 309.473888][T10289] EXT4-fs (loop6): Total free blocks count 0 [ 309.475001][T10272] EXT4-fs (loop6): Total free blocks count 0 [ 309.480100][T10289] EXT4-fs (loop6): Free/Dirty block details [ 309.491976][T10289] EXT4-fs (loop6): free_blocks=20480 [ 309.497519][T10272] EXT4-fs (loop6): Free/Dirty block details [ 309.503879][T10288] bond0: (slave bond_slave_0): Releasing backup interface [ 309.521085][T10288] bond0: (slave bond_slave_1): Releasing backup interface [ 309.568119][ T7180] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 309.597368][T10288] vlan0: entered promiscuous mode [ 309.632919][T10306] loop5: detected capacity change from 0 to 512 [ 309.652720][T10306] EXT4-fs error (device loop5): ext4_do_update_inode:5742: inode #3: comm syz.5.1880: corrupted inode contents [ 309.664600][T10306] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 309.664963][T10306] EXT4-fs (loop5): Remounting filesystem read-only [ 309.674012][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 309.674039][ C0] EXT4-fs (loop5): initial error at time 1784589713: ext4_do_update_inode:5742: inode 3 [ 309.674064][ C0] EXT4-fs (loop5): last error at time 1784589713: ext4_do_update_inode:5742: inode 3 [ 309.707309][T10306] EXT4-fs (loop5): 1 truncate cleaned up [ 309.713370][T10306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.726722][T10306] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.751242][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.462624][T10337] ip6_vti0: entered promiscuous mode [ 310.494498][T10337] batadv_slave_1: entered promiscuous mode [ 310.839383][T10336] batadv_slave_1: left promiscuous mode [ 310.889121][T10336] ip6_vti0: left promiscuous mode [ 310.924809][T10347] kernel profiling enabled (shift: 0) [ 310.952624][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1892'. [ 310.966448][T10351] loop6: detected capacity change from 0 to 1024 [ 310.973159][T10351] EXT4-fs: Ignoring removed mblk_io_submit option [ 310.979881][T10351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 310.989981][T10351] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 311.011175][T10351] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.1892: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1537, max 0(0), depth 32512(32512) [ 311.029371][T10351] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 311.029673][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 311.045227][ C1] EXT4-fs (loop6): initial error at time 1784589715: ext4_ext_check_inode:521: inode 11 [ 311.055005][ C1] EXT4-fs (loop6): last error at time 1784589715: ext4_ext_check_inode:521: inode 11 [ 311.064629][T10351] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1892: couldn't read orphan inode 11 (err -117) [ 311.076502][T10351] loop6: lost filesystem error report for type 5 error -117 [ 311.182254][T10351] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.241286][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 311.241303][ T28] audit: type=1400 audit(1784589715.279:2570): avc: denied { write } for pid=10349 comm="syz.6.1892" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 311.270725][T10350] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1892: Invalid block bitmap block 0 in block_group 0 [ 311.311680][T10350] Quota error (device loop6): write_blk: dquota write failed [ 311.339998][T10350] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 311.380911][T10350] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1892: Failed to acquire dquot type 0 [ 311.695333][T10358] syz_tun: entered allmulticast mode [ 311.803747][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.827898][T10358] syz_tun (unregistering): left allmulticast mode [ 311.896663][ T28] audit: type=1326 audit(1784589715.929:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10365 comm="syz.1.1898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bb7bde99 code=0x0 [ 311.942962][T10367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.963841][T10367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.016798][ T28] audit: type=1400 audit(1784589716.049:2572): avc: denied { unmount } for pid=10365 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 312.056992][ T28] audit: type=1400 audit(1784589716.049:2573): avc: denied { accept } for pid=10365 comm="syz.1.1898" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 312.128627][T10356] futex_wake_op: syz.0.1894 tries to shift op by 36; fix this program [ 312.432116][T10373] loop2: detected capacity change from 0 to 512 [ 312.459990][T10373] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.1900: bad orphan inode 15 [ 312.471132][T10373] loop2: lost filesystem error report for type 5 error -117 [ 312.472220][T10373] ext4_test_bit(bit=14, block=18) = 1 [ 312.479719][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 312.479830][ C1] EXT4-fs (loop2): initial error at time 1784589716: ext4_orphan_get:1425 [ 312.479870][ C1] EXT4-fs (loop2): last error at time 1784589716: ext4_orphan_get:1425 [ 312.509730][T10373] is_bad_inode(inode)=0 [ 312.514208][T10373] NEXT_ORPHAN(inode)=1023 [ 312.518850][T10373] max_ino=32 [ 312.522490][T10373] i_nlink=0 [ 312.529849][T10373] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2972: inode #15: comm syz.2.1900: corrupted xattr block 19: invalid header [ 312.543929][T10373] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 312.559849][T10373] EXT4-fs warning (device loop2): ext4_evict_inode:287: xattr delete (err -117) [ 312.587966][ T28] audit: type=1400 audit(1784589716.619:2574): avc: denied { map } for pid=10377 comm="syz.5.1902" path="socket:[28628]" dev="sockfs" ino=28628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.590922][T10373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 312.629482][ T28] audit: type=1400 audit(1784589716.619:2575): avc: denied { read } for pid=10377 comm="syz.5.1902" path="socket:[28628]" dev="sockfs" ino=28628 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 312.654331][T10373] ext4 filesystem being mounted at /374/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 312.678541][T10378] vcan0 speed is unknown, defaulting to 1000 [ 312.761255][ T28] audit: type=1400 audit(1784589716.749:2576): avc: denied { getopt } for pid=10377 comm="syz.5.1902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 312.787276][T10380] loop6: detected capacity change from 0 to 4096 [ 312.822686][T10380] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 312.898324][T10378] hsr0 speed is unknown, defaulting to 1000 [ 312.934589][T10380] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 313.016610][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.145840][ T28] audit: type=1400 audit(1784589717.079:2577): avc: denied { setopt } for pid=10388 comm="syz.1.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 314.484454][T10399] loop6: detected capacity change from 0 to 256 [ 315.104550][T10401] loop5: detected capacity change from 0 to 764 [ 315.132537][T10401] rock: directory entry would overflow storage [ 315.138718][T10401] rock: sig=0x5245, size=8, remaining=5 [ 315.149713][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 315.156424][T10401] vcan0 speed is unknown, defaulting to 1000 [ 315.221243][T10401] hsr0 speed is unknown, defaulting to 1000 [ 315.323866][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 315.645588][T10411] loop5: detected capacity change from 0 to 512 [ 316.213501][T10444] syz.5.1917 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 316.301038][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 316.301055][ T28] audit: type=1400 audit(1784589720.339:2585): avc: denied { write } for pid=10443 comm="syz.5.1917" path="socket:[29518]" dev="sockfs" ino=29518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.387191][ T28] audit: type=1400 audit(1784589720.389:2586): avc: denied { read } for pid=10443 comm="syz.5.1917" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 316.451119][ T28] audit: type=1400 audit(1784589720.429:2587): avc: denied { unmount } for pid=7180 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 316.468241][T10455] program syz.6.1919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.509796][ T28] audit: type=1400 audit(1784589720.449:2588): avc: denied { write } for pid=10443 comm="syz.5.1917" name="file0" dev="tmpfs" ino=1859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.535155][T10455] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 316.569706][ T28] audit: type=1400 audit(1784589720.449:2589): avc: denied { open } for pid=10443 comm="syz.5.1917" path="/341/file0" dev="tmpfs" ino=1859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.609674][ T28] audit: type=1400 audit(1784589720.449:2590): avc: denied { map } for pid=10443 comm="syz.5.1917" path="/341/file0" dev="tmpfs" ino=1859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.661825][ T28] audit: type=1400 audit(1784589720.449:2591): avc: denied { read execute } for pid=10443 comm="syz.5.1917" path="/341/file0" dev="tmpfs" ino=1859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.715523][ T28] audit: type=1400 audit(1784589720.449:2592): avc: denied { ioctl } for pid=10443 comm="syz.5.1917" path="/341/file0" dev="tmpfs" ino=1859 ioctlcmd=0x128e scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 316.988844][T10459] loop6: detected capacity change from 0 to 764 [ 316.998941][T10459] rock: directory entry would overflow storage [ 317.005156][T10459] rock: sig=0x5245, size=8, remaining=5 [ 317.027114][T10459] vcan0 speed is unknown, defaulting to 1000 [ 317.093290][T10459] hsr0 speed is unknown, defaulting to 1000 [ 317.640481][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1924'. [ 317.691923][T10473] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20003 [ 317.717679][T10470] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 317.951063][T10470] x_tables: ip_tables: osf match: only valid for protocol 6 [ 318.202638][T10479] loop5: detected capacity change from 0 to 512 [ 318.229515][T10479] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 318.266264][ T28] audit: type=1400 audit(1784589722.299:2593): avc: denied { setopt } for pid=10478 comm="syz.5.1926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 318.461265][ T28] audit: type=1400 audit(1784589722.489:2594): avc: denied { setopt } for pid=10488 comm="syz.0.1930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 318.538367][T10479] loop5: detected capacity change from 0 to 1024 [ 318.579776][T10487] loop6: detected capacity change from 0 to 512 [ 318.677191][T10487] ext3: Unknown parameter 'mask' [ 319.174441][T10527] loop6: detected capacity change from 0 to 164 [ 319.197660][T10527] rock: directory entry would overflow storage [ 319.211686][T10527] rock: sig=0x5252, size=5, remaining=3 [ 319.273153][T10533] netlink: 'syz.2.1943': attribute type 1 has an invalid length. [ 319.278499][T10508] netlink: 'syz.6.1936': attribute type 30 has an invalid length. [ 319.294267][T10533] bond2: entered promiscuous mode [ 319.299382][T10533] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.342839][T10513] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1936'. [ 319.484635][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 319.535116][T10550] af_packet: tpacket_rcv: packet too big, clamped from 64521 to 3956. macoff=92 [ 319.621869][T10561] loop2: detected capacity change from 0 to 512 [ 319.664927][T10561] FAT-fs (loop2): bogus number of FAT sectors [ 319.680190][T10561] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 319.709290][T10561] FAT-fs (loop2): Can't find a valid FAT filesystem [ 319.804035][T10568] C: renamed from veth1_to_team [ 319.813975][T10568] netlink: 164 bytes leftover after parsing attributes in process `syz.5.1953'. [ 320.108916][T10579] loop6: detected capacity change from 0 to 8192 [ 320.177192][T10581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=10581 comm=syz.6.1957 [ 320.216441][T10582] vcan0 speed is unknown, defaulting to 1000 [ 320.281577][T10582] hsr0 speed is unknown, defaulting to 1000 [ 320.585464][T10590] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1960'. [ 320.594509][T10590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1960'. [ 320.607888][T10589] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1959'. [ 320.800280][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1966'. [ 320.816193][T10604] bond0: entered promiscuous mode [ 320.822274][T10604] gretap0: entered promiscuous mode [ 320.828577][T10604] debugfs: 'hsr1' already exists in 'hsr' [ 320.879768][T10604] Cannot create hsr debugfs directory [ 320.896010][T10604] hsr1: entered promiscuous mode [ 320.969353][T10621] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1971'. [ 321.113679][T10628] vcan0 speed is unknown, defaulting to 1000 [ 321.230116][T10605] loop6: detected capacity change from 0 to 1024 [ 321.298269][T10605] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.461129][T10605] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.1967: lblock 2 mapped to illegal pblock 2 (length 1) [ 321.531667][T10628] hsr0 speed is unknown, defaulting to 1000 [ 321.566662][T10605] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 321.569131][T10605] __quota_error: 374 callbacks suppressed [ 321.569208][T10605] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 321.578635][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 321.578668][ C0] EXT4-fs (loop6): initial error at time 1784589725: ext4_map_blocks:791: inode 3: block 2 [ 321.578915][ C0] EXT4-fs (loop6): last error at time 1784589725: ext4_map_blocks:791: inode 3: block 2 [ 321.739677][T10637] loop5: detected capacity change from 0 to 512 [ 321.867521][T10605] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 48: comm syz.6.1967: lblock 0 mapped to illegal pblock 48 (length 1) [ 321.967803][T10605] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 321.980173][T10605] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 322.015041][T10637] loop5: detected capacity change from 0 to 128 [ 322.085127][T10637] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 322.091432][T10605] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.1967: Failed to acquire dquot type 0 [ 322.111527][T10605] loop6: lost filesystem error report for type 5 error -117 [ 322.112751][T10605] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 322.128433][T10637] ext4 filesystem being mounted at /350/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 322.133519][ T28] audit: type=1400 audit(1784589726.159:2969): avc: denied { mount } for pid=10636 comm="syz.5.1975" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 322.166261][T10605] loop6: lost filesystem error report for type 5 error -117 [ 322.168905][T10605] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.1967: mark_inode_dirty error [ 322.210196][ T28] audit: type=1400 audit(1784589726.249:2970): avc: denied { connect } for pid=10653 comm="syz.0.1979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 322.231650][T10605] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 322.232143][T10605] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 322.261353][ T28] audit: type=1400 audit(1784589726.299:2971): avc: denied { ioctl } for pid=10636 comm="syz.5.1975" path="socket:[30764]" dev="sockfs" ino=30764 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 322.293898][T10605] EXT4-fs (loop6): 1 orphan inode deleted [ 322.306577][ T28] audit: type=1400 audit(1784589726.339:2972): avc: denied { write } for pid=10660 comm="syz.2.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 322.326187][ T361] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.329941][T10605] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.357136][ T361] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 322.357423][ T361] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 322.358578][ T28] audit: type=1326 audit(1784589726.339:2973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 322.401624][ T28] audit: type=1326 audit(1784589726.349:2974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10660 comm="syz.2.1980" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 322.419766][ T361] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:6: Failed to release dquot type 0 [ 322.430369][ T28] audit: type=1400 audit(1784589726.359:2975): avc: denied { create } for pid=10658 comm="syz.0.1981" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 322.474838][ T3623] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 325.474763][T10605] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 325.550831][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.884231][T10709] vcan0 speed is unknown, defaulting to 1000 [ 326.075042][T10709] hsr0 speed is unknown, defaulting to 1000 [ 326.462771][T10697] loop5: detected capacity change from 0 to 4096 [ 326.518767][T10697] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 326.661954][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 326.661977][ T28] audit: type=1400 audit(1784589730.699:3009): avc: denied { execute } for pid=10695 comm="syz.5.1988" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.707295][ T28] audit: type=1400 audit(1784589730.699:3010): avc: denied { read open } for pid=10695 comm="syz.5.1988" path="/353/file0/file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.731324][T10721] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1999'. [ 326.734170][T10697] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 326.840051][ T28] audit: type=1400 audit(1784589730.879:3011): avc: denied { setopt } for pid=10733 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.861948][ T28] audit: type=1400 audit(1784589730.879:3012): avc: denied { bind } for pid=10733 comm="syz.6.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.902508][ T28] audit: type=1400 audit(1784589730.879:3013): avc: denied { name_bind } for pid=10733 comm="syz.6.2003" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 326.963571][ T28] audit: type=1400 audit(1784589730.879:3014): avc: denied { node_bind } for pid=10733 comm="syz.6.2003" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 327.003975][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.028581][ T28] audit: type=1400 audit(1784589730.899:3015): avc: denied { create } for pid=10731 comm="syz.1.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.160331][T10743] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.2003'. [ 327.193522][T10743] loop6: detected capacity change from 0 to 1024 [ 327.202626][T10743] EXT4-fs: inline encryption not supported [ 327.229114][T10743] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.356743][T10743] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #3: block 1: comm syz.6.2003: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.371141][T10743] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 327.371601][T10743] EXT4-fs (loop6): Remounting filesystem read-only [ 327.381311][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 327.381455][ C1] EXT4-fs (loop6): initial error at time 1784589731: ext4_map_blocks:833: inode 3: block 1 [ 327.381492][ C1] EXT4-fs (loop6): last error at time 1784589731: ext4_map_blocks:833: inode 3: block 1 [ 327.414882][T10743] Quota error (device loop6): write_blk: dquota write failed [ 327.422692][T10743] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 327.433188][T10743] EXT4-fs (loop6): 1 orphan inode deleted [ 327.440215][T10743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.455157][ T28] audit: type=1400 audit(1784589730.899:3016): avc: denied { write } for pid=10731 comm="syz.1.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 327.665424][T10758] tipc: Enabling of bearer rejected, already enabled [ 327.727552][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.353114][T10792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2013'. [ 328.697986][T10808] tipc: Enabling of bearer rejected, already enabled [ 329.315624][T10831] 9p: Bad value for 'rfdno' [ 329.325484][T10831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=10831 comm=syz.1.2023 [ 329.340448][T10831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25889 sclass=netlink_route_socket pid=10831 comm=syz.1.2023 [ 329.741008][T10837] tipc: Enabling of bearer rejected, already enabled [ 330.073345][T10850] xfrm1: entered allmulticast mode [ 330.160863][T10858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2028'. [ 331.438337][T10894] loop6: detected capacity change from 0 to 256 [ 331.458851][T10894] netlink: 'syz.6.2040': attribute type 1 has an invalid length. [ 331.792090][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 332.603179][T10898] netlink: 'syz.1.2042': attribute type 3 has an invalid length. [ 332.624084][T10898] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.2042'. [ 332.637022][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 332.637037][ T28] audit: type=1326 audit(1784589736.669:3036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.5.2031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 332.690121][ T28] audit: type=1326 audit(1784589736.669:3037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10856 comm="syz.5.2031" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d6270de99 code=0x7ffc0000 [ 332.908154][T10903] tipc: Enabling of bearer rejected, already enabled [ 332.932029][T10905] loop5: detected capacity change from 0 to 512 [ 332.938626][T10905] ext4: Bad value for 'journal_dev' [ 333.064081][T10912] loop5: detected capacity change from 0 to 512 [ 333.103913][T10912] EXT4-fs (loop5): 1 truncate cleaned up [ 333.119045][T10912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.159472][ T28] audit: type=1400 audit(1784589737.189:3038): avc: denied { write } for pid=10911 comm="syz.5.2046" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.247333][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.259375][ T28] audit: type=1400 audit(1784589737.189:3039): avc: denied { add_name } for pid=10911 comm="syz.5.2046" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.322163][ T28] audit: type=1400 audit(1784589737.189:3040): avc: denied { create } for pid=10911 comm="syz.5.2046" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 333.365740][ T28] audit: type=1400 audit(1784589737.189:3041): avc: denied { write } for pid=10911 comm="syz.5.2046" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 333.413545][ T28] audit: type=1400 audit(1784589737.219:3042): avc: denied { execute_no_trans } for pid=10911 comm="syz.5.2046" path="/361/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 333.464347][ T28] audit: type=1400 audit(1784589737.219:3043): avc: denied { write } for pid=10911 comm="syz.5.2046" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 333.510517][ T28] audit: type=1400 audit(1784589737.219:3044): avc: denied { read append open } for pid=10911 comm="syz.5.2046" path="/361/file1/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 333.561993][ T28] audit: type=1400 audit(1784589737.219:3045): avc: denied { map } for pid=10911 comm="syz.5.2046" path="/361/file1/memory.events" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 333.717859][T10929] loop5: detected capacity change from 0 to 512 [ 333.745255][T10929] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2049: bg 0: block 393: padding at end of block bitmap is not set [ 333.788275][T10934] tipc: Enabling of bearer rejected, failed to enable media [ 333.821614][T10929] loop5: lost filesystem error report for type 5 error -117 [ 333.821878][T10929] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 333.837932][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 333.837959][ C0] EXT4-fs (loop5): initial error at time 1784589737: ext4_validate_block_bitmap:441 [ 333.837986][ C0] EXT4-fs (loop5): last error at time 1784589737: ext4_validate_block_bitmap:441 [ 333.958199][T10929] loop5: lost filesystem error report for type 5 error -117 [ 333.961832][T10929] EXT4-fs (loop5): 2 truncates cleaned up [ 333.988029][T10929] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.028371][T10929] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2049'. [ 334.552054][T10963] loop2: detected capacity change from 0 to 512 [ 334.733853][T10971] loop2: detected capacity change from 0 to 128 [ 334.789432][T10971] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2061'. [ 334.828629][T10971] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 334.851218][T10971] block device autoloading is deprecated and will be removed. [ 335.153783][T11004] loop6: detected capacity change from 0 to 512 [ 335.183187][T11004] EXT4-fs: Ignoring removed mblk_io_submit option [ 335.200407][T11004] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 335.222483][T11004] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 335.237015][T11004] System zones: 1-12 [ 335.241536][T11004] EXT4-fs (loop6): orphan cleanup on readonly fs [ 335.248930][T11004] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2069: bg 0: block 361: padding at end of block bitmap is not set [ 335.264027][T11004] loop6: lost filesystem error report for type 5 error -117 [ 335.264349][T11004] EXT4-fs (loop6): Remounting filesystem read-only [ 335.271854][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 335.271885][ C0] EXT4-fs (loop6): initial error at time 1784589739: ext4_validate_block_bitmap:441 [ 335.271945][ C0] EXT4-fs (loop6): last error at time 1784589739: ext4_validate_block_bitmap:441 [ 335.306136][T11004] EXT4-fs (loop6): 1 truncate cleaned up [ 335.313249][T11004] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 335.499448][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 335.615227][T11017] loop6: detected capacity change from 0 to 1024 [ 335.777167][T11018] loop6: detected capacity change from 0 to 8192 [ 335.961928][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.029530][T11022] loop5: detected capacity change from 0 to 128 [ 336.072127][T11025] loop6: detected capacity change from 0 to 1024 [ 336.087263][T11022] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2075'. [ 336.125831][T11025] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 336.138418][T11025] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.216464][T11025] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.2076: bg 0: block 112: padding at end of block bitmap is not set [ 336.231414][T11025] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 316 with max blocks 12 with error 28 [ 336.244320][T11025] EXT4-fs (loop6): This should not happen!! Data will be lost [ 336.244320][T11025] [ 336.254580][T11025] EXT4-fs (loop6): Total free blocks count 0 [ 336.260764][T11025] EXT4-fs (loop6): Free/Dirty block details [ 336.269626][T11025] EXT4-fs (loop6): free_blocks=0 [ 336.275094][T11025] EXT4-fs (loop6): dirty_blocks=320 [ 336.280539][T11025] EXT4-fs (loop6): Block reservation details [ 336.304118][T11034] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.2076: lblock 0 mapped to illegal pblock 0 (length 1) [ 336.326620][T11025] EXT4-fs (loop6): i_reserved_data_blocks=20 [ 336.342237][T11034] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 336.451182][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.476394][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.504495][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.585887][T11045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 336.597924][T11045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 336.621721][ T7180] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 336.723786][T11045] veth1_vlan: left promiscuous mode [ 336.733793][T11045] veth0_vlan: left promiscuous mode [ 336.829146][T11045] veth0_vlan: entered promiscuous mode [ 336.877211][T11045] veth1_vlan: entered promiscuous mode [ 336.936682][T11045] tipc: Resetting bearer [ 336.972193][T11045] tipc: Resetting bearer [ 337.018991][T11045] veth1_macvtap: left promiscuous mode [ 337.064260][T11045] veth0_macvtap: left promiscuous mode [ 337.092964][T11045] veth0_macvtap: entered promiscuous mode [ 337.108467][T11045] veth1_macvtap: entered promiscuous mode [ 337.116495][T11055] GPT:first_usable_lbas don't match. [ 337.134545][T11055] GPT:34 != 290 [ 337.138460][T11045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 337.150359][T11055] GPT: Use GNU Parted to correct GPT errors. [ 337.167443][T11055] loop6: p1 p2 p3 [ 337.173553][T11045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 337.189172][ T2980] GPT:first_usable_lbas don't match. [ 337.194578][ T2980] GPT:34 != 290 [ 337.198041][ T2980] GPT: Use GNU Parted to correct GPT errors. [ 337.224686][T11045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 337.232238][ T2980] loop6: p1 p2 p3 [ 337.294909][T11045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 337.323596][T11045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 337.332828][T11045] 8021q: adding VLAN 0 to HW filter on device bond2 [ 337.342315][T11045] 8021q: adding VLAN 0 to HW filter on device bond3 [ 337.356571][T11045] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 337.399476][T11045] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 337.431657][ T3377] bridge0: entered promiscuous mode [ 337.436991][ T6372] vcan0 speed is unknown, defaulting to 1000 [ 337.449869][ T6372] syz1: Port: 1 Link ACTIVE [ 337.495580][ T68] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.504436][ T68] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.530005][ T6372] vcan0 speed is unknown, defaulting to 1000 [ 337.536854][ T68] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.553565][T11052] vcan0 speed is unknown, defaulting to 1000 [ 337.591502][T11052] hsr0 speed is unknown, defaulting to 1000 [ 337.677365][ T3796] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.834782][T11070] EXT4-fs (loop5): unsupported descriptor size 0 [ 338.186852][ T28] kauditd_printk_skb: 28 callbacks suppressed [ 338.186867][ T28] audit: type=1400 audit(1784589742.219:3074): avc: denied { read append } for pid=11069 comm="syz.5.2087" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 338.218606][T11085] program syz.5.2087 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.256155][ T28] audit: type=1400 audit(1784589742.219:3075): avc: denied { open } for pid=11069 comm="syz.5.2087" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 338.456588][ T28] audit: type=1400 audit(1784589742.489:3076): avc: denied { write } for pid=11089 comm="syz.6.2092" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.397395][T11105] set_capacity_and_notify: 2 callbacks suppressed [ 339.397410][T11105] loop6: detected capacity change from 0 to 764 [ 339.423975][T11105] rock: directory entry would overflow storage [ 339.430221][T11105] rock: sig=0x5245, size=8, remaining=5 [ 339.452044][T11105] vcan0 speed is unknown, defaulting to 1000 [ 339.524173][T11105] hsr0 speed is unknown, defaulting to 1000 [ 339.862612][T11116] tipc: Resetting bearer [ 340.107914][T11116] tipc: Resetting bearer [ 340.769438][T11117] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.797819][T11112] loop6: detected capacity change from 0 to 4096 [ 340.869730][ T28] audit: type=1400 audit(1784589744.819:3077): avc: denied { mount } for pid=11127 comm="syz.1.2104" name="/" dev="hugetlbfs" ino=32144 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 340.901651][T11117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 340.921101][T11112] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 340.939538][T11117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.966733][T11117] veth1_vlan: left promiscuous mode [ 340.973017][T11117] veth0_vlan: left promiscuous mode [ 340.981916][T11117] veth0_vlan: entered promiscuous mode [ 340.995731][T11117] veth1_vlan: entered promiscuous mode [ 341.007481][T11117] veth1_macvtap: left promiscuous mode [ 341.023795][T11117] veth0_macvtap: left promiscuous mode [ 341.034461][T11117] veth0_macvtap: entered promiscuous mode [ 341.041603][T11117] veth1_macvtap: entered promiscuous mode [ 341.050675][T11117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 341.061087][T11117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 341.069569][T11117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 341.089146][T11117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 341.106441][T11117] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.183635][T11117] veth0_to_team: entered promiscuous mode [ 341.194146][T11117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.552115][T11112] EXT4-fs: error -4 creating inode table initialization thread [ 341.562679][T11112] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 341.575730][ T3377] vcan0 speed is unknown, defaulting to 1000 [ 341.575772][ T361] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.581774][ T3377] syz1: Port: 1 Link DOWN [ 341.703171][ T361] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.718886][T11125] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.725980][T11125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.736740][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.736814][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.752800][T11125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.929782][T11130] : renamed from bond_slave_0 [ 342.903884][ T3377] vcan0 speed is unknown, defaulting to 1000 [ 343.059743][ T361] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.137083][ T361] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.158482][ T49] ip6_tunnel: - xmit: Local address not yet configured! [ 343.169006][ T49] ip6_tunnel: - xmit: Local address not yet configured! [ 343.182548][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 343.190196][ T3377] ip6_tunnel: - xmit: Local address not yet configured! [ 343.198222][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 343.211721][ T3377] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 343.329795][ T3377] ip6_tunnel: - xmit: Local address not yet configured! [ 343.365585][ T28] audit: type=1400 audit(1784589747.389:3078): avc: denied { accept } for pid=11139 comm="syz.1.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 343.602616][T11151] tipc: Enabling of bearer rejected, already enabled [ 343.652041][ T361] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.661100][ T361] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.670179][ T361] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.725335][ T361] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.735630][ T28] audit: type=1400 audit(1784589747.769:3079): avc: denied { connect } for pid=11164 comm="syz.2.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.758664][T11162] bond0: entered promiscuous mode [ 343.764520][T11162] @ÿ: entered promiscuous mode [ 343.770846][T11162] bond_slave_1: entered promiscuous mode [ 343.777282][T11162] batadv0: entered promiscuous mode [ 343.796777][T11162] hsr2: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 343.806765][ T28] audit: type=1400 audit(1784589747.829:3080): avc: denied { block_suspend } for pid=11164 comm="syz.2.2113" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 343.828636][T11162] hsr2: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 343.838940][ T28] audit: type=1400 audit(1784589747.829:3081): avc: denied { shutdown } for pid=11164 comm="syz.2.2113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.859375][ T3377] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 343.860170][T11172] loop5: detected capacity change from 0 to 1024 [ 343.867409][T11162] 8021q: adding VLAN 0 to HW filter on device hsr2 [ 343.882456][T11162] bond0: left promiscuous mode [ 343.887548][T11162] @ÿ: left promiscuous mode [ 343.892482][T11162] bond_slave_1: left promiscuous mode [ 343.893976][T11172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 343.909932][T11162] batadv0: left promiscuous mode [ 343.909983][T11172] ext4 filesystem being mounted at /373/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 343.941701][ T28] audit: type=1400 audit(1784589747.979:3082): avc: denied { write } for pid=11171 comm="syz.5.2115" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 343.980375][ T28] audit: type=1326 audit(1784589747.999:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.6.2117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 344.005990][ T28] audit: type=1326 audit(1784589748.009:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.6.2117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 344.032358][ T28] audit: type=1326 audit(1784589748.009:3085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.6.2117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 344.059520][ T28] audit: type=1326 audit(1784589748.009:3086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.6.2117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 344.074600][T11177] loop6: detected capacity change from 0 to 2048 [ 344.093668][ T12] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:0: lblock 0 mapped to illegal pblock 0 (length 6) [ 344.107966][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 344.120648][ T3377] ip6_tunnel: - xmit: Local address not yet configured! [ 344.135805][ T28] audit: type=1326 audit(1784589748.009:3087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11176 comm="syz.6.2117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7c694de99 code=0x7ffc0000 [ 344.256603][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 344.256603][ T12] [ 344.266993][ T12] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:0: lblock 8 mapped to illegal pblock 8 (length 8) [ 344.281629][ T3377] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 344.307151][T11177] loop6: unable to read partition table [ 344.313316][T11177] loop6: partition table beyond EOD, truncated [ 344.319725][T11177] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 344.457075][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 344.495241][ T12] EXT4-fs (loop5): This should not happen!! Data will be lost [ 344.495241][ T12] [ 344.571314][ T3623] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 344.621258][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 344.837185][T11183] loop2: detected capacity change from 0 to 4096 [ 344.888020][T11183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.137942][T11197] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 345.170805][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.269945][ T6348] page_pool_release_retry() stalled pool shutdown: id 40, 51 inflight 182 sec [ 345.315189][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 345.449286][ T2980] loop6: unable to read partition table [ 345.461751][ T2980] loop6: partition table beyond EOD, truncated [ 345.958564][T11206] tipc: Enabling of bearer rejected, already enabled [ 346.304652][T11215] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2127'. [ 346.841190][T11243] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.913098][T11243] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.951647][T11249] loop2: detected capacity change from 0 to 512 [ 346.958320][T11249] EXT4-fs: Ignoring removed nobh option [ 346.967903][T11243] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 346.993488][T11249] EXT4-fs (loop2): 1 orphan inode deleted [ 347.000033][T11249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.044954][T11243] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 347.054177][T11243] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 347.138489][ T361] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.156861][ T361] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.183181][ T361] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.230080][ T361] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.392944][ T3610] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 347.405151][T11254] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2141'. [ 347.436888][T11257] tipc: Enabling of bearer rejected, already enabled [ 347.569594][T11260] loop5: detected capacity change from 0 to 1024 [ 347.692796][T11260] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 347.774490][T11260] ext4 filesystem being mounted at /375/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.901972][ T68] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm kworker/u8:4: lblock 0 mapped to illegal pblock 0 (length 1) [ 347.926957][ T68] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 347.952358][ T68] EXT4-fs (loop5): This should not happen!! Data will be lost [ 347.952358][ T68] [ 347.975853][ T3623] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 347.999276][ T3623] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 348.084618][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.387535][T11286] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2151'. [ 349.135104][T11298] ip6gre1: entered promiscuous mode [ 349.152784][T11298] ip6gre1: entered allmulticast mode [ 349.184408][T11297] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2153'. [ 349.197386][T11304] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 349.197403][T11304] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.237785][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.250586][ T68] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.259747][ T3385] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 349.271911][ T28] kauditd_printk_skb: 504 callbacks suppressed [ 349.271924][ T28] audit: type=1400 audit(1784589753.309:3592): avc: denied { bind } for pid=11302 comm="syz.5.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.301269][T11308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2156'. [ 349.390328][ T28] audit: type=1400 audit(1784589753.309:3593): avc: denied { setopt } for pid=11302 comm="syz.5.2156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 349.673241][ T28] audit: type=1400 audit(1784589753.709:3594): avc: denied { mount } for pid=11311 comm="syz.0.2159" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 350.010982][T11326] tipc: Enabling of bearer rejected, already enabled [ 350.020706][ T3385] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.081695][ T3385] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.546472][T11340] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 350.566387][T11340] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2169'. [ 350.579406][ T28] audit: type=1400 audit(1784589754.619:3595): avc: denied { name_bind } for pid=11339 comm="syz.1.2169" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 350.643168][T11342] loop6: detected capacity change from 0 to 512 [ 350.657166][T11342] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 350.681970][T11342] EXT4-fs: error: could not find journal device path [ 350.760115][T11347] xt_hashlimit: invalid rate [ 350.886876][ T28] audit: type=1326 audit(1784589754.919:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.1.2177" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb7bde99 code=0x7ffc0000 [ 350.919320][T11348] xt_hashlimit: size too large, truncated to 1048576 [ 350.983713][T11364] audit: audit_backlog=65 > audit_backlog_limit=64 [ 350.986473][ T28] audit: type=1326 audit(1784589754.929:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.1.2177" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb7bde99 code=0x7ffc0000 [ 351.016324][ T28] audit: type=1326 audit(1784589754.929:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11359 comm="syz.1.2177" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bb7bde99 code=0x7ffc0000 [ 351.051176][T11364] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 351.060487][T11364] audit: backlog limit exceeded [ 351.147680][T11375] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2181'. [ 351.148756][T11378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2181'. [ 351.159399][T11372] loop2: detected capacity change from 0 to 512 [ 351.220713][T11372] FAT-fs (loop2): Directory bread(block 2080) failed [ 351.240364][T11372] FAT-fs (loop2): Directory bread(block 2081) failed [ 351.260467][T11372] FAT-fs (loop2): Directory bread(block 2082) failed [ 351.269984][T11372] FAT-fs (loop2): Directory bread(block 2083) failed [ 351.279493][T11372] FAT-fs (loop2): Directory bread(block 2084) failed [ 351.288635][T11372] FAT-fs (loop2): Directory bread(block 2085) failed [ 351.295881][T11372] FAT-fs (loop2): Directory bread(block 2086) failed [ 351.303873][T11372] FAT-fs (loop2): Directory bread(block 2087) failed [ 351.381110][T11389] loop6: detected capacity change from 0 to 512 [ 351.407863][T11389] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 351.439779][T11389] EXT4-fs: error: could not find journal device path [ 351.478957][T11391] loop5: detected capacity change from 0 to 8192 [ 351.566597][T11401] xt_hashlimit: invalid rate [ 351.857579][T11413] loop6: detected capacity change from 0 to 128 [ 351.971305][T11416] loop5: detected capacity change from 0 to 2048 [ 352.488608][T11423] loop6: detected capacity change from 0 to 128 [ 352.774964][ T2980] loop5: unable to read partition table [ 352.891872][ T2980] loop5: partition table beyond EOD, truncated [ 353.629708][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 353.654182][T11431] loop6: detected capacity change from 0 to 1024 [ 353.667284][T11431] EXT4-fs: inline encryption not supported [ 353.686271][T11431] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 353.715575][T11431] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 2: comm syz.6.2196: lblock 2 mapped to illegal pblock 2 (length 1) [ 353.729909][T11431] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 353.730449][T11431] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2196: Invalid inode table block 1 in block_group 0 [ 353.739719][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 353.739759][ C0] EXT4-fs (loop6): initial error at time 1784589757: ext4_map_blocks:791: inode 3: block 2 [ 353.739898][ C0] EXT4-fs (loop6): last error at time 1784589757: ext4_map_blocks:791: inode 3: block 2 [ 353.779875][T11431] loop6: lost filesystem error report for type 5 error -117 [ 353.892043][T11431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 353.909455][T11431] loop6: lost filesystem error report for type 5 error -117 [ 353.910438][T11431] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #3: comm syz.6.2196: mark_inode_dirty error [ 353.929741][T11431] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 353.931606][T11431] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.2196: Failed to acquire dquot type 0 [ 353.952485][T11431] loop6: lost filesystem error report for type 5 error -117 [ 353.953857][T11431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 353.971189][T11431] loop6: lost filesystem error report for type 5 error -117 [ 353.975307][T11431] EXT4-fs error (device loop6): ext4_evict_inode:267: inode #11: comm syz.6.2196: mark_inode_dirty error [ 353.994495][T11431] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 353.995435][T11431] EXT4-fs warning (device loop6): ext4_evict_inode:270: couldn't mark inode dirty (err -117) [ 354.015871][T11431] EXT4-fs (loop6): 1 orphan inode deleted [ 354.026578][T11431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.045382][ T49] EXT4-fs error (device loop6): ext4_map_blocks:791: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 354.247029][ T49] EXT4-fs error (device loop6): ext4_release_dquot:7077: comm kworker/u8:3: Failed to release dquot type 0 [ 354.422268][T11431] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.434057][T11431] EXT4-fs error (device loop6): __ext4_get_inode_loc:4886: comm syz.6.2196: Invalid inode table block 1 in block_group 0 [ 354.447208][T11431] loop6: lost filesystem error report for type 5 error -117 [ 354.448367][T11431] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6435: Corrupt filesystem [ 354.465715][T11431] loop6: lost filesystem error report for type 5 error -117 [ 354.466983][T11431] EXT4-fs error (device loop6): ext4_quota_off:7325: inode #3: comm syz.6.2196: mark_inode_dirty error [ 354.485920][T11431] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 354.899620][T11446] loop2: detected capacity change from 0 to 512 [ 354.982010][T11446] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 355.057998][T11446] EXT4-fs: error: could not find journal device path [ 355.155530][T11452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24080 sclass=netlink_route_socket pid=11452 comm=syz.6.2206 [ 355.181570][T11455] xt_hashlimit: invalid rate [ 355.236638][T11458] IPv6: NLM_F_CREATE should be specified when creating new route [ 355.245809][T11458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2207'. [ 355.360852][T11461] loop6: detected capacity change from 0 to 512 [ 355.440049][ T28] kauditd_printk_skb: 411 callbacks suppressed [ 355.440098][ T28] audit: type=1400 audit(1784589759.469:4007): avc: denied { write } for pid=11459 comm="syz.2.2208" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 355.510924][T11461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.523696][T11461] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 355.741174][T11463] xt_CT: You must specify a L4 protocol and not use inversions on it [ 355.786036][T11468] xt_hashlimit: size too large, truncated to 1048576 [ 355.820167][T11458] vcan0 speed is unknown, defaulting to 1000 [ 355.853135][T11464] loop2: detected capacity change from 0 to 8192 [ 355.885048][T11464] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 356.026679][T11458] hsr0 speed is unknown, defaulting to 1000 [ 356.078695][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.370670][T11486] loop6: detected capacity change from 0 to 764 [ 356.431943][T11486] rock: directory entry would overflow storage [ 356.438176][T11486] rock: sig=0x5245, size=8, remaining=5 [ 356.460819][T11486] vcan0 speed is unknown, defaulting to 1000 [ 356.524382][T11486] hsr0 speed is unknown, defaulting to 1000 [ 356.604553][ T28] audit: type=1400 audit(1784589760.639:4008): avc: denied { setopt } for pid=11481 comm="syz.2.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 356.757246][T11491] usb usb5: usbfs: process 11491 (syz.5.2214) did not claim interface 0 before use [ 356.785573][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 356.787694][ C1] ip6_tunnel: - xmit: Local address not yet configured! [ 357.113662][ T28] audit: type=1400 audit(1784589761.149:4009): avc: denied { read } for pid=11497 comm="syz.5.2218" lport=56003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 357.162477][T11502] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2219'. [ 357.188676][ T28] audit: type=1400 audit(1784589761.219:4010): avc: denied { name_bind } for pid=11501 comm="syz.6.2219" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 357.346793][T11506] loop5: detected capacity change from 0 to 1024 [ 357.374709][T11506] EXT4-fs: Ignoring removed mblk_io_submit option [ 357.399444][T11506] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 357.408148][T11506] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 357.432852][T11506] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.2221: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 357.460920][T11506] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 357.464864][T11506] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.2221: couldn't read orphan inode 11 (err -117) [ 357.474083][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 357.474122][ C1] EXT4-fs (loop5): initial error at time 1784589761: ext4_ext_check_inode:521: inode 11 [ 357.474157][ C1] EXT4-fs (loop5): last error at time 1784589761: ext4_ext_check_inode:521: inode 11 [ 357.546176][T11506] loop5: lost filesystem error report for type 5 error -117 [ 357.546645][T11506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 357.602977][ T28] audit: type=1400 audit(1784589761.639:4011): avc: denied { write } for pid=11505 comm="syz.5.2221" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.603154][T11506] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.2221: Invalid block bitmap block 0 in block_group 0 [ 357.699844][T11506] Quota error (device loop5): write_blk: dquota write failed [ 357.708391][T11506] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 357.720418][T11506] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.2221: Failed to acquire dquot type 0 [ 357.744892][T11510] EXT4-fs error (device loop5): ext4_read_inode_bitmap:141: comm syz.5.2221: Invalid inode bitmap blk 137438953472 in block_group 0 [ 357.760523][ T28] audit: type=1400 audit(1784589761.779:4012): avc: denied { write } for pid=11505 comm="syz.5.2221" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.862135][ T28] audit: type=1400 audit(1784589761.899:4013): avc: denied { write } for pid=11505 comm="syz.5.2221" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 357.988919][ T3623] EXT4-fs error (device loop5): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /390/file2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 358.021804][ T3623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 358.077699][ T3623] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm syz-executor: Invalid inode table block 8589934593 in block_group 0 [ 358.346482][ T68] EXT4-fs error (device loop5): __ext4_get_inode_loc:4886: comm kworker/u8:4: Invalid inode table block 8589934593 in block_group 0 [ 358.368430][ T6799] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.464799][T11521] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11521 comm=syz.1.2225 [ 358.555363][ T28] audit: type=1400 audit(1784589762.589:4014): avc: denied { ioctl } for pid=11520 comm="syz.1.2225" path="socket:[33382]" dev="sockfs" ino=33382 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 358.750987][T11533] vcan0 speed is unknown, defaulting to 1000 [ 358.833412][ T49] gretap0 (unregistering): left promiscuous mode [ 358.841390][ T49] tipc: Disabling bearer [ 358.888757][ T49] bond0 (unregistering): left promiscuous mode [ 358.897246][ T49] bond0 (unregistering): Released all slaves [ 358.906329][ T49] bond1 (unregistering): Released all slaves [ 358.924634][ T49] bond2 (unregistering): Released all slaves [ 358.950063][ T49] bond3 (unregistering): Released all slaves [ 358.959064][ T49] bond4 (unregistering): Released all slaves [ 358.974554][T11533] hsr0 speed is unknown, defaulting to 1000 [ 359.038538][ T49] tipc: Disabling bearer [ 359.049048][ T49] tipc: Disabling bearer [ 359.076488][ T49] tipc: Left network mode [ 359.206876][ T49] hsr_slave_0: left promiscuous mode [ 359.224543][ T49] hsr_slave_1: left promiscuous mode [ 359.312024][T11569] loop2: detected capacity change from 0 to 8192 [ 359.363033][ T361] smc: removing ib device syz1 [ 359.393868][ T3019] 8021q: adding VLAN 0 to HW filter on device eth9 [ 359.420842][T11569] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 359.549282][T11592] netlink: 'syz.0.2236': attribute type 13 has an invalid length. [ 359.565386][T11592] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.2236'. [ 360.461539][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.705320][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 360.705389][ T28] audit: type=1400 audit(1784589764.739:4035): avc: denied { write } for pid=11614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.799257][ T28] audit: type=1400 audit(1784589764.789:4036): avc: denied { setopt } for pid=11615 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 360.822511][ T28] audit: type=1400 audit(1784589764.789:4037): avc: denied { getopt } for pid=11615 comm="syz.2.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 360.844504][ T28] audit: type=1400 audit(1784589764.819:4038): avc: denied { write } for pid=11635 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 360.867874][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.875594][T11533] bridge_slave_0: entered allmulticast mode [ 360.882577][T11533] bridge_slave_0: entered promiscuous mode [ 360.889365][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.900803][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.908008][T11533] bridge_slave_1: entered allmulticast mode [ 360.914911][T11533] bridge_slave_1: entered promiscuous mode [ 360.932290][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.943189][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.995696][T11533] team0: Port device team_slave_0 added [ 361.008723][T11533] team0: Port device team_slave_1 added [ 361.030900][T11643] loop6: detected capacity change from 0 to 1024 [ 361.042582][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.055399][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.089438][T11643] EXT4-fs: Ignoring removed bh option [ 361.111038][T11643] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.188559][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.209089][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.216594][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.243719][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.272130][T11533] hsr_slave_0: entered promiscuous mode [ 361.278298][T11533] hsr_slave_1: entered promiscuous mode [ 361.357274][T11533] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 361.366063][T11533] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 361.405864][T11533] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 361.431498][T11533] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.444836][ T3019] 8021q: adding VLAN 0 to HW filter on device eth10 [ 361.499421][T11533] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 361.549742][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.565773][T11533] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 361.680007][T11533] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.729315][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2250'. [ 361.865159][T11533] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 361.886954][ T28] audit: type=1400 audit(1784589765.919:4039): avc: denied { write } for pid=11660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.958503][ T28] audit: type=1400 audit(1784589765.969:4040): avc: denied { compute_member } for pid=11679 comm="syz.6.2248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 361.989220][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.997205][ T28] audit: type=1400 audit(1784589765.989:4041): avc: denied { write } for pid=11684 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.998313][ T3019] 8021q: adding VLAN 0 to HW filter on device eth11 [ 362.062995][T11693] loop6: detected capacity change from 0 to 164 [ 362.080802][T11533] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.089170][T11693] iso9660: Unknown parameter 'bsector' [ 362.125125][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.132230][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.170422][T11125] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.177573][T11125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.185562][ T28] audit: type=1400 audit(1784589766.209:4042): avc: denied { getopt } for pid=11698 comm="syz.0.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 362.212935][T11700] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2252'. [ 362.433723][ T28] audit: type=1400 audit(1784589766.469:4043): avc: denied { write } for pid=11708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.457955][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.499067][ T28] audit: type=1400 audit(1784589766.509:4044): avc: denied { write } for pid=11731 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 362.521082][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.538933][ T3019] 8021q: adding VLAN 0 to HW filter on device eth12 [ 362.878989][T11770] hsr0 speed is unknown, defaulting to 1000 [ 363.097909][T11774] loop6: detected capacity change from 0 to 1024 [ 363.156399][T11774] EXT4-fs: Ignoring removed nomblk_io_submit option [ 363.187232][T11778] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 363.232955][T11533] veth0_vlan: entered promiscuous mode [ 363.241537][T11774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.255737][T11533] veth1_vlan: entered promiscuous mode [ 363.272398][T11533] veth0_macvtap: entered promiscuous mode [ 363.278390][T11774] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.291255][T11533] veth1_macvtap: entered promiscuous mode [ 363.302057][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.312242][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.334318][T11125] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.345619][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 363.354742][T11125] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.362260][T11778] binfmt_misc: register: failed to install interpreter file ./file2 [ 363.371595][T11125] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.380801][T11125] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.534233][T11788] sctp: [Deprecated]: syz.0.2269 (pid 11788) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.534233][T11788] Use struct sctp_sack_info instead [ 364.214027][T11828] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.214325][T11828] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.670852][T11843] loop6: detected capacity change from 0 to 512 [ 364.679359][T11843] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 364.679402][T11843] System zones: 1-12 [ 364.679544][T11843] EXT4-fs error (device loop6): dx_probe:791: inode #2: comm syz.6.2283: Directory hole found for htree index block 0 [ 364.679763][T11843] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 364.680162][T11843] EXT4-fs (loop6): Remounting filesystem read-only [ 364.680184][T11843] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 364.680289][T11843] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 364.680765][T11843] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 364.715587][T11843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2283'. [ 364.816802][ T7180] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.839777][T11848] loop7: detected capacity change from 0 to 1024 [ 364.861349][T11848] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 364.861492][T11848] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.900562][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2285'. [ 364.910574][T11533] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 365.129157][T11862] loop7: detected capacity change from 0 to 1756 [ 365.129565][T11862] iso9660: Unknown parameter 'ÆrÄâ82ùP«…hÐÃQq<¥ô§aK˺ȣ/®„•€Þî³E' [ 365.431178][T11828] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 365.568169][T11828] veth3: left promiscuous mode [ 365.596912][T11828] sit1: left allmulticast mode [ 365.638148][T11828] ip6tnl2: left allmulticast mode [ 365.984697][T11828] bond2: left promiscuous mode [ 366.011649][T11828] xfrm1: left allmulticast mode [ 366.198008][T11867] IPVS: Unknown mcast interface: nicvf0 [ 366.199879][ T30] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.221570][T11832] hsr0 speed is unknown, defaulting to 1000 [ 366.296532][ T361] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.296602][ T361] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.296639][ T361] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.332394][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 366.332410][ T28] audit: type=1400 audit(1784589770.369:4053): avc: denied { mounton } for pid=11881 comm="syz.0.2293" path="/syzcgroup/cpu/syz0/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 366.357127][T11880] team_slave_1: Caught tx_queue_len zero misconfig [ 366.357376][T11880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2292'. [ 366.508341][T11892] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 366.525507][T11892] netlink: 'syz.1.2297': attribute type 10 has an invalid length. [ 366.555075][ T28] audit: type=1400 audit(1784589770.589:4054): avc: denied { read write } for pid=11893 comm="syz.2.2298" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.588403][T11892] dummy0 (unregistering): left promiscuous mode [ 366.604079][ T28] audit: type=1400 audit(1784589770.589:4055): avc: denied { open } for pid=11893 comm="syz.2.2298" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 366.656390][T11901] netlink: 'syz.0.2300': attribute type 1 has an invalid length. [ 366.673725][T11904] xt_NFQUEUE: number of total queues is 0 [ 366.676569][T11901] 8021q: adding VLAN 0 to HW filter on device bond6 [ 366.691734][T11901] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16323 sclass=netlink_route_socket pid=11901 comm=syz.0.2300 [ 366.831091][T11911] Set syz1 is full, maxelem 6117 reached [ 366.833492][ T28] audit: type=1400 audit(1784589770.859:4056): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 366.857148][ T28] audit: type=1400 audit(1784589770.889:4057): avc: denied { create } for pid=11909 comm="syz.2.2304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 366.877356][ T28] audit: type=1400 audit(1784589770.889:4058): avc: denied { sys_admin } for pid=11909 comm="syz.2.2304" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 366.961794][T11911] hsr0 speed is unknown, defaulting to 1000 [ 367.007134][T11916] hsr0 speed is unknown, defaulting to 1000 [ 367.401854][T11933] loop2: detected capacity change from 0 to 1024 [ 367.433603][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 367.450744][T11933] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.475601][ T28] audit: type=1400 audit(1784589771.509:4059): avc: denied { map } for pid=11934 comm="syz.0.2308" path="socket:[35094]" dev="sockfs" ino=35094 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 367.500069][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 367.626530][T11946] loop2: detected capacity change from 0 to 256 [ 367.686803][T11946] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 367.725967][T11946] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 367.753691][ T28] audit: type=1400 audit(1784589771.789:4060): avc: denied { mounton } for pid=11945 comm="syz.2.2309" path="/450/file0" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 367.830500][ T28] audit: type=1400 audit(1784589771.869:4061): avc: denied { getopt } for pid=11952 comm="syz.1.2322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 367.851205][T11957] gretap0: entered promiscuous mode [ 367.872170][T11954] gretap0: left promiscuous mode [ 367.931691][T11961] loop6: detected capacity change from 0 to 512 [ 367.963277][T11961] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 367.970075][T11959] loop2: detected capacity change from 0 to 4096 [ 368.019449][T11959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.098050][ T28] audit: type=1400 audit(1784589772.129:4062): avc: denied { create } for pid=11966 comm="syz.6.2315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 368.203523][T11973] xt_hashlimit: max too large, truncated to 1048576 [ 368.216228][T11973] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 368.569538][T11970] netlink: 830 bytes leftover after parsing attributes in process `syz.6.2315'. [ 368.675111][T11992] hsr0 speed is unknown, defaulting to 1000 [ 368.869399][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.198566][T12004] hsr0 speed is unknown, defaulting to 1000 [ 369.254052][T12012] 9p: Bad value for 'rfdno' [ 369.327766][T12017] loop6: detected capacity change from 0 to 128 [ 369.455410][T12024] loop7: detected capacity change from 0 to 1024 [ 369.825594][T12024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 369.897541][T12024] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 370.624430][ T30] EXT4-fs error (device loop7): ext4_map_blocks:833: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 1) [ 370.639875][T12044] syzkaller0: entered promiscuous mode [ 370.645389][T12044] syzkaller0: entered allmulticast mode [ 370.645488][ T30] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 370.679752][ T30] EXT4-fs (loop7): This should not happen!! Data will be lost [ 370.679752][ T30] [ 370.746094][T11533] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 370.869775][T11533] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 370.989613][T12060] loop2: detected capacity change from 0 to 1024 [ 370.997900][T12060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 371.027170][T12060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.107328][T12066] 9p: Bad value for 'rfdno' [ 371.113966][T12060] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.158531][T12060] IPv6: NLM_F_CREATE should be specified when creating new route [ 371.173115][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2344'. [ 371.233205][T12077] hsr0 speed is unknown, defaulting to 1000 [ 371.239718][ C0] ================================================================== [ 371.247813][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 371.255035][ C0] [ 371.257356][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 371.265423][ C0] wq_worker_tick+0x64/0x240 [ 371.270032][ C0] sched_tick+0xbc/0x1f0 [ 371.274272][ C0] update_process_times+0x15e/0x190 [ 371.279471][ C0] tick_nohz_handler+0x227/0x380 [ 371.284416][ C0] __hrtimer_run_queues+0x1f8/0x510 [ 371.289636][ C0] hrtimer_interrupt+0x257/0x810 [ 371.294584][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 371.300476][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 371.306120][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.312129][ C0] __tsan_read_write1+0x148/0x180 [ 371.317168][ C0] nsim_dev_trap_report_work+0x225/0x630 [ 371.322815][ C0] process_scheduled_works+0x4d4/0x9a0 [ 371.328281][ C0] worker_thread+0x569/0x750 [ 371.332890][ C0] kthread+0x221/0x270 [ 371.336963][ C0] ret_from_fork+0x146/0x330 [ 371.341555][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.346328][ C0] [ 371.348641][ C0] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 371.356703][ C0] wq_worker_tick+0x64/0x240 [ 371.361303][ C0] sched_tick+0xbc/0x1f0 [ 371.365558][ C0] update_process_times+0x15e/0x190 [ 371.370762][ C0] tick_nohz_handler+0x227/0x380 [ 371.375702][ C0] __hrtimer_run_queues+0x1f8/0x510 [ 371.380913][ C0] hrtimer_interrupt+0x257/0x810 [ 371.385882][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 371.391792][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 371.397437][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 371.403420][ C0] __sanitizer_cov_trace_const_cmp8+0x17/0x90 [ 371.409509][ C0] _get_random_bytes+0x92/0x1b0 [ 371.414368][ C0] get_random_bytes+0x1d/0x30 [ 371.419049][ C0] nsim_dev_trap_report_work+0x46a/0x630 [ 371.424691][ C0] process_scheduled_works+0x4d4/0x9a0 [ 371.430157][ C0] worker_thread+0x569/0x750 [ 371.434753][ C0] kthread+0x221/0x270 [ 371.438815][ C0] ret_from_fork+0x146/0x330 [ 371.443412][ C0] ret_from_fork_asm+0x1a/0x30 [ 371.448179][ C0] [ 371.450496][ C0] value changed: 0x00000000001312d0 -> 0x00000000001339e0 [ 371.457593][ C0] [ 371.459908][ C0] Reported by Kernel Concurrency Sanitizer on: [ 371.466057][ C0] CPU: 0 UID: 0 PID: 39 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 371.476907][ C0] Tainted: [W]=WARN [ 371.480697][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 371.490746][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 371.497525][ C0] ================================================================== [ 371.535865][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 371.535951][ T28] audit: type=1326 audit(1784589775.539:4117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 371.618020][ T28] audit: type=1326 audit(1784589775.549:4118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 371.647182][ T28] audit: type=1326 audit(1784589775.549:4119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 371.691592][ T28] audit: type=1326 audit(1784589775.559:4120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f27273adc02 code=0x7ffc0000 [ 371.717238][ T28] audit: type=1326 audit(1784589775.559:4121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f27273adc97 code=0x7ffc0000 [ 371.742841][ T28] audit: type=1326 audit(1784589775.559:4122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f272736ab91 code=0x7ffc0000 [ 371.772224][ T28] audit: type=1326 audit(1784589775.559:4123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f27273aec89 code=0x7ffc0000 [ 371.797877][ T28] audit: type=1326 audit(1784589775.559:4124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f272736abfb code=0x7ffc0000 [ 371.823393][ T28] audit: type=1326 audit(1784589775.559:4125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 371.848973][ T28] audit: type=1326 audit(1784589775.559:4126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.2.2341" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27273ade99 code=0x7ffc0000 [ 379.789796][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!