last executing test programs: 3.513309153s ago: executing program 4 (id=5): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) unshare(0x60000600) sync() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c00000009060108fffffc0000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x26, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x5}, 0x106f, 0x0, 0x7fc, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x683}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c00028005000100060000000c00028005000100010000000c001980080002002e", @ANYRES16=r8], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) 2.267973832s ago: executing program 0 (id=17): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x5607, 0x1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x8085) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x8080) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0xfffffffe}, 0x50) r10 = socket$packet(0x11, 0x3, 0x300) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r13, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r10, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x36, 0x830, &(0x7f0000000440)={0x11, 0x0, r13, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r12}, 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f00000005c0)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b703000000000000850000002d00000018110000fbec6f22af241d6f7f00609b5056e5fb2c4bff377fef6e735af05416805e1ebb2f325561bbc618867563f7f454f43aa19409fa4d2eb8ccfabb4e691d5bdcf39a310b1ad5ced14fa1531e820c7a57668783dbb903f5b4740d5a6418d616646c7347b6da66a27ffa9f0e7f5fa961c186dd8b6c299e238d9ee3019f3d58eeff11eb85965ca89078e90cdce5bebb718e27adece53f4995fb2090aa9ae05d23e3059e52110401e7fd5d84", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', r13, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r14}, 0xc) 2.229324545s ago: executing program 0 (id=18): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000440)={0x4, 0x796, 0x7, 0x400, 0x637}, 0x14) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r3, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) (async) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x3) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x3) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4038c0c9fe6ec50db9c289a666b6a6bf29476d91d091054387d509eb52245cf", @ANYRES16=r5, @ANYBLOB="00032abd7000fbdbdf251b00000005009200060000000400cc00"], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6c0000001000ffff27bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="170c0000000000004400128009000100766c616e0000000034000280280003800c00010001000000008000000c000100f1ffffff0c0000000c0001000100000040000000060001000400000008000500", @ANYRES32=r7, @ANYBLOB="441f083d8f9100a928e4329399"], 0x6c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x2, 0x3, 0x602, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x4, 0x3}}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000840) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r6, 0x8982, &(0x7f0000000100)={0x6, 'wlan0\x00', {0xfffffffc}, 0x3}) 2.163081181s ago: executing program 0 (id=19): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x3, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8c46, 0x0) r3 = syz_io_uring_setup(0x313f, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x3, 0x171}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd=r2, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="1a", 0x1}], 0x1}) io_uring_enter(r3, 0x4d10, 0x2, 0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f0000000380)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8000}}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") pipe2$9p(&(0x7f00000000c0), 0x84080) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000), 0x1) 1.653401495s ago: executing program 4 (id=23): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) fsmount(r2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000300)={0x0, @multicast2, 0x4e22, 0x4, 'lc\x00', 0x8, 0x6, 0x35}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r3}, 0x10) syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71, 0x2, 0x1, 0xf7, 0x40, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "f8d5"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x8, 0x4, 0xf9}, {0x6, 0x24, 0x1a, 0x9, 0x28}, [@mdlm_detail={0xc, 0x24, 0x13, 0x1, "8fe3a3441da1a0d6"}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x4, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x1, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x3, 0xfa, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x27, 0xff, 0x8}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0xda, 0x1, 0xe, 0x10, 0x2}, 0x5, &(0x7f0000000140)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x180a}}]}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 1.543550915s ago: executing program 0 (id=24): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x35) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000fc0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x500, &(0x7f0000000400)="$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") quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.537824715s ago: executing program 3 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x10, 0x84}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}, 0x1, 0x300}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x10, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0xe, 0x6, 0x100, 0x6, 0x1bfe, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x5, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860b, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x2, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20006, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x6, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x1ff, 0xffffffff]}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b6ffffff7fcc9f0ba1f848390000005e7b034c635600000e000a00100000000280000094", 0x69}], 0x1}, 0x24048800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002740)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x0, 0x178, 0xc, 0x0, 0x178, 0x218, 0x258, 0x258, 0x218, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [], [0xffffffff, 0xff], 'pim6reg0\x00', 'netpci0\x00', {}, {}, 0x2e, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x80, 0x0, 0xa}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x6, 0x200, 0x2}}}, {{@ipv6={@private1, @mcast1, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xff000000], 'wg2\x00', 'hsr0\x00', {0xff}, {}, 0x0, 0x0, 0x3}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xeb3d}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) 1.130415201s ago: executing program 1 (id=28): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200040, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000008b0000000000000000000000850000001300000018110000", @ANYRES32=r1], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x88d9d501}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r3, 0x0, 0x10, 0x24048048, &(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0x4}, 0x1c) getsockopt$inet_int(r3, 0x0, 0xe, 0x0, &(0x7f0000000500)=0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x5, 0xfe, 0x0, 0x4, 0xc080, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x12122, 0x10000, 0xb, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000e0f000/0x2000)=nil, 0x2000, 0x300000b, 0x31, 0xffffffffffffffff, 0x7ba11000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x9, 0x0) unshare(0x600) r4 = socket$caif_stream(0x25, 0x1, 0x5) recvmmsg(r4, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x140000}], 0x1, 0x100, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x1, 0x1, 0x0, 0x0, 0x5000001) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') 885.753382ms ago: executing program 2 (id=29): bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x5, &(0x7f0000001080)=ANY=[@ANYRES16=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a4000000430001002bbd7000fbdbdf251c0000000c000800077f0000000000000c0001"], 0xa4}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010000800d00000001000000", @ANYRES32, @ANYBLOB="00000000640fb61fc738f75b00001000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="76389e147583ddd0569ba56a5cfd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async, rerun: 32) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000280)={0x0, 0x0, 0x7f}) (async) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x4}) (async) syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/cgroup\x00') (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r4, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0xa, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9c, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdd, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r5, 0x25, 0x10, @void}, 0x10) 816.119479ms ago: executing program 2 (id=30): syz_emit_ethernet(0x0, 0x0, 0x0) 815.726599ms ago: executing program 2 (id=31): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000005000000000058a37ce3996d03a90000bc0000009500000000000000a281c505219de926ed6a8c603a0ec73c229df9471be2460b4f62fee8696996686418a147f421efdf54c756a97750c471ca65642e62c1fb23323794669653b547ad66f355fec87041d318c1834255c43b5256a2d3434c9b27c62ab8447299439ac8c5cbdeee9b689ba40b86046f5e791447eecd3498fcb16ea1b327fddf3c9d40e3b4e112355ab44975ba20b7771ac02bea"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000480)) r1 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x5, &(0x7f0000000100)=0x0) io_getevents(r2, 0x4, 0x3, &(0x7f0000000340)=[{}, {}, {}], &(0x7f0000000280)={0x77359400}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001500)={0x1c, r4, 0x1, 0x4000, 0x10, {}, [@ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0x4}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r4, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x6}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7ff}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) io_submit(r2, 0x1, &(0x7f00000002c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x0, r1, 0x0, 0x23, 0x0, 0x0, 0x0, r1}]) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x1, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x1a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40008d1}, 0x4000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8991, &(0x7f0000000cc0)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12tQ\xb16\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00l \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r3}) ioctl$FITHAW(r4, 0xc0045878) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000000000)={{0x7, 0x5}, {0x0, 0x8}, 0xfffffff9}) 722.460197ms ago: executing program 0 (id=34): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x2, 0x350e0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x2, @perf_config_ext={0x1, 0x80000000}, 0xba92, 0x0, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(0xffffffffffffffff, 0x0, 0x4000044) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, &(0x7f00000000c0)={0x1, 0x0, 0x873}) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000000002400078008000500000000000800050000000000080005000000000008000500000000000400078014000780080006"], 0xd0}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x104, 0x24, 0x20, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xb, 0xffff}, {0xfff2, 0x1}, {0x5, 0xc}}, [@TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x9, 0xcb7a, 0x5, 0x2, 0xa561, 0x7, 0x9}}, {0x16, 0x2, [0x47a5, 0xff60, 0x1, 0x7, 0x400, 0x400, 0xf5, 0x1, 0x3ff]}}, {{0x1c, 0x1, {0x1, 0x33, 0x7, 0x40, 0x1, 0x0, 0x8001, 0x2}}, {0x8, 0x2, [0x4, 0x5]}}, {{0x1c, 0x1, {0x6, 0x80, 0xf, 0x5, 0x0, 0x1, 0xffffffff, 0x3}}, {0xa, 0x2, [0x7, 0x0, 0xf]}}, {{0x1c, 0x1, {0x7, 0x3, 0x81, 0x1, 0x18d797f8befe82f8, 0x2bd, 0xf539, 0x7}}, {0x12, 0x2, [0x1ff, 0x11, 0x101, 0xca69, 0x0, 0x0, 0x1]}}, {{0x1c, 0x1, {0x7, 0x4, 0x4, 0xffff044b, 0x0, 0x9, 0x7, 0x6}}, {0x10, 0x2, [0x101, 0x1, 0x9, 0x3ff, 0x3, 0x2]}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x68, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) r7 = socket(0x10, 0x2, 0x0) r8 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="44000000100005ff00000002ffdbdf250000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008001300", @ANYRES32=r8], 0x44}}, 0x8000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r9) r10 = getpid() r11 = syz_pidfd_open(r10, 0x0) setns(r11, 0x24020000) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="06000000000000c100d21caef730f62c0be3ee93aabe9d19594bd65afc6f92c574b4c687454bbb3acd4070b9a8f8c9a320"], &(0x7f0000000200)='lo\x00', 0x3, 0x2) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x90902) 664.031412ms ago: executing program 1 (id=35): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f00000003c0)=0x204, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}], 0x1, 0x4040) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x36, &(0x7f0000000180)=[{0x7, 0x4, 0x20, 0x1000}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) process_mrelease(0xffffffffffffffff, 0x0) 663.150822ms ago: executing program 2 (id=36): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8800000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000440)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mbind(&(0x7f0000d44000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x1000000000000c, 0x2) 621.090306ms ago: executing program 3 (id=37): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = perf_event_open(&(0x7f0000000040)={0x3, 0x80, 0x2, 0x8, 0x8, 0x7, 0x0, 0x4, 0x82605, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x100, 0x2, @perf_bp={&(0x7f0000000000), 0x1}, 0x204, 0x7fffffffffffffff, 0xf, 0x8, 0x5b, 0x10000, 0xafaa, 0x0, 0x3, 0x0, 0x7}, r0, 0x8, 0xffffffffffffffff, 0x0) (async, rerun: 32) move_pages(r0, 0x2, &(0x7f0000000100)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0) (async, rerun: 32) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x5, 0x7fffffff, {{0x29, 0x4, 0x1, 0x9, 0xa4, 0x67, 0x0, 0x2, 0x4, 0x0, @remote, @remote, {[@timestamp_addr={0x44, 0x24, 0x4e, 0x1, 0x5, [{@loopback, 0xfffffffe}, {@multicast2, 0x4}, {@private=0xa010100, 0xab2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1000}]}, @rr={0x7, 0x17, 0xc9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, @remote, @empty, @empty]}, @timestamp_addr={0x44, 0x3c, 0xdb, 0x1, 0x2, [{@remote, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3ff}, {@loopback, 0x8}, {@rand_addr=0x64010102, 0x3}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xb}, {@broadcast, 0x4}, {@empty}]}, @timestamp={0x44, 0x18, 0x7d, 0x0, 0x6, [0x6, 0x95e, 0x200, 0x1179, 0x2]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', r3, 0x4, 0x7, 0xfb, 0x6, 0xc, @private2={0xfc, 0x2, '\x00', 0x9a}, @rand_addr=' \x01\x00', 0x7800, 0x7, 0x80000000, 0x8}}) (async) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000380)=[0x400, 0xffffff01], 0x2) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@rand_addr=' \x01\x00', @in=@multicast1, 0x4e21, 0x8, 0x4e21, 0xa, 0x2, 0xa0, 0x0, 0x29, r4, 0xee01}, {0x92, 0xffffffffffffff01, 0x101, 0xe, 0x0, 0x7, 0x6, 0x7}, {0x8, 0x6, 0x80000000, 0x7fff}, 0x98, 0x6e6bbf, 0x2, 0x1, 0x7}, {{@in6=@local, 0x4d5, 0x6c}, 0xa, @in=@private=0xa010100, 0x34ff, 0x4, 0x3, 0x0, 0x80, 0x811c297, 0x3}}, 0xe8) r6 = fsopen(&(0x7f00000004c0)='cpuset\x00', 0x1) (async, rerun: 32) recvfrom$l2tp6(r5, &(0x7f0000000500)=""/237, 0xed, 0x40000082, &(0x7f0000000600)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @remote}}, 0x20) (async, rerun: 32) r7 = socket$l2tp6(0xa, 0x2, 0x73) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000640)=0x0) (rerun: 64) ioctl$sock_SIOCADDRT(r7, 0x890b, &(0x7f0000000680)={0x0, @nfc={0x27, r8, 0x0, 0x3}, @isdn={0x22, 0x0, 0x9, 0x5}, @generic={0x3, "4495a9ce7944d44a2349e8b0ae2f"}, 0x2, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5, 0x8, 0x9b}) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000700), 0x810000, 0x0) ioctl$PTP_PIN_GETFUNC2(r9, 0xc0603d0f, &(0x7f0000000740)={'\x00', 0x0, 0x1, 0x9}) fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000007c0), &(0x7f0000000800), 0x2, 0x2) (async) r10 = syz_open_pts(0xffffffffffffffff, 0x40) ioctl$TIOCL_UNBLANKSCREEN(r10, 0x541c, &(0x7f0000000840)) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x20, r11, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x99b, 0x7c}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x488d4) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(r1, 0x941c, 0x0) (async, rerun: 32) getsockopt$XDP_STATISTICS(r10, 0x11b, 0x7, &(0x7f00000009c0), &(0x7f0000000a00)=0x30) (rerun: 32) r12 = socket$kcm(0x29, 0x2, 0x0) ioctl$FITRIM(r12, 0xc0185879, &(0x7f0000000a40)={0x3, 0x6, 0x3}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r12, 0x8933, &(0x7f0000000a80)={'batadv_slave_0\x00'}) read(r5, &(0x7f0000000ac0)=""/53, 0x35) sendmsg$kcm(r12, &(0x7f0000002080)={&(0x7f0000000b00)=@hci={0x1f, 0x3, 0x4}, 0x80, &(0x7f0000000fc0)=[{&(0x7f0000000b80)="ca7b37148d7470ba80da8d2c33a977ce71f6980eebf6e6991498146f05bd0096c979c63a329f5bf0ea707dee50a0116fafd5926f8b7e37deabe4ad65830ae40a15a98126e61802fe60cad2b846e8c22cb6694a60783e64393eeb8dc04f86b7004dd5ceebdcad7ebc305f239bd4c4f3b75ce9c18a01922c3f9594393cee869be1458df05602146bc6f186f9f659925b221f19890560d2d5813004ed96d6450947a6b52b024bbdb60d192ab129d19387558e17048284098cbfb3873fc6a1a19577bce6cbe9fa5a6cd2fd14142dafcae075d5f03be485ccd3a94fb5819033e0008fa1c0452357c295", 0xe7}, {&(0x7f0000000c80)="72b16d14cf16073aa1474aa713d90e0156508ac672c7d615b287f8519e0c9156496134f08f075482d6f6df93656d63e3c52217f685d49bbc674b97fc61d4ad246ccb89d9f5db0fc5f4bac682e875b785", 0x50}, {&(0x7f0000000d00)="ec4f442cda9dc3602461595a5a329a6dc1f9f4dddd61532b18546fbc7c03f83a7400375ce322beabd0f710af80fd417ca48d8a5b1006d4a519ccd54f3e96b75fad99914cdaef758053583f18a112fb23c375a953d5c03f35bde9a82c6d586a532205fdedf412", 0x66}, {&(0x7f0000000d80)="5e777b0850539a0285719b206a23f1a3662dbb734fc4a5f591397ccb35ea046012cc2d01ae6d5b3f3aedc57302b7fa416742fc61814e24a96442efca91fb5f88cd4fe195fa2b7fa54002b08862a64b24621746ee3068f23dfd0b2b10e1375360d6eae680f5ee5e6ba6aa5b523f5a0f4daf63bbc0d872de9eaa69dcf472fafb0e9e46a4d0cdbd73f768f542b0bec363d5288696415ac9f16ff5ae0591dc0fa91d", 0xa0}, {&(0x7f0000000e40)="f262b299c5922b20bf23d171e763c13388a11a381ca8c36f14f2efc89cd2d5494aa937a2b242712ef5f10eb5916a0ca9c3ef02ff7d3a5604224b3873010ab746cc2de658701c4866df497af4b7310423c506960508cd8b53d5fca65838bb4973ff259e53154ebc6637548beab0da9c6208c99fda5202d2466a0b47d06f60978cdf0f23", 0x83}, {&(0x7f0000000f00)="ee233e56377d30a0a761673d9cf4f7217f7ab6ca04cc660759c9f558dae080cc835c78d0f1cd3409fe53ce2cd07089ece7b8db8bae6402317b41f81802fb79938c222f926540e01f89712546968ff4e36290263b39b57c20ad78d0ed873dbf13805a18d8f7c6cfb7eefb2560009e73870ab588d41585f926f8d708f3c7ddc085fde9a6d926b7bdf72272d942ec780c8c6941d3471b220ff3f5177de9d60ac823fc46460bd1822d0a36b90f6d", 0xac}], 0x6, &(0x7f0000001040)=[{0x1010, 0x10c, 0x2, "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"}, {0x20, 0x0, 0x3, "7ecfbe29d8fa757c16"}], 0x1030}, 0x1) (async) close(r2) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r9, 0x89f8, &(0x7f0000002100)={'syztnl0\x00', &(0x7f00000020c0)={'tunl0\x00', r4, 0x1, 0x10, 0x8, 0x1, {{0x6, 0x4, 0x0, 0x23, 0x18, 0x65, 0x0, 0xc, 0x2f, 0x0, @empty, @private=0xa010102, {[@end]}}}}}) 532.253953ms ago: executing program 3 (id=38): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c9002000600000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500003f0020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 451.21059ms ago: executing program 2 (id=39): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socket(0xa, 0x3, 0xff) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x1, 0x830d}, 0x0, 0x2, 0x34000, 0x9, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xb}]}) socket$packet(0x11, 0x2, 0x300) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x4054) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000300aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 310.207613ms ago: executing program 1 (id=40): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES64, @ANYBLOB="01002cbd7000fddbdfbf160000001c0023"], 0x38}, 0x1, 0x0, 0x0, 0x20080000}, 0x20000084) 258.151787ms ago: executing program 3 (id=41): syz_emit_ethernet(0x0, 0x0, 0x0) 257.560547ms ago: executing program 1 (id=42): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="580000001000ffff2abd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15010000000000001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00v'], 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) syz_open_dev$vcsn(&(0x7f0000000040), 0xa97, 0x1) 195.758973ms ago: executing program 4 (id=43): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="210000000000000000012e439381792b6d120925c2399516fb"], 0x50) (async) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r0, 0x0, 0x0, 0x10, &(0x7f0000000100)={0xa, 0x0, 0xb, @empty, 0x7, 0x4}, 0x20) 163.622616ms ago: executing program 4 (id=44): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) tgkill(r0, r0, 0x35) ptrace$peeksig(0x4209, r0, 0x0, &(0x7f0000000fc0)) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x500, &(0x7f0000000400)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb6}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x4b}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 112.01492ms ago: executing program 3 (id=45): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x73, 0x140341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r1, 0x8010550e, 0x0) sendto$rxrpc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x7, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r3, r3, r3) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) getpid() r6 = msgget$private(0x0, 0x3ac) msgrcv(r6, &(0x7f0000000080)={0x0, ""/48}, 0x38, 0x0, 0x0) msgsnd(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="00ba1a842ab10d382fbeed1000000000000000"], 0x8, 0x800) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r7, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r8, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) 108.16586ms ago: executing program 0 (id=46): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/10) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@delqdisc={0x68, 0x25, 0x200, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {0x7, 0x1}, {0x6, 0x2}, {0xa, 0xf}}, [@TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x5, '\x00', 0x6, 0xfffffffe, 0x101, 0xa867}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfb9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0xf, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000010}, 0x4010) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='*\x00') r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x4c}}, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$packet(0x11, 0x3, 0x300) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000180)={0x2, 0x0, 0x8001, 0xffffffffffffb74b}) setxattr$trusted_overlay_origin(0x0, &(0x7f0000000340), 0x0, 0x0, 0x1) r9 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) ioctl$EVIOCSCLOCKID(r9, 0x40084504, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'rose0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000200)="1a040500d3fc03fc01004788031c09", 0xf, 0x44004, &(0x7f0000000300)={0x11, 0x0, r10, 0x1, 0x6, 0x6, @remote}, 0xffffffffffffffa1) 88.030812ms ago: executing program 1 (id=47): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x200000, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x10000}}, {@block_validity}]}, 0x3, 0x572, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x22) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r3, r3, 0x0, 0xe3aa6ea) (async) sendfile(r3, r3, 0x0, 0xe3aa6ea) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 0s ago: executing program 3 (id=48): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0xb86, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0)=[{{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/150, 0x96}], 0x7, &(0x7f0000000a00)=""/169, 0xa9}, 0x4}], 0x1, 0x40000000, 0x0) (async) recvmmsg(r3, &(0x7f00000000c0)=[{{&(0x7f0000000ac0)=@in6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000300)=""/93, 0x5d}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f00000005c0)=""/127, 0x7f}, {&(0x7f0000000640)=""/125, 0x7d}, {&(0x7f0000000700)=""/169, 0xa9}, {&(0x7f00000007c0)=""/209, 0xd1}, {&(0x7f00000008c0)=""/150, 0x96}], 0x7, &(0x7f0000000a00)=""/169, 0xa9}, 0x4}], 0x1, 0x40000000, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) (async) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) writev(r0, &(0x7f0000000180), 0x100000000000003c) kernel console output (not intermixed with test programs): rocess permissive=1 [ 17.301049][ T28] audit: type=1400 audit(1771662891.894:61): avc: denied { siginh } for pid=3189 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 18.373025][ T28] audit: type=1400 audit(1771662892.984:62): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.394977][ T28] audit: type=1400 audit(1771662892.984:63): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=484 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.417648][ T28] audit: type=1400 audit(1771662892.984:64): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.440616][ T28] audit: type=1400 audit(1771662892.984:65): avc: denied { search } for pid=3194 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.463552][ T28] audit: type=1400 audit(1771662892.984:66): avc: denied { read open } for pid=3195 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.158' (ED25519) to the list of known hosts. [ 24.764911][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 24.764926][ T28] audit: type=1400 audit(1771662899.374:70): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.793854][ T28] audit: type=1400 audit(1771662899.404:71): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.794595][ T3300] cgroup: Unknown subsys name 'net' [ 24.821494][ T28] audit: type=1400 audit(1771662899.424:72): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.953341][ T3300] cgroup: Unknown subsys name 'cpuset' [ 24.959401][ T3300] cgroup: Unknown subsys name 'rlimit' [ 25.068592][ T28] audit: type=1400 audit(1771662899.674:73): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.093855][ T28] audit: type=1400 audit(1771662899.674:74): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.116251][ T28] audit: type=1400 audit(1771662899.674:75): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.118515][ T3303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.137029][ T28] audit: type=1400 audit(1771662899.674:76): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.165457][ T28] audit: type=1400 audit(1771662899.674:77): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.178483][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.190364][ T28] audit: type=1400 audit(1771662899.674:78): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.222494][ T28] audit: type=1400 audit(1771662899.674:79): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.382401][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.421145][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.445473][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.487422][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.494646][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.501801][ T3316] bridge_slave_0: entered allmulticast mode [ 26.508140][ T3316] bridge_slave_0: entered promiscuous mode [ 26.516489][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.523645][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.530728][ T3316] bridge_slave_1: entered allmulticast mode [ 26.537246][ T3316] bridge_slave_1: entered promiscuous mode [ 26.557031][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.574756][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.598368][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.632648][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 26.641752][ T3316] team0: Port device team_slave_0 added [ 26.653741][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.660804][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.667971][ T3312] bridge_slave_0: entered allmulticast mode [ 26.674440][ T3312] bridge_slave_0: entered promiscuous mode [ 26.684672][ T3316] team0: Port device team_slave_1 added [ 26.696632][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.703732][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.710803][ T3312] bridge_slave_1: entered allmulticast mode [ 26.717195][ T3312] bridge_slave_1: entered promiscuous mode [ 26.738786][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.745876][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.753035][ T3314] bridge_slave_0: entered allmulticast mode [ 26.759392][ T3314] bridge_slave_0: entered promiscuous mode [ 26.783626][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.790907][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.798189][ T3314] bridge_slave_1: entered allmulticast mode [ 26.804544][ T3314] bridge_slave_1: entered promiscuous mode [ 26.815089][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.824493][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.831432][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.857506][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.872436][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.879403][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.905430][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.922991][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.932109][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.939252][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.946397][ T3318] bridge_slave_0: entered allmulticast mode [ 26.952638][ T3318] bridge_slave_0: entered promiscuous mode [ 26.975105][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.982227][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.989412][ T3318] bridge_slave_1: entered allmulticast mode [ 26.995934][ T3318] bridge_slave_1: entered promiscuous mode [ 27.007904][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.022621][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.045523][ T3312] team0: Port device team_slave_0 added [ 27.051735][ T3314] team0: Port device team_slave_0 added [ 27.062564][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.073085][ T3314] team0: Port device team_slave_1 added [ 27.082995][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.090092][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.097335][ T3313] bridge_slave_0: entered allmulticast mode [ 27.103765][ T3313] bridge_slave_0: entered promiscuous mode [ 27.110921][ T3312] team0: Port device team_slave_1 added [ 27.121652][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.139584][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.146692][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.153877][ T3313] bridge_slave_1: entered allmulticast mode [ 27.160271][ T3313] bridge_slave_1: entered promiscuous mode [ 27.185112][ T3316] hsr_slave_0: entered promiscuous mode [ 27.191075][ T3316] hsr_slave_1: entered promiscuous mode [ 27.197448][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.204480][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.230433][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.251522][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.260840][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.267980][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.293908][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.305077][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.312085][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.338028][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.348982][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.355973][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.381949][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.396174][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.410102][ T3318] team0: Port device team_slave_0 added [ 27.416679][ T3318] team0: Port device team_slave_1 added [ 27.458588][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.465607][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.491533][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.503560][ T3313] team0: Port device team_slave_0 added [ 27.511146][ T3314] hsr_slave_0: entered promiscuous mode [ 27.517316][ T3314] hsr_slave_1: entered promiscuous mode [ 27.523260][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 27.529048][ T3314] Cannot create hsr debugfs directory [ 27.543430][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.550381][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.576434][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.587941][ T3313] team0: Port device team_slave_1 added [ 27.616245][ T3312] hsr_slave_0: entered promiscuous mode [ 27.622260][ T3312] hsr_slave_1: entered promiscuous mode [ 27.628212][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 27.633997][ T3312] Cannot create hsr debugfs directory [ 27.641712][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.648702][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.674668][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.714676][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.721663][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.747971][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.774224][ T3318] hsr_slave_0: entered promiscuous mode [ 27.780165][ T3318] hsr_slave_1: entered promiscuous mode [ 27.786170][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.791895][ T3318] Cannot create hsr debugfs directory [ 27.843301][ T3313] hsr_slave_0: entered promiscuous mode [ 27.849310][ T3313] hsr_slave_1: entered promiscuous mode [ 27.855228][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 27.861021][ T3313] Cannot create hsr debugfs directory [ 27.978404][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.989457][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.998280][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.013358][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.036336][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.045551][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.056345][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.064975][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.090696][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.099604][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.109724][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.121288][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.158401][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.167067][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.183782][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.192181][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.210064][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.245097][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.254101][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.263765][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.273299][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.282618][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.289686][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.297688][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.306938][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.321047][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.328144][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.345173][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.363418][ T1275] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.370484][ T1275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.378955][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.386029][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.422274][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.441264][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.456149][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.471174][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.478251][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.498978][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.506048][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.516813][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.532095][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.539174][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.556043][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.565555][ T1275] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.572697][ T1275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.618402][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.636428][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.645940][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.676534][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.705478][ T246] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.712593][ T246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.722447][ T246] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.729603][ T246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.757947][ T3316] veth0_vlan: entered promiscuous mode [ 28.782331][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.805813][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.818425][ T3316] veth1_vlan: entered promiscuous mode [ 28.855680][ T3312] veth0_vlan: entered promiscuous mode [ 28.863840][ T3312] veth1_vlan: entered promiscuous mode [ 28.879490][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.893338][ T3316] veth0_macvtap: entered promiscuous mode [ 28.909255][ T3312] veth0_macvtap: entered promiscuous mode [ 28.919251][ T3312] veth1_macvtap: entered promiscuous mode [ 28.933835][ T3316] veth1_macvtap: entered promiscuous mode [ 28.951037][ T3314] veth0_vlan: entered promiscuous mode [ 28.962246][ T3314] veth1_vlan: entered promiscuous mode [ 28.971423][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.979666][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.991222][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.003301][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.016159][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.033531][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.050055][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.059444][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.073074][ T30] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.082401][ T30] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.092400][ T922] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.101628][ T922] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.114466][ T3314] veth0_macvtap: entered promiscuous mode [ 29.139827][ T3314] veth1_macvtap: entered promiscuous mode [ 29.147407][ T3318] veth0_vlan: entered promiscuous mode [ 29.154379][ T3312] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.176701][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.189933][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.198537][ T3318] veth1_vlan: entered promiscuous mode [ 29.230206][ T3313] veth0_vlan: entered promiscuous mode [ 29.267439][ T2954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.281114][ T2954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.298093][ T3488] Zero length message leads to an empty skb [ 29.325749][ T2954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.334862][ T2954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.344047][ T3313] veth1_vlan: entered promiscuous mode [ 29.356809][ T3318] veth0_macvtap: entered promiscuous mode [ 29.368537][ T3313] veth0_macvtap: entered promiscuous mode [ 29.388046][ T3318] veth1_macvtap: entered promiscuous mode [ 29.395338][ T3313] veth1_macvtap: entered promiscuous mode [ 29.411317][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.426985][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.439350][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.464275][ T3496] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 29.476794][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.500487][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.543538][ T3502] netlink: 'syz.3.12': attribute type 1 has an invalid length. [ 29.543846][ T2954] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.560426][ T2954] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.574057][ T3504] loop2: detected capacity change from 0 to 512 [ 29.582754][ T2954] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.599421][ T2954] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.635519][ T2954] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.646196][ T2954] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.657462][ T3502] ip6erspan0: entered promiscuous mode [ 29.674730][ T2954] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.753575][ T3510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3510 comm=syz.3.12 [ 29.837717][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 29.837732][ T28] audit: type=1400 audit(1771662904.444:131): avc: denied { create } for pid=3516 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.018754][ T3519] xt_NFQUEUE: number of total queues is 0 [ 30.705202][ T3526] loop2: detected capacity change from 0 to 1024 [ 30.729513][ T3526] EXT4-fs: Ignoring removed orlov option [ 30.780065][ T3526] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.807507][ C1] hrtimer: interrupt took 28679 ns [ 30.822971][ T28] audit: type=1400 audit(1771662904.444:132): avc: denied { bind } for pid=3516 comm="syz.3.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.847385][ T28] audit: type=1400 audit(1771662904.444:133): avc: denied { name_bind } for pid=3516 comm="syz.3.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.004810][ T3538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17'. [ 31.071483][ T3536] lo speed is unknown, defaulting to 1000 [ 31.112757][ T3536] lo speed is unknown, defaulting to 1000 [ 31.145422][ T3536] lo speed is unknown, defaulting to 1000 [ 31.157632][ T3536] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 31.165826][ T3536] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 31.185273][ T3536] lo speed is unknown, defaulting to 1000 [ 31.211644][ T3536] lo speed is unknown, defaulting to 1000 [ 31.217985][ T3536] lo speed is unknown, defaulting to 1000 [ 31.227995][ T3536] lo speed is unknown, defaulting to 1000 [ 31.243054][ T3536] lo speed is unknown, defaulting to 1000 [ 31.339971][ T3548] loop0: detected capacity change from 0 to 512 [ 31.360520][ T3548] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 31.373358][ T3548] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 31.381863][ T3548] EXT4-fs (loop0): 1 truncate cleaned up [ 31.388690][ T3548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.402345][ T28] audit: type=1400 audit(1771662904.444:134): avc: denied { node_bind } for pid=3516 comm="syz.3.14" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 31.424338][ T28] audit: type=1400 audit(1771662904.444:135): avc: denied { write } for pid=3516 comm="syz.3.14" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.445332][ T28] audit: type=1400 audit(1771662904.444:136): avc: denied { connect } for pid=3516 comm="syz.3.14" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.468432][ T28] audit: type=1400 audit(1771662904.444:137): avc: denied { name_connect } for pid=3516 comm="syz.3.14" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.490527][ T28] audit: type=1400 audit(1771662905.364:138): avc: denied { write } for pid=3527 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.510180][ T28] audit: type=1400 audit(1771662905.434:139): avc: denied { mount } for pid=3525 comm="syz.2.15" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.531687][ T28] audit: type=1400 audit(1771662905.434:140): avc: denied { create } for pid=3525 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.552005][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.604337][ T3528] syz.3.16 (3528) used greatest stack depth: 10376 bytes left [ 31.660677][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz.4.23'. [ 31.672544][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.697826][ T3561] loop2: detected capacity change from 0 to 1024 [ 31.705061][ T3561] ======================================================= [ 31.705061][ T3561] WARNING: The mand mount option has been deprecated and [ 31.705061][ T3561] and is ignored by this kernel. Remove the mand [ 31.705061][ T3561] option from the mount to silence this warning. [ 31.705061][ T3561] ======================================================= [ 31.757067][ T3561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 31.772139][ T3569] loop0: detected capacity change from 0 to 512 [ 31.773890][ T3561] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.851380][ T3572] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.873643][ T3573] netlink: 277 bytes leftover after parsing attributes in process `syz.3.25'. [ 31.935277][ T3573] hub 8-0:1.0: USB hub found [ 31.940353][ T3573] hub 8-0:1.0: 8 ports detected [ 31.959117][ T3573] netlink: 'syz.3.25': attribute type 36 has an invalid length. [ 32.011886][ T3574] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 32.021327][ T1275] EXT4-fs error (device loop2): ext4_map_blocks:818: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 32.055846][ T3573] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 32.065811][ T3573] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 32.086696][ T3573] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 32.097028][ T3574] macvlan1: entered allmulticast mode [ 32.105325][ T3574] veth1_vlan: entered allmulticast mode [ 32.114235][ T3574] team0: Port device macvlan1 added [ 32.174766][ T1275] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 32.223742][ T1275] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.223742][ T1275] [ 32.260228][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 32.317937][ T3577] lo speed is unknown, defaulting to 1000 [ 32.405713][ T3586] netlink: 120 bytes leftover after parsing attributes in process `syz.2.29'. [ 32.441170][ T3576] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 32.551230][ T3597] netlink: 516 bytes leftover after parsing attributes in process `syz.1.33'. [ 32.584766][ T3599] netlink: 68 bytes leftover after parsing attributes in process `syz.0.34'. [ 32.593781][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 32.614798][ T3599] loop0: detected capacity change from 0 to 1024 [ 32.668920][ T3599] EXT4-fs error (device loop0): ext4_acquire_dquot:7003: comm syz.0.34: Failed to acquire dquot type 0 [ 32.703310][ T3599] loop0: lost filesystem error report for type 5 error -117 [ 32.704874][ T3599] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 32.726586][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 32.726609][ C0] EXT4-fs (loop0): initial error at time 1771662907: ext4_acquire_dquot:7003 [ 32.726634][ C0] EXT4-fs (loop0): last error at time 1771662907: ext4_acquire_dquot:7003 [ 32.768141][ T3614] loop3: detected capacity change from 0 to 512 [ 32.780799][ T3599] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.34: corrupted inode contents [ 32.809322][ T3614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.818085][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.818291][ T3599] EXT4-fs error (device loop0): ext4_dirty_inode:6450: inode #13: comm syz.0.34: mark_inode_dirty error [ 32.850566][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.850791][ T3599] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.34: corrupted inode contents [ 32.871785][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.872134][ T3599] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.34: mark_inode_dirty error [ 32.873192][ T3614] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.881517][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.905758][ T3614] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.922832][ T3599] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.34: corrupted inode contents [ 32.937317][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 32.937466][ T3599] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 32.964342][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.965486][ T3599] loop0: lost filesystem error report for type 5 error -117 [ 32.973732][ T3599] EXT4-fs error (device loop0): ext4_do_update_inode:5569: inode #13: comm syz.0.34: corrupted inode contents [ 32.993045][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 33.001116][ T3599] EXT4-fs error (device loop0): ext4_truncate:4587: inode #13: comm syz.0.34: mark_inode_dirty error [ 33.021590][ T3599] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 33.024705][ T3625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.42'. [ 33.042753][ T3599] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 33.045525][ T3625] vlan2: entered promiscuous mode [ 33.051970][ T3599] loop0: lost filesystem error report for type 5 error -117 [ 33.057647][ T3599] EXT4-fs (loop0): 1 truncate cleaned up [ 33.093335][ T3625] veth1_to_bridge: entered promiscuous mode [ 33.096032][ T3599] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.155409][ T3599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.34'. [ 33.176858][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.188730][ T3638] loop4: detected capacity change from 0 to 512 [ 33.214627][ T3641] loop1: detected capacity change from 0 to 1024 [ 33.257217][ T3641] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.375050][ T3647] ================================================================== [ 33.383153][ T3647] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 33.391249][ T3647] [ 33.393610][ T3647] write to 0xffff8881045690a8 of 8 bytes by task 3641 on cpu 0: [ 33.401232][ T3647] filemap_splice_read+0x523/0x780 [ 33.406368][ T3647] splice_direct_to_actor+0x26e/0x670 [ 33.411754][ T3647] do_splice_direct+0x119/0x1a0 [ 33.416610][ T3647] do_sendfile+0x382/0x650 [ 33.421034][ T3647] __x64_sys_sendfile64+0x105/0x150 [ 33.426242][ T3647] x64_sys_call+0x2dc4/0x3020 [ 33.431041][ T3647] do_syscall_64+0x12c/0x370 [ 33.435653][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.441549][ T3647] [ 33.443869][ T3647] write to 0xffff8881045690a8 of 8 bytes by task 3647 on cpu 1: [ 33.451497][ T3647] filemap_splice_read+0x523/0x780 [ 33.456616][ T3647] splice_direct_to_actor+0x26e/0x670 [ 33.460806][ T3651] netlink: 16 bytes leftover after parsing attributes in process `*'. [ 33.461995][ T3647] do_splice_direct+0x119/0x1a0 [ 33.462016][ T3647] do_sendfile+0x382/0x650 [ 33.479388][ T3647] __x64_sys_sendfile64+0x105/0x150 [ 33.484596][ T3647] x64_sys_call+0x2dc4/0x3020 [ 33.489300][ T3647] do_syscall_64+0x12c/0x370 [ 33.493900][ T3647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.499786][ T3647] [ 33.502094][ T3647] value changed: 0x00000000001ed000 -> 0x0000000000603000 [ 33.509438][ T3647] [ 33.511743][ T3647] Reported by Kernel Concurrency Sanitizer on: [ 33.517890][ T3647] CPU: 1 UID: 0 PID: 3647 Comm: syz.1.47 Not tainted syzkaller #0 PREEMPT(full) [ 33.526986][ T3647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.537028][ T3647] ================================================================== [ 34.135928][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.