last executing test programs: 3m55.229588186s ago: executing program 3 (id=970): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) 3m54.179346431s ago: executing program 3 (id=981): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0xc, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x5, 0x1fd, &(0x7f0000003c40)="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"}) 3m54.079590688s ago: executing program 3 (id=983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x700, 0x0, 0x18}}}}}, 0x36) 3m53.619592165s ago: executing program 3 (id=987): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xbf) getdents64(r1, 0xfffffffffffffffe, 0x29) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="06000000040000000110000002"], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket(0xa, 0x3, 0x3a) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x3, 0x4, 0x3, 0x0, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}}}, 0x32) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r3, &(0x7f0000000000)="0228e8a4896c8081808bb1d677e331e65ae6a4df62af31bbf21fc678d7e4e50791a49a1284693bf055dfceb7a5297e6e4f5376ac3195468bbf857065310e8dcdf2bd86f432454bc9c0416c1058799e8429b1fe971db98a3949e5eb96362def7d937b7a5bbb23bc274f14b29bdb3e6d3b4bc31513cda70fa949168c0ce35c4a18fd468628f3c80e7843c945e26f96408bdef0a7e38c4b648d042607476a78b774c009321b39cbb5d9534b5b91b9cdeb783fd8b8d5", 0x0}, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$sock_buf(r5, 0x1, 0x22, &(0x7f00000014c0)=""/136, &(0x7f0000000140)=0x88) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000780)="b9ff64731c280f0ecd85ed0f80d2", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x2, 0x4, 0xfffc, 0x3, 0xfff3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004810}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17"], 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ptrace(0x10, r7) ptrace$setregs(0xd, r7, 0xfffffffffffffffc, &(0x7f00000003c0)) ptrace$getregset(0x4205, r7, 0x200, &(0x7f0000000080)={0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m53.251027057s ago: executing program 3 (id=993): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100005de599697944623400000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3m52.936313989s ago: executing program 3 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0xc884) 3m52.922701921s ago: executing program 32 (id=996): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0xc884) 2m47.673935656s ago: executing program 1 (id=1577): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c556f00"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2m46.701999339s ago: executing program 1 (id=1581): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000980)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2m46.529300538s ago: executing program 1 (id=1583): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) 2m46.431680004s ago: executing program 1 (id=1587): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x0, 0x2, '\b\x00', 0xff, 0x7b}) syz_emit_ethernet(0x4e, &(0x7f0000000780)=ANY=[@ANYBLOB="00000000ffff00000000000086dd6000200000183aff00000000000000000000ffff0a010100fe8000000000000000000000000000aa8700907800000000fe8000000000000000000000000000aa"], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@broadcast, @random="403a7f7acf64", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffde2, 0x2000, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0xd, 0x4, 0x0, 0x0, 0x2, 0x67, 0x4, 0x0, 0x11, 0x0, @multicast2, @rand_addr, {[@ssrr={0x89, 0x0, 0x58, [@empty, @empty, @multicast1, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010101]}, @ra, @timestamp_addr={0x44, 0x4, 0x20, 0x1, 0x6}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="10100000000000000800200005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x4000000) 2m46.33552501s ago: executing program 1 (id=1588): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1d, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x1002, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080020cbb60000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x8, 0xa947}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r1, {0xe, 0x1}}}, 0x24}}, 0x4) 2m45.575421197s ago: executing program 1 (id=1591): r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, r1, 0xc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, 0x0) r6 = io_uring_setup(0x25f5, &(0x7f0000000040)={0x0, 0x512, 0x2, 0x1, 0x257}) io_uring_enter(r6, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) 2m28.612396642s ago: executing program 33 (id=1591): r0 = add_key$user(&(0x7f0000000040), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000700)="a6", 0x1, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xffffffffffffffff, 0xee01) socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4400, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES16=0x0], 0xf6, 0xa15, &(0x7f0000000d00)="$eJzs3c1vHOd9B/DvrEiJog1VtlVXFWxrJUM2bbMUSdUSBB9qiVxKdPlSkBRgoS0sw5IKQURd2C1gGz3IQNFTjBhBECDJJfAxJwPOIb4EuiXHnHIIkPg/CIxcohwCBju7lJbkvog0RSrK57MYzdvveduZnUe73J0n/CVbWVkppy2uX/rxTlaWh8/5ya8++/yT+vTxrezNnrxa/DQZSFJN+v5Univ9E5ML87M9MrqZXElyOymS7Etj3sH+NWtXUnw7j99bv53ihzncJtnAJhtHTyv8Vdvt8w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5KE5Ojo2NFZqbnLr1Z7awcArzL/tXsvixH/S6+7FVskRT1KQMDq0N9Hz50b/fT9X+O55nG2jONkb8H8tFjTx987am+ymr6LhXaEe9/+NHNt5eXr713b1N/28C+Zrvqy/t2rHr3b+/Wkl2ozU0vzk/PnrtQq04vzlfPnj49evLi1GJ1ajq1xcuLS7XZ6sRC7dzS/EJ1aOKl6tjZs6eqtZHL85fmLkyOzNRWN575h/HR0dPVN0b+pXZuYXF+7uQbI4sTF6dnZqbnLpQx9d31mDP1E/Gfp5eqS7Vzs9Xq9RvL1071qmQ9aKztnmJt0HivnMZHx8fHxsbHx06/evbVM6OjfRs2jK6TDRG7f9Kye36yrddu+IYqzf4/M5nOXC7lzVTbPiYymYXMZ7bD/qbV/v/EyVrXclv7/9Ve/vC93UdS9v/PNdae69T/d6hL78fKSiPnraZffbyfD/NRbubtLGc51/LeN85xw+OP25RP9Zu3duPjQmqZy3QWM5/pzOZcuaXa3FLN2ZzO6YzmrVzMVBZTzVSmM5NaFnM5i1lKrTyjJrKQWs5lKfNZSDVDmchLqWYsZ3M2p1JNLSO5nPlcylwuZDLnylyu50b5vJ/qUse7QWP3EzTeJWib+/+Vh/F/gjxo234Nh61aafb/ezsGrKwuDU3sWK0AAACA7fT3v8iBQ0/+/DdJf54tP5efmp6pje52tQAAAIBtVH5d75n6rL++9GwK7/8BAADgUVOUv7ErkgzmaGOp8UuoPfEhAAAAADwiyr//P1efDdaXjqa4eyeUK7tdNwAAAGB79L7Hfs+IYnj19r/Vq4351WZE8z6/g1PTM7WRifmZ18byQnmXgfKXBhty25MU/eXPD17OsUbUscHGfHBtjgP1qLGR18byco43GzL0fH32/FCbyPFG5IuNyBe7RJ6qRwLAo+54l/74fvv/lzPciBg+0rc3Sd+RNj3rqJ4VAB4WvcfY6RlR/OO99//9zWzX9P9P5vofGl8pGMk7eTfLuZrh8tcG5TcO1uT6b582PzO4+zWE0Qz3+DRgNfaXZyoZ7vF5wGDLQC/DPT4RaMTm35NTD/5AAMAOOt6hH95M/z/c8v4/G9//3x1a6JqfFALAQ+HuCPYPcGG32wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgO23rXf7H9hi8t82x/V7sMMQbFjY33wOtp7Pd5LsXJ2LbS6rsg35rCTZqeO1cws5mGz5WW17Gu9Nsvvt6rnQ13xJ3Hx7ebeuSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOykItnTbnsl2ZdkNMnJna/Vg3Nrtyuw8/6pdaW4kzv5IAd2rzoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+m5v3/K2nMH2tsSl8lOZHkSpJ/3e06bqc7u12BbbJ/i+la7v9fP+ZZKdLXOOwp+icmF+Zn64e/HPuh8tVnn39Sn1qS77vfcsrAyrrBJZolrI/90eOrS0+UqQYnr71/87/f/a/q5PlUsjfnl6ZmJmcvLLx+L8nTxRdJNY1p1Wp9//fEzz5t0/Iv6i1tb325U+WTM7mx3L9rl7p7ud3cWL42Xi9pqfbm0v/8540PWnY9mWPJ80PJ0NqS/qM+dSjpWPq7lVZ8Xfx/cSDfy5Xy+NefjWKlqB+ivynbv//6jeVrI++8u3y1Q50O5miSq8lA9zp93LL7aHk9aas86yr99VJHy6D6P4d6tLGrlhzHOrThifKUGWy2YW/HNrSqdm5DqeV5r7Tb36jRqQ41eiovtDnSK/uSzjV6ofuRbq/4uvh1cTG/yv+1jP9RqR//E+n86lybRRnZcqZ0jKw0IsuWj7fueGt95O++f1+1bztMDZv1rTUv3krL9b95rLbperRSdL0etZS4udfFuhLXnRVdXhdlj3RoXYrm1adTmmY9DzWiOtTzb/NK0nek21VxQ2/9So8ryt30r7ffvdXX/w+Kofw+t4z/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPPyKZE+77ZXkRJKDq+vVZGUT2e7rtKMyWGy2itvq1t1/HgmVzSYo7uROPsiBB1MdAAAAAAAAAHba+cmvPvv8k/pU7G9uav59v5r0JTlYfHd/JhfmZ3tk1J9cSXK7vjzQZn+XP/fX0+Xxe+u362uHN9sSAOB+/TkAAP//mWBg/A==") writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000002c0)}], 0x1) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x2280400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x2000c8c0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000100), 0x8}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, r1, 0xc, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) quotactl$Q_GETINFO(0xffffffff80000501, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000ffff327310ffff0000000000000002"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000640)='.\x00', 0x0, 0x0, 0x0) r6 = io_uring_setup(0x25f5, &(0x7f0000000040)={0x0, 0x512, 0x2, 0x1, 0x257}) io_uring_enter(r6, 0x2000000, 0x2, 0xf, &(0x7f0000000000), 0x18) bpf$MAP_CREATE(0xb00000000000000, 0x0, 0x50) 2m0.108009456s ago: executing program 4 (id=1710): socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtfilter={0x240, 0x2c, 0x10, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xd, 0x4}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xb, 0xffe0}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @filter_kind_options=@f_u32={{0x8}, {0x4}}, @filter_kind_options=@f_u32={{0x8}, {0x1c, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x6, 0xfff3}}, @TCA_U32_MARK={0x10, 0xa, {0x2682, 0x6}}]}}, @TCA_RATE={0x6, 0x5, {0xc2, 0x3}}, @filter_kind_options=@f_flow={{0x9}, {0x1a0, 0x2, [@TCA_FLOW_ACT={0x194, 0x9, 0x0, 0x1, [@m_ife={0x190, 0x4, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x7c78b50, 0x6, 0x0, 0x6, 0xa}, 0x1}}, @TCA_IFE_METALST={0x40, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x5}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x9625}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd9a}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xf9}, @IFE_META_PRIO={0x8, 0x3, @val=0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_SMAC={0xa, 0x4, @random="4209baa51469"}, @TCA_IFE_METALST={0x8, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}]}, @TCA_IFE_METALST={0x4}]}, {0xf1, 0x6, "187c1bb2a970ae91d44fe9db3709000000140314f8dc8ae724526883fa7256014d3101ab7e19f24e67037500d7f9924fb7ce3303348dce6e80304ff5a57a80b9cb6bc5498d204c9bdf7090b8bcf6b18101811bceec14f237a3eee003b0646f1f978efaf769474a78ef201e6e6af81f251cc6f8faf5b0f384d55c77a5aaadd219135782ed46179c0fbe82d4a37f9e4ff03b838a1d8e5b65f6a6069a0b6dd9791331afd2ce4dfc7988d2328682016aac9fdf63ad1f23b17f9584d224ba3c5d6e77edf3e20e701a80d542b442fb16869957b61005b7ff6d677c87dff523371f6f83a362eb68eb6886fe96eea84e39"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x5, 0x3}}}}]}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xc, 0x1}}]}}]}, 0x240}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) socket(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000006c0)='.\x00', 0xaa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) dup3(r1, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x21}, [@generic={0x91, 0x1, 0x1, 0xbd}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) readv(r2, &(0x7f0000000440)=[{&(0x7f0000000340)=""/48, 0x30}], 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700), 0x4) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b40000000000000061173c0000000000a6070000008300009500000000010000"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r4, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$rds(r4, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0) 1m58.844059167s ago: executing program 4 (id=1717): r0 = socket$kcm(0x1e, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x806, 0x0, 0x4, 0x7}, 0x10) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2000000052000100000000000000000002"], 0x20}}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) (async, rerun: 32) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (rerun: 32) timer_delete(r2) (async) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)=""/59, 0x3b}], 0x1}, 0x80) (async) r3 = socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80552, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x5, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x2000000020000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f00000028c0)={0x0, 0x28}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=r5, @ANYBLOB="0900000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x48}}, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r8 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/pid\x00') (rerun: 64) setns(r8, 0x40000000) (async) bind$inet(r7, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='hybla', 0x5) (async) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) sendto$inet(r7, &(0x7f0000000380)="d54352ec9ebd73f5836125050e55a703549832200d2826f6484ee06e773f8779864c82124addd7cee6ac5a0581d4a2dd85c2b6341dd882af2efe87348924c5aae3246a25b6461529064c499ff23af9d4432914a2", 0x54, 0x2000010, 0x0, 0x0) (async) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) (async) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r9 = socket$kcm(0x1e, 0x4, 0x0) close(r0) (async) setsockopt$sock_attach_bpf(r9, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[], 0xfdef) 1m58.629278853s ago: executing program 4 (id=1719): syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2148c5, &(0x7f0000000040)=ANY=[@ANYBLOB="02"], 0x1, 0x2cf, &(0x7f0000000580)="$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") mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc, 0x7ff80000}, 0x0, 0x6a6, 0x1, 0x6, 0xfff, 0xfffffbfc, 0x7fff, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0xa) lsm_list_modules(0x0, 0x0, 0x0) clock_nanosleep(0x8, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x0, 0x0, 0x0, 0x0, 0x5, 0xf56c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b81, 0x0, @perf_bp={0x0, 0x6}, 0x19196, 0x20000, 0x9, 0x4, 0x2c9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0xfffffffffffffffe, &(0x7f0000001180)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) socket(0x1, 0x80006, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0) shutdown(r3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) r5 = socket(0x26, 0x5, 0x7fffffff) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r6, 0x9, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000001c0)={r6, 0xfff, 0x6}, 0x8) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240)=0xcb0, 0x4) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000000)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e24, @empty}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x8000}}, 0x10) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r8, 0x6, 0x2a, &(0x7f0000000300), 0x4) 1m57.473568296s ago: executing program 4 (id=1729): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x800000200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES16=r0], 0x21c}}, 0x0) 1m55.887051751s ago: executing program 4 (id=1735): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000180001000000000000000000022000000000fe06000000000b0015000200000014001680100008800c0003"], 0x38}}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000000140)={0x10, 0x0, 0x25dfdbff, 0x6da24b7ebfdfaf83}, 0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001080}, 0x4000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0xfffffffffffffda2}, 0x1, 0x0, 0x0, 0x4044414}, 0x4000884) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x68, r4, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4040000}, 0x890) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000280)=[@ioring_restriction_register_op={0x0, 0x11}], 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r5 = fsopen(&(0x7f0000000c00)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000140)='\x00@\xf1f\x9e#l \xa8\xfe\xbb\x18F\b\r\xc0(\xcff|2\x81\xba\xfeA\xa4!\xcb\xaa[\xbbn\t\x0e\xfd)\x974T\xfc\xba\x82P\x11\xd9\x97\xa1\xe7\x9b\x9e\xacq\x99\xe4\xe5EH\x84xn\x88\x88^6d\x90\xd3R\xb7\xbc\xd7\x94\x82\xd2\x14\x18T\xce}:\xc6t\xff\xed!_-\xcd\xa5\t\xc2\xeb\xc8\x1cA\xb4tW\r\x9c\xec\t$\xa5\xf4\"g>\xb8\xf3\xab\x12\x8a\xc4\xa1 \xf5\xe2\x18\xd4m\xe3\x92\x89E\x7f #,\x8dzk\x13\xd0\x17\xc0\xbdC\xfd\xd6\xf2v\xd6B\xab\x01\xc0(w2\xdaf3\xff\x8ei\xfehj\x9f\xac\x9f\xf5\x1c{\x8f\x1ei\xc9\x03\t5\xd238\xbe\x85\xe6XD\x04\x8fq\xca\xbaO\x16\x92\x18\xcd\xf5;i\xb0\xb4mtT\xcc\xaf\xb6?T\xc9\xb1\xb1>\xd2\xa0W\xcfN\xdb\xedK\xa9\x1b1r\x00\x00\x00\x004\xa0\xcb)\x0ej|l\xd0\xb4\b]\xe2\xc1\xe2\x18\x06O\x1f\x1e\x1d\xb5+\f\x7fs.A\xd7\"9&\xb1\xf6\xba\xd5\xbf6\xaf\xfb\xad\xdb5\xbd>\xb8\x17\xc2\x95^\xbe\x9c<\xfc\v\xfe\x8b\xd62v\x97\x8aW\xef0\v\xd3\x9b\x80\xdfk\xde\x9c\xfd_^\x0e\xefN\x14o', &(0x7f0000000080)="ce", 0xff00) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)={0x20, r8, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}]}]}, 0x20}}, 0x20040010) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$sock_buf(r6, 0x1, 0x19, 0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 1m54.300375217s ago: executing program 4 (id=1738): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000001340)="80", 0x1}], 0x1, 0x55, 0x7, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0bdce5f7c6d7082c8ee7b7c7fa1203605cfeeedb227caec952dcb6351bbe6cba8b8ea8c00f366531bc85298d20cfb02807c8cacbb9af0c2d6d0f4a702a8a48f17db7582b545c9a19487087254ec4c5aef9fb87134dd53474108db8f5e77f857fdcd6b5ae2cf29741a0c576c32a8f5df497b01560d6dc0dc4486ec9449a9e79fa89bf93ec7b40f4509eb4c06c1c2c8d4b370fab98287f5d2b8551efb4b8240df36615058d01e0062d969ee55e269b4174573a48155e9593eed87b7f2f5b3"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200400c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r7) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r8, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 1m39.232492955s ago: executing program 34 (id=1738): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x101801, 0x0) pwritev2(r0, &(0x7f00000013c0)=[{&(0x7f0000001340)="80", 0x1}], 0x1, 0x55, 0x7, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r5 = socket(0x10, 0x2, 0x0) recvmmsg(r5, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0bdce5f7c6d7082c8ee7b7c7fa1203605cfeeedb227caec952dcb6351bbe6cba8b8ea8c00f366531bc85298d20cfb02807c8cacbb9af0c2d6d0f4a702a8a48f17db7582b545c9a19487087254ec4c5aef9fb87134dd53474108db8f5e77f857fdcd6b5ae2cf29741a0c576c32a8f5df497b01560d6dc0dc4486ec9449a9e79fa89bf93ec7b40f4509eb4c06c1c2c8d4b370fab98287f5d2b8551efb4b8240df36615058d01e0062d969ee55e269b4174573a48155e9593eed87b7f2f5b3"], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x200400c0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r7) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, r8, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20000000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 44.150662211s ago: executing program 7 (id=1914): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') semget(0x2, 0x2, 0x39c) lseek(r0, 0xfffd, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000180)=@framed={{}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002cbd7000fbdbdf2502140000fc04ff09003f000008001e"], 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x83992ac82ebfd81a) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f000000000003000000040000000c0001"], 0x78}}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000)=r8, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, r9, 0xf3a, 0x4) 43.960514063s ago: executing program 7 (id=1917): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x1f, 0x0, 0x1, 0x2000, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1200}, 0x48) 43.090672588s ago: executing program 7 (id=1925): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_io_uring_setup(0xf02, &(0x7f0000000040)={0x0, 0x191e, 0x800, 0x0, 0x2000000}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f00000020c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x541}, 0x1}) io_uring_enter(r1, 0xf, 0x7929, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000500)=@abs, 0x6e) r7 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x40, 0x25dfdbff, {0xa, 0x3f, 0x9, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001, 0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0xc000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000001400b59527bd7000fcdbdf250a400000", @ANYRES32=r10, @ANYBLOB="1400020000000000000000000000f7ffac140caa08004d72caa53f3a5eb921d41b17932a9d1009ca49c9831286685ffdf8f0a7ebc95652cc99891d70c5129459"], 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4080c}, 0x4040800) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r11) sendmsg$IEEE802154_LIST_PHY(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r12, 0x30b, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4044}, 0x20000004) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r11) 42.491630688s ago: executing program 7 (id=1935): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {0x9, 0x1}, 0x3, 0x4, &(0x7f0000000040)={0x5, 0x7, 0x84b6, 0x4, 0x4}, 0x8, 0x7, 0x0, 0x0, 0x8001, 0x0, &(0x7f0000000100)}) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x802, 0x0) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000000)) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYRES16], 0x119) 42.378833027s ago: executing program 7 (id=1940): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x30, 0x0, 0x20000) 42.137900417s ago: executing program 7 (id=1947): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x2, 0x2, 0x40000000, {0x79d, 0x8}, 0x8, 0x5}) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x31, @time={0x791a, 0x780}, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_io_uring_setup(0x488, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000014c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/164) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x106, r6, 0x0}]) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000eef000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0x40e8662e, &(0x7f0000000780)={0x4f1, 0xd000000}) 42.134991878s ago: executing program 35 (id=1947): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x2, 0x2, 0x40000000, {0x79d, 0x8}, 0x8, 0x5}) read(r0, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x31, @time={0x791a, 0x780}, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000001c0)) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000080)) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) r1 = syz_io_uring_setup(0x488, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300), &(0x7f0000000080), &(0x7f0000000000)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCFLSH(r2, 0x541b, 0x7ffffffffffffffe) r3 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r1, 0x15, &(0x7f00000014c0)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/164) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000380)={0xfffffff8, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x106, r6, 0x0}]) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000eef000/0x2000)=nil) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$eJzs3c9rG1ceAPDvyD/jZNdeWNjNngwLu4YQeZ31JruwsFn2sBQaCLTnJEZWTGrZCpYcYmNIQin00kNLD4XmknPTprdc++PaXvo39FAS0tYJTemhuIw0SmRbcpzEklL8+cBY782M9N533sybZ82gCWDfGk//5CIORwykydFsfhLZjOiPOFlf7+H6WiGdktjYeOW7pLbOg/W1QjS9J3Uwy/wxIj57I+JIbnu5lZXV+ZlSqbiU5SerCxcnKyurRy8szMwV54qLx6emp4+d+MeJ43sX6w9frh66+/b///rRyZ9e/8Ottz5P4mQcypY1x7FXxmM82yYD6Sbc5H97XViPJb2uAM8kPTT76kd5HI7R6NuhJf/T1ZoBAJ1yJSI2AIB9JnH+B4B9pvE9wIP1tUJjivr1nKs9/WKiS+79NyKG6/E3rm/Wl/TXr9l9NVy7DjryIKldI2lIImJsD8ofj4jrt8/cTKfo0HVIgFauXouIc2PjW/v/tIfbes/C0/rbLtYZ35LX/0H3fJKOf/65ffwXkcuO/+Ha363jn6EWx+6zePLxn7uzKTuwB4U2Scd//266t+1hU/yZsb4s95vamG8gOX+hVEz7tt9GxEQMDKX5qR3KmLj/8/12y5rHf9+/89oHafnp6+M1cnf6hza/Z3amOvM8MTe7dy3iT/2t4k8etX/SZvx7epdlvPSvN99vtyyNP423MW2Pv7M2bkT8pWX7P74PKtnx/sTJ2u4w2dgpWvj46/dG2pXf3P7Xb6clrRUa/wt0Q9r+IzvHP5Y0369Zefoyvrgx+mm7ZZvjP3MzLX9z/K33/8Hk1Vp6MJt3eaZaXZqKGExe3j7/2OP3NvKN9dP4J/7c+vjfaf9Pu6FzWXrjCTc/9t/99sNnj7+z0vhn0/ZPsiCe2P5Pn7j1cL6vXfm7a//pWmoim7O9/+vf9rm7reBzbTwAAAAAAAAAAAAAAAAAAAAAAAAA2KVcRByKJJd/lM7l8vn6M7x/HyO5UrlSPXK+vLw4G7VnZY/FQK7xU5ejTb+HOpX9Hn4jf2xL/u8R8buIeHfoQC2fL5RLs70OHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyB9s8/z/1zVCvawcAdMxwrysAAHSd8z8A7D9tzv+DrWcf6GhdAIDuqJ3/k/5eVwMA6CLf/wPA/uP8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQIedPnUqnTZ+XF8rpPnZSyvL8+VLR2eLlfn8wnIhXygvXczPlctzpWK+UF5o+0FX6y+lcvnidCwuX56sFivVycrK6tmF8vJi9eyFhZm54tniQNciAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDdq6yszs+USsUliZ0TV16IalzLmq3XW0PihUgMRUSnimjuJQ70pnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+BX4JQAA//9qsh/Y") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r8, 0x40e8662e, &(0x7f0000000780)={0x4f1, 0xd000000}) 4.451626976s ago: executing program 6 (id=2301): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x24040810}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000160a010400000000000000000a0000040900010073797a31000000000900020073797a3200000000100004800c0001800800010066696200140000001100010005000000000000000000000a"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 4.450924696s ago: executing program 6 (id=2302): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$xdp(0x2c, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003440), r4) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xdfc, 0x9}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x2, 0x80805, 0x0) unshare(0x22020600) r7 = socket$rds(0x15, 0x5, 0x0) sendmsg$inet(r7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/1128], 0x44, 0x27b, &(0x7f0000000780)="$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") poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r8, 0x4, 0x2000) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000040)=0x40, 0x1) 4.337409435s ago: executing program 5 (id=2303): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x2, 0x2, 0x1) ioctl$SG_NEXT_CMD_LEN(0xffffffffffffffff, 0x2283, &(0x7f0000000040)=0x67) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x49a9, &(0x7f00000007c0)={0x0, 0xad2a, 0x10000, 0x0, 0x33a}, 0x0, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1ec}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008"], 0x64}}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x8, 0x100000001, 0x0, 0x0, 0xa1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.089526283s ago: executing program 2 (id=2309): io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0x632a738e}, 0x50) io_submit(r0, 0x2, &(0x7f00000001c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xc2, r1, &(0x7f0000000180)='\x00U', 0x2, 0x36}]) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000030c0)="$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") r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x2000009) write$binfmt_aout(r2, &(0x7f0000000500)=ANY=[], 0xff2e) r3 = inotify_init1(0x800) quotactl_fd$Q_SYNC(r3, 0x80000304, 0x0, 0x0) read(r2, &(0x7f0000000080)=""/1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000cfca000000000000080000009111ad000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x46) write$char_usb(r4, &(0x7f0000000280)="79a4", 0x2) 2.953716436s ago: executing program 5 (id=2312): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001300)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x30}]}, &(0x7f0000000340)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) 2.847626894s ago: executing program 5 (id=2313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0xfffe, 0x0}, 0x0) 2.846396144s ago: executing program 5 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r4, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x400}], 0x1, 0x40002101, 0x0) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x65, 0x4, 0x0, 0x0, 0x0, 0x10008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xd, 0x2}, 0x14804, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x5, 0xffffffffffffffff, 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, 0x0, 0x0) mmap(&(0x7f00003dd000/0x4000)=nil, 0x4000, 0x100000a, 0x30, 0xffffffffffffffff, 0x0) r7 = memfd_create(&(0x7f0000000080)=',\xea\x02', 0x7) ftruncate(r7, 0x7000000) r8 = dup(r7) preadv2(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) sendmmsg(r5, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000140)=""/79, &(0x7f0000000240)=0x4f) 2.844340075s ago: executing program 8 (id=2315): r0 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000200)=r0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x83a5}, 0x8) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8", 0xda}], 0x1}}], 0x2, 0x2090) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) sendto$inet(r3, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) 2.460314439s ago: executing program 6 (id=2316): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) 1.992431747s ago: executing program 0 (id=2318): mount(0x0, 0x0, 0x0, 0x1000, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x102002, 0xc, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={&(0x7f0000000180), 0x1}, 0x410, 0x2000000, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000001c0), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000300"/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) fsopen(&(0x7f0000000040)='sysv\x00', 0x1) 1.765841365s ago: executing program 8 (id=2319): r0 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000700)=0x7c38, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x810, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[], 0x18}}, 0x4020) 1.663684322s ago: executing program 8 (id=2320): syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000280), 0x9, 0x551, &(0x7f0000000a80)="$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") (async) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) quotactl_fd$Q_QUOTAON(r1, 0xffffffff80000200, 0x0, 0x0) 1.490557211s ago: executing program 0 (id=2321): perf_event_open(&(0x7f0000000340)={0x5, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6}, 0x106200, 0x10004, 0x209a, 0x2, 0xa, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0xfffc, 0x0, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={r2, 0x1, 0x8, 0x8, 0x2, 0x6}, 0x14) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d40)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) pipe2(&(0x7f0000000000), 0x80000) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='stack\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) 1.447590468s ago: executing program 8 (id=2322): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x21c241, 0x0) perf_event_open(0x0, 0x0, 0xa, r0, 0x8) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket(0x1d, 0x2, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r2) sendmsg$IEEE802154_LIST_IFACE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r3, 0x703, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}]}, 0x30}}, 0x20000004) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5, 0x1, 0xff, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x4}, 0x3, 0x0, 0x0, 0x0, "8b8c16e77e60ad9f3b963a6fed98184bc8b656e357d1eb25c256eb5cf56d3b9a12742f1d1488893ee4c7f7cb412fe74d06adf75e8be6b61b75ca8c26c1e949c2"}}, 0x80}}, 0x4004000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f00000002c0)={0x0, 0x0, 0x4, r4, 0x6}, 0xc) 1.447213538s ago: executing program 6 (id=2323): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008864}, 0x800) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) recvfrom$x25(0xffffffffffffffff, &(0x7f0000001b40)=""/4096, 0x1000, 0x2040, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x2, 0x0, 0x0, 0x0, 0x8, 0x50008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x4}, 0xc000, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x27, &(0x7f0000000640)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001800000005000000000000", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="0000000002000000b7983000030000009500"], &(0x7f0000000000)='syzkaller\x00', 0xd, 0xfe6, &(0x7f0000002e00)=""/4070}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40801, 0x0) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000300)={0xc0004014}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f6", 0x48}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r8, 0x0, 0xa) 1.323001969s ago: executing program 2 (id=2324): r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fsopen(&(0x7f00000002c0)='squashfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='fd', 0x0, r1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x2) close(0x3) fchdir(r3) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) setpgid(0x0, r5) move_mount(r4, 0x0, r4, &(0x7f00000000c0)='./file0\x00', 0x22) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r4, 0x9362, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet6(0xa, 0x3, 0x5) r8 = socket$l2tp6(0xa, 0x2, 0x73) r9 = dup3(r8, r7, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) sendmmsg$inet6(r9, &(0x7f0000000000)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0xfff, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x18}}], 0x1, 0x4854) syz_emit_ethernet(0x56, &(0x7f0000000140)=ANY=[@ANYBLOB="bba8bbbbbbbbffffffffffff8100200086dd60000000000000000000000023ff0200000000000000000000000000013a000000000000008700907800000000000000000000000000000001"], 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fff809000100737d7a300000000008000000000000000000000000000000010040000900030073797a30000000000900010073797a300000000058000000060a010400009fd9290d000001000000300004802c0001800b000100736f636b657400001c00028008000240000000010800014000000003080003000000001d08000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r10 = syz_open_dev$loop(&(0x7f00000001c0), 0x7, 0x108062) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/mem_sleep', 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ff9, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) ioctl$LOOP_CLR_FD(r10, 0x4c01) sendfile(r10, r11, 0x0, 0x2000000000009) connect$bt_sco(r11, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="2401020000000000ff71e1e50af01b120220300cff040000007c000008000400be881a24dbd76e9c5d1a739f67ee19b34d5651250b0c7285ed59518c03ec4c7a9792241cbbf4ed622d724618211fc709cb36debc0000026e58", @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20004005}, 0x80) 686.774705ms ago: executing program 2 (id=2325): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c556f00"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff00000000810000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 685.006016ms ago: executing program 5 (id=2326): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x8031, 0xffffffffffffffff, 0x845c5000) r2 = socket$inet6(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000420000000600000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x80000024) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6, 0x2, {0x0, 0x0, 0x4}, 0x1}, 0x18) r7 = syz_open_dev$vcsa(&(0x7f0000000400), 0xffffffffffffff00, 0x214402) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x20, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb89, 0x0, 0x0, 0x0, 0x4}, [@generic={0x8, 0x0, 0x2, 0xe, 0xff}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @exit, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0xc, 0x7, 0x4, 0xffffffffffffffcc, 0x1}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0xa3}, @alu={0x4, 0x1, 0x9, 0xa, 0x9, 0x6, 0xfffffffffffffff0}, @call={0x85, 0x0, 0x0, 0x9}]}, &(0x7f0000000600)='GPL\x00', 0x7, 0x74, &(0x7f00000006c0)=""/116, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x1, 0x4, 0x9, 0xf}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000800), 0x10, 0x7ff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x19, &(0x7f00000001c0)=ANY=[@ANYBLOB="b7080000000000007b8af8ff00000000b7080000000000000000000000000000bfa1e0ffffff000007010000f8ffffffffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a50000000416ff0f0400000085100000feffffff852000000400000018170000", @ANYRES32=0x1, @ANYBLOB="000000000000000085000000d2000000185400000c000000000000000000000018180000", @ANYRES32=r4, @ANYBLOB="0000000000000000185000000300"/24], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x4, '\x00', r6, @sk_skb=0x4, r7, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x1, 0x5, 0x2}, 0x10, 0xffffffffffffffff, r8, 0x5, &(0x7f00000009c0)=[r9], &(0x7f0000000a00)=[{0x5, 0x3, 0x5, 0x9}, {0x4, 0x1, 0xe, 0x8}, {0x1, 0x4, 0xa, 0x8}, {0x5, 0x1, 0x8, 0xb}, {0x4, 0x1, 0xc, 0x3}], 0x10, 0x9}, 0x94) setsockopt$inet6_int(r2, 0x29, 0x11, &(0x7f0000000680)=0xab21, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r10, 0x7f, 0x2003) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) timer_gettime(r1, &(0x7f0000000180)) socket$igmp6(0xa, 0x3, 0x2) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_IPV6_IPSEC_POLICY(r11, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) ioprio_set$uid(0x3, r12, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r13, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r13, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00', 0x2}}, 0x0, 0x0, 0x25, 0x0, "c43b9320585854378463e5d9ac44984ed4936350a7f170f645640905822998ca06b3a771e3ab05c927d207f7d21d93b1d5e068c6a0652a79973d9cbb62bd8c26deb2eae0b68847b15bbe30539483f6e7"}, 0xd8) 550.170028ms ago: executing program 0 (id=2327): unshare(0x40400) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) unshare(0x20000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 371.398377ms ago: executing program 6 (id=2328): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x9, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x5, 0x0, 0x0) r0 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setxattr$security_ima(0x0, &(0x7f0000000200), 0x0, 0x700, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) dup(0xffffffffffffffff) r1 = socket$tipc(0x1e, 0x5, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x2, &(0x7f0000000440)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0xb}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r5, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000001200)=ANY=[], 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x1}}, 0x10) bind$tipc(r7, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r7, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x41, 0x1}, 0x10) bind$tipc(r1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 366.738169ms ago: executing program 0 (id=2329): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000002000000000056dac698e65a020ec4d2"], 0x0, 0x1a}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000700)={&(0x7f0000000240)=0x9, 0x3, &(0x7f00000003c0)=[{}, {}, {}, {}], &(0x7f00000006c0)}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14030000370009002cbd70000000000004"], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ac80000000c0a010100000000000000000a0000010900020073797a31000000000900010073797a31000000009c000380980000800c000180060001000000000088000b8044"], 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872d85c0bc3a233a3ea85df6a8ed76f0f803d54b7bef77d8ea71621f8a78dd17c3b58c5c7476ed6191acbb949e77f7cac81c543f7751e5e1000"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000280)={@ifindex, r1, 0x2f, 0x0, 0x0, @void, @value=r2}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x404, &(0x7f0000000400)={[{@init_itable}, {@dioread_nolock}, {@abort}, {@grpjquota}, {@lazytime}, {@auto_da_alloc}, {@mblk_io_submit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x100}}, {@min_batch_time={'min_batch_time', 0x3d, 0x7a}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}]}, 0xfd, 0x501, &(0x7f0000000e80)="$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") ioctl$XFS_IOC_FSCOUNTS(r5, 0x80205871, &(0x7f00000002c0)) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000440)=[{0x20, 0x5, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x51f88431}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000140)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r1, @ANYRES32=r5, @ANYBLOB="2f0000003000000004000800", @ANYRES32=r8, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r8}, 0x4) 366.452999ms ago: executing program 8 (id=2330): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x84080) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/71, 0x47}, {&(0x7f0000000100)}], 0x2) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0xa, r2, 0x300, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0xf4acb68dc69eccf1) 321.809196ms ago: executing program 2 (id=2331): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x14, r1, 0x703, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20008094) (fail_nth: 2) 308.912268ms ago: executing program 8 (id=2332): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000340)=ANY=[], 0xff, 0x1f5, &(0x7f0000000600)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4009005) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x4, &(0x7f0000000000)=[{0xae3, 0x9, 0x3, 0x4}, {0xa176, 0x5, 0x8, 0x5}, {0x9, 0xf, 0x5, 0x7253}, {0xfff, 0x1, 0x7f}]}) r0 = perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4061, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0x2}, 0x9092, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x1}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18300000010000000000e4ff020000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) getitimer(0x2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000002c0)={0x4, &(0x7f0000000180)=[{0x4, 0x8, 0x75}, {0x3, 0xb2, 0xb6, 0x5}, {0x101, 0x7, 0x80}, {0x8, 0xac, 0x0, 0x7}]}) socket$kcm(0xa, 0x2, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000003c0)={0x6, &(0x7f0000000380)=[{0x0, 0x2, 0x29, 0x285}, {0x10, 0x9, 0x7, 0xfffffffd}, {0x0, 0xd, 0xf9, 0x6}, {0xff, 0x2, 0xcc, 0xff}, {0x1, 0x8, 0x40, 0x2}, {0x0, 0x1, 0x8, 0x1000}]}, 0x10) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000100)='./file0\x00', 0xc2000b92) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00'}) add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000800)='0', 0x1, 0xffffffffffffffff) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r5, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) close_range(r7, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x40100) 251.575828ms ago: executing program 0 (id=2333): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x12, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4040080) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8050, &(0x7f00000004c0), 0x1, 0x418, &(0x7f0000001880)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x2d42, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x4004000) 251.226578ms ago: executing program 2 (id=2334): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) 251.001578ms ago: executing program 2 (id=2335): r0 = getpgid(0xffffffffffffffff) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000200)=r0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000000000f124000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x22004043}, 0x880) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x6, @mcast2}}, {{0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffffffc}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x83a5}, 0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9c515a1c3ee25ace1a9948c24b277d0c9c46f948f8a3f98b1a18eff685b7296457ba31632fea4d8f8", 0xda}], 0x1}}], 0x2, 0x2090) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000580)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000062c0)="f33199e97a7aeef35558eee84e4831917699c77cf87d7c520e8395020c848ade06b3a40793b3df05434d5c9e94f305ef9474172d3a95537a6d6cad110c94976199031d3c3204a1c89b12bafa7dc06d86606aa40f74b1e85e56355829284ba17b73828ede2c522b9765c1d83f59f66b7cf0eeb849e3c89a6d7fec35d1d5fe4f5ae16803bb29505730cb9f80b93cb7e6c8b59906d1c68c374a30dcc653f7628b452853deafa605526752355a04996bd39c437ac2c7b6da72fcde0a0e1656bed39c01b4ab98b39d2cdc4bc3d5c82d387828861e4e8d93c9083a8da84bd2", 0xfffffffffffffdd3, 0x1000c095, 0x0, 0x0) 212.318934ms ago: executing program 6 (id=2336): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r2, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}, r4}}, 0x30) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @private=0xa010100}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) 114.70245ms ago: executing program 0 (id=2337): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x10009, 0xf41b8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x8, 0x100}, 0x204, 0x0, 0x43a1bd78, 0x8, 0x9, 0x6, 0x6, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 0s ago: executing program 5 (id=2338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYRES16, @ANYBLOB="010000000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10ffd, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xd, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000004, 0x12, 0xffffffffffffffff, 0xd7c58000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x8}, 0x20053, 0x0, 0x800000, 0x3, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2bc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x1c000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x22020400) poll(0x0, 0x0, 0x9) (async) poll(0x0, 0x0, 0x9) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) socketpair(0x21, 0x6, 0x800, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) socket$kcm(0xa, 0x5, 0x0) (async) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x2, 0xa, 0x2) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x891a, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000001000010406000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000002000638000024001280090001007866726d000000001400028008000100030000000800020001000000140003007866726d30"], 0x58}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c01000017000100000000000000000000000000000000000000ffffac1e00010000000000000000e0000002000000000000000000000000fe800000000000000000000000000000fe8000"/104, @ANYRES32=0x0, @ANYRES32=0x0], 0x16c}}, 0x0) socket(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): comm="syz.5.1755" path="/129/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 257.919843][ C1] net_ratelimit: 4128 callbacks suppressed [ 257.919894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.943778][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.960464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.975727][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 257.992497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.009187][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.026797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.042959][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.060226][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 258.075059][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 261.337896][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.455116][ T28] audit: type=1326 audit(261.426:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9125 comm="syz.2.1758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6affffc819 code=0x7fc00000 [ 261.832312][ T9136] ±ÿA©Ù¨€ speed is unknown, defaulting to 1000 [ 261.874216][ T9136] ±ÿA©Ù¨€ speed is unknown, defaulting to 1000 [ 261.943818][ T9136] chnl_net:caif_netlink_parms(): no params data found [ 261.992031][ T9136] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.999299][ T9136] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.007075][ T9136] bridge_slave_0: entered allmulticast mode [ 262.013830][ T9136] bridge_slave_0: entered promiscuous mode [ 262.020950][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.028305][ T9136] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.036609][ T9136] bridge_slave_1: entered allmulticast mode [ 262.043482][ T9136] bridge_slave_1: entered promiscuous mode [ 262.065272][ T9136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.076360][ T9136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.097491][ T9136] team0: Port device team_slave_0 added [ 262.104343][ T9136] team0: Port device team_slave_1 added [ 262.121979][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.129102][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.155848][ T9136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.169016][ T9136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.176173][ T9136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.202501][ T9136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.233004][ T9136] hsr_slave_0: entered promiscuous mode [ 262.239414][ T9136] hsr_slave_1: entered promiscuous mode [ 262.245652][ T9136] debugfs: 'hsr0' already exists in 'hsr' [ 262.251525][ T9136] Cannot create hsr debugfs directory [ 262.342475][ T9136] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 262.926745][ C1] net_ratelimit: 3798 callbacks suppressed [ 262.926797][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.947263][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.961927][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.976147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 262.990529][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.004555][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.019367][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.031860][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.046127][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.059938][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 263.406574][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.064647][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 266.073730][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1768'. [ 267.935002][ C1] net_ratelimit: 4281 callbacks suppressed [ 267.935074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.959822][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.975623][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 267.993353][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.009914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.029044][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.044722][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.056928][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.069095][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 268.081332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.377470][ T9136] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 272.831039][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.840395][ T9136] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 272.947831][ C1] net_ratelimit: 3317 callbacks suppressed [ 272.947883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 272.972752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 272.989147][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.006922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 273.025193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.041752][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.057426][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 273.072577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.087833][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 273.105092][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 273.826673][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.844033][ T9169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 273.872539][ T9136] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 273.981095][ T9194] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1773'. [ 274.002609][ T9198] netlink: 'syz.6.1774': attribute type 1 has an invalid length. [ 274.065078][ T9201] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1774'. [ 275.086953][ T9136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 275.096913][ T9198] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 275.460604][ T28] audit: type=1326 audit(275.436:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9204 comm="syz.0.1775" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57a2bac819 code=0x0 [ 276.754669][ T9136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.769332][ T9136] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.779812][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.786935][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.811637][ T8608] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.818775][ T8608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.851653][ T9221] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1777'. [ 276.912902][ T9136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.954817][ T9226] loop5: detected capacity change from 0 to 2048 [ 277.231170][ T9219] loop5: detected capacity change from 0 to 1024 [ 277.287376][ T9219] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.568715][ T9136] veth0_vlan: entered promiscuous mode [ 277.600288][ T9136] veth1_vlan: entered promiscuous mode [ 277.661149][ T9136] veth0_macvtap: entered promiscuous mode [ 277.679936][ T9136] veth1_macvtap: entered promiscuous mode [ 277.719067][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.765628][ T9136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.802866][ T54] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.956130][ C1] net_ratelimit: 4295 callbacks suppressed [ 277.956161][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 277.977765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 277.994092][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.011912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 278.028404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.044124][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.062252][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 278.076853][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.092394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 278.108723][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 278.836013][ T54] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.923158][ T9266] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 278.929785][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 278.953307][ T9266] vhci_hcd vhci_hcd.0: Device attached [ 278.972073][ T9267] vhci_hcd: connection closed [ 278.972282][ T8593] vhci_hcd vhci_hcd.6: stop threads [ 278.984292][ T8593] vhci_hcd vhci_hcd.6: release socket [ 278.989862][ T8593] vhci_hcd vhci_hcd.6: disconnect device [ 279.338188][ T54] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.155030][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.162796][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 280.635135][ T9244] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 280.657806][ T54] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.882745][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.927036][ T28] audit: type=1400 audit(280.896:1892): avc: denied { ioctl } for pid=9280 comm="syz.5.1788" path="socket:[25596]" dev="sockfs" ino=25596 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 280.958034][ T9281] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1788'. [ 280.985473][ T9281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.362153][ T9281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.965278][ C1] net_ratelimit: 4176 callbacks suppressed [ 282.965340][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.985450][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 282.999466][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 283.014409][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.028759][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.044239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 283.058880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.072819][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 283.087629][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 283.102277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.438681][ T9285] loop2: detected capacity change from 0 to 256 [ 285.360562][ T9285] FAT-fs (loop2): Directory bread(block 1285) failed [ 285.372891][ T9285] FAT-fs (loop2): Directory bread(block 1286) failed [ 285.388921][ T9285] FAT-fs (loop2): Directory bread(block 1287) failed [ 285.398397][ T9285] FAT-fs (loop2): Directory bread(block 1288) failed [ 287.038116][ T9294] loop5: detected capacity change from 0 to 512 [ 287.059352][ T9294] EXT4-fs: Ignoring removed oldalloc option [ 287.242874][ T9294] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 287.975945][ C1] net_ratelimit: 3824 callbacks suppressed [ 287.976056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 287.996385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.011121][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 288.025501][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.039617][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.054705][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 288.069004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.082906][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.099016][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 288.113276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 288.238747][ T9294] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1792: invalid indirect mapped block 83886080 (level 1) [ 288.932961][ T9294] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 288.934725][ T9294] EXT4-fs (loop5): Remounting filesystem read-only [ 288.943945][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 288.943964][ C0] EXT4-fs (loop5): initial error at time 288: ext4_free_branches:1023: inode 16 [ 288.943994][ C0] EXT4-fs (loop5): last error at time 288: ext4_free_branches:1023: inode 16 [ 289.061971][ T9294] EXT4-fs (loop5): 1 orphan inode deleted [ 289.114313][ T9294] EXT4-fs (loop5): 1 truncate cleaned up [ 289.127872][ T9294] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.354459][ T9297] bond1 (unregistering): Released all slaves [ 289.421981][ T9317] netlink: 'syz.6.1796': attribute type 4 has an invalid length. [ 289.432238][ T8395] syz_tun (unregistering): left allmulticast mode [ 289.519332][ T9318] loop2: detected capacity change from 0 to 128 [ 289.534653][ T9314] netlink: 'syz.6.1796': attribute type 4 has an invalid length. [ 289.605900][ T9322] netlink: 'syz.6.1796': attribute type 4 has an invalid length. [ 289.744782][ T9325] netlink: 'syz.7.1798': attribute type 1 has an invalid length. [ 289.991376][ T9329] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1799'. [ 290.257477][ T28] audit: type=1400 audit(290.236:1893): avc: denied { egress } for pid=8452 comm="kworker/1:7" saddr=fe80::9468:c4ff:fe9f:1054 daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 290.310298][ T28] audit: type=1400 audit(290.236:1894): avc: denied { sendto } for pid=8452 comm="kworker/1:7" saddr=fe80::9468:c4ff:fe9f:1054 daddr=ff02::2 netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 290.569576][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.579406][ T28] audit: type=1400 audit(290.556:1895): avc: denied { recv } for pid=14 comm="ksoftirqd/0" saddr=10.128.0.163 src=30036 daddr=10.128.0.124 dest=46536 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 290.672553][ T28] audit: type=1400 audit(290.646:1896): avc: denied { open } for pid=9333 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 290.697235][ T28] audit: type=1400 audit(290.666:1897): avc: denied { kernel } for pid=9333 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 290.717752][ T28] audit: type=1400 audit(290.676:1898): avc: denied { write } for pid=9333 comm="syz.5.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 292.985016][ C1] net_ratelimit: 35663 callbacks suppressed [ 292.985048][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 293.003123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.015243][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.027306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 293.044989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.057113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.069172][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 293.081361][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.093628][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.105815][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 297.995032][ C1] net_ratelimit: 36518 callbacks suppressed [ 297.995066][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 298.013463][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.025848][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.038163][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 298.050436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.062788][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.075146][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 298.087357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.099471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.111880][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:96:68:c4:9f:10:54, vlan:0) [ 300.537906][ T8606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.548392][ T8606] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 300.606520][ T9323] bridge_slave_0: left allmulticast mode [ 300.624758][ T9323] bridge_slave_0: left promiscuous mode [ 300.650023][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.666863][ T9323] bridge_slave_1: left allmulticast mode [ 300.681722][ T9323] bridge_slave_1: left promiscuous mode [ 300.690334][ T9353] loop6: detected capacity change from 0 to 164 [ 300.698606][ T9323] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.730366][ T9323] bond0: (slave bond_slave_0): Releasing backup interface [ 300.749087][ T9323] bond0: (slave bond_slave_1): Releasing backup interface [ 300.762009][ T9353] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 300.791091][ T9323] team0: Port device team_slave_0 removed [ 300.820504][ T9323] team0: Port device team_slave_1 removed [ 300.843956][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.857697][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.878600][ T9323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 300.895843][ T9323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 300.926178][ T9331] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 301.012810][ T9335] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1801'. [ 301.061886][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 301.110038][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1804'. [ 301.164203][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1806'. [ 301.188259][ T8606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.200743][ T8606] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 301.221141][ T9353] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1805'. [ 301.239481][ T9363] FAULT_INJECTION: forcing a failure. [ 301.239481][ T9363] name failslab, interval 1, probability 0, space 0, times 0 [ 301.257885][ T28] audit: type=1400 audit(301.216:1899): avc: denied { tracepoint } for pid=9362 comm="syz.5.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 301.307765][ T9363] CPU: 1 UID: 0 PID: 9363 Comm: syz.5.1808 Not tainted syzkaller #0 PREEMPT(full) [ 301.307800][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 301.307815][ T9363] Call Trace: [ 301.307822][ T9363] [ 301.307860][ T9363] __dump_stack+0x1d/0x30 [ 301.307893][ T9363] dump_stack_lvl+0x95/0xd0 [ 301.307922][ T9363] dump_stack+0x15/0x1b [ 301.307949][ T9363] should_fail_ex+0x263/0x280 [ 301.307978][ T9363] should_failslab+0x8c/0xb0 [ 301.308108][ T9363] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 301.308144][ T9363] ? __alloc_skb+0x2d6/0x690 [ 301.308169][ T9363] __alloc_skb+0x2d6/0x690 [ 301.308246][ T9363] ? __alloc_skb+0x200/0x690 [ 301.308270][ T9363] netlink_alloc_large_skb+0xbf/0xf0 [ 301.308300][ T9363] netlink_sendmsg+0x40c/0x6f0 [ 301.308333][ T9363] ? __pfx_netlink_sendmsg+0x10/0x10 [ 301.308402][ T9363] ____sys_sendmsg+0x563/0x5b0 [ 301.308448][ T9363] ___sys_sendmsg+0x195/0x1e0 [ 301.308495][ T9363] __x64_sys_sendmsg+0xd4/0x160 [ 301.308527][ T9363] x64_sys_call+0x194c/0x3020 [ 301.308574][ T9363] do_syscall_64+0x12c/0x3b0 [ 301.308601][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.308626][ T9363] RIP: 0033:0x7f23d408c819 [ 301.308645][ T9363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.308665][ T9363] RSP: 002b:00007f23d2adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 301.308704][ T9363] RAX: ffffffffffffffda RBX: 00007f23d4305fa0 RCX: 00007f23d408c819 [ 301.308720][ T9363] RDX: 0000000000008000 RSI: 0000200000000240 RDI: 0000000000000004 [ 301.308735][ T9363] RBP: 00007f23d2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 301.308748][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.308763][ T9363] R13: 00007f23d4306038 R14: 00007f23d4305fa0 R15: 00007ffed73c3e68 [ 301.308784][ T9363] [ 301.313858][ T28] audit: type=1400 audit(301.256:1900): avc: denied { read } for pid=9354 comm="syz.7.1806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 302.084508][ T8606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.119934][ T8606] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.154321][ T28] audit: type=1400 audit(302.126:1901): avc: denied { create } for pid=9382 comm="syz.5.1815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 302.179928][ T9383] serio: Serial port ttyS3 [ 302.196071][ T9377] netlink: 83 bytes leftover after parsing attributes in process `syz.0.1813'. [ 302.207256][ T9356] ±ÿA©Ù¨€ speed is unknown, defaulting to 1000 [ 302.243151][ T8606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.326554][ T8606] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 302.375407][ T28] audit: type=1400 audit(302.346:1902): avc: denied { cpu } for pid=9392 comm="syz.7.1819" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 302.463908][ T28] audit: type=1400 audit(302.436:1903): avc: denied { create } for pid=9388 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.487835][ T9356] ±ÿA©Ù¨€ speed is unknown, defaulting to 1000 [ 302.495890][ T9395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1818'. [ 302.525071][ T9390] loop6: detected capacity change from 0 to 4096 [ 302.546167][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1818'. [ 302.567114][ T28] audit: type=1400 audit(302.476:1904): avc: denied { write } for pid=9388 comm="syz.0.1818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 302.710202][ T9390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.911287][ T8606] veth0_to_bridge: left allmulticast mode [ 302.917232][ T8606] veth0_to_bridge: left promiscuous mode [ 302.944923][ T8606] bridge0: port 3(veth0_to_bridge) entered disabled state [ 302.977247][ T8606] bridge_slave_1: left allmulticast mode [ 303.002586][ T8606] bridge_slave_1: left promiscuous mode [ 303.019241][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.058471][ T8606] bridge_slave_0: left allmulticast mode [ 303.068821][ T28] audit: type=1400 audit(303.046:1905): avc: denied { sys_module } for pid=9417 comm="syz.7.1821" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 303.096714][ T8606] bridge_slave_0: left promiscuous mode [ 303.106440][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.165725][ T28] audit: type=1326 audit(303.136:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9417 comm="syz.7.1821" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895949c819 code=0x0 [ 303.257581][ T8606] bond1 (unregistering): (slave geneve2): Releasing active interface [ 303.274984][ T8606] geneve2 (unregistering): left promiscuous mode [ 303.285442][ T8606] geneve2 (unregistering): left allmulticast mode [ 303.388350][ T8606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.401458][ T8606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.423231][ T8606] bond0 (unregistering): Released all slaves [ 303.440922][ T8606] bond1 (unregistering): Released all slaves [ 303.465909][ T8606] bond2 (unregistering): Released all slaves [ 303.484682][ T8606] bond3 (unregistering): Released all slaves [ 303.525507][ T3039] 8021q: adding VLAN 0 to HW filter on device eth5 [ 303.543029][ T9429] loop5: detected capacity change from 0 to 512 [ 303.552046][ T8606] tipc: Left network mode [ 303.578572][ T9429] EXT4-fs: Ignoring removed oldalloc option [ 303.597984][ T9429] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 303.641316][ T9429] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.1822: invalid indirect mapped block 83886080 (level 1) [ 303.725045][ T9429] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 303.734963][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 303.750707][ C0] EXT4-fs (loop5): initial error at time 303: ext4_free_branches:1023: inode 16 [ 303.759939][ C0] EXT4-fs (loop5): last error at time 303: ext4_free_branches:1023: inode 16 [ 303.809962][ T9429] EXT4-fs (loop5): Remounting filesystem read-only [ 303.817008][ T9429] EXT4-fs (loop5): 1 orphan inode deleted [ 303.822803][ T9429] EXT4-fs (loop5): 1 truncate cleaned up [ 303.829207][ T9429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.843219][ T8606] hsr_slave_0: left promiscuous mode [ 303.849331][ T8606] hsr_slave_1: left promiscuous mode [ 303.860181][ T8606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.877467][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.908193][ T8606] veth1_macvtap: left promiscuous mode [ 303.914003][ T8606] veth0_macvtap: left promiscuous mode [ 303.928419][ T8606] veth1_vlan: left promiscuous mode [ 303.938904][ T8606] veth0_vlan: left promiscuous mode [ 304.059815][ T9448] loop7: detected capacity change from 0 to 512 [ 304.181338][ T9448] loop7: detected capacity change from 0 to 2048 [ 304.198897][ T8606] team0 (unregistering): Port device team_slave_1 removed [ 304.203610][ T9448] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 304.233481][ T8606] team0 (unregistering): Port device team_slave_0 removed [ 304.344770][ T3039] 8021q: adding VLAN 0 to HW filter on device eth6 [ 304.519969][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.653526][ T9473] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1828'. [ 304.697041][ T9473] net_ratelimit: 28311 callbacks suppressed [ 304.697173][ T9473] openvswitch: netlink: Key type 30 is not supported [ 304.759826][ T3039] 8021q: adding VLAN 0 to HW filter on device eth7 [ 305.442477][ T9508] loop6: detected capacity change from 0 to 128 [ 305.463339][ T8606] macvlan2: left allmulticast mode [ 305.504456][ T8606] macvlan2: left promiscuous mode [ 305.582260][ T8606] bridge0: port 3(macvlan2) entered disabled state [ 305.689572][ T8606] bridge_slave_1: left allmulticast mode [ 305.705009][ T8606] bridge_slave_1: left promiscuous mode [ 305.720930][ T8606] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.745804][ T8606] bridge_slave_0: left allmulticast mode [ 305.763742][ T8606] bridge_slave_0: left promiscuous mode [ 305.784441][ T8606] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.035312][ T9530] FAULT_INJECTION: forcing a failure. [ 306.035312][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.098024][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: syz.7.1839 Not tainted syzkaller #0 PREEMPT(full) [ 306.098127][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 306.098141][ T9530] Call Trace: [ 306.098149][ T9530] [ 306.098158][ T9530] __dump_stack+0x1d/0x30 [ 306.098197][ T9530] dump_stack_lvl+0x95/0xd0 [ 306.098226][ T9530] dump_stack+0x15/0x1b [ 306.098252][ T9530] should_fail_ex+0x263/0x280 [ 306.098282][ T9530] should_fail+0xb/0x20 [ 306.098359][ T9530] should_fail_usercopy+0x1a/0x20 [ 306.098408][ T9530] _copy_from_user+0x1c/0xb0 [ 306.098437][ T9530] memdup_user+0x5e/0xd0 [ 306.098542][ T9530] strndup_user+0x68/0xb0 [ 306.098568][ T9530] __se_sys_request_key+0xf4/0x2a0 [ 306.098595][ T9530] ? fput+0x8f/0xc0 [ 306.098648][ T9530] __x64_sys_request_key+0x55/0x70 [ 306.098677][ T9530] x64_sys_call+0x28de/0x3020 [ 306.098704][ T9530] do_syscall_64+0x12c/0x3b0 [ 306.098777][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.098798][ T9530] RIP: 0033:0x7f895949c819 [ 306.098888][ T9530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.098907][ T9530] RSP: 002b:00007f8957eef028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 306.098928][ T9530] RAX: ffffffffffffffda RBX: 00007f8959715fa0 RCX: 00007f895949c819 [ 306.099001][ T9530] RDX: 0000000000000000 RSI: 0000200000000880 RDI: 0000200000000140 [ 306.099014][ T9530] RBP: 00007f8957eef090 R08: 0000000000000000 R09: 0000000000000000 [ 306.099031][ T9530] R10: 000000002ad60e0d R11: 0000000000000246 R12: 0000000000000001 [ 306.099084][ T9530] R13: 00007f8959716038 R14: 00007f8959715fa0 R15: 00007ffcdc0379d8 [ 306.099105][ T9530] [ 306.290391][ T9535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1841'. [ 306.381339][ T9535] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 306.460610][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.624034][ T9544] loop5: detected capacity change from 0 to 128 [ 306.902048][ T8606] bond1 (unregistering): (slave geneve2): Releasing active interface [ 306.910907][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (13) [ 306.933088][ T28] audit: type=1400 audit(562.898:1907): avc: denied { getopt } for pid=9547 comm="syz.7.1846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.092565][ T8606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.104157][ T8606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.115570][ T8606] bond0 (unregistering): Released all slaves [ 307.127612][ T8606] bond1 (unregistering): Released all slaves [ 307.154308][ T9555] loop2: detected capacity change from 0 to 256 [ 307.198121][ T9555] FAT-fs (loop2): Directory bread(block 64) failed [ 307.204769][ T9555] FAT-fs (loop2): Directory bread(block 65) failed [ 307.211446][ T9555] FAT-fs (loop2): Directory bread(block 66) failed [ 307.218033][ T9555] FAT-fs (loop2): Directory bread(block 67) failed [ 307.224895][ T9555] FAT-fs (loop2): Directory bread(block 68) failed [ 307.231540][ T9555] FAT-fs (loop2): Directory bread(block 69) failed [ 307.238178][ T9555] FAT-fs (loop2): Directory bread(block 70) failed [ 307.244759][ T9555] FAT-fs (loop2): Directory bread(block 71) failed [ 307.251687][ T9555] FAT-fs (loop2): Directory bread(block 72) failed [ 307.258252][ T9555] FAT-fs (loop2): Directory bread(block 73) failed [ 307.328574][ T8606] bond2 (unregistering): Released all slaves [ 307.381055][ T8606] bond3 (unregistering): Released all slaves [ 307.425718][ T8606] bond4 (unregistering): Released all slaves [ 307.472010][ T8606] bond5 (unregistering): Released all slaves [ 307.484161][ T3039] 8021q: adding VLAN 0 to HW filter on device eth8 [ 307.927171][ T9561] loop7: detected capacity change from 0 to 256 [ 308.443436][ T28] audit: type=1326 audit(564.418:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9560 comm="syz.7.1849" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f895949c819 code=0x0 [ 310.020334][ T9589] loop6: detected capacity change from 0 to 256 [ 310.047209][ T9589] FAT-fs (loop6): Directory bread(block 1285) failed [ 310.054597][ T9589] FAT-fs (loop6): Directory bread(block 1286) failed [ 310.062432][ T9589] FAT-fs (loop6): Directory bread(block 1287) failed [ 310.072045][ T9589] FAT-fs (loop6): Directory bread(block 1288) failed [ 310.313774][ T28] audit: type=1400 audit(566.288:1909): avc: denied { setopt } for pid=9598 comm="syz.5.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 310.429736][ T8606] hsr_slave_0: left promiscuous mode [ 310.478400][ T8606] hsr_slave_1: left promiscuous mode [ 310.497830][ T9609] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1860'. [ 310.513871][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.568196][ T9609] openvswitch: netlink: Key type 30 is not supported [ 310.584993][ T8606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.663566][ T8606] team0 (unregistering): Port device team_slave_1 removed [ 311.689128][ T9641] loop5: detected capacity change from 0 to 256 [ 311.739102][ T28] audit: type=1326 audit(567.718:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9639 comm="syz.5.1871" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f23d408c819 code=0x0 [ 311.763079][ T8606] team0 (unregistering): Port device team_slave_0 removed [ 311.784013][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1873'. [ 311.826143][ T8593] smc: removing ib device syU× [ 311.834756][ T3039] 8021q: adding VLAN 0 to HW filter on device eth9 [ 311.884985][ T3393] ±ÿA©Ù¨€ speed is unknown, defaulting to 1000 [ 311.899452][ T3393] infiniband syz0: ib_query_port failed (-19) [ 312.014195][ T9658] netlink: 'syz.0.1873': attribute type 1 has an invalid length. [ 312.127923][ T9661] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1876'. [ 312.152725][ T9661] openvswitch: netlink: Key type 30 is not supported [ 312.170879][ T9673] loop6: detected capacity change from 0 to 1024 [ 312.194238][ T9673] EXT4-fs: inline encryption not supported [ 312.228606][ T9673] ext4: Unknown parameter 'fsname' [ 312.588196][ T9692] loop7: detected capacity change from 0 to 256 [ 312.671298][ T9692] FAT-fs (loop7): Directory bread(block 1285) failed [ 312.681071][ T9692] FAT-fs (loop7): Directory bread(block 1286) failed [ 312.689725][ T9692] FAT-fs (loop7): Directory bread(block 1287) failed [ 312.700074][ T9692] FAT-fs (loop7): Directory bread(block 1288) failed [ 313.413412][ T3039] 8021q: adding VLAN 0 to HW filter on device eth10 [ 313.617346][ T9719] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1885'. [ 313.650598][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1885'. [ 313.660737][ T8606] IPVS: stop unused estimator thread 0... [ 313.702401][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1885'. [ 314.082926][ T9730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1889'. [ 314.456810][ T9735] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1890'. [ 314.466831][ T9735] openvswitch: netlink: Key type 30 is not supported [ 314.539319][ T9742] netlink: 'syz.7.1892': attribute type 1 has an invalid length. [ 314.554228][ T9740] loop2: detected capacity change from 0 to 1024 [ 314.603812][ T9740] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.624604][ T9742] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1892'. [ 314.651039][ T9742] bond1: entered promiscuous mode [ 314.669613][ T9742] bond1: entered allmulticast mode [ 314.678532][ T28] audit: type=1400 audit(570.658:1911): avc: denied { create } for pid=9736 comm="syz.2.1891" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 314.697344][ T9756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1895'. [ 314.729494][ T9742] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.745894][ T3039] 8021q: adding VLAN 0 to HW filter on device eth12 [ 314.786609][ T9756] geneve3: entered promiscuous mode [ 314.798428][ T9765] loop6: detected capacity change from 0 to 164 [ 314.814076][ T9765] iso9660: Unknown parameter ' [ 315.901786][ T9793] __dump_stack+0x1d/0x30 [ 315.901815][ T9793] dump_stack_lvl+0x95/0xd0 [ 315.901840][ T9793] dump_stack+0x15/0x1b [ 315.901890][ T9793] dump_header+0x80/0x240 [ 315.901915][ T9793] oom_kill_process+0x295/0x350 [ 315.901946][ T9793] out_of_memory+0x97d/0xb80 [ 315.902026][ T9793] try_charge_memcg+0x62f/0xa10 [ 315.902059][ T9793] __memcg_kmem_charge_page+0x139/0x2b0 [ 315.902123][ T9793] __alloc_frozen_pages_noprof+0x18a/0x350 [ 315.902150][ T9793] alloc_pages_mpol+0xb3/0x260 [ 315.902236][ T9793] alloc_pages_noprof+0x8f/0x140 [ 315.902327][ T9793] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 315.902388][ T9793] __kvmalloc_node_noprof+0x3d4/0x640 [ 315.902425][ T9793] ? futex_hash_allocate+0x190/0x9a0 [ 315.902456][ T9793] ? futex_hash_allocate+0x190/0x9a0 [ 315.902489][ T9793] futex_hash_allocate+0x190/0x9a0 [ 315.902543][ T9793] ? cap_task_prctl+0x13f/0x6b0 [ 315.902571][ T9793] futex_hash_prctl+0xd8/0xf0 [ 315.902629][ T9793] __se_sys_prctl+0x4f4/0x1400 [ 315.902659][ T9793] __x64_sys_prctl+0x67/0x80 [ 315.902688][ T9793] x64_sys_call+0x2533/0x3020 [ 315.902716][ T9793] do_syscall_64+0x12c/0x3b0 [ 315.902741][ T9793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.902771][ T9793] RIP: 0033:0x7f57a2bac819 [ 315.902790][ T9793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.902809][ T9793] RSP: 002b:00007f57a1607028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 315.902832][ T9793] RAX: ffffffffffffffda RBX: 00007f57a2e25fa0 RCX: 00007f57a2bac819 [ 315.902908][ T9793] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 315.902922][ T9793] RBP: 00007f57a2c42c91 R08: 0000000000000000 R09: 0000000000000000 [ 315.902935][ T9793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.902984][ T9793] R13: 00007f57a2e26038 R14: 00007f57a2e25fa0 R15: 00007fff301627b8 [ 315.903004][ T9793] [ 315.903025][ T9793] memory: usage 307200kB, limit 307200kB, failcnt 440 [ 315.911438][ T9831] Code: 34 03 99 ff 4c 8d 2d 7d 44 5d 05 49 8d 7e 40 e8 24 77 b6 ff 49 8b 6e 40 4c 89 e7 e8 58 72 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 df 02 dd 03 66 66 66 66 66 66 2e [ 315.911462][ T9831] RSP: 0018:ffffc900025b3778 EFLAGS: 00010246 [ 315.911541][ T9831] RAX: ffff8881046f5ff8 RBX: ffff8881082005d8 RCX: ffffffff81c033c8 [ 316.042671][ T9793] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 316.043907][ T9831] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d7830 [ 316.052256][ T9793] kmem: usage 306612kB, limit 9007199254740988kB, failcnt 0 [ 316.053276][ T9831] RBP: 000000000000000b R08: 000188810820058b R09: 0000000000000000 [ 316.059539][ T9793] Memory cgroup stats for [ 316.063624][ T9831] R10: ffffc900025b36a8 R11: 0001c900025b36a8 R12: ffff888108200588 [ 316.063642][ T9831] R13: ffffffff871d7830 R14: ffff888108200540 R15: 0000000000000001 [ 316.063657][ T9831] FS: 00007ff26b3976c0(0000) GS:ffff8882ae9d5000(0000) knlGS:0000000000000000 [ 316.084604][ T9793] /syz0 [ 316.092285][ T9831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 316.100786][ T9793] : [ 316.108344][ T9831] CR2: 00007f57a2e260b0 CR3: 0000000133f62000 CR4: 00000000003506f0 [ 316.166775][ T9793] cache 348160 [ 316.168091][ T9831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 316.192380][ T9793] rss 28672 [ 316.199553][ T9831] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 316.228358][ T9793] shmem 0 [ 316.237538][ T9831] Call Trace: [ 316.237549][ T9831] [ 316.237563][ T9831] ext4_xattr_inode_dec_ref_all+0x57c/0x880 [ 316.237614][ T9831] ? errseq_check+0x2c/0x50 [ 316.257818][ T9793] mapped_file 36864 [ 316.261139][ T9831] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 316.283631][ T9793] dirty 0 [ 316.286673][ T9831] ext4_evict_inode+0xb16/0xe30 [ 316.300262][ T9793] writeback 0 [ 316.304071][ T9831] ? __pfx_ext4_evict_inode+0x10/0x10 [ 316.317800][ T9793] workingset_refault_anon 1923 [ 316.320867][ T9831] evict+0x2af/0x510 [ 316.334992][ T9831] ? __dquot_initialize+0x146/0x7c0 [ 316.335191][ T9793] workingset_refault_file 957 [ 316.340328][ T9831] iput+0x41a/0x580 [ 316.340355][ T9831] ext4_process_orphan+0x1a9/0x1c0 [ 316.353984][ T9831] ext4_orphan_cleanup+0x6a2/0xa00 [ 316.355160][ T9793] swap 364544 [ 316.359160][ T9831] ext4_fill_super+0x3408/0x37c0 [ 316.367409][ T9831] ? set_blocksize+0x14c/0x270 [ 316.367547][ T9793] swapcached 10530816 [ 316.372295][ T9831] ? setup_bdev_super+0x30e/0x370 [ 316.381300][ T9831] ? __pfx_ext4_fill_super+0x10/0x10 [ 316.386735][ T9831] get_tree_bdev_flags+0x291/0x300 [ 316.388423][ T9793] pgpgin 228562 [ 316.392240][ T9831] ? __pfx_ext4_fill_super+0x10/0x10 [ 316.401214][ T9831] get_tree_bdev+0x1f/0x30 [ 316.403254][ T9793] pgpgout 228466 [ 316.405729][ T9831] ext4_get_tree+0x1c/0x30 [ 316.409694][ T9793] pgfault 228951 [ 316.413780][ T9831] vfs_get_tree+0x57/0x1d0 [ 316.413814][ T9831] do_new_mount+0x288/0x8d0 [ 316.426453][ T9831] path_mount+0x4d0/0xbc0 [ 316.430877][ T9831] __se_sys_mount+0x28c/0x2e0 [ 316.435186][ T9793] pgmajfault 279 [ 316.435725][ T9831] __x64_sys_mount+0x67/0x80 [ 316.441254][ T9793] inactive_anon 4096 [ 316.443909][ T9831] x64_sys_call+0x2d61/0x3020 [ 316.443940][ T9831] do_syscall_64+0x12c/0x3b0 [ 316.455554][ T9793] active_anon 24576 [ 316.457801][ T9831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.461705][ T9793] inactive_file 286720 [ 316.467509][ T9831] RIP: 0033:0x7ff26c93da8a [ 316.467566][ T9831] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.472491][ T9793] active_file 20480 [ 316.476173][ T9831] RSP: 002b:00007ff26b396e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.508158][ T9831] RAX: ffffffffffffffda RBX: 00007ff26b396ee0 RCX: 00007ff26c93da8a [ 316.516207][ T9831] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007ff26b396ea0 [ 316.524279][ T9831] RBP: 0000200000000180 R08: 00007ff26b396ee0 R09: 0000000000000000 [ 316.532318][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 316.533764][ T9793] unevictable 0 [ 316.540376][ T9831] R13: 00007ff26b396ea0 R14: 000000000000047a R15: 00002000000001c0 [ 316.551888][ T9831] [ 316.555064][ T9831] ---[ end trace 0000000000000000 ]--- [ 316.575994][ T9831] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.1910: bit already cleared for inode 11 [ 316.605054][ T28] audit: type=1326 audit(572.578:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9845 comm="syz.5.1913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f23d408c819 code=0x0 [ 316.619132][ T9831] loop6: lost filesystem error report for type 5 error -117 [ 316.639197][ T9793] hierarchical_memory_limit 314572800 [ 316.663013][ T9831] EXT4-fs (loop6): 1 orphan inode deleted [ 316.670933][ T9793] hierarchical_memsw_limit 9223372036854771712 [ 316.672450][ T9848] openvswitch: netlink: Key type 30 is not supported [ 316.678004][ T9831] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.705472][ T9793] total_cache 348160 [ 316.710120][ T9793] total_rss 28672 [ 316.714412][ T9793] total_shmem 0 [ 316.720226][ T9793] total_mapped_file 36864 [ 316.724816][ T9793] total_dirty 0 [ 316.730417][ T9793] total_writeback 0 [ 316.735377][ T9793] total_workingset_refault_anon 1923 [ 316.741209][ T9793] total_workingset_refault_file 957 [ 316.746876][ T9793] total_swap 364544 [ 316.751264][ T9793] total_swapcached 10530816 [ 316.756907][ T9793] total_pgpgin 228562 [ 316.766633][ T9793] total_pgpgout 228466 [ 316.773622][ T9793] total_pgfault 228951 [ 316.778119][ T9793] total_pgmajfault 279 [ 316.783043][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.807657][ T9793] total_inactive_anon 4096 [ 316.821964][ T9793] total_active_anon 24576 [ 316.832852][ T9793] total_inactive_file 286720 [ 316.847677][ T9793] total_active_file 20480 [ 316.862569][ T9793] total_unevictable 0 [ 316.876191][ T9793] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1297,pid=7394,uid=0 [ 316.907074][ T9793] Memory cgroup out of memory: Killed process 7394 (syz.0.1297) total-vm:94032kB, anon-rss:1228kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:100kB oom_score_adj:1000 [ 316.992896][ T9793] syz.0.1900 (9793) used greatest stack depth: 7640 bytes left [ 317.278836][ T9870] bridge0: entered promiscuous mode [ 317.456399][ T9876] loop5: detected capacity change from 0 to 256 [ 317.649720][ T9870] bridge0: left promiscuous mode [ 317.853824][ T9881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9881 comm=syz.7.1925 [ 317.946900][ T9885] loop6: detected capacity change from 0 to 128 [ 318.246235][ T9917] loop7: detected capacity change from 0 to 256 [ 318.306464][ T9917] SELinux: failed to load policy [ 318.349981][ T9136] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 318.358095][ T9136] FAT-fs (loop7): Filesystem has been set read-only [ 318.364897][ T9136] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 318.431774][ T9939] loop6: detected capacity change from 0 to 256 [ 318.445525][ T9939] __nla_validate_parse: 1 callbacks suppressed [ 318.445541][ T9939] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1942'. [ 318.620271][ T8612] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.712150][ T9959] netlink: 228 bytes leftover after parsing attributes in process `syz.6.1950'. [ 318.746168][ T8612] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.851820][ T8612] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.863485][ T9969] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1949'. [ 318.931716][ T8612] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.382964][ T9979] loop6: detected capacity change from 0 to 512 [ 319.400874][ T9979] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 319.456300][ T9979] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.1952: bg 0: block 104: invalid block bitmap [ 319.479996][ T9979] loop6: lost filesystem error report for type 5 error -117 [ 319.480205][ T9979] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 319.487572][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 319.487590][ C0] EXT4-fs (loop6): initial error at time 575: ext4_validate_block_bitmap:432 [ 319.487611][ C0] EXT4-fs (loop6): last error at time 575: ext4_validate_block_bitmap:432 [ 319.537455][ T9979] loop6: lost filesystem error report for type 5 error -117 [ 319.537636][ T9979] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1952: invalid indirect mapped block 1 (level 1) [ 319.558656][ T9979] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 319.558924][ T9979] EXT4-fs (loop6): 1 truncate cleaned up [ 319.586888][ T9979] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.695087][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 319.695107][ T28] audit: type=1400 audit(575.658:2030): avc: denied { ioctl } for pid=9978 comm="syz.6.1952" path="/67/file1/file1" dev="loop6" ino=18 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 319.750045][ T28] audit: type=1400 audit(575.728:2031): avc: denied { map } for pid=9978 comm="syz.6.1952" path="pipe:[22612]" dev="pipefs" ino=22612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 319.750238][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1952'. [ 319.778650][ T28] audit: type=1400 audit(575.728:2032): avc: denied { execute } for pid=9978 comm="syz.6.1952" path="pipe:[22612]" dev="pipefs" ino=22612 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 320.189236][ T28] audit: type=1400 audit(576.168:2033): avc: denied { unmount } for pid=8627 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 320.211227][ T9999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1954'. [ 320.211574][ T8612] bond0 (unregistering): Released all slaves [ 320.229833][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.263889][ T8612] bond1 (unregistering): Released all slaves [ 320.278942][ T3039] 8021q: adding VLAN 0 to HW filter on device eth13 [ 320.290932][ T9956] chnl_net:caif_netlink_parms(): no params data found [ 320.333193][T10006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1957'. [ 320.346304][ T8612] hsr_slave_0: left promiscuous mode [ 320.354763][ T8612] hsr_slave_1: left promiscuous mode [ 320.361763][ T28] audit: type=1400 audit(576.328:2034): avc: denied { ioctl } for pid=10007 comm="syz.6.1958" path="socket:[27364]" dev="sockfs" ino=27364 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 320.400399][ T8612] veth1_macvtap: left promiscuous mode [ 320.412511][ T8612] veth0_macvtap: left promiscuous mode [ 320.425035][ T8612] veth0_vlan: left promiscuous mode [ 320.445109][ T28] audit: type=1400 audit(576.428:2035): avc: denied { write } for pid=10005 comm="syz.5.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 320.447228][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1957'. [ 320.510012][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1957'. [ 320.516013][ T28] audit: type=1400 audit(576.428:2036): avc: denied { create } for pid=10005 comm="syz.5.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.559705][ T28] audit: type=1400 audit(576.428:2037): avc: denied { write } for pid=10005 comm="syz.5.1957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 320.583609][T10018] netlink: 164 bytes leftover after parsing attributes in process `syz.6.1960'. [ 320.876638][ T28] audit: type=1400 audit(576.858:2038): avc: denied { create } for pid=10024 comm="syz.6.1963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 320.901011][T10025] IPVS: Error connecting to the multicast addr [ 320.939095][ T28] audit: type=1400 audit(576.918:2039): avc: denied { create } for pid=10031 comm="syz.2.1964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 320.970899][ T9956] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.980504][ T9956] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.994097][ T9956] bridge_slave_0: entered allmulticast mode [ 321.005721][ T9956] bridge_slave_0: entered promiscuous mode [ 321.022488][ T9956] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.029668][ T9956] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.041048][ T9956] bridge_slave_1: entered allmulticast mode [ 321.055655][ T9956] bridge_slave_1: entered promiscuous mode [ 321.086030][ T9956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.105080][ T9956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.152623][ T9956] team0: Port device team_slave_0 added [ 321.168295][ T9956] team0: Port device team_slave_1 added [ 321.237277][T10060] netlink: 636 bytes leftover after parsing attributes in process `syz.2.1970'. [ 321.313911][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.326716][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.352758][T10064] FAULT_INJECTION: forcing a failure. [ 321.352758][T10064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.353240][ T9956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.379509][ T9956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.386862][ T9956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.412930][T10064] CPU: 1 UID: 0 PID: 10064 Comm: syz.2.1971 Tainted: G W syzkaller #0 PREEMPT(full) [ 321.412969][T10064] Tainted: [W]=WARN [ 321.412977][T10064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 321.413061][T10064] Call Trace: [ 321.413068][T10064] [ 321.413080][T10064] __dump_stack+0x1d/0x30 [ 321.413109][T10064] dump_stack_lvl+0x95/0xd0 [ 321.413152][T10064] dump_stack+0x15/0x1b [ 321.413237][T10064] should_fail_ex+0x263/0x280 [ 321.413324][T10064] should_fail+0xb/0x20 [ 321.413346][T10064] should_fail_usercopy+0x1a/0x20 [ 321.413372][T10064] _copy_from_user+0x1c/0xb0 [ 321.413425][T10064] ___sys_sendmsg+0xc1/0x1e0 [ 321.413462][T10064] __x64_sys_sendmsg+0xd4/0x160 [ 321.413490][T10064] x64_sys_call+0x194c/0x3020 [ 321.413516][T10064] do_syscall_64+0x12c/0x3b0 [ 321.413564][T10064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.413586][T10064] RIP: 0033:0x7f6affffc819 [ 321.413603][T10064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.413622][T10064] RSP: 002b:00007f6afea57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.413644][T10064] RAX: ffffffffffffffda RBX: 00007f6b00275fa0 RCX: 00007f6affffc819 [ 321.413659][T10064] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 321.413727][T10064] RBP: 00007f6afea57090 R08: 0000000000000000 R09: 0000000000000000 [ 321.413761][T10064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.413773][T10064] R13: 00007f6b00276038 R14: 00007f6b00275fa0 R15: 00007ffeda0c1038 [ 321.413793][T10064] [ 321.577269][ T9956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.590340][ T3039] 8021q: adding VLAN 0 to HW filter on device eth14 [ 321.738465][ T9956] hsr_slave_0: entered promiscuous mode [ 321.752162][ T9956] hsr_slave_1: entered promiscuous mode [ 321.885203][ T9956] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 321.919398][ T9956] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.930359][ T9956] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 321.965707][ T9956] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.980225][ T9956] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 321.992390][ T9956] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 322.006099][T10096] netlink: 'syz.5.1975': attribute type 2 has an invalid length. [ 322.006484][ T9956] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 322.022089][T10096] netlink: 'syz.5.1975': attribute type 3 has an invalid length. [ 322.040764][ T9956] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.049001][ T9324] IPVS: starting estimator thread 0... [ 322.059400][ T3039] 8021q: adding VLAN 0 to HW filter on device eth15 [ 322.122363][ T9956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 322.151559][ T9956] 8021q: adding VLAN 0 to HW filter on device team0 [ 322.158392][T10104] IPVS: using max 2208 ests per chain, 110400 per kthread [ 322.160142][T10119] loop6: detected capacity change from 0 to 128 [ 322.181957][ T8608] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.189101][ T8608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 322.209266][T10119] FAT-fs (loop6): FAT read failed (blocknr 128) [ 322.243499][ T8606] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.250697][ T8606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 322.913522][T10126] bond5: option all_slaves_active: invalid value (5) [ 323.420824][T10126] bond5 (unregistering): Released all slaves [ 323.457201][ T3039] 8021q: adding VLAN 0 to HW filter on device eth16 [ 323.740121][ T9956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 323.925635][T10180] __nla_validate_parse: 4 callbacks suppressed [ 323.925654][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1990'. [ 324.005111][T10181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=10181 comm=syz.5.1990 [ 324.292060][ T9956] veth0_vlan: entered promiscuous mode [ 324.310542][ T9956] veth1_vlan: entered promiscuous mode [ 324.346071][ T9956] veth0_macvtap: entered promiscuous mode [ 324.356585][ T9956] veth1_macvtap: entered promiscuous mode [ 324.373343][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 324.389352][ T9956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 324.407202][ T8593] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.454252][ T8593] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.486373][ T8593] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.502679][ T8593] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.014444][T10252] FAULT_INJECTION: forcing a failure. [ 325.014444][T10252] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 325.039756][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 325.195904][T10252] CPU: 0 UID: 0 PID: 10252 Comm: syz.5.2001 Tainted: G W syzkaller #0 PREEMPT(full) [ 325.195965][T10252] Tainted: [W]=WARN [ 325.195974][T10252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 325.195989][T10252] Call Trace: [ 325.195996][T10252] [ 325.196005][T10252] __dump_stack+0x1d/0x30 [ 325.196097][T10252] dump_stack_lvl+0x95/0xd0 [ 325.196188][T10252] dump_stack+0x15/0x1b [ 325.196209][T10252] should_fail_ex+0x263/0x280 [ 325.196240][T10252] should_fail+0xb/0x20 [ 325.196263][T10252] should_fail_usercopy+0x1a/0x20 [ 325.196316][T10252] _copy_from_user+0x1c/0xb0 [ 325.196348][T10252] bpf_test_init+0xb9/0x130 [ 325.196379][T10252] bpf_prog_test_run_xdp+0x306/0xa10 [ 325.196488][T10252] ? __rcu_read_unlock+0x4e/0x70 [ 325.196515][T10252] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 325.196608][T10252] bpf_prog_test_run+0x204/0x340 [ 325.196641][T10252] __sys_bpf+0x52e/0x7e0 [ 325.196720][T10252] __x64_sys_bpf+0x41/0x50 [ 325.196741][T10252] x64_sys_call+0x10cb/0x3020 [ 325.196811][T10252] do_syscall_64+0x12c/0x3b0 [ 325.196882][T10252] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.196908][T10252] RIP: 0033:0x7f23d408c819 [ 325.196927][T10252] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.196945][T10252] RSP: 002b:00007f23d2adf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.196970][T10252] RAX: ffffffffffffffda RBX: 00007f23d4305fa0 RCX: 00007f23d408c819 [ 325.197019][T10252] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 325.197032][T10252] RBP: 00007f23d2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 325.197044][T10252] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.197056][T10252] R13: 00007f23d4306038 R14: 00007f23d4305fa0 R15: 00007ffed73c3e68 [ 325.197084][T10252] [ 325.825020][ T28] kauditd_printk_skb: 152 callbacks suppressed [ 325.825043][ T28] audit: type=1400 audit(581.768:2192): avc: denied { read write } for pid=10256 comm="syz.5.2002" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 325.858402][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 325.896734][ T28] audit: type=1400 audit(581.768:2193): avc: denied { open } for pid=10256 comm="syz.5.2002" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 325.933360][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 326.610278][T10259] loop5: detected capacity change from 0 to 1024 [ 326.690002][T10259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.834198][ T28] audit: type=1400 audit(582.698:2194): avc: denied { read write } for pid=10256 comm="syz.5.2002" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 326.873731][ T28] audit: type=1400 audit(582.698:2195): avc: denied { open } for pid=10256 comm="syz.5.2002" path="/180/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 327.180961][T10268] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 327.218027][T10277] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2004'. [ 327.229139][T10248] infiniband syz1: set active [ 327.249704][T10273] netlink: 'syz.2.2003': attribute type 29 has an invalid length. [ 327.254747][T10248] infiniband syz1: added xfrm0 [ 327.273030][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.309079][T10248] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 327.309285][T10248] infiniband syz1: Couldn't open port 1 [ 327.327208][T10248] RDS/IB: syz1: added [ 327.341020][T10274] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 327.374272][T10248] smc: adding ib device syz1 with port count 1 [ 327.384345][T10285] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2005'. [ 327.406391][T10274] bond6 (unregistering): Released all slaves [ 327.413995][T10248] smc: ib device syz1 port 1 has no pnetid [ 327.421191][T10287] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2006'. [ 327.474902][ T9324] xfrm0 speed is unknown, defaulting to 1000 [ 327.481322][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 327.503058][ T9] xfrm0 speed is unknown, defaulting to 1000 [ 327.579553][ T28] audit: type=1400 audit(583.558:2196): avc: denied { connect } for pid=10298 comm="syz.5.2009" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 327.665163][T10310] loop5: detected capacity change from 0 to 512 [ 327.687741][T10310] EXT4-fs: Ignoring removed mblk_io_submit option [ 327.691470][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 327.728444][ T28] audit: type=1400 audit(583.708:2197): avc: denied { name_bind } for pid=10311 comm="syz.8.2013" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 327.783842][T10310] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2011: invalid indirect mapped block 4294967295 (level 0) [ 327.805031][T10310] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 327.807584][T10310] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2011: invalid indirect mapped block 4294967295 (level 1) [ 327.816790][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 327.816812][ C0] EXT4-fs (loop5): initial error at time 583: ext4_free_branches:1023: inode 16 [ 327.816841][ C0] EXT4-fs (loop5): last error at time 583: ext4_free_branches:1023: inode 16 [ 327.849930][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 327.888167][T10310] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 327.897781][ T28] audit: type=1400 audit(583.878:2198): avc: denied { execute_no_trans } for pid=10327 comm="syz.2.2017" path="/407/file0" dev="tmpfs" ino=2158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 327.935444][T10310] EXT4-fs (loop5): 1 orphan inode deleted [ 327.956667][T10310] EXT4-fs (loop5): 1 truncate cleaned up [ 327.974588][T10310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.987562][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 328.022350][ T28] audit: type=1400 audit(583.918:2199): avc: denied { connect } for pid=10327 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.028242][T10310] tap0: tun_chr_ioctl cmd 1074025681 [ 328.097845][T10336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2019'. [ 328.101837][ T28] audit: type=1400 audit(583.918:2200): avc: denied { bind } for pid=10327 comm="syz.2.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 328.181662][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.199566][ T28] audit: type=1400 audit(583.998:2201): avc: denied { append } for pid=10307 comm="syz.5.2011" path="/183/file0/file0/cpuset.effective_mems" dev="loop5" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 328.236249][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 328.355951][T10248] xfrm0 speed is unknown, defaulting to 1000 [ 328.701533][T10373] loop6: detected capacity change from 0 to 1024 [ 328.715506][T10373] EXT4-fs: Ignoring removed nobh option [ 328.722518][T10373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 328.749997][T10373] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.035958][T10393] dvmrp6: entered allmulticast mode [ 329.143385][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2024'. [ 329.238076][T10409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2028'. [ 329.272010][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2028'. [ 329.365358][T10419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2030'. [ 329.387717][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.597911][T10433] loop8: detected capacity change from 0 to 512 [ 329.604727][T10433] EXT4-fs: Ignoring removed oldalloc option [ 330.443428][T10433] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 330.591959][T10433] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.2033: invalid indirect mapped block 83886080 (level 1) [ 330.650884][T10433] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 330.654956][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 330.671050][ C0] EXT4-fs (loop8): initial error at time 586: ext4_free_branches:1023: inode 16 [ 330.680226][ C0] EXT4-fs (loop8): last error at time 586: ext4_free_branches:1023: inode 16 [ 331.299131][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2034'. [ 331.308188][T10444] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2034'. [ 331.330793][T10444] žÿ: renamed from team_slave_1 [ 331.385885][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 331.396125][T10446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2034'. [ 331.420533][T10433] EXT4-fs (loop8): Remounting filesystem read-only [ 331.659721][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 331.659748][ T28] audit: type=1400 audit(587.638:2218): avc: denied { ioctl } for pid=10449 comm="syz.0.2035" path="socket:[29122]" dev="sockfs" ino=29122 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 331.660356][T10433] EXT4-fs (loop8): 1 orphan inode deleted [ 331.707349][ T28] audit: type=1400 audit(587.688:2219): avc: denied { create } for pid=10454 comm="syz.6.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.713851][T10433] EXT4-fs (loop8): 1 truncate cleaned up [ 331.746494][ T28] audit: type=1400 audit(587.688:2220): avc: denied { setopt } for pid=10454 comm="syz.6.2037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.791818][ T28] audit: type=1400 audit(587.688:2221): avc: denied { write } for pid=10454 comm="syz.6.2037" path="socket:[29701]" dev="sockfs" ino=29701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 331.839651][T10433] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.901533][ T28] audit: type=1326 audit(587.878:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6affffc819 code=0x7ffc0000 [ 331.951368][ T28] audit: type=1326 audit(587.878:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6affffc819 code=0x7ffc0000 [ 331.981418][ T28] audit: type=1326 audit(587.878:2224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6affffc819 code=0x7ffc0000 [ 332.015349][ T28] audit: type=1326 audit(587.878:2225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6affffc819 code=0x7ffc0000 [ 332.064584][ T28] audit: type=1326 audit(587.888:2226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10459 comm="syz.2.2039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6affffc819 code=0x7ffc0000 [ 332.096103][ T28] audit: type=1400 audit(587.908:2227): avc: denied { create } for pid=10456 comm="syz.5.2038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 332.177900][T10474] 9p: Bad value for 'rfdno' [ 332.685447][T10492] raw_sendmsg: syz.5.2050 forgot to set AF_INET. Fix it! [ 332.785847][T10492] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.829016][T10502] xfrm0 speed is unknown, defaulting to 1000 [ 332.947023][T10505] xfrm0 speed is unknown, defaulting to 1000 [ 333.096876][T10517] loop5: detected capacity change from 0 to 4096 [ 333.105578][ T9956] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.115007][T10517] ext4: Unknown parameter 'permit_directio' [ 333.238831][T10528] loop8: detected capacity change from 0 to 164 [ 333.290542][T10530] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2057'. [ 333.323280][T10530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2057'. [ 333.484197][T10539] xfrm0: entered promiscuous mode [ 333.500450][T10539] xfrm0: entered allmulticast mode [ 333.652970][T10546] xfrm0 speed is unknown, defaulting to 1000 [ 333.838107][T10567] netlink: 'syz.6.2072': attribute type 7 has an invalid length. [ 333.904031][T10567] loop6: detected capacity change from 0 to 1764 [ 333.921392][T10567] iso9660: Unknown parameter 'iocharsetcp855' [ 334.068553][T10574] loop6: detected capacity change from 0 to 1024 [ 336.470195][T10606] netlink: 'syz.6.2080': attribute type 10 has an invalid length. [ 336.607086][T10606] team0 (unregistering): Port device team_slave_0 removed [ 336.797321][T10606] team0 (unregistering): Port device team_slave_1 removed [ 336.963494][T10627] 8021q: VLANs not supported on ipvlan1 [ 336.963507][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 336.963522][ T28] audit: type=1400 audit(592.938:2296): avc: denied { ioctl } for pid=10626 comm="syz.5.2082" path="socket:[29960]" dev="sockfs" ino=29960 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 337.030590][T10627] loop5: detected capacity change from 0 to 1024 [ 337.043467][T10627] EXT4-fs: Ignoring removed nomblk_io_submit option [ 337.072638][T10627] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.160364][T10645] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 337.160364][T10645] The task syz.0.2084 (10645) triggered the difference, watch for misbehavior. [ 337.181298][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.250421][ T28] audit: type=1400 audit(593.228:2297): avc: denied { read } for pid=10651 comm="syz.5.2087" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.280792][ T28] audit: type=1400 audit(593.228:2298): avc: denied { open } for pid=10651 comm="syz.5.2087" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 337.331283][ T28] audit: type=1400 audit(593.308:2299): avc: denied { ioctl } for pid=10660 comm="syz.2.2083" path="socket:[30004]" dev="sockfs" ino=30004 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 337.380452][T10649] loop6: detected capacity change from 0 to 2048 [ 337.423544][T10649] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.442971][T10667] EXT4-fs (loop5): unable to read superblock [ 337.449974][ T28] audit: type=1400 audit(593.418:2300): avc: denied { create } for pid=10666 comm="syz.2.2090" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.510464][ T28] audit: type=1400 audit(593.478:2301): avc: denied { unlink } for pid=3311 comm="syz-executor" name="file0" dev="tmpfs" ino=2233 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 337.563525][T10658] netlink: 'syz.5.2089': attribute type 21 has an invalid length. [ 337.574656][ T28] audit: type=1400 audit(593.548:2302): avc: denied { getopt } for pid=10679 comm="syz.2.2091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 337.603348][T10658] __nla_validate_parse: 1 callbacks suppressed [ 337.603367][T10658] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2089'. [ 337.621351][ T28] audit: type=1400 audit(593.598:2303): avc: denied { ioctl } for pid=10679 comm="syz.2.2091" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 337.623497][T10658] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 337.727246][T10686] FAULT_INJECTION: forcing a failure. [ 337.727246][T10686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 337.740779][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.5.2092 Tainted: G W syzkaller #0 PREEMPT(full) [ 337.740811][T10686] Tainted: [W]=WARN [ 337.740817][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 337.740828][T10686] Call Trace: [ 337.740835][T10686] [ 337.740842][T10686] __dump_stack+0x1d/0x30 [ 337.740922][T10686] dump_stack_lvl+0x95/0xd0 [ 337.740946][T10686] dump_stack+0x15/0x1b [ 337.740967][T10686] should_fail_ex+0x263/0x280 [ 337.740993][T10686] should_fail+0xb/0x20 [ 337.741094][T10686] should_fail_usercopy+0x1a/0x20 [ 337.741198][T10686] _copy_from_user+0x1c/0xb0 [ 337.741256][T10686] ___sys_sendmsg+0xc1/0x1e0 [ 337.741297][T10686] __x64_sys_sendmsg+0xd4/0x160 [ 337.741330][T10686] x64_sys_call+0x194c/0x3020 [ 337.741370][T10686] do_syscall_64+0x12c/0x3b0 [ 337.741444][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.741465][T10686] RIP: 0033:0x7f23d408c819 [ 337.741484][T10686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.741505][T10686] RSP: 002b:00007f23d2adf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.741565][T10686] RAX: ffffffffffffffda RBX: 00007f23d4305fa0 RCX: 00007f23d408c819 [ 337.741581][T10686] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000003 [ 337.741596][T10686] RBP: 00007f23d2adf090 R08: 0000000000000000 R09: 0000000000000000 [ 337.741611][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.741626][T10686] R13: 00007f23d4306038 R14: 00007f23d4305fa0 R15: 00007ffed73c3e68 [ 337.741668][T10686] [ 337.909803][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.928949][T10688] loop5: detected capacity change from 0 to 512 [ 337.938181][T10688] EXT4-fs: Ignoring removed oldalloc option [ 337.950810][T10692] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10692 comm=syz.0.2095 [ 337.973750][T10688] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 337.991876][T10688] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2094: invalid indirect mapped block 83886080 (level 1) [ 338.011853][ T28] audit: type=1400 audit(593.988:2304): avc: denied { bind } for pid=10698 comm="syz.0.2096" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 338.012138][T10688] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 338.041422][T10688] EXT4-fs (loop5): Remounting filesystem read-only [ 338.050618][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 338.050644][ C0] EXT4-fs (loop5): initial error at time 594: ext4_free_branches:1023: inode 16 [ 338.050674][ C0] EXT4-fs (loop5): last error at time 594: ext4_free_branches:1023: inode 16 [ 338.082416][T10688] EXT4-fs (loop5): 1 orphan inode deleted [ 338.088204][T10688] EXT4-fs (loop5): 1 truncate cleaned up [ 338.094438][T10688] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.171325][T10702] IPVS: Unknown mcast interface: pimreg0 [ 338.201680][ T28] audit: type=1400 audit(594.178:2305): avc: denied { read } for pid=10703 comm="syz.6.2098" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 338.508126][T10704] FAULT_INJECTION: forcing a failure. [ 338.508126][T10704] name failslab, interval 1, probability 0, space 0, times 0 [ 338.699361][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.6.2098 Tainted: G W syzkaller #0 PREEMPT(full) [ 338.699400][T10704] Tainted: [W]=WARN [ 338.699416][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.699473][T10704] Call Trace: [ 338.699482][T10704] [ 338.699492][T10704] __dump_stack+0x1d/0x30 [ 338.699525][T10704] dump_stack_lvl+0x95/0xd0 [ 338.699600][T10704] dump_stack+0x15/0x1b [ 338.699620][T10704] should_fail_ex+0x263/0x280 [ 338.699720][T10704] should_failslab+0x8c/0xb0 [ 338.699747][T10704] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 338.699775][T10704] ? __alloc_skb+0x2d6/0x690 [ 338.699860][T10704] __alloc_skb+0x2d6/0x690 [ 338.699879][T10704] ? __alloc_skb+0x200/0x690 [ 338.699899][T10704] netlink_alloc_large_skb+0xbf/0xf0 [ 338.699995][T10704] netlink_sendmsg+0x40c/0x6f0 [ 338.700036][T10704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.700069][T10704] ____sys_sendmsg+0x563/0x5b0 [ 338.700102][T10704] ___sys_sendmsg+0x195/0x1e0 [ 338.700134][T10704] __x64_sys_sendmsg+0xd4/0x160 [ 338.700228][T10704] x64_sys_call+0x194c/0x3020 [ 338.700258][T10704] do_syscall_64+0x12c/0x3b0 [ 338.700338][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.700359][T10704] RIP: 0033:0x7ff26c93c819 [ 338.700376][T10704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.700397][T10704] RSP: 002b:00007ff26b397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.700425][T10704] RAX: ffffffffffffffda RBX: 00007ff26cbb5fa0 RCX: 00007ff26c93c819 [ 338.700452][T10704] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 000000000000000d [ 338.700467][T10704] RBP: 00007ff26b397090 R08: 0000000000000000 R09: 0000000000000000 [ 338.700517][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.700532][T10704] R13: 00007ff26cbb6038 R14: 00007ff26cbb5fa0 R15: 00007ffc3263e678 [ 338.700552][T10704] [ 338.840611][T10715] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 339.130993][T10719] xfrm0 speed is unknown, defaulting to 1000 [ 339.231080][T10723] xfrm0 speed is unknown, defaulting to 1000 [ 339.241897][T10730] loop6: detected capacity change from 0 to 512 [ 339.256708][T10730] ext4: Bad value for 'commit' [ 339.782826][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.820460][T10748] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.925840][T10748] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.044485][T10758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 340.051897][T10758] IPv6: NLM_F_CREATE should be set when creating new route [ 340.069205][T10758] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2113'. [ 340.078876][T10758] netlink: 'syz.5.2113': attribute type 1 has an invalid length. [ 340.088234][T10758] netlink: 568 bytes leftover after parsing attributes in process `syz.5.2113'. [ 340.161775][T10748] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.325220][T10765] loop6: detected capacity change from 0 to 256 [ 340.362936][T10765] FAT-fs (loop6): Directory bread(block 1285) failed [ 340.372040][T10765] FAT-fs (loop6): Directory bread(block 1286) failed [ 340.379802][T10765] FAT-fs (loop6): Directory bread(block 1287) failed [ 340.388049][T10765] FAT-fs (loop6): Directory bread(block 1288) failed [ 340.583478][T10766] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2116'. [ 340.668717][T10766] openvswitch: netlink: Key type 30 is not supported [ 340.682625][T10748] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.144015][ T8622] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.160592][ T8622] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.175722][ T8622] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.191705][ T8622] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.321332][T10782] loop5: detected capacity change from 0 to 512 [ 341.332946][T10782] EXT4-fs: Ignoring removed oldalloc option [ 341.355782][T10782] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 341.385751][T10782] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2120: invalid indirect mapped block 83886080 (level 1) [ 341.406438][T10782] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 341.406671][T10782] EXT4-fs (loop5): Remounting filesystem read-only [ 341.415954][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 341.415973][ C0] EXT4-fs (loop5): initial error at time 597: ext4_free_branches:1023: inode 16 [ 341.416006][ C0] EXT4-fs (loop5): last error at time 597: ext4_free_branches:1023: inode 16 [ 341.495153][T10782] EXT4-fs (loop5): 1 orphan inode deleted [ 341.521244][T10782] EXT4-fs (loop5): 1 truncate cleaned up [ 341.535300][T10782] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.923458][T10797] loop6: detected capacity change from 0 to 128 [ 341.959997][T10797] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 342.015246][ T28] kauditd_printk_skb: 88 callbacks suppressed [ 342.015263][ T28] audit: type=1400 audit(597.988:2394): avc: denied { setattr } for pid=10796 comm="syz.6.2122" path="/113/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 342.099735][ T8627] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.327949][ T28] audit: type=1400 audit(598.308:2395): avc: denied { module_load } for pid=10807 comm="syz.2.2127" path="/430/bus" dev="tmpfs" ino=2279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 342.531722][T10821] netlink: 'syz.6.2131': attribute type 1 has an invalid length. [ 342.558183][T10821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 342.599134][T10821] bond1 (unregistering): Released all slaves [ 342.688783][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.700609][ T28] audit: type=1400 audit(598.678:2396): avc: denied { create } for pid=10820 comm="syz.6.2131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 342.720484][ T28] audit: type=1400 audit(598.678:2397): avc: denied { ioctl } for pid=10820 comm="syz.6.2131" path="socket:[30323]" dev="sockfs" ino=30323 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 342.781709][T10827] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2133'. [ 342.810986][ T28] audit: type=1400 audit(598.788:2398): avc: denied { getopt } for pid=10824 comm="syz.5.2132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.014770][T10838] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2134'. [ 343.035186][T10838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2134'. [ 343.122306][T10835] syzkaller0: entered promiscuous mode [ 343.128662][T10835] syzkaller0: entered allmulticast mode [ 343.502441][ T28] audit: type=1400 audit(599.478:2399): avc: denied { mac_admin } for pid=10848 comm="syz.2.2138" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 343.605296][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2140'. [ 343.971851][T10864] loop5: detected capacity change from 0 to 512 [ 344.007721][T10864] EXT4-fs: Ignoring removed oldalloc option [ 344.049756][T10864] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 344.116169][T10864] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.2142: invalid indirect mapped block 83886080 (level 1) [ 344.144601][T10864] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 344.144856][T10864] EXT4-fs (loop5): Remounting filesystem read-only [ 344.154142][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 344.154179][ C1] EXT4-fs (loop5): initial error at time 600: ext4_free_branches:1023: inode 16 [ 344.154206][ C1] EXT4-fs (loop5): last error at time 600: ext4_free_branches:1023: inode 16 [ 344.230186][T10864] EXT4-fs (loop5): 1 orphan inode deleted [ 344.249127][T10864] EXT4-fs (loop5): 1 truncate cleaned up [ 344.262480][T10864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 344.463730][T10869] pimreg3: entered allmulticast mode [ 344.569145][T10872] pimreg3: entered allmulticast mode [ 344.745785][ T28] audit: type=1400 audit(600.728:2400): avc: denied { mount } for pid=10876 comm="syz.0.2147" name="/" dev="autofs" ino=30940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 344.963969][T10884] loop6: detected capacity change from 0 to 1024 [ 344.995712][T10884] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 345.935436][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.955511][T10907] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2157'. [ 345.978940][T10907] openvswitch: netlink: Key type 30 is not supported [ 346.050868][ T28] audit: type=1400 audit(602.028:2401): avc: denied { create } for pid=10913 comm="syz.5.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 346.197853][T10918] loop5: detected capacity change from 0 to 128 [ 346.452470][ T28] audit: type=1400 audit(602.428:2402): avc: denied { read } for pid=10919 comm="syz.2.2162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 346.591461][T10926] dvmrp6: entered allmulticast mode [ 346.600774][T10926] loop8: detected capacity change from 0 to 164 [ 346.614681][T10926] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 346.631782][T10926] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 346.742743][ T28] audit: type=1400 audit(602.718:2403): avc: denied { name_connect } for pid=10927 comm="syz.8.2165" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 347.003752][T10939] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2168'. [ 347.012932][T10939] FAULT_INJECTION: forcing a failure. [ 347.012932][T10939] name failslab, interval 1, probability 0, space 0, times 0 [ 347.026552][T10939] CPU: 1 UID: 0 PID: 10939 Comm: syz.6.2168 Tainted: G W syzkaller #0 PREEMPT(full) [ 347.026643][T10939] Tainted: [W]=WARN [ 347.026649][T10939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 347.026660][T10939] Call Trace: [ 347.026667][T10939] [ 347.026675][T10939] __dump_stack+0x1d/0x30 [ 347.026700][T10939] dump_stack_lvl+0x95/0xd0 [ 347.026787][T10939] dump_stack+0x15/0x1b [ 347.026862][T10939] should_fail_ex+0x263/0x280 [ 347.026885][T10939] should_failslab+0x8c/0xb0 [ 347.026911][T10939] __kvmalloc_node_noprof+0x155/0x640 [ 347.026929][T10939] ? alloc_netdev_mqs+0xa5/0xa40 [ 347.027031][T10939] ? __pfx_gtp_link_setup+0x10/0x10 [ 347.027050][T10939] alloc_netdev_mqs+0xa5/0xa40 [ 347.027091][T10939] rtnl_create_link+0x239/0x720 [ 347.027120][T10939] rtnl_newlink_create+0x174/0x650 [ 347.027269][T10939] ? security_capable+0x7b/0x90 [ 347.027329][T10939] ? netlink_ns_capable+0x86/0xa0 [ 347.027351][T10939] rtnl_newlink+0x1185/0x1400 [ 347.027443][T10939] ? xa_load+0xb1/0xe0 [ 347.027478][T10939] ? __memcg_slab_free_hook+0x164/0x2f0 [ 347.027500][T10939] ? __rcu_read_unlock+0x4e/0x70 [ 347.027521][T10939] ? avc_has_perm_noaudit+0xab/0x130 [ 347.027545][T10939] ? cred_has_capability+0x224/0x2a0 [ 347.027623][T10939] ? selinux_capable+0x31/0x40 [ 347.027693][T10939] ? security_capable+0x7b/0x90 [ 347.027715][T10939] ? ns_capable+0x7c/0xb0 [ 347.027738][T10939] ? __pfx_rtnl_newlink+0x10/0x10 [ 347.027763][T10939] rtnetlink_rcv_msg+0x64b/0x720 [ 347.027842][T10939] netlink_rcv_skb+0x123/0x220 [ 347.027866][T10939] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 347.028016][T10939] rtnetlink_rcv+0x1c/0x30 [ 347.028044][T10939] netlink_unicast+0x5a8/0x680 [ 347.028067][T10939] netlink_sendmsg+0x5c8/0x6f0 [ 347.028170][T10939] ? __pfx_netlink_sendmsg+0x10/0x10 [ 347.028195][T10939] ____sys_sendmsg+0x563/0x5b0 [ 347.028220][T10939] ___sys_sendmsg+0x195/0x1e0 [ 347.028269][T10939] __x64_sys_sendmsg+0xd4/0x160 [ 347.028294][T10939] x64_sys_call+0x194c/0x3020 [ 347.028341][T10939] do_syscall_64+0x12c/0x3b0 [ 347.028423][T10939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.028478][T10939] RIP: 0033:0x7ff26c93c819 [ 347.028494][T10939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.028511][T10939] RSP: 002b:00007ff26b397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 347.028530][T10939] RAX: ffffffffffffffda RBX: 00007ff26cbb5fa0 RCX: 00007ff26c93c819 [ 347.028600][T10939] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 347.028612][T10939] RBP: 00007ff26b397090 R08: 0000000000000000 R09: 0000000000000000 [ 347.028623][T10939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.028634][T10939] R13: 00007ff26cbb6038 R14: 00007ff26cbb5fa0 R15: 00007ffc3263e678 [ 347.028651][T10939] [ 347.489797][ T28] audit: type=1400 audit(603.468:2404): avc: denied { getopt } for pid=10961 comm="syz.6.2178" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 347.526768][T10966] loop6: detected capacity change from 0 to 256 [ 347.536708][T10968] loop5: detected capacity change from 0 to 128 [ 347.555028][T10969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.555968][ T28] audit: type=1326 audit(603.538:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10965 comm="syz.6.2179" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff26c93c819 code=0x0 [ 347.565747][T10969] netlink: 'syz.2.2180': attribute type 1 has an invalid length. [ 347.608769][ T28] audit: type=1400 audit(603.588:2406): avc: denied { ioctl } for pid=10970 comm="syz.8.2181" path="socket:[31147]" dev="sockfs" ino=31147 ioctlcmd=0x89e6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 347.636705][ T28] audit: type=1400 audit(603.588:2407): avc: denied { watch watch_reads } for pid=10965 comm="syz.6.2179" path="/130/file0/file0" dev="loop6" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 347.725966][ T28] audit: type=1400 audit(603.698:2408): avc: denied { create } for pid=10967 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 347.746219][ T28] audit: type=1400 audit(603.698:2409): avc: denied { create } for pid=10967 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 347.766624][ T28] audit: type=1400 audit(603.698:2410): avc: denied { write } for pid=10967 comm="syz.2.2180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 347.834461][T10980] netlink: 'syz.2.2184': attribute type 16 has an invalid length. [ 347.842604][T10980] netlink: 'syz.2.2184': attribute type 17 has an invalid length. [ 347.850814][T10980] lo: left promiscuous mode [ 347.856098][T10980] lo: left allmulticast mode [ 347.877561][T10980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.886912][T10980] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.901673][T10980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 347.944099][ T28] audit: type=1400 audit(603.918:2411): avc: denied { getopt } for pid=10981 comm="syz.2.2185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 350.081040][ T28] audit: type=1400 audit(606.058:2412): avc: denied { read append } for pid=11006 comm="syz.5.2194" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.104630][ T28] audit: type=1400 audit(606.058:2413): avc: denied { open } for pid=11006 comm="syz.5.2194" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 350.349264][T11013] loop6: detected capacity change from 0 to 256 [ 350.384340][T11012] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2196'. [ 350.425306][T11012] openvswitch: netlink: Key type 30 is not supported [ 350.462875][T11020] loop8: detected capacity change from 0 to 128 [ 350.538446][T11027] loop5: detected capacity change from 0 to 4096 [ 350.552128][T11027] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.572605][T11027] SELinux: Context system_u:object_r:devicekit_exec_t:s0 is not valid (left unmapped). [ 350.594454][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.650458][T11033] loop5: detected capacity change from 0 to 128 [ 350.659349][T11033] ext3: Unknown parameter 'fowner<00000000000000000000' [ 350.708525][T11033] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2205'. [ 350.871643][T11035] IPVS: set_ctl: invalid protocol: 0 172.30.1.1:20000 [ 350.925281][T11044] usb usb8: usbfs: process 11044 (syz.5.2208) did not claim interface 0 before use [ 350.960646][T11052] loop5: detected capacity change from 0 to 128 [ 351.018266][T11062] tipc: Enabling of bearer rejected, failed to enable media [ 351.055896][T11066] loop5: detected capacity change from 0 to 512 [ 351.070643][T11066] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 351.082224][T11066] EXT4-fs (loop5): 1 truncate cleaned up [ 351.089557][T11066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.116184][T11066] xt_hashlimit: size too large, truncated to 1048576 [ 351.215611][T11086] loop6: detected capacity change from 0 to 512 [ 351.223120][T11085] pimreg3: entered allmulticast mode [ 351.231630][T11086] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.2225: inode has both inline data and extents flags [ 351.248758][T11086] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 351.248934][T11086] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.2225: couldn't read orphan inode 15 (err -117) [ 351.258737][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 351.258763][ C0] EXT4-fs (loop6): initial error at time 607: ext4_orphan_get:1397: inode 15 [ 351.258824][ C0] EXT4-fs (loop6): last error at time 607: ext4_orphan_get:1397: inode 15 [ 351.295202][T11086] loop6: lost filesystem error report for type 5 error -117 [ 351.295813][T11086] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.363824][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.139740][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.156629][T11122] pimreg3: entered allmulticast mode [ 352.236878][T11132] netlink: 'syz.5.2242': attribute type 1 has an invalid length. [ 352.253922][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2242'. [ 352.263950][T11132] bond2: entered promiscuous mode [ 352.269361][T11132] bond2: entered allmulticast mode [ 352.275273][T11132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 352.364484][T11143] netlink: 'syz.8.2246': attribute type 29 has an invalid length. [ 352.373575][T11143] netlink: 'syz.8.2246': attribute type 29 has an invalid length. [ 352.384218][T11143] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2246'. [ 352.437919][T11151] netlink: 184 bytes leftover after parsing attributes in process `syz.5.2248'. [ 352.456127][T11149] loop8: detected capacity change from 0 to 2048 [ 352.560723][T11158] pimreg3: entered allmulticast mode [ 352.568489][T11160] netlink: 'syz.5.2253': attribute type 1 has an invalid length. [ 352.590269][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 352.590288][ T28] audit: type=1400 audit(608.568:2455): avc: denied { name_bind } for pid=11162 comm="syz.8.2254" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 352.594330][T11160] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2253'. [ 352.628063][T11146] IPv6: NLM_F_CREATE should be specified when creating new route [ 352.637828][T11146] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.645078][T11146] IPv6: NLM_F_CREATE should be set when creating new route [ 352.655609][T11160] bond3: entered promiscuous mode [ 352.660850][T11160] bond3: entered allmulticast mode [ 352.666538][T11160] 8021q: adding VLAN 0 to HW filter on device bond3 [ 352.678192][ T28] audit: type=1400 audit(608.658:2456): avc: denied { setopt } for pid=11162 comm="syz.8.2254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 352.731557][ T28] audit: type=1400 audit(608.708:2457): avc: denied { setopt } for pid=11166 comm="syz.5.2256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 352.750938][T11167] loop5: detected capacity change from 0 to 2048 [ 352.797574][T11167] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 352.811587][T11167] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 352.826868][ T28] audit: type=1400 audit(608.788:2458): avc: denied { map } for pid=11166 comm="syz.5.2256" path="/240/file1/memory.stat" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 352.850822][ T6259] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.863540][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2257'. [ 353.026601][T11181] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2259'. [ 353.052115][T11181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2259'. [ 353.110207][T11184] syzkaller0: entered promiscuous mode [ 353.117202][T11184] syzkaller0: entered allmulticast mode [ 353.232355][T11193] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 353.266170][T11193] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2265'. [ 353.287635][T11193] bond5: entered promiscuous mode [ 353.301872][T11193] bond5: entered allmulticast mode [ 353.307482][T11193] 8021q: adding VLAN 0 to HW filter on device bond5 [ 353.438352][ T28] audit: type=1400 audit(609.418:2459): avc: denied { mount } for pid=11202 comm="syz.2.2269" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 353.596927][ T28] audit: type=1400 audit(609.578:2460): avc: denied { unmount } for pid=3311 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 353.810252][ T28] audit: type=1400 audit(609.788:2461): avc: denied { read write } for pid=11220 comm="syz.6.2275" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 353.843724][T11223] vlan1: entered promiscuous mode [ 353.855069][T11223] macvlan0: entered promiscuous mode [ 353.864557][T11223] vlan1: entered allmulticast mode [ 353.883007][ T28] audit: type=1400 audit(609.788:2462): avc: denied { open } for pid=11220 comm="syz.6.2275" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 353.907293][T11223] macvlan0: entered allmulticast mode [ 353.913935][T11223] veth1_vlan: entered allmulticast mode [ 353.936868][ T28] audit: type=1400 audit(609.818:2463): avc: denied { execute } for pid=11222 comm="syz.6.2276" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=32064 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 353.946387][T11229] netlink: 'syz.6.2279': attribute type 1 has an invalid length. [ 353.995685][T11231] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 354.016081][ T28] audit: type=1400 audit(609.998:2464): avc: denied { relabelto } for pid=11230 comm="syz.5.2280" name="cgroup.procs" dev="cgroup" ino=347 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:netutils_exec_t:s0" [ 354.021630][T11229] bond1: entered promiscuous mode [ 354.048517][T11229] bond1: entered allmulticast mode [ 354.053920][T11229] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.097816][T11236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.189749][T11246] loop6: detected capacity change from 0 to 512 [ 354.258814][T11246] EXT4-fs error (device loop6): ext4_free_inode:354: comm syz.6.2282: bit already cleared for inode 11 [ 354.331114][T11246] loop6: lost filesystem error report for type 5 error -117 [ 354.331516][T11246] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 354.339027][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 354.339051][ C1] EXT4-fs (loop6): initial error at time 610: ext4_free_inode:354 [ 354.339082][ C1] EXT4-fs (loop6): last error at time 610: ext4_free_inode:354 [ 354.370254][T11246] loop6: lost filesystem error report for type 5 error -117 [ 354.371843][T11246] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 354.389889][T11246] loop6: lost filesystem error report for type 5 error -117 [ 354.390132][T11246] EXT4-fs (loop6): 1 orphan inode deleted [ 354.410436][T11246] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 354.836328][T11271] EXT4-fs warning (device loop5): ext4_enable_quotas:7263: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 354.859477][T11271] EXT4-fs (loop5): mount failed [ 354.954514][ T8627] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.111310][T11268] xfrm0 speed is unknown, defaulting to 1000 [ 355.324532][T11279] netlink: 'syz.0.2292': attribute type 1 has an invalid length. [ 355.621181][T11279] __nla_validate_parse: 7 callbacks suppressed [ 355.621198][T11279] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2292'. [ 355.654837][T11284] FAULT_INJECTION: forcing a failure. [ 355.654837][T11284] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.656241][T11279] bond6: entered promiscuous mode [ 355.677838][T11279] bond6: entered allmulticast mode [ 355.683126][T11279] 8021q: adding VLAN 0 to HW filter on device bond6 [ 355.701693][T11284] CPU: 0 UID: 0 PID: 11284 Comm: syz.8.2294 Tainted: G W syzkaller #0 PREEMPT(full) [ 355.701739][T11284] Tainted: [W]=WARN [ 355.701747][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 355.701761][T11284] Call Trace: [ 355.701769][T11284] [ 355.701778][T11284] __dump_stack+0x1d/0x30 [ 355.701831][T11284] dump_stack_lvl+0x95/0xd0 [ 355.701853][T11284] dump_stack+0x15/0x1b [ 355.701946][T11284] should_fail_ex+0x263/0x280 [ 355.701974][T11284] should_fail+0xb/0x20 [ 355.702001][T11284] should_fail_usercopy+0x1a/0x20 [ 355.702032][T11284] _copy_from_iter+0xcf/0xea0 [ 355.702074][T11284] ? __alloc_skb+0x4f6/0x690 [ 355.702094][T11284] ? __alloc_skb+0x200/0x690 [ 355.702115][T11284] netlink_sendmsg+0x4ae/0x6f0 [ 355.702222][T11284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.702379][T11284] sock_write_iter+0x2e8/0x320 [ 355.702408][T11284] do_iter_readv_writev+0x4fd/0x5a0 [ 355.702515][T11284] vfs_writev+0x2e1/0x900 [ 355.702539][T11284] do_writev+0xe9/0x210 [ 355.702558][T11284] __x64_sys_writev+0x45/0x50 [ 355.702662][T11284] x64_sys_call+0x1c0c/0x3020 [ 355.702693][T11284] do_syscall_64+0x12c/0x3b0 [ 355.702770][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.702795][T11284] RIP: 0033:0x7fc0a8bfc819 [ 355.702814][T11284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.702904][T11284] RSP: 002b:00007fc0a7657028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 355.702924][T11284] RAX: ffffffffffffffda RBX: 00007fc0a8e75fa0 RCX: 00007fc0a8bfc819 [ 355.703004][T11284] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 355.703018][T11284] RBP: 00007fc0a7657090 R08: 0000000000000000 R09: 0000000000000000 [ 355.703033][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.703045][T11284] R13: 00007fc0a8e76038 R14: 00007fc0a8e75fa0 R15: 00007ffe40bbeef8 [ 355.703063][T11284] [ 355.929927][T11279] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2292'. [ 356.661783][T11324] set_capacity_and_notify: 2 callbacks suppressed [ 356.661810][T11324] loop6: detected capacity change from 0 to 256 [ 356.713837][T11324] FAT-fs (loop6): Directory bread(block 1285) failed [ 356.723081][T11324] FAT-fs (loop6): Directory bread(block 1286) failed [ 356.731052][T11324] FAT-fs (loop6): Directory bread(block 1287) failed [ 356.739178][T11324] FAT-fs (loop6): Directory bread(block 1288) failed [ 356.917488][T11325] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2303'. [ 357.378538][T11325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2303'. [ 357.514579][T11340] netlink: 'syz.8.2307': attribute type 1 has an invalid length. [ 357.567820][T11351] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2307'. [ 357.654330][T11355] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2310'. [ 357.669101][T11356] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2307'. [ 357.704515][T11355] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2310'. [ 357.725226][T11351] bond1: entered promiscuous mode [ 357.739987][T11351] bond1: entered allmulticast mode [ 357.772480][T11351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.068337][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 358.068395][ T28] audit: type=1400 audit(614.048:2490): avc: denied { read } for pid=11365 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 358.386522][ T28] audit: type=1400 audit(614.248:2491): avc: denied { getopt } for pid=11365 comm="syz.5.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 359.013125][T11383] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 359.142166][T11387] loop8: detected capacity change from 0 to 512 [ 359.161137][T11387] EXT4-fs (loop8): couldn't mount as ext2 due to feature incompatibilities [ 359.451509][T11397] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 360.187060][T11408] netlink: 'syz.2.2325': attribute type 1 has an invalid length. [ 360.253243][T11408] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2325'. [ 360.285626][T11408] bond6: entered promiscuous mode [ 360.302889][T11412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2325'. [ 360.329305][T11408] bond6: entered allmulticast mode [ 360.370411][T11408] 8021q: adding VLAN 0 to HW filter on device bond6 [ 360.474657][T11424] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 360.486531][T11423] loop8: detected capacity change from 0 to 256 [ 360.502854][ T28] audit: type=1400 audit(616.478:2492): avc: denied { relabelto } for pid=11422 comm="syz.0.2333" name="491" dev="tmpfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 360.551365][ T28] audit: type=1400 audit(616.478:2493): avc: denied { associate } for pid=11422 comm="syz.0.2333" name="491" dev="tmpfs" ino=2571 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:" [ 360.615269][ T28] audit: type=1400 audit(616.488:2494): avc: denied { add_name } for pid=11422 comm="syz.0.2333" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 360.665466][ T28] audit: type=1400 audit(616.488:2495): avc: denied { associate } for pid=11422 comm="syz.0.2333" name="memory.stat" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 360.704266][ T28] audit: type=1400 audit(616.598:2496): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="memory.stat" dev="tmpfs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 360.730489][ T28] audit: type=1400 audit(616.598:2497): avc: denied { unlink } for pid=3318 comm="syz-executor" name="memory.stat" dev="tmpfs" ino=2576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 360.755625][ T28] audit: type=1400 audit(616.598:2498): avc: denied { rmdir } for pid=3318 comm="syz-executor" name="491" dev="tmpfs" ino=2571 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:" [ 360.780729][ T28] audit: type=1326 audit(616.728:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.8.2332" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc0a8bfc819 code=0x0 [ 360.804996][ C1] ================================================================== [ 360.813211][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 360.820529][ C1] [ 360.822869][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 0: [ 360.830961][ C1] wq_worker_tick+0x64/0x240 [ 360.835576][ C1] sched_tick+0xbc/0x1f0 [ 360.839853][ C1] update_process_times+0x15e/0x190 [ 360.845096][ C1] tick_nohz_handler+0x275/0x3d0 [ 360.850086][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 360.855295][ C1] hrtimer_interrupt+0x261/0x850 [ 360.860245][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 360.866160][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 360.871811][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.877888][ C1] crng_make_state+0xc1/0x200 [ 360.882587][ C1] _get_random_bytes+0x85/0x1b0 [ 360.887634][ C1] get_random_bytes+0x1d/0x30 [ 360.892367][ C1] nsim_dev_trap_report_work+0x216/0x630 [ 360.898187][ C1] process_scheduled_works+0x4f0/0x9c0 [ 360.903660][ C1] worker_thread+0x58a/0x780 [ 360.908260][ C1] kthread+0x22a/0x280 [ 360.912336][ C1] ret_from_fork+0x146/0x330 [ 360.916927][ C1] ret_from_fork_asm+0x1a/0x30 [ 360.921701][ C1] [ 360.924027][ C1] read-write to 0xffff8881000c5ed8 of 8 bytes by interrupt on cpu 1: [ 360.932272][ C1] wq_worker_tick+0x64/0x240 [ 360.936871][ C1] sched_tick+0xbc/0x1f0 [ 360.941134][ C1] update_process_times+0x15e/0x190 [ 360.946340][ C1] tick_nohz_handler+0x275/0x3d0 [ 360.951395][ C1] __hrtimer_run_queues+0x276/0x4f0 [ 360.956692][ C1] hrtimer_interrupt+0x261/0x850 [ 360.961636][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 360.967538][ C1] sysvec_apic_timer_interrupt+0x6f/0x80 [ 360.973267][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 360.979249][ C1] crng_make_state+0xc1/0x200 [ 360.984012][ C1] _get_random_bytes+0x85/0x1b0 [ 360.988875][ C1] get_random_bytes+0x1d/0x30 [ 360.993572][ C1] nsim_dev_trap_report_work+0x482/0x630 [ 360.999305][ C1] process_scheduled_works+0x4f0/0x9c0 [ 361.004863][ C1] worker_thread+0x58a/0x780 [ 361.009476][ C1] kthread+0x22a/0x280 [ 361.013637][ C1] ret_from_fork+0x146/0x330 [ 361.018233][ C1] ret_from_fork_asm+0x1a/0x30 [ 361.023107][ C1] [ 361.025529][ C1] value changed: 0x0000000000264cb0 -> 0x00000000002673c0 [ 361.032814][ C1] [ 361.035137][ C1] Reported by Kernel Concurrency Sanitizer on: [ 361.041316][ C1] CPU: 1 UID: 0 PID: 8622 Comm: kworker/u8:25 Tainted: G W syzkaller #0 PREEMPT(full) [ 361.052434][ C1] Tainted: [W]=WARN [ 361.056235][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 361.066295][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 361.073096][ C1] ==================================================================