last executing test programs: 11m1.512435049s ago: executing program 4 (id=198): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@acl}, {@dax}, {@jqfmt_vfsv1}]}, 0x1, 0x506, &(0x7f0000000e00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f00000003c0)="ad", 0x1}], 0x2}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000757000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000175302823b399c7300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 10m57.14507999s ago: executing program 4 (id=221): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x68, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x4, 0xca, 0x0, 0x1000, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) 10m57.076207003s ago: executing program 4 (id=223): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x2000, 0x400000000000005, 0x0) 10m56.979860446s ago: executing program 4 (id=225): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) getpgid(r0) getpid() preadv(0xffffffffffffffff, 0x0, 0x0, 0x200000, 0x0) perf_event_open(&(0x7f00000012c0)={0x2, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x40433, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x100003}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x80000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x4, 0xfffffffe}, 0x10}, 0x94) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'lblcr\x00', 0x1, 0x4, 0x6d}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r5, 0x2000009) sendfile(r3, r5, 0x0, 0x7ffff004) 10m55.109501866s ago: executing program 4 (id=228): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000140)={&(0x7f0000000040)=""/2, 0x2, 0x0, &(0x7f0000000080)=""/175, 0xaf}}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0xa, 0x7fe}, 0x11, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x57, 0xfd, 0x0, 0x0, 0x0, 0x4db, 0x295, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x5a, 0x6}, 0x2, 0x6, 0x10ffe, 0x2, 0x2, 0x80000011, 0xfffe, 0x0, 0x1000000, 0x0, 0x7}, r0, 0xdffffffffffffffd, r2, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611014000000000062010c20000000009500090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r3 = inotify_init1(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000de000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000010230000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(r3, &(0x7f0000000040)='.\x00', 0xa4000061) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = dup(r5) fsetxattr$trusted_overlay_upper(r6, &(0x7f0000000000), 0x0, 0x0, 0x2) flistxattr(r5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r7, &(0x7f0000000040), 0x0, 0x8, 0xffffffff) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000800)={0x16, 0x98, 0xfa00, {0x0, 0x0, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x9, 0xd, {"36a46cc432358bcc76fba851ec85a57c"}, 0x6, 0x7, 0x24c}}}, 0xa0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRES8=r7, @ANYRES8, @ANYBLOB="000400000000000000000d00000005001900"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x80080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x8, 0x7, 0x8009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) 10m52.630591386s ago: executing program 4 (id=232): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@acl}, {@dax}, {@jqfmt_vfsv1}]}, 0x1, 0x506, &(0x7f0000000e00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f00000003c0)="ad", 0x1}], 0x2}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000757000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000175302823b399c7300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 10m37.464559745s ago: executing program 32 (id=232): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x62040200) r3 = socket(0x10, 0x803, 0x0) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000300)={[{@acl}, {@dax}, {@jqfmt_vfsv1}]}, 0x1, 0x506, &(0x7f0000000e00)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000d40)=ANY=[@ANYBLOB="000000004c90020052feffff0300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"/192]) r7 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000300)="0207000902000000e4a17c45c8d260c9", 0x10}, {&(0x7f00000003c0)="ad", 0x1}], 0x2}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000757000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000950000000000000010"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000175302823b399c7300000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, 0x0, 0x0) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 5m37.293800499s ago: executing program 0 (id=2629): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xe9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="7a7fa22c2aff88d753ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = perf_event_open(&(0x7f0000000340)={0x4, 0x80, 0x2c, 0x30, 0xff, 0x1, 0x0, 0xc, 0x8800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x3}, 0x0, 0x200, 0x1, 0x1, 0x0, 0xffff, 0x9a9f, 0x0, 0xa, 0x0, 0xbdb1}, 0x0, 0xf, r2, 0x3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000005c0)={0x3, 0x80, 0x6, 0x13, 0x40, 0x0, 0x0, 0x0, 0x700c5, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x50000, 0x0, @perf_bp={&(0x7f0000000580)}, 0x80, 0x0, 0x4, 0x2, 0xc50, 0x800, 0xf, 0x0, 0xffff0af6, 0x0, 0xea3}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x8, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x9, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0xa, 0x1, 0x106) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x3, 0xc, 0x6, 0x9, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) poll(0x0, 0x0, 0x3ff) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x501000, 0x0) ioctl$FS_IOC_GETVERSION(r8, 0x80087601, &(0x7f0000000040)) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000100)={'bridge_slave_1\x00', 0x4000}) sendmsg$netlink(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)={0x18, 0x76, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @ipv4=@empty}]}, 0x18}], 0x1}, 0x0) 5m36.241891983s ago: executing program 0 (id=2637): socket$nl_audit(0x10, 0x3, 0x9) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffb, 0x1, @perf_config_ext={0x3fffffffc, 0xfffffffffffffffd}, 0x0, 0x3, 0x80, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0x3e57}, {0x6}]}, 0x10) r0 = syz_io_uring_setup(0x82a, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x83, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r1, r2, 0x2c, 0x10000) io_uring_enter(r0, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r0, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) 5m35.70670437s ago: executing program 0 (id=2638): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="03ffe40000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x440d0}, 0x4008840) 5m35.520452326s ago: executing program 0 (id=2640): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000cc0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d00)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x12}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040804}, 0x10040000) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0x5}, 0x1c) listen(0xffffffffffffffff, 0x10040) syz_emit_ethernet(0x46, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x147, 0x9}]}}}}}}}, 0x0) 5m35.336064462s ago: executing program 0 (id=2642): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000b80)="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", 0x12c}, {&(0x7f0000000fc0)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295499abbcb388d291aa83e93db6cf9ab0954e6a8dfc19c3c1533a11d81e0382999bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a9aec550d12af09f782e1", 0xdd}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000440)="7cc9483e0b2212b8b5d0ab5223f9b22b4b5bd5036f55b4568dbffe5662e5c329dd834e", 0x23}, {&(0x7f0000000480)="92c8794113d179ef42460476d9b70f8462246800935f34795e1aeb9f22", 0x1d}, {&(0x7f0000000880)="fb70b4c3828979137f8e899a032064ee15287cc8803ecee7b6203553b506e26c7d9d0bf628b2580352c6639716dcf515e2c2064edfd15755838f79f931eb9c11172d52729c2254544f874aae59c290a952e0ecc77fc3a0de141c9d400d745477bab96a1e7761f848770256982aca14bb8fa9c1376b86efb6b64f5659dd789559a0efb98f0ebd2742cbae22991d78c791f3c09542a7d7d72ec89d52", 0x9b}], 0x3}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000d40)="527a464c354b9bc3aea3f585674edd616a86dbb824ae6f56cbb99d9fe986bdd2d1c0992390cd0829706c9aeea8236287a152a036c32ea310fc45c151b6a4d792512173f3f8b7d9e62f43d3191f87276e61395134553c7d8c0669005d41bcda2432aac881de0c929f0ac64bd5be", 0x6d}, {&(0x7f0000000200)="db97f5edaebce00000000000000000040000060c8c0bf7e1dc340a4d4d88c11230d7876f51ec22fffbcc8f77c2d2ab36291a18ba85080899be1148aa47fd244555cb10efdc", 0x45}], 0x2}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5m35.245082005s ago: executing program 0 (id=2645): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0xfffc, 0x4, 0x0, 0x1000, 0x0, 0x80fd}) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x81}, 0x100000, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080)=' ', &(0x7f0000000340)=""/246}, 0x20) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 5m18.802482805s ago: executing program 33 (id=2645): ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f0000000240)={0xfffc, 0x4, 0x0, 0x1000, 0x0, 0x80fd}) socket$nl_route(0x10, 0x3, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x374a76c8977093c, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x0, 0x81}, 0x100000, 0x400000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x401, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000088000000240000007f00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000005c0)={r5, &(0x7f0000000080)=' ', &(0x7f0000000340)=""/246}, 0x20) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80000) creat(&(0x7f00000001c0)='./file0\x00', 0x102) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x94, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000980)) 1m56.081030339s ago: executing program 1 (id=4173): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'sit0\x00', 0x0}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file2\x00', 0x800040, &(0x7f0000000000)=ANY=[], 0x1, 0x577, &(0x7f0000000580)="$eJzs3W9v09YewPGfS6vm5koI3XuFUG+Bs8KkInXFSSAo4pHnnKQeiR3ZDmqfDFW0RRUBJNgk6BPUB2P/tdewp3sR017F3gXaO1gnHzuQtvnT9V8q9v1EYMc+Pud3HMu/uo2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAiOVWbbtgScPz28tqMLcaBs0h67v13dg1GdKuiJX8k1xOLqWLLv3v/eqLyX9zMpu+m5VcMsnJ1r8vXrj738mJ7vZDAjoVL15tPV7tdNafjzuQManrexIFXtOpa+VFgaqUy/bNpVqkal5DRytRrJvKDbUTB6Gad2+oQqVSUnpxJWj79arT0N2Fdz4p2nZZfZVPP2//5meLkbvkNRqeXzdlktVJmTvJgXjPi1WsnaZSG5ud9dKg4LazwyMpVBjVk6RQcVShol0sFgrFYqF8u3L7jm1P7ltg7yH7Soz/oMV4HefpGziSiSz/S0M88aUty6L6vlypSiiBNAesz3Tz/8c39dB2e/N/N8tfer96Rkz+v5K+uzIo/w+I5W+/ppPqs/k/d3Z2DrDN+f+nsb2SLXksq9KRjqzL8+OK6BhfXSdRd120+OJJJIF40hTHLFHZEiUVKUtZbHkgS1KTSJTUxJOGaIlkRSKJRZsjypVQtDjyvQQSipJ5ceWGKClIRSpSEiVaFmVFAmmLL3WpimNq2ZBNs99Lw/rfLVQ4SKHikELkfxzdcZ26gSPb6eZ/AAAAAADwwbLMb9+T6/8puWzmctLQ9rjDAgAAAAAAx8j85X82mUwlc5fFqnlc/wMAAAAA8GGxzD12lojk5Wo6170Til8CAAAAAADwgTB//7+STMzYa1fFOtD1/9SpBQgAAAAAAI7sm0Fj7P9mllqWRK1p69c/JAynrO3W8nXriZOscJ6cS7c7t7fGuDZjnc8qMZPyZPbO1bNWNvrlu0Ew32aTjZ44rH5j/Vp7Avi8W0OfAH6S/gHID/JR2q1u2bXumrSVf2WLG3cL4jjnJ2K9HH/5dPOlmO5/6zcnswIPn3XWTCzbybvtJ1mF+8ZRHLwz5Asz3oK556Lv6MZT5kaMrN28JRubnXW79wOYSDefGNqmXEgXpm2+kbn07Vw20n5+d/9zSZuFxUG9r5sopkXE9Nw6ZM/fyLW0zLX5a+mkTxTFvlFMJTGn+6LYWr6+k+7/CTnQvjhEFKWB+yKLotR7FBwiCgAYl43BWei7nXTN3sR/iLPcxqgn+ezN7of58ULeyHxaZn7GnFgnZ/qc0e1RZ3T7iHn9l33PQBqUY5N2f3zXbsG0+3MStwxsN2oULclJ7uXv75etPlp/tP60WCyV7Vu2fbsoU6Yb2YTcAwDoY/QzdkaWsG6Zq+pk5Vpacs9V9X/efaVgUR7KM+nImiyYuw3MNw761prv+RrCwoir1nzPE14WRlzV5Xse9HLwsqXT+TAAADglcyPy8EHy/8KI6+7duXz41XFvLgcAACdDh2+tfPy1FYZe60GhUik48ZJWYeDeU6FXrWvl+bEO3SXHr2vVCoM4cINGMnPfq+pIRe1WKwhjVQtC1Qoib9k8+V1lj36PdNPxY8+NWg3tRFq5gR87bqyqXuSqVvvThhct6dBsHLW069U814m9wFdR0A5dvahUpHVPQa+q/direcmsr1qh13TCFXU/aLSbWlV15IZeKw7SCrtteX4tCJum2sVx72wAAM6IF6+2Hq92OuvPT3Bm3H0EAAC7kaUBAAAAAAAAAAAAAAAAAAAAADj7hty359SO90bAaTmFew2PKdSzEcY/dea1iGRLdl5L72HTHXT6xFo/N+6+n5mZMZ+YAJy4vwIAAP//NVpGnw==") (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x9, 0x8}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x8) (async) ptrace(0x10, 0x0) (async) prlimit64(0x0, 0xe, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x40, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x6, 0xf60e}, 0x9092, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0xddc5, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, 'S'}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1002, @private=0xa010102}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd, 0x60000001}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}}]}, 0x60}, 0x1, 0x7}, 0x0) (async) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000200030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}, {0x0}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4a046) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r3, @ANYBLOB="18000380100003800e42ea3d6ef0e65b14956b447723010008000500f9ffffff5600e377884e17e773c19968dcaba177d669131b28c15eefcb0dc3eefccad78105505cfd7a80690351124e51dc702f2e90e0e55b1fa5eff248eeb899906e2188e1ad0a389f516cb50000000000000061"], 0x40}, 0x1, 0x0, 0x0, 0x2004c454}, 0x0) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000000240)={0x0, 0x1, r6, 0x80003}) 1m55.925735094s ago: executing program 1 (id=4175): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x5, 0x10101, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$eJzs3U1vW1kZAOD33thMk2ZIBljMjMTMiBmUVFAnmdBpxKKAhGBVCSj7EhI3iuLEVeK0TVRBKn4AEkKAxAZWbJD4AUioPwEhKsEeAQJV0LJhUbjI9nWapraTUn9onOeRTu6Hj/2eN5aP7/E99g3gzHonImYjIsuy7EJETOX707zEQbPU6z1+dHelXpLIsmv/SCLJ97Ue65V8eT6/27mI+MZXI76dPB93Z29/Y7lSKW/n23O1zeRJlu1fXN9cXiuvlbcWFxc+WLq8dGlpvid5TkfElS//9Uff/8VXrvzms7f/dP3vs99pJth0NI9eaqZebPwvWgoRsd2PYENSaGTYdGnIbQEAoLv68f7HIuJTEXEhpmKscTQHAAAAjJLsC5PxJGme/wMAAABGUxoRk5GkpXy+72SkaanUnMP7iZhIK9Wd2meyqcPPC6ajmN5Yr5Tn87kD01FM6tsL+Rzb1vb7x7YXI+K1iPjh1Hhju7RSrawO9ZMPAAAAODvOPx3/v5F/h7Mx/gcAAABGzPSwGwAAAAD0nfE/AAAAjD7jfwAAABhpX7t6tV6y1vWvV2/t7W5Ub11cLe9slDZ3V0or1e2bpbVqda3xm32bJz1epVq9+bnY2r0zVyvv1OZ29vavb1Z3t2rX15+5BDYAAAAwQK+9ff+PSUQcfH48jYgsOXJbMSIbO1q5MPj2Af2Tvkjlv/SvHcDgjQ27AcDQOKSHs6t4chXfDoARd1I/0HHyzm973xYAAKA/Zt44PP/fKMDZcf9hY5Ekw24IMHDdzv+bGwCj7RTn/4ARVez2Lm9QACMv7fJSb30h6OXP/2fZi7cMAADopclGSdJSPg6YjDQtlSJebUz8LyY31ivl+Yj4aET8Yar4Sn17oXHPxMcDAAAAAAAAAAAAAAAAAAAAAAAAAHBKWZZE1sH4YR0AAADgwywi/VuSX/9rZuq9yeaI/+lVQT+S/HuqsYyI2z+99uM7y7Xa9kJ9/z8P99d+ku9/fxifYAAAAADHtcbprXE8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTS40d3V1plkHEffikiptvFL8S5xvJcFCNi4l9JFI7cL4mIsR7EP5iIiNfbxU/qzYrpvBXH46cRMd6L+Pf+//jnexAfzrL79f7ni+1ef2m801i2f/0V8vKyOvd/6WH/N9ah/3u13QOmz+9688Gv5jrGvxfxZqF9/9OKn3SI/+4pc/zWN/f3O92W/Txipu37T/JMrLmkcHNuZ2//4vrm8lp5rby1uLjwwdLlpUtL83M31ivl/G/bGD/45K//2y3/iQ7xp0/I/71T5v+fB3cefby5Wjx2UzF+lmWz77Z//l/vEL/13vfp/Omub8+01g+a60e99cvfvfV2l/xXO+R/0vM/e8r8L3z9e38+ZVUAYAB29vY3liuV8rYVK31bGY8BBl2ObnVaB7EDaM9381D9CvH7YkT/shhipwQAAPTF04P+YbcEAAAAAAAAAAAAAAAAAAAAzq6TfgasFz8wdjzmwXBSBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo6n8BAAD///phy8c=") shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x88, 0x2, 0x6, 0x1f3ea855875a761f, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000200"/20, @ANYRES32=0x1, @ANYBLOB="00000100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000001000040000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000614010026bd7000fe"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="180000002500010323bd7045caac98da"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044010) futex(&(0x7f00000000c0)=0x2, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x1, 0x200) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) 1m55.601758684s ago: executing program 1 (id=4178): io_uring_setup(0x7, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x3}, 0x10) syz_emit_ethernet(0xde, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0xa8, 0x6, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @local, {[], {{0x4e24, 0x4e28, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0x0, 0x2, 0x0, 0x0, {[@mptcp=@remove_addr={0x1e, 0x91, 0x3, 0x0, "d273e4691e053bf8529ed0c7c54218934657c3fb711f8f79f436b2597d5b22b5606acf15720f20b5248e98925f41beda71fce5458101337d4687d7723b947130e5438dcf33fbe4c2b7ffaa16b6822348ae382bcf0279451e884628d44bcb2befe9f85dfbb4ec8e28b499b93fbd665b16a4c8ae939401940dd56b82f89530a94a34b8803efc20a057537da93cd247"}]}}}}}}}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x3) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x1, 0x2002, 0x6, 0x0, 0x1, 0xcaff}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000840)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000500)) close(r0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = add_key(&(0x7f0000000240)='rxrpc_s\x00', 0x0, &(0x7f0000000b80)="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", 0xffc, 0xfffffffffffffffd) request_key(&(0x7f0000000080)='rxrpc_s\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)='\x00', r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2000012, 0x700, 0x0, &(0x7f00000004c0)="4133c9e924380000000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m55.407253161s ago: executing program 1 (id=4180): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket(0x2, 0x80805, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x20, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@remote, 0x0}, &(0x7f0000000100)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000180)={@mcast2, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x420469af366e3fef, 0x9, 0x0, 0x6, 0x29, @remote, @dev={0xfe, 0x80, '\x00', 0x11}, 0x700, 0x7, 0xc6a1, 0x8}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}, @IFLA_MACSEC_SCB={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@private1, 0x0}, &(0x7f0000000400)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000440)={@rand_addr, 0x0}, &(0x7f0000000480)=0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r15, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r15, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x178, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x40}, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r16 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r16, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0xa8, 0x8005, 0x0, 0x1, 0x3, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c67808cf335263bd9bffbcc2542ded71038259ca171ce1a311ef07ec3ad71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x9, 0x8]}) fdatasync(r0) 1m54.20515476s ago: executing program 1 (id=4185): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0xfffffffffffffdc3, 0xfa00, {r2, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x3ffe, 0x0, @mcast1, 0x10080bff}, @in={0x2, 0x4e23, @broadcast}}}, 0x118) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000280)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000040)=0x6, r3}}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) setresuid(0xee00, 0xee00, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r6, 0xf, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) uname(&(0x7f0000000100)=""/252) r7 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000000), r5) sendmsg$NET_DM_CMD_STOP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r8 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x12, r8, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = request_key(&(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000480)='\x00', 0xffffffffffffffff) add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x0}, 0x0, 0x0, r11) r12 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$bt_hci(r12, 0x0, 0x3, &(0x7f0000000280)=""/2, &(0x7f00000002c0)=0x2) ioctl$KDSETLED(r10, 0x4b32, 0x8) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40020000c117163db200833200"/29, @ANYRES32=0x0, @ANYBLOB="7f1500000000000014000300776732000000000000000000000000000a000100ffffffffffff0000"], 0x40}}, 0x20000840) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) 1m53.233623651s ago: executing program 1 (id=4195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x0, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000000)="944ab93384d9", 0x6}, {&(0x7f0000000140)='+', 0x1}], 0x3}, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x1, 0x5, 0x9, 0x0, 0x0, [{{r0}, 0x1}, {{r1}, 0xffffffffffffffff}, {{r1}, 0x1}, {{r1}, 0x3}, {{r1}, 0x5580}, {{r1}, 0xff}, {{r2}, 0x3}, {{r0}, 0x18}, {{r0}, 0x16993fec}]}) 1m53.215516011s ago: executing program 34 (id=4195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000050}, 0x24000840) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x0, 0x1}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000280)="f4000900062b2c25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad", 0x25}, {&(0x7f0000000000)="944ab93384d9", 0x6}, {&(0x7f0000000140)='+', 0x1}], 0x3}, 0x4000000) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)={0x1, 0x5, 0x9, 0x0, 0x0, [{{r0}, 0x1}, {{r1}, 0xffffffffffffffff}, {{r1}, 0x1}, {{r1}, 0x3}, {{r1}, 0x5580}, {{r1}, 0xff}, {{r2}, 0x3}, {{r0}, 0x18}, {{r0}, 0x16993fec}]}) 14.791613043s ago: executing program 5 (id=5279): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='io\x00') pread64(r0, &(0x7f0000001240)=""/102390, 0x18ff6, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xc, 0x0, &(0x7f0000000080)="05804ab382844306d758e620", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f00000001c0)={'bridge0\x00', &(0x7f0000000080)=@ethtool_ringparam={0x7, 0x0, 0x5, 0x0, 0x2, 0x10004003, 0x7, 0x0, 0x7}}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000002c0)=ANY=[], 0x20) 14.318022299s ago: executing program 5 (id=5288): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000010c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000aff010000000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e2309d50f64fe8000000000000000000000000000aa07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"/264], 0x110) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x4000002}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) socket(0xf, 0x80000, 0x1916eb1e) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x2, 0x9}, 0x10c02c, 0x9, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_GET_NAME(0x10, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4212, r4, &(0x7f00000004c0)={0x3, 0x1}, &(0x7f00000004c0)) r5 = dup(r3) ioctl$TIOCSETD(r5, 0x5423, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x11, 0x3, 0x10) write$P9_RSYMLINK(r0, &(0x7f00000003c0)={0x14, 0x11, 0x1, {0x94dfb1eeac0df0a, 0x3}}, 0x14) preadv(0xffffffffffffffff, &(0x7f0000000c40)=[{0x0}], 0x1, 0x3d, 0x5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001e0021042bbd7000000000000700000005002a000000000008000f0043"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/59) r6 = socket(0x10, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfe, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000, 0x0, 0x80000}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x4, 0xc, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x20e9811, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$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") renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file2\x00', 0x0) 14.168848063s ago: executing program 5 (id=5289): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) 14.081291726s ago: executing program 5 (id=5291): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10, &(0x7f0000000100)={[{@dioread_lock}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo\x00') getdents64(r0, &(0x7f0000000400)=""/48, 0x30) unshare(0x20000400) r1 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r1, r1, 0x21) getdents(r0, 0xffffffffffffffff, 0x7a) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) pwritev2(r2, &(0x7f0000001200)=[{&(0x7f0000001180)="070423f2", 0x4}], 0x1, 0x2, 0xcf, 0x2) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) 13.869747473s ago: executing program 5 (id=5292): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0xc8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0xa0, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 10.22561472s ago: executing program 5 (id=5321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffffb1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000521f0000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000072b55eb2a60c9784c41f9c111d030000007ef72dcf8b4fdbe4107a8df836ac9809e522c6e35e60e6f19a5ebd3fdf0993af"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$eJzs3c9vI1cdAPDvTOLd7G6KU0CoVKJUtGi3grU3DW0jhKBc4FQJKPclJE4UxY6j2CmbqKKp+A8QEkicOHFB4g9AQj3wB6BKleCCOCBAIARbOCABHTTjsZp17CTQrJ3Gn4/04vfm1/e9sfw8M36ZCWBqPRkRL0bETEQ8ExHVcnpapjjspXy5t++/upqnJLLs5b8mkZTT+tvKy7MRcaNcbS4ivvbliG8mx+N29g+2VprNxm5ZrndbO/XO/sHtzdbKRmOjsb20tPj88gvLzy3fyUrvqZ0L/cyPv/T5n3/6W7+7++db386r9bmPRCUG2nGeek2vFPuiL99Huw8j2ATMlO2pTLoiAACcSX6M/8GI+ERx/F+NmeJobsDMJGoGAAAAnJfsC/Px7yQiAwAAAC6tNCLmI0lr5ViA+UjTK+W1gQ/H9bTZ7nQ/td7e217L50UsRCVd32w27pRjhReikuTlxXKMbb/87EB5KSIejYjvVa8V5dpqu7k24WsfAAAAMC1uDJz//6OaFvnTDfk/AQAAAODiWhhZAAAAAC4Lp/wAAABw+Q2e/7vfPwAAAFwqX3nppTxl/edfr72yv7fVfuX2WqOzVWvtrdZW27s7tY12e6O4Z1/rtO012+2dz8T23r16t9Hp1jv7B3db7b3t7t3NBx6BDQAAAIzRox9/49dJRBx+9lqRorwPIMAD/jDpCgDnyVA/mF7u4g3TqzLpCgATl5wy3+AdAAB4/7v50eO///ef/+/aAFxuxvoAwPTx+z9Mr4oRgDC1ZstrAB/oFa+OWm7k7/+/PGukLIt4s3p0iuuLAAAwXvNFStJaeR4wH2laq0U8EpEuRCVZ32w27pTnB7+qVq7m5cVizeTUMcMAAAAAAAAAAAAAAAAAAAAAAAAAQE+WJZEBAAAAl1pE+qekuJt/xM3q0/OD1weuJP+sxh/Lwg9f/v69lW53dzGf/rfiWV5XIqL7g3L6syMfHwYAAACct+Rw5KzeeXr5ujjWWgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBd6+/+pqP40z7l++GBELw+LPxlzxOheViLj+9yRmj6yXRMTMOcQ/fD0iHhsWP4l3suy1KGsxLP61hxx/odg1w+OnEXHjHOLDNHsj739eHPb5S+PJ4nX452+2TO/V6P4vLSM/VvRzw/qfR45trTU0xuNv/bTey1WOx3894vHZ4f1Pv/9NRsR/6tjW/pVl2fH43/j6wcGo9mc/irg59PsneSBWvdvaqXf2D25vtlY2GhuN7aWlxeeXX1h+bvlOfX2z2Sj/Do3x3Y/97J1R8fP2Xx8S/7e/6fW/J7X/6VEbHfCft+7d/1Ave+wNyOPfemro9+9cjIiflt99nyzz+fyb/fxhL3/UEz9584mT2r82Yv+f9v7fOmP7n/nqd35/xkUBgDHo7B9srTSbjd0TMnNnWOb9mPnF3IWoxv+YyV7rvXMXpT7/byY/Wn13Sr9VF6BiRzLZWGJdLY7nz7rWlTG1faLdEgAA8BC8e9A/6ZoAAAAAAAAAAAAAAAAAAADA9BrHrdQGYx5OpqkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACf6bwAAAP//8yDcjQ==") r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000021000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000d6a054f1040000000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) keyctl$get_security(0x11, r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 10.22531568s ago: executing program 35 (id=5321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6f6a0000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0xffffffffffffffb1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000521f0000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000000072b55eb2a60c9784c41f9c111d030000007ef72dcf8b4fdbe4107a8df836ac9809e522c6e35e60e6f19a5ebd3fdf0993af"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r4, 0x0}, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000001200)="$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") r6 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x10, &(0x7f0000000f40)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000021000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000d6a054f1040000000095"], &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) keyctl$get_security(0x11, r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 4.887547243s ago: executing program 2 (id=5374): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.932858073s ago: executing program 2 (id=5387): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c5", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.894232125s ago: executing program 2 (id=5388): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x6, 0x400002) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$USBDEVFS_CONNECTINFO(r0, 0x40085511, &(0x7f0000000000)) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f0000000240)={{0x3, 0xe8b5c71a5eb6f040, 0x5, 0xb7a4, 0x1, 0xffff}, 0x341, [0xc, 0x40, 0xcd7, 0x4, 0x6, 0x0, 0x80000000, 0x7, 0x9, 0x7a18fde9, 0x9, 0xf12, 0x4, 0x3, 0x378, 0x9, 0x4, 0x0, 0x1, 0xffff06bd, 0x0, 0xf, 0x1a, 0xf2, 0x12, 0x9, 0x8, 0x10001, 0x401, 0x80000000, 0x401, 0x3ca5, 0x1, 0x0, 0xff, 0x40000004, 0x4, 0x3, 0x0, 0xaa80, 0x40000000, 0x80000000, 0x7fff, 0x7, 0x5, 0xa, 0x0, 0x10000, 0x405, 0x8, 0xffff, 0x91ba, 0x7, 0x9, 0x9, 0xb6, 0x24, 0xcb, 0x5, 0x7f, 0x5, 0x311, 0x66d1, 0xfffffffc, 0x9, 0xb6eb, 0xc74, 0x77, 0x1, 0xc0000000, 0x5cb5, 0xfffffffd, 0x401, 0xedf4, 0x4, 0x1000, 0x6, 0xfffffffe, 0x8001, 0xc1, 0x1, 0x8, 0x1, 0x32, 0x98, 0x7f, 0xffff, 0x401, 0x2, 0x2, 0x4680, 0x9a7f, 0xe665, 0x3c6e, 0x3, 0x7, 0x80, 0x4b, 0x9, 0x2, 0xb, 0x6, 0x4fa4, 0x80000000, 0x1, 0xb, 0x0, 0xfffffffa, 0x3, 0x8001, 0xfd, 0x101, 0x4, 0x0, 0xa, 0x1b, 0x202, 0x7ff, 0x9, 0x80000000, 0xffff, 0x9, 0x3, 0x6, 0x2, 0xffffff87, 0xe, 0xd, 0xf, 0x8, 0x9, 0x7, 0x6, 0x400, 0x8, 0xff2, 0x6, 0x0, 0x6, 0x0, 0x8, 0x1, 0x3, 0x664, 0x4, 0x9, 0x9, 0x2, 0x8, 0xfffffffd, 0xeb6, 0x0, 0x9, 0x10000, 0x1, 0x9, 0x954, 0xc6, 0x1, 0x4, 0x7ff, 0xe6, 0x6, 0x10001, 0x9, 0x68, 0x7, 0x201, 0x5, 0x3, 0x9a3f, 0x400000, 0x0, 0x80000067, 0xffffff7e, 0x7, 0x10000000, 0x10001, 0x7, 0x3, 0x10, 0x10a, 0xa, 0x40, 0x18, 0x80, 0xb5f8, 0x8bc, 0x3, 0x8000103, 0x5, 0xfffffffc, 0x4, 0x18000, 0x10, 0x1000, 0x288c, 0x1ffe, 0x73ee, 0x1, 0x5, 0x9, 0x7fffffff, 0x73, 0x6, 0x8, 0x6, 0x400, 0x40, 0x0, 0x0, 0x0, 0x546c, 0x981, 0x5aa, 0x7fff, 0x7, 0x4, 0x7, 0xc4c, 0x45e3, 0x5, 0x7, 0x3, 0x5, 0x3, 0x0, 0x1, 0x2, 0xffffffff, 0x4, 0x200000ce, 0xf, 0x0, 0x1, 0xa, 0x3, 0x0, 0x9, 0x9, 0x37c, 0x10001, 0x8, 0x1, 0x5, 0x2, 0x6, 0x4, 0x6, 0x1, 0x8, 0x6, 0xfffffffa, 0x5, 0x0, 0x9, 0x5, 0x2, 0x7, 0x3, 0xffffff1b, 0x9, 0x2, 0xd, 0x34ea, 0x10000, 0x0, 0x80002001, 0x8, 0x8000, 0x10004, 0x10, 0x8, 0x9, 0x5, 0x1, 0x6, 0x10001, 0x0, 0x5, 0x10000, 0x4, 0xffff, 0x2, 0x89, 0x2, 0x3, 0x1, 0x73, 0x3, 0x9, 0x4, 0x1, 0x9, 0x1, 0x8, 0x0, 0x81, 0x80000004, 0x9, 0x9, 0x0, 0x4, 0x10000004, 0x0, 0x1, 0xce5fb90f, 0x5, 0x4, 0x10001, 0xf, 0x9, 0x100, 0x44, 0x59b, 0x7, 0x8, 0x9, 0x3, 0x2, 0x4, 0x6, 0x0, 0x8, 0x40, 0xd3, 0x7, 0xffffffff, 0x89aa, 0x8, 0x0, 0xf0ce, 0x2, 0x1, 0x0, 0x2, 0xc6, 0x1000, 0x800001, 0x937, 0xa, 0x6, 0x3, 0xffffffff, 0x5, 0x9, 0x5, 0xffffffff, 0xbe, 0x1, 0x7, 0x0, 0xffffffff, 0x0, 0x3d6, 0x0, 0xae, 0x6, 0x1, 0xfffffeff, 0x4, 0x5, 0x7fff, 0x103, 0x7, 0x6, 0x709, 0x2, 0x49, 0x10, 0xfffffff7, 0xfffff772, 0x8, 0x80000000, 0x3, 0x7, 0xa9c, 0x9, 0x8, 0x1, 0x2, 0x8d, 0x1000, 0x69f, 0x1ff, 0x9, 0x10, 0x3, 0x10000, 0xefff0000, 0xf, 0x1, 0x3, 0xffffa9b4, 0x1, 0x4, 0x5, 0x9, 0x4b5f, 0x6, 0x7fffffff, 0xffffffff, 0x1, 0x80000000, 0xb, 0x0, 0x88d, 0x1, 0x7, 0x8, 0x1, 0x89, 0x6, 0x818a, 0x10, 0x8, 0x10, 0xfffffffc, 0xfffff001, 0xa, 0xfffffff7, 0x8000005, 0x4, 0xffd, 0x9, 0x10, 0xfffffffd, 0x4, 0xc2, 0x400, 0x4, 0x0, 0x80000000, 0xd, 0x2, 0x1, 0x0, 0x20000003, 0xb6, 0x101, 0x401, 0x2, 0x7, 0xc, 0x6623258, 0xf2, 0x741, 0xfffffffc, 0x9, 0xffffa0a6, 0xc, 0x11, 0x2, 0x8, 0x9, 0x1, 0x7f, 0x98, 0x9, 0xb, 0x800, 0x4, 0x9, 0x5, 0x7, 0x7, 0x8, 0xfe, 0x7f, 0x9, 0x4, 0x6, 0x20080000, 0x2, 0x8000, 0x0, 0x0, 0x1000, 0xb, 0x0, 0x7, 0x8000000, 0x0, 0xfff, 0x8101, 0x4, 0x0, 0x9, 0xc, 0x5, 0xffe, 0x100, 0xffff, 0x1, 0x401, 0xf0, 0x0, 0xfffff53d, 0x9, 0x2, 0x6, 0x2, 0x4, 0x4b15, 0x10000, 0x1, 0x6, 0x1, 0xd, 0x8, 0x4, 0xfffffe01, 0x1, 0x6, 0x0, 0x2, 0x10001, 0x1, 0x7, 0xe4ce, 0x5, 0x9, 0xffffc487, 0x204, 0x10002, 0x1000, 0x7, 0x6, 0x6, 0x8, 0xfffffe00, 0x1, 0x1, 0x0, 0xe, 0x2, 0x2, 0x4, 0x0, 0xb66d, 0x3, 0x1000, 0x1eb4bce6, 0x10, 0x8, 0x1, 0x5, 0x1, 0x5, 0x9, 0x1000, 0x7, 0x62f2f805, 0x5, 0x3, 0xffffffff, 0x2, 0x7f, 0x6, 0xd, 0x40, 0x5, 0x2, 0xa, 0x5, 0x6, 0x80000000, 0x25, 0x8, 0x7, 0x7, 0x1, 0x5, 0x9, 0x6709, 0x10001, 0x0, 0x80, 0x8, 0x6, 0x0, 0xa95a, 0x0, 0x5, 0x2, 0x2, 0x4, 0xfff9, 0x80000001, 0x5, 0x1, 0x9, 0x0, 0xb7, 0x3, 0xff, 0x9, 0x0, 0x80, 0xfea5, 0x7fff, 0x7, 0x7, 0x7, 0x7485, 0x197, 0x8, 0x0, 0x5, 0xf, 0x3, 0xe, 0x8, 0x1000, 0x3, 0x7, 0x382d, 0x459, 0xcad, 0x9, 0x0, 0x2, 0x119, 0x6, 0x20000a4, 0xe0, 0xfffffffb, 0x5, 0xffffffff, 0x2, 0x4007, 0xa05a, 0x0, 0x0, 0x0, 0x35, 0x8, 0x1, 0x2, 0x30, 0xb, 0x101, 0x2, 0x9, 0x3, 0x7, 0x8, 0x8, 0x1, 0x2, 0x4, 0x15294b70, 0x3, 0x3, 0x2, 0x1, 0xf, 0x9, 0x1, 0x80000000, 0x9, 0x8001, 0x5, 0x800081, 0x1, 0x2, 0x3fd, 0x1df, 0x6, 0x6, 0xfffffffa, 0x81, 0x9, 0x2, 0x9, 0x1, 0x9, 0x7, 0x2c1, 0x9e95, 0x0, 0xfffffedd, 0x30c8, 0x2, 0x38a0, 0x7b, 0x0, 0x8, 0x4, 0x6, 0x9, 0x0, 0x8, 0x5, 0x8, 0x1ff, 0x7fff, 0x3, 0x9, 0x8, 0x2b, 0x200006, 0x4, 0x7, 0x2, 0x4, 0xbfb, 0x7, 0x405, 0x6, 0x4, 0x91, 0x9, 0x8, 0x3, 0x6ae574d2, 0x6, 0xfffffe00, 0x1000, 0x5, 0x92, 0xffffffff, 0x7fffffff, 0xd7, 0x8009, 0x905, 0xfffffff2, 0x6, 0xfffffb31, 0xb, 0x4, 0x7, 0x8, 0x1, 0x6, 0x1, 0xff, 0x103, 0x10000004, 0x3, 0x6, 0x80000001, 0x0, 0x100a, 0x7fffffff, 0x7fff, 0x2, 0xfffffff8, 0x2, 0x9af, 0x210001, 0x8, 0x4, 0x8, 0x6, 0x7742348d, 0x5, 0x5, 0x1f, 0x40, 0x0, 0x6, 0xffffffff, 0x7, 0x7, 0x8, 0x17f, 0x6, 0x2, 0x1, 0x6, 0x14827783, 0xb, 0xe, 0x5, 0x1, 0xfe7, 0xfffffffc, 0x8, 0x7ff, 0x3e9, 0x0, 0x3, 0x2000, 0xa, 0x3, 0x9, 0x80000001, 0x81, 0x8, 0x14, 0x8, 0x9, 0x80, 0xd, 0xf28c, 0x7, 0x6, 0x4, 0x7fffffff, 0xffff, 0x7fffffff, 0xc9, 0x2, 0xfffffffe, 0x924, 0x499, 0x100, 0x1, 0x5, 0xffff351b, 0x7, 0xfffffffb, 0x3, 0x9, 0x2, 0x7, 0x4, 0x4, 0x4, 0xff, 0xee, 0x2, 0x4, 0x8, 0x9f, 0x7, 0x3, 0x9, 0xc9, 0x1, 0x1, 0x1, 0xfffffff7, 0x0, 0x6, 0x5, 0x6, 0x400, 0x51, 0x7, 0xefb, 0x200000b8, 0x1, 0x5, 0xfffffff7, 0x7, 0x7, 0x4, 0x6330, 0xff, 0x6, 0xea, 0xbb2d, 0xfff, 0x7, 0x6, 0x0, 0x6, 0xffff, 0xfffffffa, 0x3, 0x0, 0x1, 0x6, 0xfffffc00, 0x5, 0x7, 0x64c822e3, 0x9, 0x6, 0x80, 0x6, 0xfff, 0x0, 0xa7b, 0x62cc, 0xfffffff7, 0x7, 0x40, 0xa, 0x9b, 0x3, 0xe, 0xf01, 0xffffffff, 0x3, 0x40, 0x3, 0x4, 0x5, 0x5, 0x7ff, 0x5, 0x8, 0x5, 0x3, 0x8, 0x2, 0x80000001, 0x54, 0x400, 0x1, 0xc, 0xa, 0x9, 0x10000c0, 0x3, 0x72, 0x80, 0x1000, 0x7, 0x800, 0x6, 0xd19, 0x3, 0x93c, 0x6, 0x20000000, 0x0, 0xe, 0x5, 0x3, 0xfffffffa, 0xa01, 0xf3, 0xffffff00, 0x8, 0xe, 0x3, 0x3ff, 0x5, 0x2, 0x6, 0xa3, 0xffff, 0xfffffff9, 0x9, 0x5, 0x62, 0x2, 0x1, 0xfffffffa, 0x2, 0x2, 0x9, 0x7, 0x0, 0x7, 0x8, 0x10000, 0x42, 0xaa1, 0x7, 0x2b, 0x6, 0x10, 0x5, 0x200, 0x9, 0x6, 0x3, 0x8, 0x10, 0x4, 0x6, 0x633, 0xf05, 0x0, 0x101, 0x200, 0x8, 0x7ff, 0x0, 0x40, 0x1, 0x10000, 0x9, 0x40, 0x9, 0x0, 0x7f, 0x8, 0x6, 0xe, 0x3, 0x80000001, 0x0, 0x8, 0x8, 0x7, 0xde, 0x6, 0x89, 0x0, 0x100, 0x1, 0x9, 0x6, 0x400, 0x1, 0x0, 0x200, 0xe9ab, 0x3, 0x8000, 0x13, 0x2, 0x2, 0x43, 0x3ff, 0x0, 0x7, 0xc, 0x401, 0x6, 0x7, 0xa, 0xf, 0xf39d, 0x71, 0xfff, 0x7, 0x8]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xd, 0x590, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x2000, 0x10000, 0x0, 0x6, 0x8, 0x80, 0x1, 0x0, 0x0, 0x0, 0x20000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000001c0)=ANY=[], 0xff2e) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) syz_read_part_table(0x105f, &(0x7f0000001080)="$eJzsz7FtwkAYBeDnS2z5lCJVRoiyQTZJnRKJEhZwQ0XBHLAJkzCGEbLNCEDxfc09vSed9Ienarqs/99+ktQkw72e3/exSUoOm4/fNttVkm4aalLLd5LyeWlvRb+fhvNx+aOrS+qbccpD+uy+Ms59+Ts94EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHnXAAAA//8SNwwv") socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x35, 0x0, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2710}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r4, 0x2b4b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) syz_usb_connect$uac2(0x4, 0xb5, &(0x7f0000002100)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1023, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa3, 0x3, 0x1, 0x8, 0x40, 0x5, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0x8, 0x1d, 0x8}, [@output_terminal={0xc, 0x24, 0x3, 0x1, 0x301, 0x1, 0x2, 0xff, 0x3, 0x9}, @selector_unit={0x8, 0x24, 0xb, 0x5, 0x3, "adebda"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x2, 0x8, 0x8, {0x8, 0x25, 0x1, 0x80, 0x3f, 0x9, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x8, 0x6, 0xa1, "57dedcb968d2635e"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x2, 0x6, 0xc, "4cb82a"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xe, 0x88, 0x80, 0x1, 0x7f}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x2, 0xd, {0x8, 0x25, 0x1, 0x2, 0xc, 0x2, 0x9}}}}}}}}]}}, &(0x7f0000002380)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x310, 0x8, 0x7, 0x0, 0x20, 0x6}, 0x42, &(0x7f0000002200)=ANY=[@ANYBLOB="050f42000503100b0b1001028900f202020005103000ff0014100a002201000000f0ff0000c0ff00000000000b10010c02000703070001"], 0x4, [{0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x827}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000002300)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000002340)=@lang_id={0x4, 0x3, 0x42d}}]}) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendto(r6, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r5, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x10, r1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000200), 0x4) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 3.656777242s ago: executing program 3 (id=5394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$kcm(0x2, 0x5, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r3) sendmsg$NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r10, 0x8, &(0x7f00000002c0)={[0x1]}) 3.252479645s ago: executing program 3 (id=5397): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0x3, 0x1000000000}, 0x1006a1, 0x5, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x20000c4, 0x0) socket$inet_udp(0x2, 0x2, 0x106) fchdir(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x1001, 0x0) mount$bind(0x0, &(0x7f0000000340)='./cgroup\x00', 0x0, 0x204860, 0x0) symlink(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00') mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0x8100, &(0x7f0000000140)={0x200002, 0x74, 0x20000}, 0x20) 3.251841265s ago: executing program 8 (id=5398): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c5", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 3.184304308s ago: executing program 8 (id=5400): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x6}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xb}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r4, 0x3}, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r2, 0x408) close(0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r5, 0x0, 0xd4, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x40, 0x3, 0x41, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x707, 0xb523ffbb6fc4047, 0xffffffff, 0x81}}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@remote, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6, 0x7, 0x8, 0x700, 0x5, 0x40800000, r6}) 2.358069304s ago: executing program 3 (id=5406): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) 2.301060716s ago: executing program 3 (id=5407): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x2}, 0x10026, 0x10003, 0xfffffff8, 0x2, 0x100008, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x8, 0xffffffffffffffff}, 0x102802, 0x8, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000dc3707993147c69ff15a383c669d3159ba60985a22c57dfb97f8176608ad5c88a0dbb931c486ae24863b322bc5e18cedbf1e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x8, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80d0}, 0x4800) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x48, 0x10ad9}}, 0x20}, 0x1, 0x8100, 0x0, 0x90}, 0x2800804c) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x10, r2, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x10010, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x1c0000}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x576, &(0x7f00000011c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r5, 0x0, 0x0, 0xd) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000480)=0x9, 0x4, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='syzkaller\x00'}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='illinois', 0x8) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) 1.549739311s ago: executing program 7 (id=5413): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = syz_open_procfs(0x0, &(0x7f00000193c0)='net/igmp6\x00') perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000e40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0xf4, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x54, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x80}, 0xedb8c5efdab7af2d) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$kcm(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f0000000080)={[{@bh}, {@inlinecrypt}, {@nombcache}]}, 0x1, 0x548, &(0x7f0000000480)="$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") mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x110, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0x8002a000}) socket$inet6(0xa, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c00)={0x1c8, r7, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x1a0, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x174, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x12c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4004840}, 0x2000000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r9, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f48", 0x19, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1.538676151s ago: executing program 7 (id=5414): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x9c, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.511543291s ago: executing program 7 (id=5415): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) 1.441925444s ago: executing program 7 (id=5416): ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="060000000400000010100000890000", @ANYRES32, @ANYBLOB="00000039915a4000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) 1.434472584s ago: executing program 3 (id=5417): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.070726795s ago: executing program 8 (id=5418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setfsgid(0xee00) r1 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.042722247s ago: executing program 8 (id=5419): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) 1.001245988s ago: executing program 6 (id=5420): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) io_setup(0x1, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="163280", 0x3}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) 1.000856528s ago: executing program 6 (id=5421): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e00600", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 957.753469ms ago: executing program 6 (id=5422): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'gretap0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x4, {{0xe, 0x4, 0x1, 0x9, 0x38, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @broadcast, {[@generic={0x86, 0xa, "b1ad97d717f91725"}, @end, @ssrr={0x89, 0x17, 0xb0, [@rand_addr=0x64010100, @rand_addr=0x64010102, @loopback, @broadcast, @local]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001200000425bd7000fedbdf2507000000", @ANYRES32, @ANYBLOB="450000000080000018002200d05eec379d2bfc1078b447c85e000000000000000000350076657468305f746f5f687372000000000a000200270e113cd9a0000008000a00", @ANYRES32=r3, @ANYBLOB="08001d0002000000"], 0x68}}, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) prctl$PR_GET_TAGGED_ADDR_CTRL(0x38) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000008, &(0x7f0000000980)=ANY=[], 0x4, 0x28a, &(0x7f00000012c0)="$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") sched_setscheduler(0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8923, &(0x7f0000000100)={'bond_slave_0\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r6, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$netlink(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="28000000130001000000eaff00000000180000000c000000000000000000000008001c00c9000000d457961cb2f7eae98e6bd6abe2d27f28add3093668ac6aa1201e113e039a3399bb9420606af4f44e3c41ed42d20f21af441baba69121790e3b8182ed764a629768d1bf20270ad2a812ef26b235742a9833a1a87f040698"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000001200000000d6ecc3ca009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x24842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) readlink(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=""/179, 0xb3) 928.24864ms ago: executing program 8 (id=5423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x40040) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)={0x14, 0x39, 0x9, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x15f1, 0x27e9, 0x4b, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in=@empty, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0x5, 0x1}, 0x70bd2e, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x3fffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x749}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r7, 0x4010744d, &(0x7f0000000180)) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x7f, 0x1, 0x5, 0x0, 0x8, 0xffffffffffffffff}) ptrace$PTRACE_SETSIGMASK(0x420b, r9, 0x8, &(0x7f00000002c0)={[0x1]}) 722.286917ms ago: executing program 2 (id=5424): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0x9}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) 650.58736ms ago: executing program 6 (id=5425): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xab402) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r3 = syz_open_dev$sg(&(0x7f0000000000), 0xcc4, 0x100000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getitimer(0x1, &(0x7f00000000c0)) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @broadcast, {[@noop]}}, {{0xa200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x3a) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e1e, 0x19fb, @empty, 0x75c41ba2}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x401, @loopback, 0x2}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f0000000000)=ANY=[], 0xffc9) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000080)) unshare(0x68040200) close_range(r0, 0xffffffffffffffff, 0x0) 572.752832ms ago: executing program 7 (id=5426): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x7, 0x4, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r2) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fedbdf251000000008000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x8080) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2, 0x13, 0x0, 0x9, 0x2, 0x0, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x880) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x112, 0x401, @l2={'eth', 0x3a, 'batadv0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000010) 572.388542ms ago: executing program 2 (id=5427): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r0, 0x0, 0x4048014) 564.703512ms ago: executing program 8 (id=5428): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0x5, 0x10101, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r0, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0x2, 0x4fd, &(0x7f0000000d80)="$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") shmat(0x0, &(0x7f0000f62000/0x1000)=nil, 0x7000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x88, 0x2, 0x6, 0x1f3ea855875a761f, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080}, 0x20000040) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000002000000000000000000", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000000001000040000"], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f00000050c0)={0x0, 0x0, &(0x7f0000005080)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000000614010026bd7000"], 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x40) socket$kcm(0x10, 0x5, 0x4) sendmsg$kcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) r5 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0x20044010) futex(&(0x7f00000000c0)=0x2, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000140)=0x1, 0x200) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r4) 497.863164ms ago: executing program 2 (id=5429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x6}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={0x0, 0xb}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000440)={r4, 0x3}, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r2, 0x408) close(0x4) 465.540286ms ago: executing program 3 (id=5430): openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000040), 0x200080, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c779a42413f3d", @ANYRESHEX=r6, @ANYBLOB=',\x00']) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x125) 429.417786ms ago: executing program 7 (id=5431): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='veno', 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 212.413534ms ago: executing program 6 (id=5432): r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(0x0, 0x8, 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuset.effective_mems\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f00000004c0)='freezer.self_freezing\x00', 0x275a, 0x0) close(0xffffffffffffffff) write$binfmt_script(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x200, 0x10000, 0xfffffffe, 0x0, 0x0, 0xaf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r4, &(0x7f0000000340)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000008003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcf151cdc280cc8a54440a6cdcdbd9d322fe7c9fd68775730d160036f4608a32660d8bcc0040a21ffc4fc84397ca3ce373e51e4194ddb57e481940c55a1c5667e00600", 0xd2}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x2, 0x2}, 0x10}, 0x94) r7 = socket(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000880)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f00000003c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000440)=ANY=[], 0x18, 0x64001}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xb, 0x0, &(0x7f0000000080)="05804ab38284d758e60000", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0xfffffffffffffec6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=5433): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0xa216, 0x7, 0x11000, 0x4, 0x9484, 0x2001, 0x402, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) socket$vsock_stream(0x28, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) io_setup(0x1, &(0x7f00000001c0)) r2 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40, 0x0) kernel console output (not intermixed with test programs): 0 [ 696.243601][ T310] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.391251][T20073] xt_hashlimit: size too large, truncated to 1048576 [ 696.585765][T20089] tipc: Enabling of bearer rejected, already enabled [ 696.654029][T20094] loop6: detected capacity change from 0 to 4096 [ 696.661184][T20094] EXT4-fs: test_dummy_encryption option not supported [ 696.742715][T20097] tipc: Enabling of bearer rejected, already enabled [ 696.772847][T20098] tipc: Enabling of bearer rejected, already enabled [ 697.132173][T20110] loop6: detected capacity change from 0 to 512 [ 697.145013][T20110] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 697.163665][T20110] EXT4-fs (loop6): group descriptors corrupted! [ 697.179896][T20112] xt_hashlimit: size too large, truncated to 1048576 [ 697.399929][T20121] netlink: zone id is out of range [ 697.407428][T20121] netlink: zone id is out of range [ 697.560859][T20126] loop5: detected capacity change from 0 to 128 [ 697.778254][T20127] xt_hashlimit: size too large, truncated to 1048576 [ 697.816289][T20129] loop7: detected capacity change from 0 to 512 [ 697.825731][T20129] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 697.857113][T20132] loop6: detected capacity change from 0 to 128 [ 697.880234][T20132] FAT-fs (loop6): Directory bread(block 524322) failed [ 697.882545][T20126] bio_check_eod: 17 callbacks suppressed [ 697.882588][T20126] syz.5.4777: attempt to access beyond end of device [ 697.882588][T20126] loop5: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 697.888997][T20132] FAT-fs (loop6): Directory bread(block 524323) failed [ 697.889126][T20132] FAT-fs (loop6): Directory bread(block 524324) failed [ 697.889291][T20132] FAT-fs (loop6): Directory bread(block 524325) failed [ 697.889439][T20132] FAT-fs (loop6): Directory bread(block 524326) failed [ 697.890011][T20132] FAT-fs (loop6): Directory bread(block 524327) failed [ 697.908706][T20126] syz.5.4777: attempt to access beyond end of device [ 697.908706][T20126] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 697.908775][T20126] buffer_io_error: 14 callbacks suppressed [ 697.908788][T20126] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 697.908939][T20126] syz.5.4777: attempt to access beyond end of device [ 697.908939][T20126] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 697.927305][T20132] FAT-fs (loop6): Directory bread(block 524328) failed [ 697.955267][T20126] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 697.965382][T20132] FAT-fs (loop6): Directory bread(block 524329) failed [ 698.013520][T20126] syz.5.4777: attempt to access beyond end of device [ 698.013520][T20126] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 698.030360][T20126] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 698.041342][T20126] syz.5.4777: attempt to access beyond end of device [ 698.041342][T20126] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 698.064964][T20126] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 698.074032][T20126] syz.5.4777: attempt to access beyond end of device [ 698.074032][T20126] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 698.087623][T20126] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 698.096169][T20126] syz.5.4777: attempt to access beyond end of device [ 698.096169][T20126] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 698.109629][T20126] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 698.128015][T20126] syz.5.4777: attempt to access beyond end of device [ 698.128015][T20126] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 698.159111][T20126] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 698.181695][T20126] syz.5.4777: attempt to access beyond end of device [ 698.181695][T20126] loop5: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 698.199616][T20126] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 698.243959][T20134] loop7: detected capacity change from 0 to 4096 [ 698.275554][T20134] EXT4-fs: test_dummy_encryption option not supported [ 698.346758][T20132] FAT-fs (loop6): FAT read failed (blocknr 128) [ 698.596109][T20155] loop6: detected capacity change from 0 to 512 [ 698.830848][T20181] FAULT_INJECTION: forcing a failure. [ 698.830848][T20181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 698.836984][T20176] loop7: detected capacity change from 0 to 512 [ 698.854155][T20181] CPU: 1 UID: 0 PID: 20181 Comm: syz.3.4795 Tainted: G W syzkaller #0 PREEMPT(full) [ 698.854196][T20181] Tainted: [W]=WARN [ 698.854206][T20181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.854220][T20181] Call Trace: [ 698.854228][T20181] [ 698.854270][T20181] __dump_stack+0x1d/0x30 [ 698.854296][T20181] dump_stack_lvl+0x95/0xd0 [ 698.854335][T20181] dump_stack+0x15/0x1b [ 698.854360][T20181] should_fail_ex+0x263/0x280 [ 698.854448][T20181] should_fail+0xb/0x20 [ 698.854478][T20181] should_fail_usercopy+0x1a/0x20 [ 698.854607][T20181] _copy_from_user+0x1c/0xb0 [ 698.854645][T20181] snd_seq_ioctl+0x11c/0x2d0 [ 698.854682][T20181] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 698.854785][T20181] __se_sys_ioctl+0xce/0x140 [ 698.854816][T20181] __x64_sys_ioctl+0x43/0x50 [ 698.854872][T20181] x64_sys_call+0x1563/0x3020 [ 698.854935][T20181] do_syscall_64+0x12c/0x3b0 [ 698.855005][T20181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.855027][T20181] RIP: 0033:0x7ff55d34ce59 [ 698.855044][T20181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.855129][T20181] RSP: 002b:00007ff55bd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 698.855150][T20181] RAX: ffffffffffffffda RBX: 00007ff55d5c5fa0 RCX: 00007ff55d34ce59 [ 698.855164][T20181] RDX: 0000200000000500 RSI: 0000000040505330 RDI: 0000000000000004 [ 698.855178][T20181] RBP: 00007ff55bd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 698.855191][T20181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 698.855294][T20181] R13: 00007ff55d5c6038 R14: 00007ff55d5c5fa0 R15: 00007fffc9137a68 [ 698.855314][T20181] [ 699.587371][ T28] audit: type=1400 audit(1779513731.808:2830): avc: denied { ioctl } for pid=20212 comm="syz.2.4807" path="socket:[64680]" dev="sockfs" ino=64680 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 699.719970][T20228] loop6: detected capacity change from 0 to 4096 [ 699.726763][T20228] EXT4-fs: test_dummy_encryption option not supported [ 699.784945][T20230] tipc: Enabling of bearer rejected, already enabled [ 700.206433][T20245] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 700.207856][T20249] loop5: detected capacity change from 0 to 4096 [ 700.219770][T20249] EXT4-fs: Ignoring removed bh option [ 700.228189][T20249] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 700.240376][T20249] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.316747][T14833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 700.391542][T20258] loop5: detected capacity change from 0 to 512 [ 700.400094][T20258] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 700.569011][T20266] tipc: Enabling of bearer rejected, already enabled [ 700.613712][T20268] loop7: detected capacity change from 0 to 4096 [ 700.620780][T20268] EXT4-fs: test_dummy_encryption option not supported [ 700.956532][T20278] FAULT_INJECTION: forcing a failure. [ 700.956532][T20278] name failslab, interval 1, probability 0, space 0, times 0 [ 700.969343][T20278] CPU: 1 UID: 0 PID: 20278 Comm: syz.2.4833 Tainted: G W syzkaller #0 PREEMPT(full) [ 700.969383][T20278] Tainted: [W]=WARN [ 700.969390][T20278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 700.969402][T20278] Call Trace: [ 700.969455][T20278] [ 700.969465][T20278] __dump_stack+0x1d/0x30 [ 700.969554][T20278] dump_stack_lvl+0x95/0xd0 [ 700.969577][T20278] dump_stack+0x15/0x1b [ 700.969597][T20278] should_fail_ex+0x263/0x280 [ 700.969699][T20278] ? alloc_pipe_info+0xad/0x340 [ 700.969730][T20278] should_failslab+0x8c/0xb0 [ 700.969763][T20278] __kmalloc_cache_noprof+0x5f/0x400 [ 700.969874][T20278] alloc_pipe_info+0xad/0x340 [ 700.969956][T20278] splice_direct_to_actor+0x591/0x670 [ 700.969991][T20278] ? __file_has_perm+0x3d9/0x430 [ 700.970081][T20278] ? __pfx_direct_splice_actor+0x10/0x10 [ 700.970132][T20278] ? selinux_file_permission+0x2ef/0x320 [ 700.970165][T20278] do_splice_direct+0x119/0x1a0 [ 700.970244][T20278] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 700.970268][T20278] do_sendfile+0x382/0x650 [ 700.970366][T20278] __x64_sys_sendfile64+0x105/0x150 [ 700.970387][T20278] x64_sys_call+0x2dc4/0x3020 [ 700.970452][T20278] do_syscall_64+0x12c/0x3b0 [ 700.970487][T20278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.970547][T20278] RIP: 0033:0x7fa6d162ce59 [ 700.970563][T20278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.970582][T20278] RSP: 002b:00007fa6d0045028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 700.970602][T20278] RAX: ffffffffffffffda RBX: 00007fa6d18a6180 RCX: 00007fa6d162ce59 [ 700.970617][T20278] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000006 [ 700.970629][T20278] RBP: 00007fa6d0045090 R08: 0000000000000000 R09: 0000000000000000 [ 700.970649][T20278] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001 [ 700.970662][T20278] R13: 00007fa6d18a6218 R14: 00007fa6d18a6180 R15: 00007fff89967ea8 [ 700.970682][T20278] [ 701.282357][T20281] __nla_validate_parse: 156 callbacks suppressed [ 701.282574][T20281] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4834'. [ 701.490345][T20288] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4837'. [ 701.501340][T20288] loop7: detected capacity change from 0 to 128 [ 701.570808][T20288] syz.7.4837: attempt to access beyond end of device [ 701.570808][T20288] loop7: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 701.584630][T20288] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 701.593354][T20288] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 701.847924][T20288] xt_hashlimit: size too large, truncated to 1048576 [ 702.172859][T20299] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4841'. [ 702.233402][T20303] netlink: 'syz.5.4843': attribute type 1 has an invalid length. [ 702.301113][T20303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.309493][T20304] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 702.319286][T20304] bond0: entered allmulticast mode [ 702.333175][T20305] bond0: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 702.348819][T20303] bond0: (slave ip6gretap2): Enslaving as an active interface with an up link [ 702.593386][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4845'. [ 702.631601][T20312] tipc: Enabling of bearer rejected, already enabled [ 702.682781][T20319] loop7: detected capacity change from 0 to 4096 [ 702.703831][T20319] EXT4-fs: test_dummy_encryption option not supported [ 702.722911][T20322] loop5: detected capacity change from 0 to 512 [ 702.735269][T20322] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 702.772330][T20322] EXT4-fs (loop5): group descriptors corrupted! [ 703.044513][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4851'. [ 703.068033][T20328] tipc: Enabling of bearer rejected, already enabled [ 703.188383][T20337] netlink: 132 bytes leftover after parsing attributes in process `syz.7.4855'. [ 703.265004][T20344] loop6: detected capacity change from 0 to 128 [ 703.302903][T20346] loop7: detected capacity change from 0 to 512 [ 703.310322][T20346] EXT4-fs: Ignoring removed bh option [ 703.316258][T20346] EXT4-fs: inline encryption not supported [ 703.331001][T20346] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 703.461734][T20344] bio_check_eod: 8 callbacks suppressed [ 703.461772][T20344] syz.6.4858: attempt to access beyond end of device [ 703.461772][T20344] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 703.481257][T20344] syz.6.4858: attempt to access beyond end of device [ 703.481257][T20344] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 703.494741][T20344] buffer_io_error: 6 callbacks suppressed [ 703.494754][T20344] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 703.509296][T20344] syz.6.4858: attempt to access beyond end of device [ 703.509296][T20344] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 703.522840][T20344] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 703.592646][T20346] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 703.621815][T20344] syz.6.4858: attempt to access beyond end of device [ 703.621815][T20344] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 703.724623][T20346] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4859: bg 0: block 248: padding at end of block bitmap is not set [ 703.811270][T20350] xt_hashlimit: size too large, truncated to 1048576 [ 703.844544][T20346] loop7: lost filesystem error report for type 5 error -117 [ 703.847670][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 703.861481][ C1] EXT4-fs (loop7): last error at time 1779513736: ext4_validate_block_bitmap:441 [ 703.878559][T20346] Quota error (device loop7): write_blk: dquota write failed [ 703.892622][T20344] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 704.098644][T20346] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 704.159859][T20346] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4859: Failed to acquire dquot type 1 [ 704.225350][T20344] syz.6.4858: attempt to access beyond end of device [ 704.225350][T20344] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 704.244329][T20346] loop7: lost filesystem error report for type 5 error -28 [ 704.260705][T20346] EXT4-fs (loop7): 1 truncate cleaned up [ 704.273988][T20346] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 704.328659][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4863'. [ 704.337594][T20361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4863'. [ 704.360492][T20344] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 704.398343][T20344] syz.6.4858: attempt to access beyond end of device [ 704.398343][T20344] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 704.489237][T20344] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 704.576486][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 704.622227][T20344] syz.6.4858: attempt to access beyond end of device [ 704.622227][T20344] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 704.673777][T20344] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 704.752000][T20344] syz.6.4858: attempt to access beyond end of device [ 704.752000][T20344] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 704.802124][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4867'. [ 704.812970][T20372] tipc: Enabling of bearer rejected, already enabled [ 704.836335][T20344] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 704.846985][T20344] syz.6.4858: attempt to access beyond end of device [ 704.846985][T20344] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 704.860420][T20344] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 704.957061][T20374] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4868'. [ 705.050583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 705.222356][T20386] loop5: detected capacity change from 0 to 128 [ 705.273861][T20384] loop7: detected capacity change from 0 to 512 [ 705.358275][T20386] syz.5.4872: attempt to access beyond end of device [ 705.358275][T20386] loop5: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 705.468906][T20400] xt_hashlimit: size too large, truncated to 1048576 [ 705.482719][T20386] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 705.517280][T20386] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 705.634086][T20417] tipc: Enabling of bearer rejected, already enabled [ 705.739829][T20422] loop7: detected capacity change from 0 to 128 [ 705.773119][T20421] loop5: detected capacity change from 0 to 4096 [ 705.780141][T20421] EXT4-fs: test_dummy_encryption option not supported [ 705.839586][T20422] xt_hashlimit: size too large, truncated to 1048576 [ 706.020053][T20429] loop6: detected capacity change from 0 to 512 [ 706.046051][T20429] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 706.218592][T20434] loop7: detected capacity change from 0 to 512 [ 706.269062][ T28] audit: type=1400 audit(1779513738.488:2831): avc: denied { write } for pid=20437 comm="syz.5.4889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 706.316666][T20434] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 706.372761][T20448] FAULT_INJECTION: forcing a failure. [ 706.372761][T20448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 706.413024][T20448] CPU: 1 UID: 0 PID: 20448 Comm: syz.6.4893 Tainted: G W syzkaller #0 PREEMPT(full) [ 706.413066][T20448] Tainted: [W]=WARN [ 706.413076][T20448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.413093][T20448] Call Trace: [ 706.413101][T20448] [ 706.413109][T20448] __dump_stack+0x1d/0x30 [ 706.413158][T20448] dump_stack_lvl+0x95/0xd0 [ 706.413185][T20448] dump_stack+0x15/0x1b [ 706.413211][T20448] should_fail_ex+0x263/0x280 [ 706.413305][T20448] should_fail+0xb/0x20 [ 706.413337][T20448] should_fail_usercopy+0x1a/0x20 [ 706.413371][T20448] _copy_to_user+0x20/0xa0 [ 706.413410][T20448] simple_read_from_buffer+0xb5/0x130 [ 706.413470][T20448] proc_fail_nth_read+0x10e/0x150 [ 706.413508][T20448] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 706.413595][T20448] vfs_read+0x1ab/0x7f0 [ 706.413705][T20448] ? put_event+0x61/0x80 [ 706.413743][T20448] ? __rcu_read_unlock+0x4e/0x70 [ 706.413770][T20448] ? __fget_files+0x184/0x1c0 [ 706.413793][T20448] ? mutex_lock+0x57/0x90 [ 706.413898][T20448] ksys_read+0xdc/0x1a0 [ 706.414006][T20448] __x64_sys_read+0x40/0x50 [ 706.414041][T20448] x64_sys_call+0x2886/0x3020 [ 706.414141][T20448] do_syscall_64+0x12c/0x3b0 [ 706.414182][T20448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.414210][T20448] RIP: 0033:0x7f98899bd68e [ 706.414230][T20448] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 706.414263][T20448] RSP: 002b:00007f988844efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 706.414305][T20448] RAX: ffffffffffffffda RBX: 00007f988844f6c0 RCX: 00007f98899bd68e [ 706.414324][T20448] RDX: 000000000000000f RSI: 00007f988844f0a0 RDI: 0000000000000008 [ 706.414341][T20448] RBP: 00007f988844f090 R08: 0000000000000000 R09: 0000000000000000 [ 706.414357][T20448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.414373][T20448] R13: 00007f9889c76038 R14: 00007f9889c75fa0 R15: 00007ffe12f6f108 [ 706.414399][T20448] [ 706.429066][T20453] FAULT_INJECTION: forcing a failure. [ 706.429066][T20453] name failslab, interval 1, probability 0, space 0, times 0 [ 706.558838][T20434] EXT4-fs (loop7): 1 truncate cleaned up [ 706.565639][ T28] audit: type=1326 audit(1779513738.788:2832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20449 comm="syz.5.4894" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a917ce59 code=0x7fc00000 [ 706.581126][T20434] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.667967][T20453] CPU: 0 UID: 0 PID: 20453 Comm: syz.2.4895 Tainted: G W syzkaller #0 PREEMPT(full) [ 706.668172][T20453] Tainted: [W]=WARN [ 706.668188][T20453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.668223][T20453] Call Trace: [ 706.668246][T20453] [ 706.668271][T20453] __dump_stack+0x1d/0x30 [ 706.668354][T20453] dump_stack_lvl+0x95/0xd0 [ 706.668468][T20453] dump_stack+0x15/0x1b [ 706.668530][T20453] should_fail_ex+0x263/0x280 [ 706.668624][T20453] should_failslab+0x8c/0xb0 [ 706.668715][T20453] __kmalloc_noprof+0xb8/0x4d0 [ 706.668826][T20453] ? bpf_test_init+0x86/0x130 [ 706.668960][T20453] bpf_test_init+0x86/0x130 [ 706.669085][T20453] bpf_prog_test_run_skb+0x2a9/0x11c0 [ 706.669179][T20453] ? kstrtoull+0x111/0x140 [ 706.669277][T20453] ? __rcu_read_unlock+0x4e/0x70 [ 706.669363][T20453] ? __fget_files+0x184/0x1c0 [ 706.669490][T20453] ? __rcu_read_unlock+0x4e/0x70 [ 706.669556][T20453] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 706.669737][T20453] bpf_prog_test_run+0x204/0x340 [ 706.669860][T20453] __sys_bpf+0x52e/0x7e0 [ 706.669954][T20453] __x64_sys_bpf+0x41/0x50 [ 706.670027][T20453] x64_sys_call+0x10cb/0x3020 [ 706.670107][T20453] do_syscall_64+0x12c/0x3b0 [ 706.670252][T20453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.670318][T20453] RIP: 0033:0x7fa6d162ce59 [ 706.670378][T20453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.670559][T20453] RSP: 002b:00007fa6d0087028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 706.670642][T20453] RAX: ffffffffffffffda RBX: 00007fa6d18a5fa0 RCX: 00007fa6d162ce59 [ 706.670740][T20453] RDX: 0000000000000048 RSI: 0000200000000780 RDI: 000000000000000a [ 706.670776][T20453] RBP: 00007fa6d0087090 R08: 0000000000000000 R09: 0000000000000000 [ 706.670817][T20453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 706.670858][T20453] R13: 00007fa6d18a6038 R14: 00007fa6d18a5fa0 R15: 00007fff89967ea8 [ 706.670960][T20453] [ 706.886959][T20461] __nla_validate_parse: 8 callbacks suppressed [ 706.887040][T20461] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4897'. [ 706.961475][T20463] ip6_vti0 speed is unknown, defaulting to 1000 [ 706.975080][ T28] audit: type=1400 audit(1779513739.198:2833): avc: denied { write } for pid=20433 comm="syz.7.4887" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 707.032484][ T28] audit: type=1400 audit(1779513739.198:2834): avc: denied { write } for pid=20433 comm="syz.7.4887" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 707.060253][T20461] 9p: Bad value for 'wfdno' [ 707.069891][ T28] audit: type=1400 audit(1779513739.198:2835): avc: denied { rename } for pid=20433 comm="syz.7.4887" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 707.177479][ T28] audit: type=1400 audit(1779513739.398:2836): avc: denied { append } for pid=20458 comm="syz.2.4897" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 707.292648][T20463] loop5: detected capacity change from 0 to 8192 [ 707.323057][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 707.353580][T20463] loop5: p1 < > p2 p4 < p5 > [ 707.366975][T20463] loop5: partition table partially beyond EOD, truncated [ 707.380078][T20463] loop5: p1 start 134217728 is beyond EOD, truncated [ 707.386863][T20463] loop5: p2 size 591360 extends beyond EOD, truncated [ 707.395970][T20463] loop5: p5 size 591360 extends beyond EOD, truncated [ 707.420190][T20469] loop7: detected capacity change from 0 to 4096 [ 707.432635][T20469] EXT4-fs: test_dummy_encryption option not supported [ 707.475368][T20471] siw: device registration error -23 [ 707.482378][T20471] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4900'. [ 708.188396][T20506] FAULT_INJECTION: forcing a failure. [ 708.188396][T20506] name failslab, interval 1, probability 0, space 0, times 0 [ 708.203016][T20506] CPU: 1 UID: 0 PID: 20506 Comm: syz.7.4913 Tainted: G W syzkaller #0 PREEMPT(full) [ 708.203052][T20506] Tainted: [W]=WARN [ 708.203062][T20506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.203078][T20506] Call Trace: [ 708.203086][T20506] [ 708.203120][T20506] __dump_stack+0x1d/0x30 [ 708.203146][T20506] dump_stack_lvl+0x95/0xd0 [ 708.203167][T20506] dump_stack+0x15/0x1b [ 708.203188][T20506] should_fail_ex+0x263/0x280 [ 708.203231][T20506] should_failslab+0x8c/0xb0 [ 708.203271][T20506] kmem_cache_alloc_noprof+0x66/0x3f0 [ 708.203364][T20506] ? ep_insert+0x138/0xd10 [ 708.203446][T20506] ep_insert+0x138/0xd10 [ 708.203509][T20506] ? proc_fail_nth_write+0x13b/0x160 [ 708.203587][T20506] ? __rcu_read_unlock+0x4e/0x70 [ 708.203613][T20506] do_epoll_ctl+0x686/0x8a0 [ 708.203748][T20506] __x64_sys_epoll_ctl+0xcb/0x100 [ 708.203784][T20506] x64_sys_call+0x2a8b/0x3020 [ 708.203808][T20506] do_syscall_64+0x12c/0x3b0 [ 708.203846][T20506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.203900][T20506] RIP: 0033:0x7f2b556bce59 [ 708.203917][T20506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.203939][T20506] RSP: 002b:00007f2b54117028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 708.203962][T20506] RAX: ffffffffffffffda RBX: 00007f2b55935fa0 RCX: 00007f2b556bce59 [ 708.204051][T20506] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 708.204063][T20506] RBP: 00007f2b54117090 R08: 0000000000000000 R09: 0000000000000000 [ 708.204076][T20506] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 708.204161][T20506] R13: 00007f2b55936038 R14: 00007f2b55935fa0 R15: 00007ffd2a865cd8 [ 708.204188][T20506] [ 708.553810][ T28] audit: type=1326 audit(1779513740.778:2837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20522 comm="syz.2.4917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa6d162ce59 code=0x0 [ 708.787822][ T28] audit: type=1400 audit(1779513741.008:2838): avc: denied { mounton } for pid=20522 comm="syz.2.4917" path="/proc/1273/cgroup" dev="proc" ino=66429 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 709.055696][T20532] FAULT_INJECTION: forcing a failure. [ 709.055696][T20532] name failslab, interval 1, probability 0, space 0, times 0 [ 709.071038][T20532] CPU: 1 UID: 0 PID: 20532 Comm: syz.3.4919 Tainted: G W syzkaller #0 PREEMPT(full) [ 709.071121][T20532] Tainted: [W]=WARN [ 709.071130][T20532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 709.071147][T20532] Call Trace: [ 709.071155][T20532] [ 709.071165][T20532] __dump_stack+0x1d/0x30 [ 709.071194][T20532] dump_stack_lvl+0x95/0xd0 [ 709.071244][T20532] dump_stack+0x15/0x1b [ 709.071262][T20532] should_fail_ex+0x263/0x280 [ 709.071383][T20532] ? sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 709.071416][T20532] should_failslab+0x8c/0xb0 [ 709.071458][T20532] __kmalloc_cache_noprof+0x5f/0x400 [ 709.071502][T20532] ? sctp_stream_interleave_init+0x47/0x60 [ 709.071533][T20532] sctp_auth_asoc_copy_shkeys+0xfa/0x330 [ 709.071583][T20532] sctp_association_new+0xde5/0x1190 [ 709.071619][T20532] sctp_connect_new_asoc+0x1a8/0x3a0 [ 709.071648][T20532] sctp_sendmsg+0x100f/0x1d60 [ 709.071705][T20532] ? __pfx_sctp_sendmsg+0x10/0x10 [ 709.071725][T20532] ? __pfx_inet_sendmsg+0x10/0x10 [ 709.071840][T20532] inet_sendmsg+0xc5/0xd0 [ 709.071878][T20532] __sys_sendto+0x3db/0x490 [ 709.071994][T20532] __x64_sys_sendto+0x76/0x90 [ 709.072024][T20532] x64_sys_call+0x2d35/0x3020 [ 709.072055][T20532] do_syscall_64+0x12c/0x3b0 [ 709.072114][T20532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.072142][T20532] RIP: 0033:0x7ff55d34ce59 [ 709.072159][T20532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 709.072177][T20532] RSP: 002b:00007ff55bd9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 709.072215][T20532] RAX: ffffffffffffffda RBX: 00007ff55d5c5fa0 RCX: 00007ff55d34ce59 [ 709.072228][T20532] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 709.072241][T20532] RBP: 00007ff55bd9f090 R08: 000020000005ffe4 R09: 000000000000001c [ 709.072254][T20532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.072266][T20532] R13: 00007ff55d5c6038 R14: 00007ff55d5c5fa0 R15: 00007fffc9137a68 [ 709.072305][T20532] [ 709.634643][T20549] loop6: detected capacity change from 0 to 4096 [ 709.640155][T20544] loop7: detected capacity change from 0 to 512 [ 709.645716][T20549] EXT4-fs: test_dummy_encryption option not supported [ 709.648404][T20544] EXT4-fs: Ignoring removed bh option [ 709.659801][T20544] EXT4-fs: inline encryption not supported [ 709.675913][T20544] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 709.751140][T20544] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 709.765872][T20544] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4924: bg 0: block 248: padding at end of block bitmap is not set [ 709.780146][T20544] loop7: lost filesystem error report for type 5 error -117 [ 709.780425][T20544] __quota_error: 1 callbacks suppressed [ 709.780441][T20544] Quota error (device loop7): write_blk: dquota write failed [ 709.800791][T20544] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 709.810654][T20544] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4924: Failed to acquire dquot type 1 [ 709.821931][T20544] loop7: lost filesystem error report for type 5 error -28 [ 709.822610][T20544] EXT4-fs (loop7): 1 truncate cleaned up [ 709.836110][T20544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 709.933723][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 709.990900][T20560] loop6: detected capacity change from 0 to 512 [ 710.249638][T20571] rdma_rxe: rxe_newlink: failed to add ip6_vti0 [ 710.259203][ T28] audit: type=1400 audit(1779513742.488:2840): avc: denied { read write } for pid=12546 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.283572][ T28] audit: type=1400 audit(1779513742.488:2841): avc: denied { read } for pid=20542 comm="syz.3.4925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 710.303220][ T28] audit: type=1400 audit(1779513742.488:2842): avc: denied { open } for pid=12546 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.337759][ T28] audit: type=1400 audit(1779513742.498:2843): avc: denied { ioctl } for pid=12546 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 710.413238][ T28] audit: type=1400 audit(1779513742.558:2844): avc: denied { execmem } for pid=20573 comm="syz.6.4934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 710.448299][ T28] audit: type=1400 audit(1779513742.678:2845): avc: denied { create } for pid=20575 comm="syz.2.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 710.470061][ T28] audit: type=1400 audit(1779513742.698:2846): avc: denied { open } for pid=20575 comm="syz.2.4935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 710.494727][ T28] audit: type=1400 audit(1779513742.698:2847): avc: denied { perfmon } for pid=20575 comm="syz.2.4935" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 710.563363][T20583] loop5: detected capacity change from 0 to 128 [ 710.592724][T20583] bio_check_eod: 17 callbacks suppressed [ 710.592738][T20583] syz.5.4938: attempt to access beyond end of device [ 710.592738][T20583] loop5: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 710.620530][T20583] syz.5.4938: attempt to access beyond end of device [ 710.620530][T20583] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 710.637915][T20583] buffer_io_error: 14 callbacks suppressed [ 710.638051][T20583] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 710.659848][T20584] xt_hashlimit: size too large, truncated to 1048576 [ 710.663576][T20583] syz.5.4938: attempt to access beyond end of device [ 710.663576][T20583] loop5: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 710.683457][T20583] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 710.694288][T20583] syz.5.4938: attempt to access beyond end of device [ 710.694288][T20583] loop5: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 710.711619][T20583] Buffer I/O error on dev loop5, logical block 158, lost async page write [ 710.721518][T20583] syz.5.4938: attempt to access beyond end of device [ 710.721518][T20583] loop5: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 710.736135][T20583] Buffer I/O error on dev loop5, logical block 159, lost async page write [ 710.745108][T20583] syz.5.4938: attempt to access beyond end of device [ 710.745108][T20583] loop5: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 710.759401][T20583] Buffer I/O error on dev loop5, logical block 160, lost async page write [ 710.771009][T20583] syz.5.4938: attempt to access beyond end of device [ 710.771009][T20583] loop5: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 710.786551][T20583] Buffer I/O error on dev loop5, logical block 161, lost async page write [ 710.799391][T20583] syz.5.4938: attempt to access beyond end of device [ 710.799391][T20583] loop5: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 710.823145][T20583] Buffer I/O error on dev loop5, logical block 150, lost async page write [ 710.833503][T20583] syz.5.4938: attempt to access beyond end of device [ 710.833503][T20583] loop5: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 710.901899][T20583] Buffer I/O error on dev loop5, logical block 151, lost async page write [ 711.124243][T20597] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4943'. [ 711.390693][T20614] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4947'. [ 711.493475][T20614] tipc: Enabling of bearer rejected, already enabled [ 711.603889][T20630] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4952'. [ 711.630865][T20628] loop6: detected capacity change from 0 to 512 [ 711.639127][T20628] EXT4-fs: Ignoring removed bh option [ 711.644645][T20630] netlink: 'syz.7.4952': attribute type 1 has an invalid length. [ 711.655866][T20628] EXT4-fs: inline encryption not supported [ 711.663533][T20630] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4952'. [ 711.675297][T20628] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 711.703724][T20635] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4955'. [ 711.711590][T20634] FAULT_INJECTION: forcing a failure. [ 711.711590][T20634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.727007][T20634] CPU: 1 UID: 0 PID: 20634 Comm: syz.5.4954 Tainted: G W syzkaller #0 PREEMPT(full) [ 711.727055][T20634] Tainted: [W]=WARN [ 711.727064][T20634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.727077][T20634] Call Trace: [ 711.727084][T20634] [ 711.727093][T20634] __dump_stack+0x1d/0x30 [ 711.727122][T20634] dump_stack_lvl+0x95/0xd0 [ 711.727190][T20634] dump_stack+0x15/0x1b [ 711.727212][T20634] should_fail_ex+0x263/0x280 [ 711.727250][T20634] should_fail+0xb/0x20 [ 711.727287][T20634] should_fail_usercopy+0x1a/0x20 [ 711.727472][T20634] _copy_from_iter+0xcf/0xea0 [ 711.727501][T20634] ? __rcu_read_unlock+0x4e/0x70 [ 711.727600][T20634] ? avc_has_perm_noaudit+0xab/0x130 [ 711.727707][T20634] copy_page_from_iter+0x161/0x1f0 [ 711.727800][T20634] ? anon_pipe_write+0x31/0xb20 [ 711.727833][T20634] anon_pipe_write+0x53c/0xb20 [ 711.727874][T20634] ? anon_pipe_write+0x31/0xb20 [ 711.727985][T20634] ? __pfx_anon_pipe_write+0x10/0x10 [ 711.728058][T20634] vfs_write+0x5a6/0x9f0 [ 711.728100][T20634] ksys_write+0xdc/0x1a0 [ 711.728184][T20634] __x64_sys_write+0x40/0x50 [ 711.728272][T20634] x64_sys_call+0x27e1/0x3020 [ 711.728299][T20634] do_syscall_64+0x12c/0x3b0 [ 711.728331][T20634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.728412][T20634] RIP: 0033:0x7f72a913d68e [ 711.728432][T20634] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 711.728450][T20634] RSP: 002b:00007f72a7bcece8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 711.728473][T20634] RAX: ffffffffffffffda RBX: 00007f72a7bcf6c0 RCX: 00007f72a913d68e [ 711.728537][T20634] RDX: 0000000000000029 RSI: 00007f72a7bcee90 RDI: 0000000000000002 [ 711.728550][T20634] RBP: 00007f72a7bcee90 R08: 0000000000000000 R09: 0000000000000000 [ 711.728566][T20634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000029 [ 711.728609][T20634] R13: 00007f72a93cd7a0 R14: 00007f72a93c44a0 R15: 0000000000000001 [ 711.728633][T20634] [ 711.946174][T20628] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 711.960831][T20628] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4953: bg 0: block 248: padding at end of block bitmap is not set [ 711.978670][T20628] loop6: lost filesystem error report for type 5 error -117 [ 711.993889][T20628] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4953: Failed to acquire dquot type 1 [ 712.001776][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 712.001816][ C0] EXT4-fs (loop6): last error at time 1779513744: ext4_validate_block_bitmap:441 [ 712.015582][T20644] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4957'. [ 712.066117][T20628] loop6: lost filesystem error report for type 5 error -28 [ 712.099215][T20653] loop7: detected capacity change from 0 to 512 [ 712.103363][T20628] EXT4-fs (loop6): 1 truncate cleaned up [ 712.124076][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4961'. [ 712.135476][T20653] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 712.143594][T20653] EXT4-fs (loop7): orphan cleanup on readonly fs [ 712.150247][T20653] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4960: Failed to acquire dquot type 1 [ 712.167801][T20653] loop7: lost filesystem error report for type 5 error -5 [ 712.168320][T20653] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4960: bg 0: block 40: padding at end of block bitmap is not set [ 712.169550][T20628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 712.175540][T20653] loop7: lost filesystem error report for type 5 error -117 [ 712.206373][T20653] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 712.206403][T20653] loop7: lost filesystem error report for type 5 error -117 [ 712.206758][T20653] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.4960: data will be lost [ 712.206912][T20653] EXT4-fs (loop7): 1 truncate cleaned up [ 712.221811][ C1] EXT4-fs (loop7): error count since last fsck: 3 [ 712.254005][ C1] EXT4-fs (loop7): initial error at time 1779513744: ext4_acquire_dquot:7034 [ 712.262825][ C1] EXT4-fs (loop7): last error at time 1779513744: ext4_mb_clear_bb:6679 [ 712.271810][T20653] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 712.297333][T20653] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4960'. [ 712.311889][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4963'. [ 712.332067][T20662] tipc: Enabling of bearer rejected, already enabled [ 712.365979][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 712.389931][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.469225][T20676] loop6: detected capacity change from 0 to 4096 [ 712.486783][T20674] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4966'. [ 712.493131][T20676] EXT4-fs: test_dummy_encryption option not supported [ 712.509368][T20682] loop7: detected capacity change from 0 to 512 [ 712.523483][T20682] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 712.539997][T20682] EXT4-fs (loop7): orphan cleanup on readonly fs [ 712.555453][T20682] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.4967: Failed to acquire dquot type 1 [ 712.604845][T20682] loop7: lost filesystem error report for type 5 error -5 [ 712.607668][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 712.621353][ C0] EXT4-fs (loop7): initial error at time 1779513744: ext4_acquire_dquot:7034 [ 712.630190][ C0] EXT4-fs (loop7): last error at time 1779513744: ext4_acquire_dquot:7034 [ 712.666508][T20682] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.4967: bg 0: block 40: padding at end of block bitmap is not set [ 712.680737][T20682] loop7: lost filesystem error report for type 5 error -117 [ 712.693371][T20690] loop5: detected capacity change from 0 to 512 [ 712.707426][T20682] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 712.761065][T20682] loop7: lost filesystem error report for type 5 error -117 [ 712.761327][T20682] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.4967: data will be lost [ 712.795166][T20682] EXT4-fs (loop7): 1 truncate cleaned up [ 712.805266][T20682] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 712.825686][T20682] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4967'. [ 712.855179][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4976'. [ 712.884516][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.036398][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4978'. [ 713.114879][T20714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4979'. [ 713.212665][T20718] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4981'. [ 713.581991][T20733] loop6: detected capacity change from 0 to 512 [ 713.593134][T20733] EXT4-fs: Ignoring removed bh option [ 713.627627][T20733] EXT4-fs: inline encryption not supported [ 713.642217][T20733] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 713.674421][T20733] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 713.690187][T20733] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4988: bg 0: block 248: padding at end of block bitmap is not set [ 713.704854][T20733] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.4988: Failed to acquire dquot type 1 [ 713.716213][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 713.716239][ C1] EXT4-fs (loop6): last error at time 1779513745: ext4_validate_block_bitmap:441 [ 713.732984][T20733] EXT4-fs (loop6): 1 truncate cleaned up [ 713.739134][T20733] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 713.862612][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 714.418399][T20772] netlink: 'syz.3.5001': attribute type 3 has an invalid length. [ 714.426279][T20772] netlink: 'syz.3.5001': attribute type 3 has an invalid length. [ 714.862699][T20806] netlink: 'syz.7.5013': attribute type 3 has an invalid length. [ 715.024441][ T28] kauditd_printk_skb: 86 callbacks suppressed [ 715.024460][ T28] audit: type=1400 audit(1779513747.248:2926): avc: denied { shutdown } for pid=20813 comm="syz.2.5017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 715.052992][T20814] netlink: 'syz.2.5017': attribute type 5 has an invalid length. [ 715.347909][T20823] tipc: Enabling of bearer rejected, already enabled [ 715.614297][T20828] tipc: Enabling of bearer rejected, already enabled [ 715.647311][T20833] loop6: detected capacity change from 0 to 128 [ 715.777763][T20836] xt_hashlimit: size too large, truncated to 1048576 [ 716.043886][T20839] serio: Serial port ptm0 [ 716.095320][T20845] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 716.102646][T20845] IPv6: NLM_F_CREATE should be set when creating new route [ 716.164535][T20833] syz.6.5025: attempt to access beyond end of device [ 716.164535][T20833] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 716.183500][T20840] xt_hashlimit: size too large, truncated to 1048576 [ 716.211532][T20833] syz.6.5025: attempt to access beyond end of device [ 716.211532][T20833] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 716.231107][T20833] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 716.295402][T20833] syz.6.5025: attempt to access beyond end of device [ 716.295402][T20833] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 716.335524][ T28] audit: type=1400 audit(1779513748.548:2927): avc: denied { create } for pid=20853 comm="syz.5.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.361570][T20854] loop5: detected capacity change from 0 to 764 [ 716.362251][T20833] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 716.385923][ T28] audit: type=1400 audit(1779513748.548:2928): avc: denied { connect } for pid=20853 comm="syz.5.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.405758][T20833] syz.6.5025: attempt to access beyond end of device [ 716.405758][T20833] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 716.419387][ T28] audit: type=1400 audit(1779513748.558:2929): avc: denied { bind } for pid=20853 comm="syz.5.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.444112][T20833] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 716.467591][T20833] syz.6.5025: attempt to access beyond end of device [ 716.467591][T20833] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 716.476810][ T28] audit: type=1400 audit(1779513748.558:2930): avc: denied { write } for pid=20853 comm="syz.5.5030" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.509218][ T28] audit: type=1400 audit(1779513748.558:2931): avc: denied { ioctl } for pid=20853 comm="syz.5.5030" path="socket:[67787]" dev="sockfs" ino=67787 ioctlcmd=0x8941 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 716.550318][T20862] tipc: Enabling of bearer rejected, already enabled [ 716.622951][ T28] audit: type=1400 audit(1779513748.668:2932): avc: denied { mount } for pid=20853 comm="syz.5.5030" name="/" dev="loop5" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 716.626376][T20833] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 716.677926][ T28] audit: type=1400 audit(1779513748.688:2933): avc: denied { create } for pid=20858 comm="syz.2.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 716.680283][T20833] syz.6.5025: attempt to access beyond end of device [ 716.680283][T20833] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 716.712453][T20868] tipc: Enabling of bearer rejected, already enabled [ 716.721602][ T28] audit: type=1400 audit(1779513748.698:2934): avc: denied { unmount } for pid=14833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 716.735189][T20833] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 716.763271][ T28] audit: type=1400 audit(1779513748.698:2935): avc: denied { create } for pid=20858 comm="syz.2.5032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 716.767401][T20833] syz.6.5025: attempt to access beyond end of device [ 716.767401][T20833] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 716.796305][T20833] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 716.804913][T20833] syz.6.5025: attempt to access beyond end of device [ 716.804913][T20833] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 716.826974][T20833] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 716.837156][T20833] syz.6.5025: attempt to access beyond end of device [ 716.837156][T20833] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 716.858067][T20833] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 716.924547][T20880] loop6: detected capacity change from 0 to 1024 [ 716.934469][T20880] EXT4-fs: dax option not supported [ 717.006591][T20885] loop6: detected capacity change from 0 to 512 [ 717.052771][T20891] sock: sock_timestamping_bind_phc: sock not bind to device [ 717.084662][T20891] loop6: detected capacity change from 0 to 256 [ 717.128221][T20894] __nla_validate_parse: 12 callbacks suppressed [ 717.128243][T20894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5044'. [ 717.262259][T20906] xt_hashlimit: size too large, truncated to 1048576 [ 717.619485][T20920] loop7: detected capacity change from 0 to 512 [ 717.626162][T20920] EXT4-fs: Ignoring removed bh option [ 717.631727][T20920] EXT4-fs: inline encryption not supported [ 717.638030][T20920] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 717.651838][T20922] gretap0: left allmulticast mode [ 717.656925][T20922] gretap0: left promiscuous mode [ 717.665753][T20922] bridge0: port 3(gretap0) entered disabled state [ 717.695642][T20922] bridge_slave_0: left allmulticast mode [ 717.701871][T20922] bridge_slave_0: left promiscuous mode [ 717.707790][T20922] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.732150][T20920] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 717.735536][T20922] bridge_slave_1: left allmulticast mode [ 717.750380][T20929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5056'. [ 717.754505][T20927] program syz.6.5054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 717.763764][T20920] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5053: bg 0: block 248: padding at end of block bitmap is not set [ 717.772529][T20922] bridge_slave_1: left promiscuous mode [ 717.772642][T20922] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.806568][T20920] fserror_report: 2 callbacks suppressed [ 717.806595][T20920] loop7: lost filesystem error report for type 5 error -117 [ 717.817393][T20920] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5053: Failed to acquire dquot type 1 [ 717.817571][T20922] team0: Port device team_slave_1 removed [ 717.817681][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 717.817773][ C0] EXT4-fs (loop7): last error at time 1779513750: ext4_validate_block_bitmap:441 [ 717.819102][T20922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.827191][T20920] loop7: lost filesystem error report for type 5 error -28 [ 717.871963][T20922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.907549][T20922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.913087][T20920] EXT4-fs (loop7): 1 truncate cleaned up [ 717.915270][T20922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.936983][T20922] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 717.953092][T20920] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 717.997287][T20922] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5054'. [ 718.066229][T20946] loop5: detected capacity change from 0 to 128 [ 718.159779][T20946] syz.5.5060: attempt to access beyond end of device [ 718.159779][T20946] loop5: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 718.175476][T20946] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 718.184144][T20946] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 718.203638][T20946] xt_hashlimit: size too large, truncated to 1048576 [ 718.320179][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 718.340219][T20953] tmpfs: Unsupported parameter 'huge' [ 718.376146][T20953] netlink: 'syz.7.5062': attribute type 39 has an invalid length. [ 718.742286][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5065'. [ 718.754742][T20963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5065'. [ 718.796828][T20970] loop6: detected capacity change from 0 to 512 [ 718.820014][T20970] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 718.830234][T20970] EXT4-fs (loop6): orphan cleanup on readonly fs [ 718.838277][T20970] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5068: Failed to acquire dquot type 1 [ 718.852825][T20967] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 718.857842][T20970] loop6: lost filesystem error report for type 5 error -5 [ 718.864058][T20970] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5068: bg 0: block 40: padding at end of block bitmap is not set [ 718.871380][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 718.871405][ C0] EXT4-fs (loop6): initial error at time 1779513751: ext4_acquire_dquot:7034 [ 718.871432][ C0] EXT4-fs (loop6): last error at time 1779513751: ext4_acquire_dquot:7034 [ 718.910372][T20970] loop6: lost filesystem error report for type 5 error -117 [ 718.910522][T20970] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 718.912947][T20967] bond0 (unregistering): Released all slaves [ 718.936400][T20970] loop6: lost filesystem error report for type 5 error -117 [ 718.936718][T20970] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #16: comm syz.6.5068: data will be lost [ 718.955624][T20970] EXT4-fs (loop6): 1 truncate cleaned up [ 718.973076][T20970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 718.990877][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 719.021083][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 719.101595][T20981] loop6: detected capacity change from 0 to 512 [ 719.291074][T20986] loop6: detected capacity change from 0 to 512 [ 719.310980][T20986] EXT4-fs: Ignoring removed bh option [ 719.318181][T20986] EXT4-fs: inline encryption not supported [ 719.337879][T20986] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 719.373947][T20986] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 719.406464][T20986] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5072: bg 0: block 248: padding at end of block bitmap is not set [ 719.424639][T20986] loop6: lost filesystem error report for type 5 error -117 [ 719.427666][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 719.441520][ C0] EXT4-fs (loop6): last error at time 1779513751: ext4_validate_block_bitmap:441 [ 719.453060][T20986] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5072: Failed to acquire dquot type 1 [ 719.466356][T20986] loop6: lost filesystem error report for type 5 error -28 [ 719.473307][T20986] EXT4-fs (loop6): 1 truncate cleaned up [ 719.494558][T20993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5074'. [ 719.544874][T20986] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 719.707867][T21007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 719.838553][T20986] syz.6.5072 (20986) used greatest stack depth: 7552 bytes left [ 719.857998][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 719.986939][T21017] xt_hashlimit: size too large, truncated to 1048576 [ 720.143895][T21025] tipc: Resetting bearer [ 720.150826][T21025] tipc: Resetting bearer [ 720.164537][T21025] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.177248][T21025] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.294657][T21028] FAULT_INJECTION: forcing a failure. [ 720.294657][T21028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.294753][T15633] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 720.311383][T21028] CPU: 1 UID: 0 PID: 21028 Comm: syz.3.5088 Tainted: G W syzkaller #0 PREEMPT(full) [ 720.311490][T21028] Tainted: [W]=WARN [ 720.311521][T21028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 720.311590][T21028] Call Trace: [ 720.311612][T21028] [ 720.311635][T21028] __dump_stack+0x1d/0x30 [ 720.311745][T21028] dump_stack_lvl+0x95/0xd0 [ 720.311811][T21028] dump_stack+0x15/0x1b [ 720.311879][T21028] should_fail_ex+0x263/0x280 [ 720.312052][T21028] should_fail+0xb/0x20 [ 720.312154][T21028] should_fail_usercopy+0x1a/0x20 [ 720.312277][T21028] _copy_from_user+0x1c/0xb0 [ 720.312451][T21028] memdup_user+0x5e/0xd0 [ 720.312554][T21028] strndup_user+0x68/0xb0 [ 720.312647][T21028] __se_sys_mount+0x4d/0x2e0 [ 720.312773][T21028] ? fput+0x8f/0xc0 [ 720.312800][T21028] ? ksys_write+0x194/0x1a0 [ 720.312856][T21028] __x64_sys_mount+0x67/0x80 [ 720.312961][T21028] x64_sys_call+0x2d61/0x3020 [ 720.313077][T21028] do_syscall_64+0x12c/0x3b0 [ 720.313245][T21028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.313297][T21028] RIP: 0033:0x7ff55d34ce59 [ 720.313329][T21028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.313390][T21028] RSP: 002b:00007ff55bd9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 720.313460][T21028] RAX: ffffffffffffffda RBX: 00007ff55d5c5fa0 RCX: 00007ff55d34ce59 [ 720.313522][T21028] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 720.313653][T21028] RBP: 00007ff55bd9f090 R08: 0000200000000100 R09: 0000000000000000 [ 720.313711][T21028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.313753][T21028] R13: 00007ff55d5c6038 R14: 00007ff55d5c5fa0 R15: 00007fffc9137a68 [ 720.313816][T21028] [ 720.856469][ T28] kauditd_printk_skb: 136 callbacks suppressed [ 720.856577][ T28] audit: type=1400 audit(1779513752.998:3066): avc: denied { create } for pid=21034 comm="syz.3.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 720.918650][ T28] audit: type=1400 audit(1779513752.998:3067): avc: denied { write } for pid=21034 comm="syz.3.5091" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 720.950695][T21042] set_capacity_and_notify: 2 callbacks suppressed [ 720.950719][T21042] loop7: detected capacity change from 0 to 512 [ 721.091375][T21042] EXT4-fs: Ignoring removed bh option [ 721.116919][T21042] EXT4-fs: inline encryption not supported [ 721.272389][T21042] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 721.601478][T21066] netlink: 'syz.5.5100': attribute type 15 has an invalid length. [ 721.611312][T21042] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 721.643701][T21066] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5100'. [ 721.658288][T21071] loop6: detected capacity change from 0 to 512 [ 721.669189][T21060] xt_hashlimit: size too large, truncated to 1048576 [ 721.679808][T21042] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5094: bg 0: block 248: padding at end of block bitmap is not set [ 721.770770][T21042] loop7: lost filesystem error report for type 5 error -117 [ 721.777665][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 721.791478][ C0] EXT4-fs (loop7): last error at time 1779513753: ext4_validate_block_bitmap:441 [ 721.815490][T21042] Quota error (device loop7): write_blk: dquota write failed [ 721.842704][T21042] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota [ 721.896446][T21042] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5094: Failed to acquire dquot type 1 [ 721.949919][T21042] loop7: lost filesystem error report for type 5 error -28 [ 721.995803][T21042] EXT4-fs (loop7): 1 truncate cleaned up [ 722.062337][T21042] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 722.311194][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 722.456194][ T28] audit: type=1400 audit(1779513754.678:3068): avc: denied { listen } for pid=21107 comm="syz.2.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 722.479355][ T28] audit: type=1400 audit(1779513754.708:3069): avc: denied { bind } for pid=21107 comm="syz.2.5116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 722.509729][ T28] audit: type=1326 audit(1779513754.738:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21110 comm="syz.3.5117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d34ce59 code=0x7ffc0000 [ 722.548279][T21112] dummy0: Device is already in use. [ 722.562764][ T28] audit: type=1326 audit(1779513754.738:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21110 comm="syz.3.5117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d34ce59 code=0x7ffc0000 [ 722.588387][ T28] audit: type=1326 audit(1779513754.758:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21110 comm="syz.3.5117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d34ce59 code=0x7ffc0000 [ 722.614215][ T28] audit: type=1326 audit(1779513754.758:3073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21110 comm="syz.3.5117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff55d34ce59 code=0x7ffc0000 [ 722.683047][T21121] xt_hashlimit: max too large, truncated to 1048576 [ 722.690130][T21121] ipt_REJECT: TCP_RESET invalid for non-tcp [ 722.772885][T21126] loop7: detected capacity change from 0 to 128 [ 722.782598][T21128] loop6: detected capacity change from 0 to 512 [ 722.789207][T21128] EXT4-fs: Ignoring removed bh option [ 722.794661][T21128] EXT4-fs: inline encryption not supported [ 722.801489][T21125] usb usb8: usbfs: process 21125 (syz.3.5119) did not claim interface 0 before use [ 722.826471][T21128] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 722.937463][T21131] xt_hashlimit: size too large, truncated to 1048576 [ 722.943121][T21126] bio_check_eod: 17 callbacks suppressed [ 722.943186][T21126] syz.7.5121: attempt to access beyond end of device [ 722.943186][T21126] loop7: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 722.976408][T21128] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 722.976996][T21126] syz.7.5121: attempt to access beyond end of device [ 722.976996][T21126] loop7: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 723.009260][T21126] buffer_io_error: 14 callbacks suppressed [ 723.009442][T21126] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 723.068228][T21126] syz.7.5121: attempt to access beyond end of device [ 723.068228][T21126] loop7: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 723.082349][T21126] Buffer I/O error on dev loop7, logical block 157, lost async page write [ 723.092563][T21128] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5122: bg 0: block 248: padding at end of block bitmap is not set [ 723.095866][T21126] syz.7.5121: attempt to access beyond end of device [ 723.095866][T21126] loop7: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 723.106908][T21128] loop6: lost filesystem error report for type 5 error -117 [ 723.125455][T21126] Buffer I/O error on dev loop7, logical block 158, lost async page write [ 723.133940][T21128] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5122: Failed to acquire dquot type 1 [ 723.133976][T21128] loop6: lost filesystem error report for type 5 error -28 [ 723.150219][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 723.163823][T21126] syz.7.5121: attempt to access beyond end of device [ 723.163823][T21126] loop7: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 723.168800][ C1] EXT4-fs (loop6): last error at time 1779513755: ext4_acquire_dquot:7034 [ 723.193145][T21126] Buffer I/O error on dev loop7, logical block 159, lost async page write [ 723.203097][T21128] EXT4-fs (loop6): 1 truncate cleaned up [ 723.206398][T21126] syz.7.5121: attempt to access beyond end of device [ 723.206398][T21126] loop7: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 723.209329][T21128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 723.240912][T21126] Buffer I/O error on dev loop7, logical block 160, lost async page write [ 723.250378][T21126] syz.7.5121: attempt to access beyond end of device [ 723.250378][T21126] loop7: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 723.265210][T21126] Buffer I/O error on dev loop7, logical block 161, lost async page write [ 723.285410][T21126] syz.7.5121: attempt to access beyond end of device [ 723.285410][T21126] loop7: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 723.336365][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 723.337659][T21126] Buffer I/O error on dev loop7, logical block 150, lost async page write [ 723.369058][T21126] syz.7.5121: attempt to access beyond end of device [ 723.369058][T21126] loop7: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 723.426081][T21149] random: crng reseeded on system resumption [ 723.440952][T21126] Buffer I/O error on dev loop7, logical block 151, lost async page write [ 723.470192][T21151] loop5: detected capacity change from 0 to 512 [ 723.498492][T21151] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 723.560241][T21151] EXT4-fs (loop5): orphan cleanup on readonly fs [ 723.579971][T21151] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.5129: Failed to acquire dquot type 1 [ 723.617039][T21151] loop5: lost filesystem error report for type 5 error -5 [ 723.620460][T21151] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5129: bg 0: block 40: padding at end of block bitmap is not set [ 723.627688][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 723.627713][ C1] EXT4-fs (loop5): initial error at time 1779513755: ext4_acquire_dquot:7034 [ 723.627743][ C1] EXT4-fs (loop5): last error at time 1779513755: ext4_acquire_dquot:7034 [ 723.688040][T21151] loop5: lost filesystem error report for type 5 error -117 [ 723.688741][T21151] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 723.715370][T21151] loop5: lost filesystem error report for type 5 error -117 [ 723.715614][T21151] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #16: comm syz.5.5129: data will be lost [ 723.744539][T21151] EXT4-fs (loop5): 1 truncate cleaned up [ 723.757138][T21151] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.808163][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5129'. [ 723.858834][T14833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 724.014984][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5133'. [ 724.346402][T21175] loop5: detected capacity change from 0 to 512 [ 724.444694][T21183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5138'. [ 724.457274][T21183] tipc: Enabling of bearer rejected, already enabled [ 724.594757][T21187] loop5: detected capacity change from 0 to 128 [ 724.775855][T21190] xt_hashlimit: size too large, truncated to 1048576 [ 724.896961][T21198] loop7: detected capacity change from 0 to 128 [ 724.972393][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5145'. [ 725.024869][T21198] syz.7.5144: attempt to access beyond end of device [ 725.024869][T21198] loop7: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 725.027780][T21187] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 725.038428][T21198] Buffer I/O error on dev loop7, logical block 156, lost async page write [ 725.304708][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5150'. [ 725.346436][T21212] tipc: Enabling of bearer rejected, already enabled [ 725.352460][T21198] xt_hashlimit: size too large, truncated to 1048576 [ 725.600759][T21220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5153'. [ 725.768759][T21231] syzkaller1: entered promiscuous mode [ 725.776188][T21231] syzkaller1: entered allmulticast mode [ 725.800683][T21231] ip6_vti0 speed is unknown, defaulting to 1000 [ 726.341861][T21243] xt_hashlimit: size too large, truncated to 1048576 [ 726.685141][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 726.685161][ T28] audit: type=1400 audit(1779513758.908:3131): avc: denied { read write } for pid=21255 comm="syz.7.5164" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 726.716068][ T28] audit: type=1400 audit(1779513758.908:3132): avc: denied { open } for pid=21255 comm="syz.7.5164" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 726.752240][T21258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5165'. [ 727.223427][T21285] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5176'. [ 727.364428][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5177'. [ 727.385762][T21289] vti1: entered promiscuous mode [ 727.390845][T21289] vti1: entered allmulticast mode [ 727.931121][ T28] audit: type=1400 audit(1779513760.158:3133): avc: denied { bind } for pid=21298 comm="syz.3.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 727.985176][ T28] audit: type=1400 audit(1779513760.158:3134): avc: denied { listen } for pid=21298 comm="syz.3.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 728.005222][ T28] audit: type=1400 audit(1779513760.178:3135): avc: denied { write } for pid=21298 comm="syz.3.5182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 728.042420][T21309] loop7: detected capacity change from 0 to 512 [ 728.188216][T21309] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 728.198885][T21309] EXT4-fs (loop7): orphan cleanup on readonly fs [ 728.206026][T21309] Quota error (device loop7): dq_insert_tree: Quota tree root isn't allocated! [ 728.215339][T21309] Quota error (device loop7): qtree_write_dquot: Error -5 occurred while creating quota [ 728.225852][T21309] EXT4-fs error (device loop7): ext4_acquire_dquot:7034: comm syz.7.5187: Failed to acquire dquot type 1 [ 728.237388][T21309] loop7: lost filesystem error report for type 5 error -5 [ 728.237662][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 728.251285][ C1] EXT4-fs (loop7): initial error at time 1779513760: ext4_acquire_dquot:7034 [ 728.260210][ C1] EXT4-fs (loop7): last error at time 1779513760: ext4_acquire_dquot:7034 [ 728.271954][T21309] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5187: bg 0: block 40: padding at end of block bitmap is not set [ 728.286596][T21309] loop7: lost filesystem error report for type 5 error -117 [ 728.286772][T21309] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 728.303314][T21309] loop7: lost filesystem error report for type 5 error -117 [ 728.303617][T21309] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #16: comm syz.7.5187: data will be lost [ 728.322830][T21309] EXT4-fs (loop7): 1 truncate cleaned up [ 728.329175][T21309] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 728.347488][T21309] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5187'. [ 728.357957][T21317] xt_hashlimit: size too large, truncated to 1048576 [ 728.395818][T18135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.493775][ T28] audit: type=1400 audit(1779513760.718:3136): avc: denied { mount } for pid=21321 comm="syz.7.5190" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 728.542173][ T28] audit: type=1400 audit(1779513760.718:3137): avc: denied { unmount } for pid=21321 comm="syz.7.5190" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 729.191513][ T28] audit: type=1400 audit(1779513761.418:3138): avc: denied { append } for pid=21345 comm="syz.2.5199" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 729.203588][T21346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5199'. [ 729.246190][T21348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5200'. [ 729.372429][T21352] veth1_macvtap: left promiscuous mode [ 729.381082][T21352] macsec0: entered allmulticast mode [ 729.403841][T21352] veth1_macvtap: entered promiscuous mode [ 729.405041][T21354] netlink: 452 bytes leftover after parsing attributes in process `syz.3.5203'. [ 729.418949][T21352] veth1_macvtap: entered allmulticast mode [ 729.425661][T21352] macsec0: left allmulticast mode [ 729.431004][T21352] veth1_macvtap: left allmulticast mode [ 729.533479][T21363] loop6: detected capacity change from 0 to 128 [ 729.787359][T21363] xt_hashlimit: size too large, truncated to 1048576 [ 729.872609][T21372] loop5: detected capacity change from 0 to 128 [ 730.070887][T21377] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5210'. [ 730.157591][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5211'. [ 730.179028][T21360] bio_check_eod: 17 callbacks suppressed [ 730.179050][T21360] syz.6.5206: attempt to access beyond end of device [ 730.179050][T21360] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 730.195200][T21381] xt_hashlimit: size too large, truncated to 1048576 [ 730.230894][T21360] syz.6.5206: attempt to access beyond end of device [ 730.230894][T21360] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 730.288563][T21360] buffer_io_error: 14 callbacks suppressed [ 730.288719][T21360] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 730.327536][T21360] syz.6.5206: attempt to access beyond end of device [ 730.327536][T21360] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 730.355791][T21360] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 730.379674][T21360] syz.6.5206: attempt to access beyond end of device [ 730.379674][T21360] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 730.415323][T21372] syz.5.5208: attempt to access beyond end of device [ 730.415323][T21372] loop5: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 730.431457][T21360] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 730.442181][T21360] syz.6.5206: attempt to access beyond end of device [ 730.442181][T21360] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 730.468545][T21360] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 730.488931][T21360] syz.6.5206: attempt to access beyond end of device [ 730.488931][T21360] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 730.503786][T21372] syz.5.5208: attempt to access beyond end of device [ 730.503786][T21372] loop5: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 730.520749][T21360] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 730.538757][T21360] syz.6.5206: attempt to access beyond end of device [ 730.538757][T21360] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 730.563462][T21360] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 730.573110][T21372] Buffer I/O error on dev loop5, logical block 156, lost async page write [ 730.583247][T21360] syz.6.5206: attempt to access beyond end of device [ 730.583247][T21360] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 730.607502][T21372] Buffer I/O error on dev loop5, logical block 157, lost async page write [ 730.631985][T21360] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 730.686029][T21360] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 730.858968][T21400] netlink: 68 bytes leftover after parsing attributes in process `syz.6.5217'. [ 730.870499][T21395] SET target dimension over the limit! [ 730.879080][T21395] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5216'. [ 731.140279][T21405] netlink: 'syz.2.5216': attribute type 5 has an invalid length. [ 731.161196][T21404] loop6: detected capacity change from 0 to 512 [ 731.167844][T21404] EXT4-fs: Ignoring removed bh option [ 731.173265][T21404] EXT4-fs: inline encryption not supported [ 731.218690][T21404] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 731.255850][T21409] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5221'. [ 731.276140][T21404] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 731.309189][T21404] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5220: bg 0: block 248: padding at end of block bitmap is not set [ 731.323538][T21404] loop6: lost filesystem error report for type 5 error -117 [ 731.329469][T21404] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5220: Failed to acquire dquot type 1 [ 731.353625][T21404] loop6: lost filesystem error report for type 5 error -28 [ 731.355131][T21404] EXT4-fs (loop6): 1 truncate cleaned up [ 731.365744][ C1] EXT4-fs (loop6): error count since last fsck: 2 [ 731.365892][ C1] EXT4-fs (loop6): last error at time 1779513763: ext4_acquire_dquot:7034 [ 731.392490][T21414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5222'. [ 731.406026][T21404] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 731.469115][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 731.626554][T21424] loop6: detected capacity change from 0 to 128 [ 731.744356][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 731.744374][ T28] audit: type=1400 audit(1779513763.968:3141): avc: denied { connect } for pid=21427 comm="syz.3.5227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 731.829648][T21437] xt_hashlimit: size too large, truncated to 1048576 [ 731.883417][T21443] loop5: detected capacity change from 0 to 164 [ 731.988234][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5233'. [ 732.081891][ T28] audit: type=1400 audit(1779513764.308:3142): avc: denied { read } for pid=21450 comm="syz.3.5234" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 732.174815][T21458] tipc: Enabling of bearer rejected, already enabled [ 732.285759][ T28] audit: type=1400 audit(1779513764.508:3143): avc: denied { create } for pid=21450 comm="syz.3.5234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.305669][ T28] audit: type=1400 audit(1779513764.508:3144): avc: denied { map } for pid=21450 comm="syz.3.5234" path="socket:[69921]" dev="sockfs" ino=69921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.331304][ T28] audit: type=1400 audit(1779513764.508:3145): avc: denied { read } for pid=21450 comm="syz.3.5234" path="socket:[69921]" dev="sockfs" ino=69921 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.399271][T21469] can: request_module (can-proto-0) failed. [ 732.406213][ T28] audit: type=1400 audit(1779513764.628:3146): avc: denied { mount } for pid=21468 comm="syz.7.5239" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 732.464036][ T28] audit: type=1400 audit(1779513764.688:3147): avc: denied { setopt } for pid=21474 comm="syz.7.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.509801][T21476] loop5: detected capacity change from 0 to 764 [ 732.525729][T21476] iso9660: Unknown parameter '%íËy' [ 732.659532][ T28] audit: type=1400 audit(1779513764.888:3148): avc: denied { bind } for pid=21474 comm="syz.7.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 732.681222][T21475] tipc: Can't bind to reserved service type 0 [ 732.689826][ T28] audit: type=1400 audit(1779513764.918:3149): avc: denied { setopt } for pid=21474 comm="syz.7.5241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 732.918387][T21497] netlink: 'syz.7.5247': attribute type 29 has an invalid length. [ 732.938429][T21497] netlink: 'syz.7.5247': attribute type 29 has an invalid length. [ 732.947302][T21499] loop5: detected capacity change from 0 to 512 [ 732.968192][T21499] EXT4-fs: Ignoring removed bh option [ 732.973710][T21499] EXT4-fs: inline encryption not supported [ 732.982909][T21499] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 733.108064][ T28] audit: type=1400 audit(1779513765.338:3150): avc: denied { bind } for pid=21502 comm="syz.3.5249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 733.141446][ T1678] Bluetooth: hci0: Frame reassembly failed (-84) [ 733.178108][T21499] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 733.195380][T21509] tipc: Enabling of bearer rejected, already enabled [ 733.213530][T21499] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.5248: bg 0: block 248: padding at end of block bitmap is not set [ 733.228207][T21499] loop5: lost filesystem error report for type 5 error -117 [ 733.231559][T21499] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.5248: Failed to acquire dquot type 1 [ 733.272458][T21499] loop5: lost filesystem error report for type 5 error -28 [ 733.273115][T21499] EXT4-fs (loop5): 1 truncate cleaned up [ 733.280843][ C1] EXT4-fs (loop5): error count since last fsck: 2 [ 733.280894][ C1] EXT4-fs (loop5): last error at time 1779513765: ext4_acquire_dquot:7034 [ 733.373452][T21499] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 733.427924][T21515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21515 comm=syz.6.5252 [ 733.757383][T14833] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 733.840654][T21521] tipc: Enabling of bearer rejected, already enabled [ 733.875918][T21523] loop5: detected capacity change from 0 to 1024 [ 733.943389][T21523] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 733.974501][T21523] EXT4-fs (loop5): The Hurd can't support 64-bit file systems [ 734.505327][T21546] tipc: Enabling of bearer rejected, already enabled [ 734.640903][T21559] openvswitch: netlink: Message has 8 unknown bytes. [ 734.650317][T21557] __nla_validate_parse: 6 callbacks suppressed [ 734.650342][T21557] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5267'. [ 734.695508][T21559] loop5: detected capacity change from 0 to 8192 [ 734.754185][T21569] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5270'. [ 734.763749][T21569] netlink: 'syz.7.5270': attribute type 13 has an invalid length. [ 734.772000][T21569] netlink: 'syz.7.5270': attribute type 17 has an invalid length. [ 734.811574][T21569] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.825329][T21569] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 734.858720][T21569] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.868322][T21569] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.881403][T21569] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 734.892436][T21569] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.906153][T21569] veth1_vlan: left promiscuous mode [ 734.912893][T21569] veth0_vlan: left promiscuous mode [ 734.918700][T21569] veth0_vlan: entered promiscuous mode [ 734.930419][T21569] veth1_vlan: entered promiscuous mode [ 734.956335][T21569] veth1_macvtap: left promiscuous mode [ 734.966766][T21569] veth0_macvtap: left promiscuous mode [ 734.973421][T21569] veth0_macvtap: entered promiscuous mode [ 734.980482][T21569] veth1_macvtap: entered promiscuous mode [ 734.993253][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 735.005359][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.017197][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 735.029556][T21569] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 735.053691][T18553] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.060889][T18553] bridge0: port 1(bridge_slave_0) entered listening state [ 735.080016][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.087215][T18553] bridge0: port 2(bridge_slave_1) entered listening state [ 735.127782][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 735.148211][ T1717] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.172154][ T1717] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.183487][ T1717] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.192778][T21577] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5272'. [ 735.193272][ T1717] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.211101][T11693] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 735.268029][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5275'. [ 735.300759][T21584] tipc: Enabling of bearer rejected, already enabled [ 735.366000][T21590] loop6: detected capacity change from 0 to 164 [ 735.395970][T21590] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 735.462205][T21594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5280'. [ 735.473042][T21594] netlink: 'syz.2.5280': attribute type 10 has an invalid length. [ 735.486852][T21594] team0: Device wg2 is of different type [ 735.569969][T21601] loop6: detected capacity change from 0 to 128 [ 735.649425][T21603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21603 comm=syz.7.5284 [ 735.906268][T21613] loop5: detected capacity change from 0 to 512 [ 735.917785][T21604] xt_hashlimit: size too large, truncated to 1048576 [ 736.013695][T21618] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5289'. [ 736.043229][T21618] tipc: Enabling of bearer rejected, already enabled [ 736.089905][T21621] loop5: detected capacity change from 0 to 2048 [ 736.110625][T21621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 736.154618][T21601] bio_check_eod: 17 callbacks suppressed [ 736.154643][T21601] syz.6.5282: attempt to access beyond end of device [ 736.154643][T21601] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 736.176536][T21601] syz.6.5282: attempt to access beyond end of device [ 736.176536][T21601] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 736.191198][T21601] buffer_io_error: 14 callbacks suppressed [ 736.191263][T21601] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 736.209383][T21601] syz.6.5282: attempt to access beyond end of device [ 736.209383][T21601] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 736.223533][T21601] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 736.233345][T21601] syz.6.5282: attempt to access beyond end of device [ 736.233345][T21601] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 736.248116][T21601] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 736.260692][T21601] syz.6.5282: attempt to access beyond end of device [ 736.260692][T21601] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 736.278677][T21601] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 736.299191][T21601] syz.6.5282: attempt to access beyond end of device [ 736.299191][T21601] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 736.355903][T21601] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 736.394829][T21601] syz.6.5282: attempt to access beyond end of device [ 736.394829][T21601] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 736.427846][T21601] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 736.462147][T21631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5293'. [ 736.472038][T21601] syz.6.5282: attempt to access beyond end of device [ 736.472038][T21601] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 736.488701][T21631] netlink: 'syz.2.5293': attribute type 10 has an invalid length. [ 736.509852][T21601] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 736.520303][T21601] syz.6.5282: attempt to access beyond end of device [ 736.520303][T21601] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 736.534792][T21601] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 736.553917][T21632] ip6_vti0 speed is unknown, defaulting to 1000 [ 736.674018][T21631] team0: Device wg2 is of different type [ 736.910780][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 736.910795][ T28] audit: type=1400 audit(1779513769.138:3168): avc: denied { setopt } for pid=21640 comm="syz.2.5296" lport=41579 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 737.031252][ T28] audit: type=1400 audit(1779513769.188:3169): avc: denied { read } for pid=21642 comm="syz.6.5297" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 737.184432][ T28] audit: type=1400 audit(1779513769.188:3170): avc: denied { map } for pid=21642 comm="syz.6.5297" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 737.302912][ T28] audit: type=1400 audit(1779513769.188:3171): avc: denied { execute } for pid=21642 comm="syz.6.5297" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 737.423590][ T28] audit: type=1400 audit(1779514025.247:3172): avc: denied { create } for pid=21642 comm="syz.6.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 737.511291][ T28] audit: type=1400 audit(1779514025.247:3173): avc: denied { write } for pid=21642 comm="syz.6.5297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 737.812146][ T28] audit: type=1400 audit(1779514026.037:3174): avc: denied { unmount } for pid=12546 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 738.010399][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5305'. [ 738.020156][T21665] netlink: 'syz.7.5305': attribute type 10 has an invalid length. [ 738.033972][T21667] FAULT_INJECTION: forcing a failure. [ 738.033972][T21667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 738.049738][T21665] team0: Device wg2 is of different type [ 738.080665][T21667] CPU: 0 UID: 0 PID: 21667 Comm: syz.3.5306 Tainted: G W syzkaller #0 PREEMPT(full) [ 738.080764][T21667] Tainted: [W]=WARN [ 738.080779][T21667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 738.080798][T21667] Call Trace: [ 738.080808][T21667] [ 738.080819][T21667] __dump_stack+0x1d/0x30 [ 738.080852][T21667] dump_stack_lvl+0x95/0xd0 [ 738.080881][T21667] dump_stack+0x15/0x1b [ 738.080956][T21667] should_fail_ex+0x263/0x280 [ 738.081061][T21667] should_fail+0xb/0x20 [ 738.081094][T21667] should_fail_usercopy+0x1a/0x20 [ 738.081179][T21667] _copy_from_user+0x1c/0xb0 [ 738.081262][T21667] ___sys_sendmsg+0xc1/0x1e0 [ 738.081296][T21667] ? path_openat+0x1b01/0x2050 [ 738.081355][T21667] __sys_sendmmsg+0x185/0x320 [ 738.081443][T21667] __x64_sys_sendmmsg+0x57/0x70 [ 738.081477][T21667] x64_sys_call+0x27aa/0x3020 [ 738.081531][T21667] do_syscall_64+0x12c/0x3b0 [ 738.081573][T21667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.081657][T21667] RIP: 0033:0x7ff55d34ce59 [ 738.081677][T21667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.081705][T21667] RSP: 002b:00007ff55bd9f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 738.081732][T21667] RAX: ffffffffffffffda RBX: 00007ff55d5c5fa0 RCX: 00007ff55d34ce59 [ 738.081750][T21667] RDX: 0000000000000001 RSI: 0000200000002240 RDI: 0000000000000003 [ 738.081768][T21667] RBP: 00007ff55bd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 738.081849][T21667] R10: 0000000000000044 R11: 0000000000000246 R12: 0000000000000001 [ 738.081866][T21667] R13: 00007ff55d5c6038 R14: 00007ff55d5c5fa0 R15: 00007fffc9137a68 [ 738.081892][T21667] [ 738.372726][ T28] audit: type=1400 audit(1779514026.597:3175): avc: denied { create } for pid=21672 comm="syz.7.5309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 738.937690][ T28] audit: type=1400 audit(1779514026.837:3176): avc: denied { setopt } for pid=21677 comm="syz.3.5310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 738.957621][ T28] audit: type=1400 audit(1779514026.917:3177): avc: denied { ioctl } for pid=21677 comm="syz.3.5310" path="socket:[70657]" dev="sockfs" ino=70657 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 738.982744][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 739.035474][T21663] netlink: 'syz.6.5304': attribute type 5 has an invalid length. [ 739.054823][T21663] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5304'. [ 739.299219][T21694] Process accounting resumed [ 739.402786][T21703] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5318'. [ 739.428203][T21703] netlink: 'syz.3.5318': attribute type 10 has an invalid length. [ 739.451841][T21703] team0: Device wg2 is of different type [ 739.474816][T21696] loop6: detected capacity change from 0 to 512 [ 739.580766][T21696] EXT4-fs: Ignoring removed bh option [ 739.599018][T21696] EXT4-fs: inline encryption not supported [ 739.634243][T21696] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 739.666281][T20855] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 739.760273][T21696] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 739.780516][T21696] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.5316: bg 0: block 248: padding at end of block bitmap is not set [ 739.796222][T21696] loop6: lost filesystem error report for type 5 error -117 [ 739.797754][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 739.798672][T21711] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 739.805676][ C0] EXT4-fs (loop6): last error at time 1779514028: ext4_validate_block_bitmap:441 [ 739.833937][T21696] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.5316: Failed to acquire dquot type 1 [ 739.846759][T21696] loop6: lost filesystem error report for type 5 error -28 [ 739.864136][T21696] EXT4-fs (loop6): 1 truncate cleaned up [ 739.915682][T21713] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5320'. [ 739.924406][T21696] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 739.947481][ T310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.963529][ T310] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.016887][ T310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.034792][ T310] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.106250][ T310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.116878][ T310] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.140021][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 740.171142][T21716] ip6_vti0 speed is unknown, defaulting to 1000 [ 740.243948][ T310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 740.254654][ T310] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 740.369916][ T310] gretap0: left allmulticast mode [ 740.375060][ T310] gretap0: left promiscuous mode [ 740.380690][ T310] bridge0: port 3(gretap0) entered disabled state [ 740.387935][ T310] bridge_slave_1: left promiscuous mode [ 740.393698][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.401427][ T310] bridge_slave_0: left allmulticast mode [ 740.407073][ T310] bridge_slave_0: left promiscuous mode [ 740.412774][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.448714][ T310] bond0 (unregistering): (slave ip6gretap2): Releasing active interface [ 740.509819][ T310] bond0 (unregistering): Released all slaves [ 740.520010][T21716] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.527423][T21716] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.534920][T21716] bridge_slave_0: entered allmulticast mode [ 740.548072][T21716] bridge_slave_0: entered promiscuous mode [ 740.560017][T21716] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.567412][T21716] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.574875][T21716] bridge_slave_1: entered allmulticast mode [ 740.581826][T21716] bridge_slave_1: entered promiscuous mode [ 740.596150][ T310] tipc: Disabling bearer [ 740.610863][ T310] tipc: Left network mode [ 740.627864][T21747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5329'. [ 740.640840][T21747] netlink: 'syz.3.5329': attribute type 10 has an invalid length. [ 740.659735][T21716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.680264][T21747] team0: Device wg2 is of different type [ 740.697414][T21716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.756586][ T310] hsr_slave_0: left promiscuous mode [ 740.771103][ T310] hsr_slave_1: left promiscuous mode [ 740.786775][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 740.797932][T21764] FAULT_INJECTION: forcing a failure. [ 740.797932][T21764] name failslab, interval 1, probability 0, space 0, times 0 [ 740.810721][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 740.816017][T21762] loop6: detected capacity change from 0 to 128 [ 740.830996][T21764] CPU: 1 UID: 0 PID: 21764 Comm: syz.3.5333 Tainted: G W syzkaller #0 PREEMPT(full) [ 740.831037][T21764] Tainted: [W]=WARN [ 740.831045][T21764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 740.831071][T21764] Call Trace: [ 740.831078][T21764] [ 740.831087][T21764] __dump_stack+0x1d/0x30 [ 740.831117][T21764] dump_stack_lvl+0x95/0xd0 [ 740.831143][T21764] dump_stack+0x15/0x1b [ 740.831163][T21764] should_fail_ex+0x263/0x280 [ 740.831245][T21764] should_failslab+0x8c/0xb0 [ 740.831278][T21764] kmem_cache_alloc_noprof+0x66/0x3f0 [ 740.831311][T21764] ? skb_clone+0x151/0x1f0 [ 740.831396][T21764] skb_clone+0x151/0x1f0 [ 740.831422][T21764] __netlink_deliver_tap+0x2c9/0x500 [ 740.831460][T21764] netlink_unicast+0x653/0x680 [ 740.831521][T21764] netlink_sendmsg+0x5c8/0x6f0 [ 740.831561][T21764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.831669][T21764] ____sys_sendmsg+0x563/0x5b0 [ 740.831700][T21764] ___sys_sendmsg+0x195/0x1e0 [ 740.831739][T21764] __x64_sys_sendmsg+0xd4/0x160 [ 740.831788][T21764] x64_sys_call+0x194c/0x3020 [ 740.831812][T21764] do_syscall_64+0x12c/0x3b0 [ 740.831846][T21764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.831946][T21764] RIP: 0033:0x7ff55d34ce59 [ 740.831963][T21764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.831981][T21764] RSP: 002b:00007ff55bd9f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.832002][T21764] RAX: ffffffffffffffda RBX: 00007ff55d5c5fa0 RCX: 00007ff55d34ce59 [ 740.832017][T21764] RDX: 0000000020008884 RSI: 0000200000000100 RDI: 0000000000000005 [ 740.832030][T21764] RBP: 00007ff55bd9f090 R08: 0000000000000000 R09: 0000000000000000 [ 740.832057][T21764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.832073][T21764] R13: 00007ff55d5c6038 R14: 00007ff55d5c5fa0 R15: 00007fffc9137a68 [ 740.832094][T21764] [ 740.832895][ T310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.862503][T21762] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 740.945182][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.054403][T21762] ext4 filesystem being mounted at /510/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 741.095561][T21773] xt_hashlimit: size too large, truncated to 1048576 [ 741.109585][ T310] veth1_macvtap: left promiscuous mode [ 741.122667][ T310] veth0_macvtap: left promiscuous mode [ 741.137106][ T310] veth1_vlan: left promiscuous mode [ 741.147078][ T310] veth0_vlan: left promiscuous mode [ 741.157333][T21777] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5334'. [ 741.167403][T21777] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5334'. [ 741.263478][ T310] team0 (unregistering): Port device team_slave_1 removed [ 741.280466][ T310] team0 (unregistering): Port device team_slave_0 removed [ 741.341476][T21716] team0: Port device team_slave_0 added [ 741.358252][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 741.379876][T21716] team0: Port device team_slave_1 added [ 741.415833][T21716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.426801][T12546] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 741.438789][T21716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.493513][T21716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.524232][T21716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.546721][T21716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.613983][T21716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.641215][T21800] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5340'. [ 741.679045][T21800] netlink: 'syz.3.5340': attribute type 10 has an invalid length. [ 741.720344][T21800] team0: Device wg2 is of different type [ 741.814835][T21716] hsr_slave_0: entered promiscuous mode [ 741.835582][T21716] hsr_slave_1: entered promiscuous mode [ 741.851770][T21716] debugfs: 'hsr0' already exists in 'hsr' [ 741.872350][T21716] Cannot create hsr debugfs directory [ 741.899215][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 741.915067][ T310] IPVS: stop unused estimator thread 0... [ 742.072359][T21817] xt_hashlimit: size too large, truncated to 1048576 [ 742.107179][T21822] loop6: detected capacity change from 0 to 1024 [ 742.134505][T21822] EXT4-fs: Ignoring removed bh option [ 742.188730][T21716] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 742.204075][T21716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 742.219258][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 742.219273][ T28] audit: type=1400 audit(1779514030.437:3205): avc: denied { write } for pid=21821 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.262025][T21716] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 742.281157][T21716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 742.296086][ T28] audit: type=1400 audit(1779514030.517:3206): avc: denied { write } for pid=21836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 742.320089][T21716] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 742.327122][T21822] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 742.333043][T21716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 742.347169][T21716] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 742.366162][T21716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 742.396698][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 742.453073][ T28] audit: type=1400 audit(1779514030.677:3207): avc: denied { write } for pid=21820 comm="syz.6.5343" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 742.474955][ T28] audit: type=1400 audit(1779514030.677:3208): avc: denied { create } for pid=21820 comm="syz.6.5343" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 742.495675][ T28] audit: type=1400 audit(1779514030.677:3209): avc: denied { write } for pid=21820 comm="syz.6.5343" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 742.553256][T21716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 742.565416][ T28] audit: type=1400 audit(1779514030.677:3210): avc: denied { open } for pid=21820 comm="syz.6.5343" path="/512/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 742.594273][T21848] ªªªªªª: renamed from vlan0 (while UP) [ 742.629626][T21716] 8021q: adding VLAN 0 to HW filter on device team0 [ 742.647776][T21716] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 742.658275][T21716] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 742.706033][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.734352][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 742.741509][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 742.751168][T21859] loop6: detected capacity change from 0 to 512 [ 742.770595][ T310] bridge0: port 2(bridge_slave_1) entered blocking state [ 742.777758][ T310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.815206][T21859] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.856306][T21861] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5347'. [ 742.878123][T21859] ext4 filesystem being mounted at /513/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 742.917356][ T28] audit: type=1400 audit(1779514031.137:3211): avc: denied { write } for pid=21852 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.001810][T21876] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.017609][ T28] audit: type=1400 audit(1779514031.217:3212): avc: denied { write } for pid=21880 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.043698][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 743.176027][T21716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 743.389674][T21904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5351'. [ 743.430297][T21904] netlink: 'syz.7.5351': attribute type 10 has an invalid length. [ 743.462972][T21904] team0: Device wg2 is of different type [ 743.611351][T21716] veth0_vlan: entered promiscuous mode [ 743.630353][T21716] veth1_vlan: entered promiscuous mode [ 743.653388][T21716] veth0_macvtap: entered promiscuous mode [ 743.661489][T21716] veth1_macvtap: entered promiscuous mode [ 743.675645][T21716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.699288][T21923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5354'. [ 743.708444][T21716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 743.730041][T18553] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.760502][T18553] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.772718][ T28] audit: type=1400 audit(1779514031.997:3213): avc: denied { mounton } for pid=21716 comm="syz-executor" path="/root/syzkaller.rXWywN/syz-tmp" dev="sda1" ino=2062 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 743.787960][T18553] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.819969][T21923] tipc: Enabling of bearer rejected, already enabled [ 743.830070][T12546] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 743.849934][ T28] audit: type=1400 audit(1779514031.997:3214): avc: denied { mount } for pid=21716 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 743.859504][T18553] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.955686][T21928] ip6_vti0 speed is unknown, defaulting to 1000 [ 743.991653][T21940] loop6: detected capacity change from 0 to 128 [ 744.050587][T21933] loop8: detected capacity change from 0 to 512 [ 744.058303][T21935] tmpfs: Bad value for 'mpol' [ 744.288981][T21952] loop8: detected capacity change from 0 to 512 [ 744.314570][T21952] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 744.330038][T21952] EXT4-fs (loop8): orphan cleanup on readonly fs [ 744.336537][T21940] syz.6.5358: attempt to access beyond end of device [ 744.336537][T21940] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 744.353086][T21952] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5362: Failed to acquire dquot type 1 [ 744.353884][T21940] syz.6.5358: attempt to access beyond end of device [ 744.353884][T21940] loop6: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 744.381125][T21940] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 744.390696][T21940] syz.6.5358: attempt to access beyond end of device [ 744.390696][T21940] loop6: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 744.405025][T21940] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 744.406000][T21952] loop8: lost filesystem error report for type 5 error -5 [ 744.415816][T21940] syz.6.5358: attempt to access beyond end of device [ 744.415816][T21940] loop6: rw=2049, sector=158, nr_sectors = 1 limit=128 [ 744.439642][T21952] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5362: bg 0: block 40: padding at end of block bitmap is not set [ 744.439705][T21952] loop8: lost filesystem error report for type 5 error -117 [ 744.439888][T21952] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 744.439911][T21952] loop8: lost filesystem error report for type 5 error -117 [ 744.440393][T21952] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.5362: data will be lost [ 744.454348][ C1] EXT4-fs (loop8): error count since last fsck: 3 [ 744.454373][ C1] EXT4-fs (loop8): initial error at time 1779514032: ext4_acquire_dquot:7034 [ 744.454399][ C1] EXT4-fs (loop8): last error at time 1779514032: ext4_mb_clear_bb:6679 [ 744.455287][T21940] Buffer I/O error on dev loop6, logical block 158, lost async page write [ 744.474039][T21954] xt_hashlimit: size too large, truncated to 1048576 [ 744.499273][T21952] EXT4-fs (loop8): 1 truncate cleaned up [ 744.570192][T21940] syz.6.5358: attempt to access beyond end of device [ 744.570192][T21940] loop6: rw=2049, sector=159, nr_sectors = 1 limit=128 [ 744.622124][T21940] Buffer I/O error on dev loop6, logical block 159, lost async page write [ 744.624911][T21952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 744.652378][T21952] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5362'. [ 744.660018][T21940] syz.6.5358: attempt to access beyond end of device [ 744.660018][T21940] loop6: rw=2049, sector=160, nr_sectors = 1 limit=128 [ 744.662478][T21952] netlink: 'syz.8.5362': attribute type 10 has an invalid length. [ 744.705597][T21952] team0: Device wg2 is of different type [ 744.713547][T21940] Buffer I/O error on dev loop6, logical block 160, lost async page write [ 744.733758][T21940] syz.6.5358: attempt to access beyond end of device [ 744.733758][T21940] loop6: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 744.750906][T21940] Buffer I/O error on dev loop6, logical block 161, lost async page write [ 744.773255][T21940] syz.6.5358: attempt to access beyond end of device [ 744.773255][T21940] loop6: rw=2049, sector=150, nr_sectors = 1 limit=128 [ 744.788444][T21940] Buffer I/O error on dev loop6, logical block 150, lost async page write [ 744.806007][T21716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 744.811963][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5367'. [ 744.827486][T21971] tipc: Enabling of bearer rejected, already enabled [ 744.835812][T21940] syz.6.5358: attempt to access beyond end of device [ 744.835812][T21940] loop6: rw=2049, sector=151, nr_sectors = 1 limit=128 [ 744.849558][T21940] Buffer I/O error on dev loop6, logical block 151, lost async page write [ 744.937378][T21973] loop8: detected capacity change from 0 to 512 [ 744.944093][T21973] EXT4-fs: Ignoring removed bh option [ 744.967739][T21973] EXT4-fs: inline encryption not supported [ 745.015345][T21973] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 745.095929][T21973] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 745.128947][T21973] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5368: bg 0: block 248: padding at end of block bitmap is not set [ 745.144940][T21973] loop8: lost filesystem error report for type 5 error -117 [ 745.147378][T21973] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5368: Failed to acquire dquot type 1 [ 745.165945][T21973] loop8: lost filesystem error report for type 5 error -28 [ 745.166615][T21973] EXT4-fs (loop8): 1 truncate cleaned up [ 745.181186][T21973] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 745.452347][T22003] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 745.515123][T21716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 745.526544][T22005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5377'. [ 745.574080][T22009] loop8: detected capacity change from 0 to 512 [ 745.582798][T22009] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 745.591309][T22009] EXT4-fs (loop8): orphan cleanup on readonly fs [ 745.600481][T22009] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5378: Failed to acquire dquot type 1 [ 745.612074][T22009] loop8: lost filesystem error report for type 5 error -5 [ 745.612564][T22009] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5378: bg 0: block 40: padding at end of block bitmap is not set [ 745.619942][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 745.619967][ C1] EXT4-fs (loop8): initial error at time 1779514033: ext4_acquire_dquot:7034 [ 745.619997][ C1] EXT4-fs (loop8): last error at time 1779514033: ext4_acquire_dquot:7034 [ 745.658370][T22009] loop8: lost filesystem error report for type 5 error -117 [ 745.658514][T22009] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 745.674652][T22009] loop8: lost filesystem error report for type 5 error -117 [ 745.675038][T22009] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.5378: data will be lost [ 745.694158][T22009] EXT4-fs (loop8): 1 truncate cleaned up [ 745.700450][T22009] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 745.718762][T22009] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5378'. [ 745.742818][T21716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 745.833126][T22014] tipc: Enabling of bearer rejected, already enabled [ 746.019091][T22030] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5383'. [ 746.028803][T22030] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5383'. [ 746.270853][T22045] ip6_vti0 speed is unknown, defaulting to 1000 [ 746.385190][T22053] tipc: Enabling of bearer rejected, already enabled [ 746.463401][T22055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5392'. [ 746.498220][T22061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 746.647859][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 746.936952][T22076] syzkaller1: entered promiscuous mode [ 746.943997][T22076] syzkaller1: entered allmulticast mode [ 746.969861][T11696] Bluetooth: hci0: Frame reassembly failed (-84) [ 746.984283][T22076] ip6_vti0 speed is unknown, defaulting to 1000 [ 747.626849][T22093] tipc: Enabling of bearer rejected, already enabled [ 747.670675][T22096] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5404'. [ 747.998097][T22109] xt_hashlimit: size too large, truncated to 1048576 [ 748.639875][T22127] tipc: Enabling of bearer rejected, already enabled [ 749.047740][T15809] Bluetooth: hci0: command 0x1003 tx timeout [ 749.048159][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 749.132159][T22142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5419'. [ 749.163820][T22142] tipc: Started in network mode [ 749.169116][T22142] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 749.176778][T22142] tipc: Enabled bearer , priority 10 [ 749.192332][T22146] loop6: detected capacity change from 0 to 128 [ 749.214698][T22146] syz.6.5422: attempt to access beyond end of device [ 749.214698][T22146] loop6: rw=2049, sector=132, nr_sectors = 16 limit=128 [ 749.228298][T22146] Buffer I/O error on dev loop6, logical block 156, lost async page write [ 749.244373][T22146] Buffer I/O error on dev loop6, logical block 157, lost async page write [ 749.266612][T22148] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5423'. [ 749.277580][T22146] xt_hashlimit: size too large, truncated to 1048576 [ 749.523969][T22154] syzkaller1: entered promiscuous mode [ 749.530045][T22154] syzkaller1: entered allmulticast mode [ 749.595534][T22154] ip6_vti0 speed is unknown, defaulting to 1000 [ 749.614276][T22156] tipc: Enabling of bearer rejected, already enabled [ 749.630758][T22161] loop8: detected capacity change from 0 to 512 [ 749.650668][T11696] Bluetooth: hci0: Frame reassembly failed (-84) [ 749.690162][T22161] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 749.703641][T22161] EXT4-fs (loop8): orphan cleanup on readonly fs [ 749.716794][T22161] __quota_error: 23 callbacks suppressed [ 749.716810][T22161] Quota error (device loop8): dq_insert_tree: Quota tree root isn't allocated! [ 749.731600][T22161] Quota error (device loop8): qtree_write_dquot: Error -5 occurred while creating quota [ 749.757727][T22161] EXT4-fs error (device loop8): ext4_acquire_dquot:7034: comm syz.8.5428: Failed to acquire dquot type 1 [ 749.793894][T22161] loop8: lost filesystem error report for type 5 error -5 [ 749.794381][T22161] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5428: bg 0: block 40: padding at end of block bitmap is not set [ 749.801626][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 749.801661][ C1] EXT4-fs (loop8): initial error at time 1779514038: ext4_acquire_dquot:7034 [ 749.801693][ C1] EXT4-fs (loop8): last error at time 1779514038: ext4_acquire_dquot:7034 [ 749.933240][T22161] loop8: lost filesystem error report for type 5 error -117 [ 749.934748][T22161] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 749.981585][T22161] loop8: lost filesystem error report for type 5 error -117 [ 749.981954][T22161] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #16: comm syz.8.5428: data will be lost [ 750.067199][T22161] EXT4-fs (loop8): 1 truncate cleaned up [ 750.152879][T22161] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 750.177691][ T3415] tipc: Node number set to 8432298 [ 750.199954][T22161] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5428'. [ 750.210912][T22161] netlink: 'syz.8.5428': attribute type 10 has an invalid length. [ 750.222575][ T3381] ================================================================== [ 750.230729][ T3381] BUG: KCSAN: data-race in wg_packet_handshake_receive_worker / wg_packet_rx_poll [ 750.239983][ T3381] [ 750.242350][ T3381] read-write to 0xffff88811a9643a0 of 8 bytes by task 21843 on cpu 0: [ 750.250534][ T3381] wg_packet_rx_poll+0xed7/0x10f0 [ 750.255608][ T3381] __napi_poll+0x61/0x300 [ 750.259982][ T3381] napi_threaded_poll_loop+0x1db/0x660 [ 750.265498][ T3381] napi_threaded_poll+0x193/0x240 [ 750.270573][ T3381] kthread+0x22a/0x280 [ 750.274676][ T3381] ret_from_fork+0x146/0x330 [ 750.279311][ T3381] ret_from_fork_asm+0x1a/0x30 [ 750.284122][ T3381] [ 750.286475][ T3381] read-write to 0xffff88811a9643a0 of 8 bytes by task 3381 on cpu 1: [ 750.294661][ T3381] wg_packet_handshake_receive_worker+0x49e/0x570 [ 750.301130][ T3381] process_scheduled_works+0x4f0/0x9c0 [ 750.301365][T22161] team0: Device wg2 is of different type [ 750.306631][ T3381] worker_thread+0x58a/0x780 [ 750.306670][ T3381] kthread+0x22a/0x280 [ 750.321011][ T3381] ret_from_fork+0x146/0x330 [ 750.325643][ T3381] ret_from_fork_asm+0x1a/0x30 [ 750.330420][ T3381] [ 750.332748][ T3381] value changed: 0x0000000000000168 -> 0x0000000000000188 [ 750.339870][ T3381] [ 750.342219][ T3381] Reported by Kernel Concurrency Sanitizer on: [ 750.348410][ T3381] CPU: 1 UID: 0 PID: 3381 Comm: kworker/1:3 Tainted: G W syzkaller #0 PREEMPT(full) [ 750.359385][ T3381] Tainted: [W]=WARN [ 750.363190][ T3381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 750.373267][ T3381] Workqueue: wg-kex-wg1 wg_packet_handshake_receive_worker [ 750.380587][ T3381] ================================================================== [ 750.407410][T21716] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 751.687765][ T3573] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 753.860456][ T28] audit: type=1400 audit(1779514042.087:3232): avc: denied { write } for pid=22183 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 753.893914][ T28] audit: type=1400 audit(1779514042.117:3233): avc: denied { write } for pid=22194 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.010576][ T28] audit: type=1400 audit(1779514043.237:3234): avc: denied { write } for pid=22197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.044828][ T28] audit: type=1400 audit(1779514043.267:3235): avc: denied { write } for pid=22208 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.195496][ T28] audit: type=1400 audit(1779514043.417:3236): avc: denied { write } for pid=22211 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.228673][ T28] audit: type=1400 audit(1779514043.457:3237): avc: denied { write } for pid=22222 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.326932][ T28] audit: type=1400 audit(1779514043.547:3238): avc: denied { write } for pid=22225 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 755.359750][ T28] audit: type=1400 audit(1779514043.587:3239): avc: denied { write } for pid=22236 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1