last executing test programs: 16m38.171959003s ago: executing program 32 (id=987): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x1, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40080d0}, 0x20000000) sendmsg$can_bcm(r0, 0x0, 0x4004844) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 16m11.623553169s ago: executing program 33 (id=1072): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x200}) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x2c, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES16=r4], 0xfe33) sendmsg$NFC_CMD_LLC_GET_PARAMS(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fcfcffffff00000008000100", @ANYRES32=0x0, @ANYBLOB="f3f45880f8a5ecbbff71a4022559e7e8633dd6428c27fa181ba4aa1d9cc393c45b60f04a9315c4e3aa95e3a3c882c1e537150304c755939468892fbfd006445e2e9bab8e5bad92997a789baf51e54c5520beaf12d797592a6f04ee1cad40cb9c3dd5ab6f68ba5fcf2abb5176ab89e665ad542cf097e6e72c9b9a90cc6550eab783e15e93282de836adc16477ce9e31689f41bdb608735e1ed1d484fbff24000b39fb703b0552137cd6c42045811b3a96bd4b64c723185d21f4a4875039e8b0d2"], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711, @hyper}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1b, 0x0, &(0x7f00000007c0)="e3ef7f670000ec6789b42415449400000000000000000000000400", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) r9 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xd, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xe315b0353ed9bb01}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x1fffffff}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r12], 0xd8}, 0x1, 0x0, 0x0, 0x4004055}, 0x40485c1) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r13, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x40000000000000, 0x0, 0xf0}) sendto$packet(r13, &(0x7f00000001c0)="d9b65e387e6d44f486aa85d044ef1523b91978a6f58960690e87c55285c8fa694f2a14e06ada9dfcdf07a2be8c113bbc6c81a4278dffd8b9c30351dc3e5b96b6cb6fcdbf09b5b3192b32356c065aa20b4f158ecf566008dac6ca65b9941d", 0x5e, 0x10, 0x0, 0x0) 15m45.92319885s ago: executing program 34 (id=1340): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x1002, 0x20da, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x80080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x1) (fail_nth: 4) 15m35.860457028s ago: executing program 35 (id=1309): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x134) copy_file_range(r0, 0x0, r0, &(0x7f0000000500)=0xffff, 0x9, 0x0) 15m22.354367908s ago: executing program 36 (id=1398): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x40000}]}}}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @empty}, 0x10) (async) setsockopt$sock_int(r1, 0x1, 0x28, &(0x7f0000000000)=0x3, 0x4) (async) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x40000}]}}}]}, 0x3c}}, 0x0) (async) 15m16.877760976s ago: executing program 37 (id=1428): unshare(0x22020400) syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1b, &(0x7f00000000c0)=0x7b, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 15m15.359363556s ago: executing program 38 (id=1442): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0xf0, 0x29, 0x2, {0x5, [{{0x2, 0x0, 0x8}, 0x521b, 0xd5, 0xb, './bus/file0'}, {{0x20, 0x3, 0x3}, 0x6, 0x0, 0xd, './file0/file0'}, {{0x0, 0x0, 0x5}, 0x4, 0x0, 0x7, './file0'}, {{0x8, 0x4, 0x5}, 0x4, 0x3, 0xb, './bus/file0'}, {{0x1, 0x2, 0x4}, 0x6, 0x4, 0x7, './file0'}, {{0x20, 0x4, 0x3}, 0xfffffffffffff15d, 0x69, 0x5, './bus'}, {{0x2}, 0x0, 0xff, 0x7, './file0'}]}}, 0xf0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) mkdirat(r1, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000000)='./bus/file0\x00', 0x8) 15m7.811949932s ago: executing program 39 (id=1465): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r1, 0xa, 0x0, 0xccd, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0]}, 0x40) sendfile(r0, r1, 0x0, 0x100000000) 14m51.808613414s ago: executing program 40 (id=1500): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e14", 0x1a}], 0x1}, 0x24000044) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) (async) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="180000001000000000000000000000d3", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000008500000006000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async, rerun: 64) r3 = getpid() (rerun: 64) r4 = syz_pidfd_open(r3, 0x0) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) (async, rerun: 32) setns(r4, 0x24020000) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r8, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000180)=0x8) (async, rerun: 64) connect$unix(r7, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async, rerun: 64) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ptrace(0x10, r6) (async) ptrace$setregset(0x4205, r6, 0x1, &(0x7f0000000100)={0x0, 0x700}) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) 13m32.322138182s ago: executing program 41 (id=2273): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0e51f76e000000000000000000000000000000000000000000000000dd5bd520f513442c2e278a0dac25f6f4680d67bfc86366ffd8d55b891ee5bad05e5507d2986fa36139f0b20baad8afdbeca0d27e09378274db2a5f68bc35d7bb40c358ddfafd541d970bd898f99e8f2a4e59c68567daf51f4ec8feaa380dc85158da6a4e4cb7e6d1951bc2d69ca5be814bbb2c42e8a08278c1efbf0d4bd4a9910082549733f3ff8feaa6025d397f4838662a9d7c4e31875e9c50d81a5abfd77a014e32a9186c41fadd00a4243dd33ae35aebc3ee82cf5066b7980dbb1b8be26d9eb56ce7abb9a0c0ac6bcce2bcbfbb4b7988ba5d7b02581533f7e5cb5c89dc8eda3ad04efad7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, &(0x7f0000000280)=@isdn, &(0x7f0000000540)=0x80) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="0100230100003493d86903"], 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmmsg$inet6(r5, &(0x7f00000046c0)=[{{&(0x7f0000000180)={0xa, 0x4e24, 0x401, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}], 0x1, 0x20044040) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000240)={r9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={r9, @in6={{0xa, 0x4e24, 0x4, @remote, 0x80}}, 0x5, 0x6}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3f}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xb, 0x1011, &(0x7f0000000840)=""/4113, 0x41100, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000340)={0x3, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x800, 0x2, 0x8, 0x7, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x1, 0x1012) 12m21.158878072s ago: executing program 42 (id=2971): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f00000005c0)=ANY=[@ANYBLOB='utf8,uid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRESDEC=0x0, @ANYRES32], 0x2, 0xa2f, &(0x7f0000000ec0)="$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") syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x94) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$XFS_IOC_GETVERSION(r2, 0x80087601, &(0x7f0000000340)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0xd}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) accept(0xffffffffffffffff, 0x0, 0x0) recvfrom$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x81, &(0x7f0000000880)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast1}}, 0x20) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a010102003ea5694796ef5060890f5102800c00028005000100000000000800074000"/112], 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x0) chroot(&(0x7f0000000180)='./file0\x00') setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2003, 0x1}, 0x10) 10m37.147943489s ago: executing program 43 (id=3918): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$inet(r1, &(0x7f0000000000), &(0x7f0000000080)=0x10) setsockopt$inet_int(r1, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x1, &(0x7f0000000400)=0x2081, 0x4) setsockopt$TIPC_MCAST_BROADCAST(r0, 0x10f, 0x85) 10m29.039416835s ago: executing program 44 (id=3984): recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40002000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f00000001c0)=0x3) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xb07f, 0x3, 0x200, 0x9, 0xfffffffffffffe03, 0x8, 0x200000000000008, 0x4, 0x0, 0x8, 0xf17, 0x547875b, 0x1, 0x4, 0x90, 0x7, 0x9, 0xcc7, 0x5b, 0x40, 0x2, 0x5, 0x800000000000002, 0x3d, 0x2, 0x10000000000008}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100), 0xfd, 0x269, &(0x7f0000000a00)="$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") getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) timer_create(0x0, &(0x7f0000000400)={0x0, 0x2, 0x2, @tid=r1}, &(0x7f0000000480)) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f000001fc00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1814011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x600, 0x1) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc, 0x12, {0x2}}]}, 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000780)={0x28, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x48}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xb9499aca82b4eb99) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = perf_event_open$cgroup(&(0x7f00000000c0)={0x3, 0x80, 0xfc, 0x8, 0x7, 0x3, 0x0, 0x7, 0x10047, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000080), 0x4}, 0x800, 0x140000000, 0x6, 0x2, 0x9, 0x0, 0xf, 0x0, 0x5}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x510, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000106}, 0x0, 0xfffffdfffffffffc, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a60000000060a0b0400000000000000000200ffff0900010073797a30000000000900020073797a320000000034000480300001800b00010074617267657400002000028008000100534554000c00030002b511128cd5b0f90800024000000001"], 0xfea1}}, 0x800) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 10m17.551194928s ago: executing program 9 (id=4069): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) (async, rerun: 32) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x47, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x30040, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x1000, 0x6}, 0x6025, 0x4003, 0x4, 0x0, 0x80000000, 0x1, 0xa, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) (async, rerun: 32) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0xf) (async, rerun: 32) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x40000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) write(r1, &(0x7f0000001340)="89d87df03855", 0x6) (async, rerun: 32) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) (rerun: 32) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000007c0)=[0x5], 0x0, 0x0, 0x4c}}, 0xa3) (async) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x4}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x80, 0x2b, 0x5, 0x0, 0x9, 0x8}) (rerun: 64) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioperm(0x1, 0x3, 0x1000) (async) r5 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r6 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x8, &(0x7f0000000000)={0x0, 0x1, 0x7}) mq_timedreceive(r6, &(0x7f0000000640)=""/4096, 0x1000, 0x1, 0x0) (async, rerun: 64) read(r4, 0x0, 0x0) (rerun: 64) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x1d, 0x1, 0xd, &(0x7f00000004c0)=[0x0], 0x1, 0x0, &(0x7f0000000500), &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) (async, rerun: 64) r9 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) (async) r10 = fsmount(r9, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001640)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="3100000001000000", @ANYRES32, @ANYBLOB="b647d29fd367b1fd08b8a9ca166546c6d7b93497e24d29bb1c2d6142214f5208666762552434c796f237713003c15a648f91ec5d1b3ddbb33d1ba3f82af83136c3f6ac5545e0e05db92c0f66db400e33c209e490b68a4f2ba4aa0ce91d26b5af706945247a2b133cd1ee3a99b74d979a0f912f826752a87c127da57de74d3ad267e0ab333511a3497bf390d171147753000da435461692a83b1efa5402c042bc54b64a80cace2f7fd485218c7d0916691295d3e86e2cbd58ffef01ebcfd99955cc14b845de7a", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r8], 0x20) (async) sendmsg$nl_xfrm(r7, 0x0, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000008c0)=ANY=[@ANYBLOB="84010000210001000000000000000000fc0200"/31, @ANYRES32=0x0, @ANYRES32=0x0], 0x184}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 32) socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) 10m17.550873179s ago: executing program 9 (id=4070): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x300, {{@in6=@empty, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}}, {{@in6=@loopback, 0xffffffff, 0x3c}, 0x2, @in=@multicast2, 0x0, 0x1}, {{@in6=@private2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffffff, 0x3}]}]}, 0x17c}}, 0x20000000) 10m17.52215502s ago: executing program 9 (id=4071): r0 = io_uring_setup(0x66a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0xfffffffc, 0x87}) r1 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000000)=r1, 0x1) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x10000000000000, 0x1, 0x2, 0xa8}, 0x0, &(0x7f0000000000)={0x1f, 0x4, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0xa, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x4, @perf_config_ext={0x7, 0x100}, 0x1040, 0x0, 0x7, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pimreg1\x00'}) bind$xdp(r3, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10m16.559641791s ago: executing program 9 (id=4083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x10000) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000003080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3810746, &(0x7f00000012c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@noquota}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 10m16.495271254s ago: executing program 9 (id=4084): socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@loopback, @local}, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) file_getattr(r1, &(0x7f0000001080)='./file0\x00', 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r4, 0x0, &(0x7f0000000b80)) 10m12.403422249s ago: executing program 9 (id=4092): unshare(0x22060600) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x710, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000000)={0x1, 0x6, 0x1}) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 10m12.403046089s ago: executing program 45 (id=4092): unshare(0x22060600) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x710, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xb}, 0x102260, 0x10000, 0x0, 0x1, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020100006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r4 = fsmount(0xffffffffffffffff, 0x1, 0xc) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f0000000000)={0x1, 0x6, 0x1}) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 10m10.918913717s ago: executing program 7 (id=4104): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x100224, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x1c, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x4000000000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) r3 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000015c0)=""/4092, 0xffc}], 0x1}, 0x100) write$cgroup_devices(r2, &(0x7f00000005c0)=ANY=[], 0xfffffeff) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r4 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000140)=0x5, 0x4) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r5, &(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x7}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 10m10.565268776s ago: executing program 7 (id=4105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB], 0x54}}, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) fremovexattr(r2, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x9, 0x0, 0x81, 0xfffffff9, 0xa}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x68, r4, 0x1, 0x22, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x20019}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x3f, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @ht={0x2d, 0x1a, {0x40, 0x1, 0x7, 0x0, {0xfffffffffffffffa, 0x1f80, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x1, 0xfffffff7, 0x2}}, @ht={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0x1, 0x20, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0x0, 0x9}}]}]}, 0x68}}, 0x0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, r4, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x58}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x801) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRESDEC=r2, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c000580050001000000000005002000010000000500210000000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x5a, 0x5, 0xa, 0x2, 0xb, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500810007000000417b5cb0e0b2628df912a2fe34c58e1b3e107bbf21ca6f87e6d32f11bc627f2c78ed93926da896c073e88c241083a7f31625a4e2ae54201222c5080d5ae88d1c6bb45657f2ce036384ef3d1764d7064418df5e3a5f35d70bb0a22d8eae36305f3da189bb386456e2ae5202531d653f0ccd338bdb91b5464c7aa7f45c3c2708ae36fd44e0955d18da9ef1f752e47db3bc1428f468e9b990fc41fffb845e804f3d58650fb0e5180a953b07678ff390a4134da52a4cad88d6"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 10m10.067305042s ago: executing program 7 (id=4108): semtimedop(0x0, &(0x7f0000000380)=[{0x0, 0x9, 0x800}, {}], 0x2, 0x0) semctl$GETNCNT(0x0, 0x0, 0xe, 0x0) semget$private(0x0, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x421647, 0x160) syz_mount_image$ext4(&(0x7f0000000040)='ext3\x00', &(0x7f0000000480)='./bus\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@noload}, {@lazytime}, {@noload}, {@resgid}, {@auto_da_alloc}]}, 0xff, 0x451, &(0x7f0000000940)="$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") r0 = open(0x0, 0x0, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x3) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@data_writeback}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r2 = syz_open_dev$loop(&(0x7f00000000c0), 0x7, 0xe0942) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0xdf5f, 0x0, 0x0, 0x14, 0x14, "fee8a2ab78fc979fd1e03096159a013c1ea89de2b7fb0000e60080b8785d96000100000000000000000000d4669f97004000", "2809e8dbe108598948224ad54afac11d875397bdb22d00ac000000000000000000000000000000000000fe00000800", "f4bd000000801900", [0x4, 0xffffffff9673e35d]}}) fallocate(r2, 0x11, 0x0, 0x5345) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) 10m9.15120429s ago: executing program 7 (id=4118): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa35f6566994c681001000080046b4002c00000000a306907864010101ac1414aa010703894e224001", @ANYRESHEX, @ANYRES32=0x41424344, @ANYRES32=0x0], 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)={'gre0\x00', 0x0, 0x1, 0x80, 0x8001, 0x4, {{0x31, 0x4, 0x0, 0x3d, 0xc4, 0x68, 0x0, 0x40, 0x29, 0x0, @private=0xa010102, @multicast2, {[@cipso={0x86, 0x33, 0xffffffffffffffff, [{0x6, 0x9, "a50e368fdd75e2"}, {0x2, 0x9, "0c19c5016225d5"}, {0x5, 0x7, "4baf7c25a7"}, {0x0, 0x8, "611135d11f9e"}, {0x2, 0xc, "30d04b44218831af85a2"}]}, @timestamp_prespec={0x44, 0x34, 0x3a, 0x3, 0x7, [{@private=0xa010100, 0x8}, {@empty}, {@loopback, 0x6}, {@loopback, 0x101}, {@remote, 0x8001}, {@empty, 0xffffffff}]}, @rr={0x7, 0x17, 0xfb, [@multicast1, @remote, @multicast2, @local, @broadcast]}, @noop, @timestamp_addr={0x44, 0x14, 0xe, 0x1, 0x6, [{@rand_addr=0x64010102, 0x6}, {@rand_addr=0x64010100, 0x1}]}, @end, @noop, @noop, @lsrr={0x83, 0xb, 0x10, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x89, 0xe, "206c94203bd6751334f86180"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'syztnl2\x00', r1, 0x1, 0x7800, 0x9, 0x6f, {{0x11, 0x4, 0x1, 0x9, 0x44, 0x66, 0x0, 0x3, 0x29, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x1e}, {[@timestamp={0x44, 0x24, 0xa4, 0x0, 0x3, [0xe22, 0x4, 0x5, 0x1, 0x1a, 0x3cc4, 0xf, 0x10]}, @ra={0x94, 0x4}, @end, @ra={0x94, 0x4, 0x1}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x5) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x34) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="350400002f000511d25a80648c63940d0224fc60040006400c0003000200002037153e370c040180060410004500", 0x2e}, {&(0x7f0000000600)="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", 0x407}], 0x2}, 0x4000014) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000180)={@mcast2, r2}, 0x14) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 10m8.732058512s ago: executing program 7 (id=4126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000003080)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3810746, &(0x7f00000012c0)={[{@noauto_da_alloc}, {@user_xattr}, {@commit={'commit', 0x3d, 0x5}}, {@mblk_io_submit}, {@stripe={'stripe', 0x3d, 0x4}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dioread_nolock}, {@noquota}, {@nodiscard}]}, 0xff, 0x451, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000980)={[{@nodelalloc}, {@noblock_validity}, {@nolazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@minixdf}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9d, 0x4f0, &(0x7f0000000a40)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 10m8.499572165s ago: executing program 7 (id=4129): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m52.41225834s ago: executing program 46 (id=4129): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x1fc, 0x3}, 0x102802, 0x2e, 0x0, 0x3, 0xfff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 9m41.516925302s ago: executing program 3 (id=4379): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$L2TP_CMD_SESSION_CREATE(r2, 0x0, 0x4040800) r3 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="4c12", 0x2, 0xffffffffffffffff) keyctl$read(0xb, r3, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r4 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) r5 = shmat(r4, &(0x7f0000f62000/0x1000)=nil, 0x7000) mremap(&(0x7f0000fa8000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) shmdt(r5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") symlink(&(0x7f0000000080)='mnt\x00', &(0x7f00000000c0)='./file0\x00') symlink(&(0x7f000000a900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000400001803c1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x7, 0x7}, 0x2002, 0x800000000000032, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 9m41.011316059s ago: executing program 3 (id=4388): socket$inet6(0xa, 0x805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000240)={@loopback, @local}, 0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) file_getattr(r1, 0x0, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x7f, @empty, 0xa09b}, {0xa, 0x4ea5, 0x200009, @mcast1, 0x1}, 0xffffffffffffffff, 0x400}}, 0x48) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x190ec) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname(r4, 0x0, 0x0) 9m40.895309115s ago: executing program 3 (id=4390): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) timer_create(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x40000) getdents(r0, &(0x7f0000000ac0)=""/182, 0xb1) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) 9m40.0444059s ago: executing program 3 (id=4394): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x656, &(0x7f0000000d40)="$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") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc848}, 0x80) accept(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) syz_clone3(&(0x7f0000000340)={0x100, 0x0, &(0x7f0000000140)=0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(r0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$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") syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x74e1, 0x400, 0x3, 0x4000014a}, &(0x7f0000000440)=0x0, &(0x7f0000000200)=0x0, &(0x7f00000006c0)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000700)='mountinfo\x00') preadv(r4, &(0x7f0000000300)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_TIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff4000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) munmap(&(0x7f0000ff6000/0x4000)=nil, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r6 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r7 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001400)={@ifindex, 0xffffffffffffffff, 0x2, 0x2}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map=r1, r1, 0x4, 0x2008, 0x0, @value=r4}, 0x20) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) 9m39.757422565s ago: executing program 3 (id=4396): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f0000000180)="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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffff927, 0x101}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = eventfd2(0x74a6, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x161101) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000f40)={0x3, &(0x7f0000000f00)=[{0x5}, {0x25}, {0x6}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000140)={0x0, 0x2, 0x100000001}) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0005407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a3200000000"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r7, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) recvmsg(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) r8 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) writev(r8, &(0x7f0000000380)=[{&(0x7f0000000040)='\b\x00\x00\x00', 0x4}], 0x1) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x0, 0x5, 0x5, 0x8, @time={0x908a, 0x2b}, {0x1, 0x8}, {0xd, 0x6}, @raw32={[0x2, 0x8, 0x2]}}, {0x9, 0x80, 0x9, 0xf, @tick=0xe41, {0xff}, {0x8, 0x3}, @addr={0x2, 0x7}}], 0x38) 9m39.377585405s ago: executing program 3 (id=4398): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) timer_create(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x40000) getdents(r0, &(0x7f0000000ac0)=""/182, 0xb1) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) 9m39.356599826s ago: executing program 47 (id=4398): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x47a, &(0x7f0000000180)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x129a82, 0x0) sendfile(r1, r1, 0x0, 0x7) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2, 0xfffffffe, 0xf, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = timerfd_create(0x0, 0x80000) timerfd_gettime(r2, &(0x7f0000000000)) timer_create(0x2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x40000) getdents(r0, &(0x7f0000000ac0)=""/182, 0xb1) r5 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffa003e459, 0x700000000000000) 9m17.77470814s ago: executing program 8 (id=4699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000080)=r0, 0x12) 9m17.720519673s ago: executing program 8 (id=4701): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0b062dbd7000000000003000000008000200", @ANYRES32=r2, @ANYBLOB="05003500e916000005003300030000000500340000000500050036"], 0x3c}}, 0x0) 9m17.640515457s ago: executing program 8 (id=4702): connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="cce971f4", 0x4, 0x0, 0x0, 0x0) 9m17.545131513s ago: executing program 8 (id=4703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x1, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2400000000000000}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x3}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8005}, 0x0) 9m17.266849197s ago: executing program 8 (id=4710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x5c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x9, 0xa8e4deb, 0x8a8}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xcebc}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 9m16.924069455s ago: executing program 8 (id=4715): fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa03}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 9m0.882522449s ago: executing program 48 (id=4715): fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000280), 0x0, 0x0, 0x0, 0xfffffffffffffffe) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)="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", 0xa03}], 0x1) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) 3m58.989014393s ago: executing program 4 (id=7738): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5411, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) open(&(0x7f00000003c0)='.\x00', 0x107041, 0x84) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x18, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r7, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0xf9, 0x20000}, 0x20) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="640000001000030528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000700000000440012800b0001006272696467650000340002800c00230006000000000000000c002100030000000000000005002500010000000500170001000000080024"], 0x64}}, 0x0) 3m57.833198345s ago: executing program 4 (id=7745): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x44000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x1000, 0xb65, 0x820, 0x4, 0x4, "f7744f7014e8c2d9b5cd3bfcfd0a24402d7ac2", 0x4, 0x9c1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000600), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f0000000140)) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='c 122'], 0xa) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000100)) sendmsg$nl_route(r6, 0x0, 0x8000) sendmsg$TIPC_CMD_GET_LINKS(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004400}, 0x8000) 3m57.469144894s ago: executing program 4 (id=7747): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0x106, 0x2, 0xff, 0x1}}) 3m57.389213318s ago: executing program 4 (id=7748): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x210090, &(0x7f0000000400)={[{@nodiscard}, {@noauto_da_alloc}, {@nojournal_checksum}, {@nobh}, {}, {@grpquota}, {@i_version}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@oldalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x37}}]}, 0x3, 0x5a0, &(0x7f0000000c80)="$eJzs3c9rG8ceAPDvylLs/HgvDoTw8ng8Aj00JY0c2/2RQg/psbShgbbn1NiKCZajYMkhdgNNDs2llxJ6KQ2U3vsH9NBD6KXH/hWBNhBKMC00F5WVV44cSbZsy40TfT6w9szuSrOzs99hViOxAQysE+mfXMTxiPgyiTjcsi0f2cYTq/utPLoxnS5J1Osf/p5Ekq1r7p9k/w9mmf9ExE+fR5zKtZdbXVqemyqXSwtZfqw2f3WsurR8+vL81GxptnRlYnLy7OuTE2+9+UbXY09ayuzFKxf+/PqDe++e/WIoIh4cuZPEuTiUbWutx5YMr8vdbM2cqNez4yvEuadeNr6twvaurbQDe8dQFueFiDheOFxoRv2G6lobXgSfpeEMDKhki/E/rL+AF0RzHNC8t9/2ffBz6uE7qzdA7fXPr342EiONe6MDK8m6O6P0Dmi0D+WnZfzw29076RI7+RwCYItu3oqIM/l8e/+XZP3f9p3pYZ+ny9D/wT/nXjr+ebV9/DMcubXxT3QY/xzsELvbsXn85x70oZiu0vHf2x3Hv2uTVqNDWe5fjTFfIbl0uVxK+7Z/R8TJKAyn+Y3mc86u3K9329Y6/kuXtPzmWDA7jgf59XNMMTNVm9pJnVs9vBXx347j32St/ZMO7Z+ej497LONY6e7/u23bvP67q/5dxMsd2//JHEey8fzkWON6GGteFe3+uH3sl27ld67/zz/uQlU7Stv/wMb1H01a52urWy/j25HHpW7btnv970s+aqT3ZeuuT9VqC+MR+5L329dPPHltM9/cP63/yZc6x/9G1//+iPikx/rfPvr9/9rX1od7q//uSus/8zgiem7/rSfuv/fpN93K7639X2ukTmZrWvq//d3et9cD3On5AwAAAAAAgL0kFxGHIskVYyRL53LF4ur3O47GgVy5Uq2dulRZvDITjd/KjkYh15zpPtzyfYjx7PuwzfzEU/nJiDgSEV8N7W/ki9OV8syzrjwAAAAAAAAAAAAAAAAAAADsEQfXfv8f637/n/p16FkfHbDr8qvP/wYG0KaP/O/Hk56APWnT+AdeWOIfBpf4h8El/mEgNab4xD8MLvEPg0v8w+AS/wAAAAAAAAAAAAAAAAAAAAAAAAAAANBXF86fT5f6yqMb02l+5trS4lzl2umZUnWuOL84XZyuLFwtzlYqs+VScboyv9n7lSuVq+MTsXh9rFaq1saqS8sX5yuLV2oXL89PzZYuljxnHAAAAAAAAAAAAAAAAAAAANpVl5bnpsrl0kIfEoVyuZSLiF52juhToc9d4q8dv0/abjfzXc7zSNawu1qLJJ6sye+JsyrR78Sz7ZcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNXfAQAA//84yy7/") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2b, 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x4, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0xff, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x0, 0xfc}, 0x10001, 0x0, 0x800000, 0x6, 0x40000002, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc4}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfe33) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x20048090) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x270, 0xd8, 0x8, 0xfa04, 0xd8, 0x6c02, 0x1d8, 0x194, 0x194, 0x1d8, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x8fb2bd54e1114dfe, 'sit0\x00', 'ip6_vti0\x00', {0xff}, {}, 0x6, 0x0, 0x32}, 0x0, 0x98, 0xd8, 0x0, {0x0, 0x74020000}, [@common=@inet=@ecn={{0x28}, {0x10, 0x30, 0x5, 0x8}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7d, 0x4, "744e0c8559c5a9128a6df634790dc3271e33969086733af137c08495d02d"}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x1a5, 0xc20, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, 0x1, 0x10, [0x18, 0x2f, 0x22, 0x8, 0x1d, 0x18, 0x15, 0x2e, 0x29, 0x32, 0xe, 0x2, 0x1a, 0x31, 0x39, 0x3f], 0x0, 0x8e, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='c'], 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xd4, 0x0, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4", 0x0, 0xfe, 0x60000000, 0x0, 0x1b, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 3m57.246382725s ago: executing program 4 (id=7753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0xb8, r1, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x90, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6c63468a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x32ab591b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1612091e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ef970c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6b552e80}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x19df7bfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x40ccb47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x337a5bc4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3e8f7ed8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2fc96bc8}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0xb8}}, 0x0) 3m56.97848146s ago: executing program 4 (id=7761): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x100600, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304010000000026a65835c1231300000600000500000a14000000ec03010000"], 0x69}}, 0x40000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000100)) unshare(0x4040600) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="01000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) 3m56.96286777s ago: executing program 49 (id=7761): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0x830d}, 0x100600, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) r1 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000005304010000000026a65835c1231300000600000500000a14000000ec03010000"], 0x69}}, 0x40000) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2721, 0x0, &(0x7f0000000100)) unshare(0x4040600) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="01000000000000000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x38, 0x12, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8224}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x500) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) 9.26649609s ago: executing program 1 (id=9409): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000814}, 0x40c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x2d8, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x600, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x338) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x480}, 0x94) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x25, 0x359, &(0x7f0000000bc0)="$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") r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0xb4, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xa0, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x32, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0xffffffffffffffe6}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000080)=0x8) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000140)={0xc688, 0x3, 0x3, 0x8316, 0xf4, "04ffff0500000000000000100000003222dd76", 0x8, 0x6df}) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) 6.469965658s ago: executing program 1 (id=9414): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x3, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000004}, [@printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x7c, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.324202516s ago: executing program 1 (id=9415): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000020602010000000000000000050000050900020073"], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4c105) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 2.45153483s ago: executing program 5 (id=9442): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x4, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfc}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x84, &(0x7f0000000480)={r1, @in={{0x2, 0x4ea0, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dc3, 0x8, 0x7]}, &(0x7f0000000300)=0x100) prctl$PR_GET_THP_DISABLE(0x2a) socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) open_by_handle_at(r3, &(0x7f0000002580)=ANY=[@ANYBLOB="0c000000fe00000013"], 0x0) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/148, 0x94, 0x40002f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r4, 0x4b45, 0x1) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_pidfd_open(r5, 0x0) wait4(r5, 0x0, 0x40000000, 0x0) ioctl$FS_IOC_GETVERSION(r6, 0xc040ff0b, &(0x7f0000000180)) 2.198232954s ago: executing program 5 (id=9445): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x107200, 0x10004, 0x20da, 0x7, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001140)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x3ff) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000013c0)={r2, &(0x7f0000001240)="0d66adb11c0d112ded7b90ca63a4b58fb0647e16b2cbea25e699450cf30624ea57a55b85ee4c4d5ee09b13267093ae00a0b9ee401c151ba4ec470049c63ed95cbb7bcc8c2d24b8e2adbd76b056ec04299b4282529df28d1be1b72fefe195e6becc692e1fc90d55a6492e98e103a266ceff605b7ee8338b826714cf29f37c0ba7be4c9c00fbb310af681f9da176dd058826adfd094c8e469fadd9", 0x0, 0x4}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x7f8}, {&(0x7f0000001040)}], 0x2}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0x2e4}, {&(0x7f0000000600)="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", 0x151}], 0x2}, 0x0) sendmsg$inet(r0, 0x0, 0x12cd) close(0x3) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x34120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7, 0x2}, 0x8386, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d8008"], 0x38}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r6, 0x25322000) 2.100545619s ago: executing program 5 (id=9446): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0006}]}) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000002c0)={0x7094, 0x9a, 0x200, 0x38d129bf, 0x800, 0x6, 0x4, 0x55}, 0x20) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x8000000000000000, 0x5}, 0x4130, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff4}, 0x0, 0x0, r1, 0x0) syz_clone(0x200400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0xfffffffffffffffc}, 0x0) r3 = socket(0x2, 0x80805, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xfffffffffffff95a, 0x3a, '\'\\\xab\x12([\\)%%7', 0x3a, '\x8a:\xde,!$$@', 0x3a, './file0'}, 0x3a) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x800, 0x1, 0xbd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x2e, @multicast2, 0x4e24, 0x1, 'none\x00', 0x5, 0x8, 0x3f}, {@remote, 0x4e20, 0x10000, 0xcd, 0x0, 0x400000}}, 0x44) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) ioctl$TUNSETNOCSUM(r6, 0x400454c8, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) fchmod(r1, 0x0) r7 = socket$inet_icmp(0x2, 0x2, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x0, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, 0x0}, 0x108) prlimit64(0x0, 0x2, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x5) recvmmsg(r3, &(0x7f0000002480)=[{{&(0x7f00000002c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/144, 0x90}], 0x1}, 0x6e}, {{&(0x7f0000000440)=@isdn, 0x80, &(0x7f0000002440)=[{&(0x7f00000004c0)=""/37, 0x25}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/228, 0xe4}], 0x3}, 0x7}], 0x2, 0x43, &(0x7f0000002500)) dup3(r8, r0, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 1.945418327s ago: executing program 5 (id=9447): ioprio_set$uid(0x3, 0x0, 0x0) r0 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x172831) keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x400000000000014, 0x20000000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x3, 0x401}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x6, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$phonet_pipe(0x23, 0x5, 0x2) socket$kcm(0x10, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x6d82d2b6, r3}, 0x38) openat$procfs(0xffffffffffffff9c, &(0x7f0000001140)='/proc/locks\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket(0xa, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000002060500000000000000000007000001140007800800114000000000080012400000ffff0500010006000000050005000a00000005000400000000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x60}, 0x1, 0x0, 0x0, 0x400c084}, 0x20004000) 1.943248757s ago: executing program 1 (id=9418): mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[]) (fail_nth: 5) 1.679334961s ago: executing program 1 (id=9448): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c) recvmsg(r0, &(0x7f00000005c0)={0x0, 0xffffff96, 0x0}, 0x40000100) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x7}, &(0x7f00000001c0)=0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r2 = fcntl$dupfd(r1, 0x406, r1) sendto$inet(r1, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='lp', 0x2) write$binfmt_elf64(r2, &(0x7f0000000f80)=ANY=[], 0x540) shutdown(r1, 0x1) 1.595845356s ago: executing program 2 (id=9454): perf_event_open(&(0x7f0000000480)={0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0001300002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r10, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listen(r10, 0x8b25714e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000002c0)) syz_pidfd_open(0x0, 0x0) 1.50626538s ago: executing program 6 (id=9456): r0 = semget$private(0x0, 0x1, 0x264) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f00000000c0)=""/53) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6(0xa, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r3, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='highspeed', 0x9) recvfrom(r3, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) 1.027581175s ago: executing program 5 (id=9461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x40004, 0x4, 0x6, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20c000, &(0x7f00000006c0), 0x2, 0x25b, &(0x7f0000000280)="$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") ppoll(&(0x7f0000000040)=[{r1, 0x208}], 0x1, 0x0, 0x0, 0x0) 775.590169ms ago: executing program 0 (id=9464): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='fd\x00') getdents64(r0, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) 775.193299ms ago: executing program 0 (id=9465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0xe, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x1) (async) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, 0x1404, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x1) (async) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x31}, 0x4000844) 774.819399ms ago: executing program 0 (id=9466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) pread64(0xffffffffffffffff, &(0x7f0000004380)=""/246, 0xf6, 0x2) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x29, 0x6, 0x1, 0x9, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1, @ipv4={'\x00', '\xff\xff', @empty}]}, 0x38) sendto$inet6(r1, &(0x7f0000000080)="033f5afa4243feb9faa9a8180786956d1f86c403cda45faf2cb550257b660adac595a0ac7f86ad3092e27b2053cb0d43736e5dc49ab852ead3f3e37d013f472378fe46934ea4ad2d59e31aeaee8aeb56f91e0ca2face5b669e93c79cfa76f7dd1d1582ee7f228a109d7a1f40a5d2e0665f44d29ec8b1c381968b88e6b7b14687d9ba006162171b1b1e1635b08cefaf20dc8e5619086d8c56095c60a2479c8a881efb62fbff5d8e05943c9fd80543641c2ead82885d9044f67c597eacbd27b92e73dfe6849b9f8799cf10bd103500c1bdab9e37a3cdf03cf7a6da46e4be35fe93f9016984db5b5d390a870c6218", 0xed, 0x40005, &(0x7f0000000180)={0xa, 0x4e21, 0xe, @mcast1, 0x1fd3}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r2 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x7) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r4, 0x1, 0x1) getdents64(r4, 0x0, 0x4f) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 761.45033ms ago: executing program 1 (id=9467): socket(0x29, 0x1, 0x7) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, 0x0, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a88000000060a010400000000000000000a0004050900010073797a31000000005c000480580001800a000100696e6e657200000048000280080004400000001a240005800c0001007061796c6f61640014000280090003400000009208000240000000010800034000000002080002400000008408000140000000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008080) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 760.93541ms ago: executing program 0 (id=9468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="600000001800356a00000000000016000a800000ff0300060000000014000100fe8000000000000000000000000000bb080017004e244e2414000200fc02000000000000000000000000000114000100ff"], 0x60}}, 0x0) 721.405322ms ago: executing program 0 (id=9469): socket(0x29, 0x1, 0x7) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 678.411394ms ago: executing program 2 (id=9470): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) syz_clone3(&(0x7f0000000900)={0x142100, 0x0, &(0x7f00000001c0), 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) 580.412589ms ago: executing program 6 (id=9471): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000000) syz_clone3(&(0x7f0000000900)={0x142100, 0x0, &(0x7f00000001c0), 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000880)=[0x0], 0x1}, 0x58) (fail_nth: 2) 556.09709ms ago: executing program 2 (id=9472): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0xf9ff, 0x1, 0x0, 0x0, 0x0, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 519.961763ms ago: executing program 2 (id=9473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c000000020602010000000000000000050000050900020073"], 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x4c105) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, 0x0, 0xdc) 519.504113ms ago: executing program 2 (id=9474): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000f794"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x14) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000200)={0x2f}, 0x8) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @dev={0xfe, 0x80, '\x00', 0x16}, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 518.851743ms ago: executing program 2 (id=9475): perf_event_open(&(0x7f0000000480)={0x1, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x800c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_ro(r6, &(0x7f0000000000)='memory.swap.events\x00', 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r8, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0001300002000008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) syz_mount_image$ext4(&(0x7f0000000100)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000ac0)={[{@noblock_validity}, {@auto_da_alloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@jqfmt_vfsv0}, {@sb={'sb', 0x3d, 0x2}}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r9 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r9, &(0x7f0000000240)="f2", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) listen(r9, 0x8b25714e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f00000002c0)) syz_pidfd_open(0x0, 0x0) 443.487067ms ago: executing program 6 (id=9476): r0 = socket(0xa, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getpid() r3 = creat(&(0x7f0000000040)='./file0\x00', 0x11f) kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r3, &(0x7f0000000300)={r3, 0xffffffffffffffff, 0x3ce57dcc}) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x3c}}, 0x0) 443.161907ms ago: executing program 6 (id=9477): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0xffffff1f, 0xfffffffc, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x3}, @IFLA_GRE_PMTUDISC={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4850) 384.35978ms ago: executing program 6 (id=9478): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) listen(r0, 0x3) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008"], 0x20}, 0x0) 371.0211ms ago: executing program 6 (id=9479): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x7ffffffd, 0xd, 0x9, 0xf, 0x4, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x8, 0x6, 0xff, 0x0, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) mknod$loop(0x0, 0x0, 0x1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c886}, 0x80) capset(&(0x7f0000000200)={0x20080522}, &(0x7f00000002c0)={0x9, 0x8b02, 0x2, 0x86, 0xffffffff, 0x9}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x103243) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'hsr0\x00'}) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x1000}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='6', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r6, 0x1) 123.257933ms ago: executing program 5 (id=9480): r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x80000, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x7ffffffd, 0xd, 0x9, 0xf, 0x4, 0x5, 0xfc, 0x0, 0xff, 0x0, 0x8, 0x6, 0xff, 0x0, 0x5}}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket(0xa, 0x3, 0x3a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) mknod$loop(0x0, 0x0, 0x1) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c886}, 0x80) capset(&(0x7f0000000200)={0x20080522}, &(0x7f00000002c0)={0x9, 0x8b02, 0x2, 0x86, 0xffffffff, 0x9}) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3d, &(0x7f0000000080)={0x1}, 0x8) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000)=0x200, 0x4) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3}, 0x50) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x6f5e, 0x103243) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000040)=0x85) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) ioctl$sock_qrtr_SIOCGIFADDR(r4, 0x8915, &(0x7f0000000000)={'hsr0\x00'}) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x1000}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='6', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r6, 0x1) 0s ago: executing program 0 (id=9481): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6307ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = geteuid() fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {r5, r6}}, '\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002000)=@newtaction={0xec0, 0x30, 0xb, 0x0, 0x0, {}, [{0xeac, 0x1, [@m_gact={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xbf2, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x0, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc8, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4, 0x1000000}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x7fffffff, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x1}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x5, 0xf}, {0x9b7d, 0x52fc, 0x6, 0x40000003, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x9, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff417, 0x1, 0x3ff}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0x3, 0x3, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000, 0xcb06}, {0x4e2, 0x6ae, 0x2, 0x100, 0x5, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x6}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x2, 0x0, 0x1}, {0x2, 0x8, 0x10000002, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0x1}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x103, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x8, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x7f, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x8, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x0, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x6, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x8000400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x2000007f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800002, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff3, 0x5, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x4ce}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1d, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x9, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x8000006, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x3, 0x4, 0x7, 0x7}, {0x4, 0x61c5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0xfffffffe, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x36b6800}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xae82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdc}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x70a0, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x402, 0x4, 0x8, 0x7}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d8, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x0, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x202, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xfffffff9}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x1}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xec0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000140)={'pim6reg1\x00', {0x2, 0x4e24, @multicast1}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x3ffff) sendfile(r8, r7, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): : 28 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1019.181055][ T503] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1019.190985][ T503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1019.199985][ T503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8833'. [ 1019.218444][ T28] audit: type=1400 audit(2000000600.707:10033): avc: denied { setopt } for pid=496 comm="syz.5.8836" lport=39601 faddr=255.255.255.254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1019.347493][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.501874][ T7612] !yz2: Port: 1 Link DOWN [ 1020.788740][ T517] loop6: detected capacity change from 0 to 256 [ 1021.521984][ T523] loop5: detected capacity change from 0 to 512 [ 1021.532573][ T523] EXT4-fs: Ignoring removed nobh option [ 1021.867471][ T525] netlink: 'syz.1.8840': attribute type 36 has an invalid length. [ 1021.882361][ T525] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1021.893010][ T525] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1022.508018][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.8843: corrupted inode contents [ 1022.519951][ T523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1022.520150][ T523] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #3: comm syz.5.8843: mark_inode_dirty error [ 1022.529338][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1022.529358][ C0] EXT4-fs (loop5): initial error at time 2000000603: ext4_do_update_inode:5690: inode 3 [ 1022.529410][ C0] EXT4-fs (loop5): last error at time 2000000603: ext4_do_update_inode:5690: inode 3 [ 1022.574652][ T517] FAT-fs (loop6): Directory bread(block 64) failed [ 1022.581486][ T517] FAT-fs (loop6): Directory bread(block 65) failed [ 1022.588271][ T517] FAT-fs (loop6): Directory bread(block 66) failed [ 1022.588469][ T523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1022.595394][ T517] FAT-fs (loop6): Directory bread(block 67) failed [ 1022.595626][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #3: comm syz.5.8843: corrupted inode contents [ 1022.604591][ T517] FAT-fs (loop6): Directory bread(block 68) failed [ 1022.604615][ T517] FAT-fs (loop6): Directory bread(block 69) failed [ 1022.604646][ T517] FAT-fs (loop6): Directory bread(block 70) failed [ 1022.604663][ T517] FAT-fs (loop6): Directory bread(block 71) failed [ 1022.604688][ T517] FAT-fs (loop6): Directory bread(block 72) failed [ 1022.604707][ T517] FAT-fs (loop6): Directory bread(block 73) failed [ 1022.664894][ T532] syzkaller1: entered promiscuous mode [ 1022.670710][ T532] syzkaller1: entered allmulticast mode [ 1022.739257][ T523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1022.739423][ T523] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #3: comm syz.5.8843: mark_inode_dirty error [ 1022.754745][ T540] can0: slcan on ttyS3. [ 1022.760390][ T523] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1022.766290][ T523] Quota error (device loop5): write_blk: dquota write failed [ 1022.783790][ T523] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 1022.899614][ T523] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.8843: Failed to acquire dquot type 0 [ 1022.914261][ T523] loop5: lost filesystem error report for type 5 error -117 [ 1022.918593][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.8843: corrupted inode contents [ 1022.918701][ T561] netlink: 'syz.2.8851': attribute type 19 has an invalid length. [ 1022.926651][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1022.950795][ T565] program syz.6.8852 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1022.970187][ T540] can0 (unregistered): slcan off ttyS3. [ 1022.975610][ T561] ip6t_srh: unknown srh match flags 5802 [ 1022.985770][ T523] EXT4-fs error (device loop5): ext4_dirty_inode:6587: inode #16: comm syz.5.8843: mark_inode_dirty error [ 1022.997822][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1022.999300][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.8843: corrupted inode contents [ 1023.020558][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.022068][ T523] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #16: comm syz.5.8843: mark_inode_dirty error [ 1023.036053][ T570] program syz.0.8853 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1023.053246][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.054311][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.8843: corrupted inode contents [ 1023.084472][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.084747][ T523] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1023.103235][ T523] loop5: lost filesystem error report for type 5 error -117 [ 1023.104743][ T523] EXT4-fs error (device loop5): ext4_do_update_inode:5690: inode #16: comm syz.5.8843: corrupted inode contents [ 1023.197678][ T523] loop5: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1023.213304][ T523] EXT4-fs error (device loop5): ext4_truncate:4690: inode #16: comm syz.5.8843: mark_inode_dirty error [ 1023.243478][ T523] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1023.260913][ T523] loop5: lost filesystem error report for type 5 error -117 [ 1023.261475][ T523] EXT4-fs (loop5): 1 truncate cleaned up [ 1023.275046][ T523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1023.288448][ T523] ext4 filesystem being mounted at /344/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1023.326657][ T521] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #3: comm syz.5.8843: ES cache extent failed: add [1,1,41,0x1] conflict with existing [1,-2,576460752303423487,0x18] [ 1023.326657][ T521] [ 1023.370041][ T593] Cannot find add_set index 0 as target [ 1023.467690][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1024.068435][ T28] audit: type=1400 audit(2000000605.339:10034): avc: denied { read write } for pid=26950 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1024.200724][ T28] audit: type=1400 audit(2000000605.339:10035): avc: denied { open } for pid=26950 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1024.229695][ T601] netlink: 'syz.1.8856': attribute type 36 has an invalid length. [ 1024.241766][ T601] bridge24: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1024.254627][ T28] audit: type=1400 audit(2000000605.339:10036): avc: denied { ioctl } for pid=26950 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1024.281901][ T601] bridge24: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1024.293051][ T28] audit: type=1400 audit(2000000605.451:10037): avc: denied { recv } for pid=594 comm="syz.1.8856" saddr=10.128.0.163 src=30036 daddr=10.128.0.82 dest=39308 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 1024.320013][ T28] audit: type=1400 audit(2000000605.460:10038): avc: denied { open } for pid=594 comm="syz.1.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1024.339542][ T28] audit: type=1400 audit(2000000605.498:10039): avc: denied { create } for pid=594 comm="syz.1.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1024.363871][ T28] audit: type=1400 audit(2000000605.620:10040): avc: denied { perfmon } for pid=594 comm="syz.1.8856" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 1024.387502][ T28] audit: type=1400 audit(2000000605.620:10041): avc: denied { kernel } for pid=594 comm="syz.1.8856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1024.449554][ T28] audit: type=1400 audit(2000000605.704:10042): avc: denied { read } for pid=599 comm="syz.5.8855" dev="nsfs" ino=4026532693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1024.642281][ T606] syzkaller1: entered promiscuous mode [ 1024.649733][ T28] audit: type=1400 audit(2000000605.704:10043): avc: denied { open } for pid=599 comm="syz.5.8855" path="net:[4026532693]" dev="nsfs" ino=4026532693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 1024.734059][ T609] loop6: detected capacity change from 0 to 4096 [ 1024.759095][ T606] syzkaller1: entered allmulticast mode [ 1024.767904][ T608] __nla_validate_parse: 85 callbacks suppressed [ 1024.767918][ T608] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8860'. [ 1024.817036][ T609] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1024.951605][ T624] syzkaller0: entered promiscuous mode [ 1024.963766][ T624] syzkaller0: entered allmulticast mode [ 1024.974945][ T628] loop5: detected capacity change from 0 to 512 [ 1025.010969][ T628] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1025.032722][ T628] EXT4-fs (loop5): mount failed [ 1025.135986][ T632] netlink: 21 bytes leftover after parsing attributes in process `syz.5.8867'. [ 1025.159708][ T632] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 1025.162086][T32577] bridge0: entered promiscuous mode [ 1025.268514][ T643] hub 8-0:1.0: USB hub found [ 1025.275699][ T632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8867'. [ 1025.279015][ T643] hub 8-0:1.0: 8 ports detected [ 1025.364300][T26760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1025.533919][ T656] hub 8-0:1.0: USB hub found [ 1025.546540][ T656] hub 8-0:1.0: 8 ports detected [ 1025.617045][ T657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.626167][ T657] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.635916][ T657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.645130][ T657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.654196][ T657] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.664118][ T657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1025.673233][ T657] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8873'. [ 1026.308651][ T661] xt_hashlimit: max too large, truncated to 1048576 [ 1026.362763][ T664] lo: Caught tx_queue_len zero misconfig [ 1026.464927][ T666] 9p: Bad value for 'wfdno' [ 1026.588206][ T671] syzkaller0: entered promiscuous mode [ 1026.601898][ T671] syzkaller0: entered allmulticast mode [ 1026.719086][ T673] loop6: detected capacity change from 0 to 2048 [ 1026.785321][ T673] loop6: p2 < > p4 [ 1026.815404][ T673] loop6: p4 size 8192 extends beyond EOD, truncated [ 1026.998437][ T683] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1027.249173][ T695] program syz.2.8888 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1027.695675][ T713] hub 8-0:1.0: USB hub found [ 1027.711165][ T713] hub 8-0:1.0: 8 ports detected [ 1027.876487][ T721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1028.518492][ T733] program syz.6.8899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1028.557940][ T732] hub 8-0:1.0: USB hub found [ 1028.606594][ T732] hub 8-0:1.0: 8 ports detected [ 1028.638487][ T735] netlink: 'syz.2.8898': attribute type 36 has an invalid length. [ 1028.875628][ T735] bridge21: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1028.892561][ T741] loop0: detected capacity change from 0 to 128 [ 1028.900405][ T735] bridge21: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1028.911614][ T741] /dev/loop0: Can't open blockdev [ 1029.715750][ T749] loop0: detected capacity change from 0 to 512 [ 1029.730487][ T749] EXT4-fs: Ignoring removed orlov option [ 1029.745463][ T749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1029.777308][ T749] EXT4-fs (loop0): 1 orphan inode deleted [ 1029.793843][ T749] EXT4-fs (loop0): 1 truncate cleaned up [ 1029.800265][ T749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1029.823655][ T28] kauditd_printk_skb: 74 callbacks suppressed [ 1029.823670][ T28] audit: type=1400 audit(2000000610.729:10118): avc: denied { create } for pid=760 comm="syz.5.8909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1029.886310][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1029.891011][ T766] syzkaller0: entered promiscuous mode [ 1029.904357][ T766] syzkaller0: entered allmulticast mode [ 1029.929803][ T764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1029.957244][ T28] audit: type=1400 audit(2000000610.851:10119): avc: denied { create } for pid=765 comm="syz.2.8910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1030.016012][ T28] audit: type=1400 audit(2000000610.851:10120): avc: denied { setopt } for pid=765 comm="syz.2.8910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1030.106129][ T778] loop6: detected capacity change from 0 to 1024 [ 1030.119232][ T778] EXT4-fs: Ignoring removed bh option [ 1030.137535][ T778] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1030.151659][ T28] audit: type=1400 audit(2000000611.038:10121): avc: denied { remove_name } for pid=776 comm="syz.6.8915" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1030.242692][ T781] loop5: detected capacity change from 0 to 256 [ 1030.348441][ T781] FAT-fs (loop5): Directory bread(block 64) failed [ 1030.355094][ T781] FAT-fs (loop5): Directory bread(block 65) failed [ 1030.361804][ T781] FAT-fs (loop5): Directory bread(block 66) failed [ 1030.368418][ T781] FAT-fs (loop5): Directory bread(block 67) failed [ 1030.375653][ T781] FAT-fs (loop5): Directory bread(block 68) failed [ 1030.382277][ T781] FAT-fs (loop5): Directory bread(block 69) failed [ 1030.388983][ T781] FAT-fs (loop5): Directory bread(block 70) failed [ 1030.395668][ T781] FAT-fs (loop5): Directory bread(block 71) failed [ 1030.402286][ T781] FAT-fs (loop5): Directory bread(block 72) failed [ 1030.409675][ T781] FAT-fs (loop5): Directory bread(block 73) failed [ 1030.460423][ T781] __nla_validate_parse: 60 callbacks suppressed [ 1030.460458][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.476509][ T781] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.485724][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.494998][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.504662][ T781] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.513944][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.523242][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.532783][ T781] netlink: 2 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.542342][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1030.551391][ T781] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8914'. [ 1031.174492][ T28] audit: type=1400 audit(2000000611.038:10122): avc: denied { rmdir } for pid=776 comm="syz.6.8915" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1031.198318][ T28] audit: type=1400 audit(2000000611.300:10123): avc: denied { mount } for pid=782 comm="syz.2.8916" name="/" dev="ramfs" ino=114760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 1031.199111][T26760] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1032.262609][ T28] audit: type=1400 audit(2000000611.319:10124): avc: denied { mount } for pid=772 comm="syz.5.8914" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 1032.288186][ T28] audit: type=1400 audit(2000000611.450:10125): avc: denied { create } for pid=782 comm="syz.2.8916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1032.679821][ T28] audit: type=1400 audit(2000000611.450:10126): avc: denied { create } for pid=782 comm="syz.2.8916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1032.700244][ T28] audit: type=1326 audit(2000000612.666:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=794 comm="syz.2.8920" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9112dacdd9 code=0x7ffc0000 [ 1033.477260][ T819] program syz.5.8929 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1033.597025][ T824] loop6: detected capacity change from 0 to 1764 [ 1034.457743][ T836] program syz.5.8935 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1035.200731][ T859] tipc: Enabling of bearer rejected, failed to enable media [ 1035.265349][ T868] program syz.6.8945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1035.385246][ T875] loop5: detected capacity change from 0 to 512 [ 1035.426026][ T875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.439934][ T877] loop0: detected capacity change from 0 to 1024 [ 1035.453715][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1035.453730][ T28] audit: type=1400 audit(2000000615.998:10158): avc: denied { read write open } for pid=874 comm="syz.5.8948" path="/363/file0/file0/file2" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1035.453989][ T875] FAULT_INJECTION: forcing a failure. [ 1035.453989][ T875] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.497691][ T875] CPU: 0 UID: 0 PID: 875 Comm: syz.5.8948 Tainted: G W syzkaller #0 PREEMPT(full) [ 1035.497830][ T875] Tainted: [W]=WARN [ 1035.497838][ T875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.497850][ T875] Call Trace: [ 1035.497857][ T875] [ 1035.497865][ T875] __dump_stack+0x1d/0x30 [ 1035.497887][ T875] dump_stack_lvl+0x95/0xd0 [ 1035.497906][ T875] dump_stack+0x15/0x1b [ 1035.497963][ T875] should_fail_ex+0x263/0x280 [ 1035.497988][ T875] should_failslab+0x8c/0xb0 [ 1035.498017][ T875] __kmalloc_noprof+0xb8/0x4d0 [ 1035.498086][ T875] ? ext4_find_extent+0x17a/0x790 [ 1035.498113][ T875] ext4_find_extent+0x17a/0x790 [ 1035.498136][ T875] ? should_fail_ex+0x30/0x280 [ 1035.498182][ T875] ? __list_del_entry_valid_or_report+0x65/0x130 [ 1035.498207][ T875] ext4_ext_map_blocks+0x10d/0x2ea0 [ 1035.498240][ T875] ? put_dec_trunc8+0x119/0x140 [ 1035.498284][ T875] ext4_map_query_blocks+0xb2/0x550 [ 1035.498330][ T875] ? ext4_es_lookup_extent+0x3a2/0x500 [ 1035.498359][ T875] ext4_map_blocks+0x306/0x970 [ 1035.498422][ T875] _ext4_get_block+0x117/0x370 [ 1035.498449][ T875] ext4_get_block_unwritten+0x2a/0xb0 [ 1035.498521][ T875] ext4_block_write_begin+0x650/0xcf0 [ 1035.498610][ T875] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 1035.498698][ T875] ? folio_mapping+0xb9/0xe0 [ 1035.498731][ T875] ext4_write_begin+0x623/0xe50 [ 1035.498815][ T875] ? ext4_xattr_security_get+0x32/0x40 [ 1035.498840][ T875] ext4_da_write_begin+0x1ef/0x680 [ 1035.498867][ T875] ? balance_dirty_pages_ratelimited_flags+0x420/0x800 [ 1035.498962][ T875] generic_perform_write+0x183/0x490 [ 1035.498988][ T875] ext4_buffered_write_iter+0x304/0x4c0 [ 1035.499017][ T875] ? path_openat+0x1ab2/0x2050 [ 1035.499077][ T875] ext4_file_write_iter+0x380/0xfa0 [ 1035.499113][ T875] ? _parse_integer_limit+0x170/0x190 [ 1035.499151][ T875] do_iter_readv_writev+0x4fd/0x5a0 [ 1035.499241][ T875] vfs_writev+0x2e1/0x900 [ 1035.499268][ T875] __se_sys_pwritev2+0xfc/0x1c0 [ 1035.499369][ T875] __x64_sys_pwritev2+0x67/0x80 [ 1035.499400][ T875] x64_sys_call+0xe07/0x3020 [ 1035.499421][ T875] do_syscall_64+0x12c/0x3b0 [ 1035.499483][ T875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.499502][ T875] RIP: 0033:0x7fbc8853cdd9 [ 1035.499519][ T875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.499540][ T875] RSP: 002b:00007fbc86f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 1035.499562][ T875] RAX: ffffffffffffffda RBX: 00007fbc887b5fa0 RCX: 00007fbc8853cdd9 [ 1035.499647][ T875] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1035.499659][ T875] RBP: 00007fbc86f97090 R08: 000000000000007f R09: 0000000000000005 [ 1035.499674][ T875] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000001 [ 1035.499688][ T875] R13: 00007fbc887b6038 R14: 00007fbc887b5fa0 R15: 00007ffed984e138 [ 1035.499706][ T875] [ 1035.825250][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.856770][ T877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1035.870706][ T892] __nla_validate_parse: 57 callbacks suppressed [ 1035.870729][ T892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8952'. [ 1035.891153][ T28] audit: type=1400 audit(2000000616.409:10159): avc: denied { bind } for pid=876 comm="syz.0.8949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1035.891411][ T877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=877 comm=syz.0.8949 [ 1035.928206][ T885] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1035.929346][ T877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2582 sclass=netlink_tcpdiag_socket pid=877 comm=syz.0.8949 [ 1035.948783][ T886] lo speed is unknown, defaulting to 1000 [ 1035.956140][ T877] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=17 sclass=netlink_tcpdiag_socket pid=877 comm=syz.0.8949 [ 1036.054314][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.085507][ T903] loop5: detected capacity change from 0 to 512 [ 1036.111486][ T903] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2810: inode #11: comm syz.5.8956: corrupted xattr block 95: invalid header [ 1036.125588][ T28] audit: type=1400 audit(2000000616.634:10160): avc: denied { view } for pid=883 comm="syz.2.8951" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 1036.144830][ T903] fserror_report: 1 callbacks suppressed [ 1036.144913][ T903] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1036.145361][ T903] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.8956: bg 0: block 7: invalid block bitmap [ 1036.159992][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 1036.160048][ C0] EXT4-fs (loop5): initial error at time 2000000616: ext4_expand_extra_isize_ea:2810: inode 11 [ 1036.160118][ C0] EXT4-fs (loop5): last error at time 2000000616: ext4_expand_extra_isize_ea:2810: inode 11 [ 1036.246507][ T909] program syz.2.8958 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.276927][ T914] program syz.6.8959 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.308533][ T915] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1036.318345][ T28] audit: type=1400 audit(2000000616.802:10161): avc: denied { validate_trans } for pid=916 comm="syz.2.8962" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 1036.325353][ T903] loop5: lost filesystem error report for type 5 error -117 [ 1036.341735][ T903] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1036.360046][ T903] loop5: lost filesystem error report for type 5 error -117 [ 1036.360556][ T903] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2972: inode #11: comm syz.5.8956: corrupted xattr block 95: invalid header [ 1036.388965][ T903] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1036.389256][ T903] EXT4-fs warning (device loop5): ext4_evict_inode:287: xattr delete (err -117) [ 1036.391920][ T915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8961'. [ 1036.400061][ T903] EXT4-fs (loop5): 1 orphan inode deleted [ 1036.410882][ T918] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.8963'. [ 1036.419856][ T903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1036.434153][ T915] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1036.434421][ T35] lo speed is unknown, defaulting to 1000 [ 1036.451169][ T926] program syz.2.8964 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1036.511106][ T28] audit: type=1400 audit(2000000616.989:10162): avc: denied { write } for pid=902 comm="syz.5.8956" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1036.556390][ T934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1036.556496][ T28] audit: type=1400 audit(2000000616.989:10163): avc: denied { open } for pid=902 comm="syz.5.8956" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1036.615955][ T934] netlink: 'syz.0.8966': attribute type 5 has an invalid length. [ 1036.629220][ T28] audit: type=1400 audit(2000000616.989:10164): avc: denied { ioctl } for pid=902 comm="syz.5.8956" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1036.662042][ T934] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8966'. [ 1036.690886][ T28] audit: type=1400 audit(2000000617.130:10165): avc: denied { setopt } for pid=936 comm="syz.1.8968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1036.712398][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1036.727270][ T934] geneve2: entered promiscuous mode [ 1036.763468][ T934] geneve2: entered allmulticast mode [ 1036.893642][ T28] audit: type=1326 audit(2000000617.345:10166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.1.8968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1051cdd9 code=0x7ffc0000 [ 1036.925466][ T28] audit: type=1326 audit(2000000617.345:10167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=936 comm="syz.1.8968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a1051cdd9 code=0x7ffc0000 [ 1036.966754][ T943] program syz.0.8970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.383190][ T950] loop6: detected capacity change from 0 to 256 [ 1037.591644][ T961] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.8976'. [ 1037.654425][ T964] netlink: 1057 bytes leftover after parsing attributes in process `syz.6.8977'. [ 1037.676547][ T965] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8973'. [ 1037.685541][ T965] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8973'. [ 1037.764227][ T966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1037.793518][ T969] program syz.5.8978 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.917018][ T974] syzkaller0: entered promiscuous mode [ 1037.930332][ T974] syzkaller0: entered allmulticast mode [ 1037.946558][ T978] syzkaller0: entered promiscuous mode [ 1037.954394][ T977] program syz.2.8983 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1037.971647][ T978] syzkaller0: entered allmulticast mode [ 1038.182085][ T981] loop6: detected capacity change from 0 to 1024 [ 1038.213416][ T981] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1038.274728][ T983] loop0: detected capacity change from 0 to 1024 [ 1038.297916][ T983] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1039.152858][ T1003] program syz.0.8990 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1039.217043][ T1012] FAULT_INJECTION: forcing a failure. [ 1039.217043][ T1012] name failslab, interval 1, probability 0, space 0, times 0 [ 1039.229678][ T1012] CPU: 0 UID: 0 PID: 1012 Comm: syz.6.8995 Tainted: G W syzkaller #0 PREEMPT(full) [ 1039.229711][ T1012] Tainted: [W]=WARN [ 1039.229719][ T1012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1039.229739][ T1012] Call Trace: [ 1039.229747][ T1012] [ 1039.229755][ T1012] __dump_stack+0x1d/0x30 [ 1039.229777][ T1012] dump_stack_lvl+0x95/0xd0 [ 1039.229798][ T1012] dump_stack+0x15/0x1b [ 1039.229895][ T1012] should_fail_ex+0x263/0x280 [ 1039.229925][ T1012] should_failslab+0x8c/0xb0 [ 1039.229953][ T1012] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1039.229984][ T1012] ? dst_alloc+0xbd/0x100 [ 1039.230003][ T1012] dst_alloc+0xbd/0x100 [ 1039.230023][ T1012] ? ip_vs_sip_hashkey_raw+0x1c2/0x330 [ 1039.230052][ T1012] ip_route_output_key_hash_rcu+0xf29/0x1380 [ 1039.230144][ T1012] ip_route_output_flow+0x65/0x110 [ 1039.230174][ T1012] raw_sendmsg+0xc91/0x1140 [ 1039.230203][ T1012] ? __pfx_raw_sendmsg+0x10/0x10 [ 1039.230227][ T1012] inet_sendmsg+0xc5/0xd0 [ 1039.230246][ T1012] ? __pfx_inet_sendmsg+0x10/0x10 [ 1039.230279][ T1012] ____sys_sendmsg+0x519/0x5b0 [ 1039.230306][ T1012] ___sys_sendmsg+0x195/0x1e0 [ 1039.230338][ T1012] __x64_sys_sendmsg+0xd4/0x160 [ 1039.230377][ T1012] x64_sys_call+0x194c/0x3020 [ 1039.230423][ T1012] do_syscall_64+0x12c/0x3b0 [ 1039.230452][ T1012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.230476][ T1012] RIP: 0033:0x7fdc71d1cdd9 [ 1039.230491][ T1012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1039.230569][ T1012] RSP: 002b:00007fdc7076f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1039.230607][ T1012] RAX: ffffffffffffffda RBX: 00007fdc71f95fa0 RCX: 00007fdc71d1cdd9 [ 1039.230619][ T1012] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1039.230631][ T1012] RBP: 00007fdc7076f090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.230644][ T1012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.230658][ T1012] R13: 00007fdc71f96038 R14: 00007fdc71f95fa0 R15: 00007fff67b370a8 [ 1039.230676][ T1012] [ 1039.249822][ T1014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.527931][ T1015] program syz.0.8996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1039.576750][ T1017] syzkaller0: entered promiscuous mode [ 1039.582497][ T1017] syzkaller0: entered allmulticast mode [ 1040.153362][ T1038] loop6: detected capacity change from 0 to 1024 [ 1040.173466][ T1038] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 1040.191303][ T1039] loop5: detected capacity change from 0 to 256 [ 1040.207584][ T1039] FAT-fs (loop5): Directory bread(block 64) failed [ 1040.214332][ T1039] FAT-fs (loop5): Directory bread(block 65) failed [ 1040.220910][ T1039] FAT-fs (loop5): Directory bread(block 66) failed [ 1040.228017][ T1039] FAT-fs (loop5): Directory bread(block 67) failed [ 1040.234587][ T1039] FAT-fs (loop5): Directory bread(block 68) failed [ 1040.241241][ T1039] FAT-fs (loop5): Directory bread(block 69) failed [ 1040.247788][ T1039] FAT-fs (loop5): Directory bread(block 70) failed [ 1040.254293][ T1039] FAT-fs (loop5): Directory bread(block 71) failed [ 1040.261555][ T1039] FAT-fs (loop5): Directory bread(block 72) failed [ 1040.268080][ T1039] FAT-fs (loop5): Directory bread(block 73) failed [ 1040.518466][ T1051] syzkaller0: entered promiscuous mode [ 1040.530303][ T1051] syzkaller0: entered allmulticast mode [ 1040.686613][ T1055] loop0: detected capacity change from 0 to 512 [ 1040.706343][ T1055] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9010: invalid indirect mapped block 256 (level 2) [ 1040.719716][ T1055] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1040.720067][ T1055] EXT4-fs (loop0): 2 truncates cleaned up [ 1040.735315][ T1055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1040.783857][ T1058] xt_hashlimit: size too large, truncated to 1048576 [ 1040.793602][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1041.143638][ T1062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1041.186350][ T1065] loop0: detected capacity change from 0 to 128 [ 1041.193364][ T1065] msdos: Unknown parameter '00000000000000000001276ÿÿÿÿÿ' [ 1041.249574][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 1041.249588][ T28] audit: type=1400 audit(2000000621.388:10188): avc: denied { bind } for pid=1064 comm="syz.0.9012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1041.276103][ T28] audit: type=1400 audit(2000000621.388:10189): avc: denied { name_bind } for pid=1064 comm="syz.0.9012" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1041.424668][ T28] audit: type=1400 audit(2000000621.388:10190): avc: denied { node_bind } for pid=1064 comm="syz.0.9012" src=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 1041.684080][T11090] Bluetooth: hci0: Frame reassembly failed (-84) [ 1041.755943][ T1072] FAULT_INJECTION: forcing a failure. [ 1041.755943][ T1072] name failslab, interval 1, probability 0, space 0, times 0 [ 1041.771396][ T1072] CPU: 0 UID: 0 PID: 1072 Comm: syz.5.9013 Tainted: G W syzkaller #0 PREEMPT(full) [ 1041.771425][ T1072] Tainted: [W]=WARN [ 1041.771434][ T1072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1041.771479][ T1072] Call Trace: [ 1041.771487][ T1072] [ 1041.771496][ T1072] __dump_stack+0x1d/0x30 [ 1041.771523][ T1072] dump_stack_lvl+0x95/0xd0 [ 1041.771591][ T1072] dump_stack+0x15/0x1b [ 1041.771612][ T1072] should_fail_ex+0x263/0x280 [ 1041.771669][ T1072] should_failslab+0x8c/0xb0 [ 1041.771759][ T1072] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1041.771790][ T1072] ? __alloc_skb+0x2d6/0x690 [ 1041.771817][ T1072] __alloc_skb+0x2d6/0x690 [ 1041.771899][ T1072] ? __kfree_skb+0x109/0x150 [ 1041.771916][ T1072] ? __alloc_skb+0x200/0x690 [ 1041.771942][ T1072] netlink_dump+0x10d/0x870 [ 1041.771971][ T1072] ? __kfree_skb+0x109/0x150 [ 1041.771990][ T1072] ? nlmon_xmit+0x4f/0x60 [ 1041.772016][ T1072] ? consume_skb+0x4b/0x130 [ 1041.772101][ T1072] __netlink_dump_start+0x43e/0x520 [ 1041.772125][ T1072] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1041.772262][ T1072] rtnetlink_rcv_msg+0x59f/0x720 [ 1041.772290][ T1072] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1041.772378][ T1072] ? __pfx_rtnl_dumpit+0x10/0x10 [ 1041.772406][ T1072] ? __pfx_rtnl_dump_all+0x10/0x10 [ 1041.772434][ T1072] netlink_rcv_skb+0x123/0x220 [ 1041.772519][ T1072] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1041.772549][ T1072] rtnetlink_rcv+0x1c/0x30 [ 1041.772570][ T1072] netlink_unicast+0x5a8/0x680 [ 1041.772667][ T1072] netlink_sendmsg+0x5c8/0x6f0 [ 1041.772698][ T1072] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1041.772726][ T1072] sock_write_iter+0x2e8/0x320 [ 1041.772752][ T1072] ? __pfx_sock_write_iter+0x10/0x10 [ 1041.772847][ T1072] vfs_write+0x5a6/0x9f0 [ 1041.772880][ T1072] ksys_write+0xdc/0x1a0 [ 1041.772911][ T1072] __x64_sys_write+0x40/0x50 [ 1041.773011][ T1072] x64_sys_call+0x27e1/0x3020 [ 1041.773034][ T1072] do_syscall_64+0x12c/0x3b0 [ 1041.773078][ T1072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.773099][ T1072] RIP: 0033:0x7fbc8853cdd9 [ 1041.773182][ T1072] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.773201][ T1072] RSP: 002b:00007fbc86f97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1041.773222][ T1072] RAX: ffffffffffffffda RBX: 00007fbc887b5fa0 RCX: 00007fbc8853cdd9 [ 1041.773239][ T1072] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000006 [ 1041.773333][ T1072] RBP: 00007fbc86f97090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.773346][ T1072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.773358][ T1072] R13: 00007fbc887b6038 R14: 00007fbc887b5fa0 R15: 00007ffed984e138 [ 1041.773375][ T1072] [ 1042.129854][ T1077] netlink: 'syz.5.9016': attribute type 8 has an invalid length. [ 1042.195500][ T28] audit: type=1400 audit(2000000622.295:10191): avc: denied { create } for pid=1079 comm="syz.1.9017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1042.263324][ T1082] pimreg: entered allmulticast mode [ 1042.281878][ T28] audit: type=1400 audit(2000000622.370:10192): avc: denied { create } for pid=1081 comm="syz.0.9018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1042.302837][ T28] audit: type=1400 audit(2000000622.370:10193): avc: denied { setopt } for pid=1081 comm="syz.0.9018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1042.322946][ T28] audit: type=1400 audit(2000000622.370:10194): avc: denied { write } for pid=1081 comm="syz.0.9018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1042.367439][ T1085] syzkaller0: entered promiscuous mode [ 1042.373058][ T1085] syzkaller0: entered allmulticast mode [ 1042.429925][ T1087] __nla_validate_parse: 65 callbacks suppressed [ 1042.429953][ T1087] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.9020'. [ 1042.455397][ T1088] pimreg: left allmulticast mode [ 1042.474013][ T28] audit: type=1400 audit(2000000622.567:10195): avc: denied { bind } for pid=1089 comm="syz.1.9021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1042.507702][ T28] audit: type=1400 audit(2000000622.595:10196): avc: denied { read write } for pid=1091 comm="syz.5.9022" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1042.532553][ T28] audit: type=1400 audit(2000000622.595:10197): avc: denied { open } for pid=1091 comm="syz.5.9022" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 1042.583945][ T1094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9023'. [ 1042.599049][ T1082] netlink: 'syz.0.9018': attribute type 3 has an invalid length. [ 1042.686087][ T1082] lo speed is unknown, defaulting to 1000 [ 1042.881002][ T1104] loop5: detected capacity change from 0 to 256 [ 1042.904194][ T1104] FAT-fs (loop5): Directory bread(block 64) failed [ 1042.910843][ T1104] FAT-fs (loop5): Directory bread(block 65) failed [ 1042.917408][ T1104] FAT-fs (loop5): Directory bread(block 66) failed [ 1042.923901][ T1104] FAT-fs (loop5): Directory bread(block 67) failed [ 1042.931090][ T1104] FAT-fs (loop5): Directory bread(block 68) failed [ 1042.937595][ T1104] FAT-fs (loop5): Directory bread(block 69) failed [ 1042.944134][ T1104] FAT-fs (loop5): Directory bread(block 70) failed [ 1042.950666][ T1104] FAT-fs (loop5): Directory bread(block 71) failed [ 1042.957171][ T1104] FAT-fs (loop5): Directory bread(block 72) failed [ 1042.964615][ T1104] FAT-fs (loop5): Directory bread(block 73) failed [ 1043.308835][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.318478][ T1104] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.327516][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.336621][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.346203][ T1104] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.355300][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.364338][ T1104] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.373299][ T1104] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9024'. [ 1043.503047][ T1110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1043.646889][ T1113] hub 8-0:1.0: USB hub found [ 1043.651585][ T1113] hub 8-0:1.0: 8 ports detected [ 1043.659699][ T1113] netlink: 'syz.0.9028': attribute type 36 has an invalid length. [ 1043.671161][ T1113] bridge17: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1043.681668][ T1113] bridge17: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1043.918471][T14221] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1043.935220][ T1121] all: renamed from bridge_slave_1 [ 1043.974643][ T1123] syzkaller0: entered promiscuous mode [ 1043.980143][ T1123] syzkaller0: entered allmulticast mode [ 1044.034352][ T1127] loop5: detected capacity change from 0 to 4096 [ 1044.044999][ T1127] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1044.100717][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1044.253925][ T1147] netlink: 'syz.5.9037': attribute type 3 has an invalid length. [ 1044.327275][ T1149] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1044.493384][ T1151] lo speed is unknown, defaulting to 1000 [ 1044.693089][ T1158] lo speed is unknown, defaulting to 1000 [ 1045.543529][ T1183] loop0: detected capacity change from 0 to 256 [ 1045.583828][ T1183] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1045.623658][ T1183] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1045.819676][ T1194] syzkaller1: entered promiscuous mode [ 1045.833990][ T1194] syzkaller1: entered allmulticast mode [ 1046.230881][ T1206] netlink: 'syz.6.9056': attribute type 8 has an invalid length. [ 1046.751079][ T1220] netlink: 'syz.6.9059': attribute type 3 has an invalid length. [ 1046.981847][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 1046.981867][ T28] audit: type=1400 audit(2000000626.787:10211): avc: denied { ioctl } for pid=1222 comm="syz.0.9060" path="socket:[115452]" dev="sockfs" ino=115452 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1047.041110][ T1228] loop0: detected capacity change from 0 to 1024 [ 1047.050309][ T1228] EXT4-fs: Ignoring removed bh option [ 1047.075669][ T1228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1047.098845][ T28] audit: type=1400 audit(2000000626.900:10212): avc: denied { setattr } for pid=1227 comm="syz.0.9061" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 1047.135356][ T28] audit: type=1400 audit(2000000626.928:10213): avc: denied { bind } for pid=1229 comm="syz.1.9062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1047.155239][ T28] audit: type=1400 audit(2000000626.928:10214): avc: denied { write } for pid=1229 comm="syz.1.9062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1047.171281][ T1236] Cannot find del_set index 1 as target [ 1047.203342][ T28] audit: type=1400 audit(2000000626.993:10215): avc: denied { create } for pid=1235 comm="syz.2.9063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 1047.680718][ T1242] loop5: detected capacity change from 0 to 256 [ 1047.698330][ T1242] FAT-fs (loop5): Directory bread(block 64) failed [ 1047.704952][ T1242] FAT-fs (loop5): Directory bread(block 65) failed [ 1047.711490][ T1242] FAT-fs (loop5): Directory bread(block 66) failed [ 1047.718112][ T1242] FAT-fs (loop5): Directory bread(block 67) failed [ 1047.724646][ T1242] FAT-fs (loop5): Directory bread(block 68) failed [ 1047.731819][ T1242] FAT-fs (loop5): Directory bread(block 69) failed [ 1047.738465][ T1242] FAT-fs (loop5): Directory bread(block 70) failed [ 1047.744983][ T1242] FAT-fs (loop5): Directory bread(block 71) failed [ 1047.751589][ T1242] FAT-fs (loop5): Directory bread(block 72) failed [ 1047.758652][ T1242] FAT-fs (loop5): Directory bread(block 73) failed [ 1047.980909][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.982418][ T1244] __nla_validate_parse: 88 callbacks suppressed [ 1047.982444][ T1244] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.9065'. [ 1048.015475][ T1244] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9065'. [ 1048.025746][ T1244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.029495][ T1246] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.9066'. [ 1048.106089][ T1252] syzkaller0: entered promiscuous mode [ 1048.116631][ T1252] syzkaller0: entered allmulticast mode [ 1048.130035][ T28] audit: type=1400 audit(2000000627.863:10216): avc: denied { ioctl } for pid=1253 comm="syz.1.9070" path="socket:[115525]" dev="sockfs" ino=115525 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1048.158615][ T28] audit: type=1400 audit(2000000627.882:10217): avc: denied { bind } for pid=1253 comm="syz.1.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1048.178748][ T28] audit: type=1400 audit(2000000627.892:10218): avc: denied { setopt } for pid=1253 comm="syz.1.9070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1048.258233][ T28] audit: type=1400 audit(2000000627.976:10219): avc: denied { connect } for pid=1263 comm="syz.2.9072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 1048.284509][ T1272] pimreg: entered allmulticast mode [ 1048.404999][ T1279] program syz.2.9075 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1048.500515][ T1287] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9077'. [ 1048.509654][ T1287] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9077'. [ 1048.537555][ T1290] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.9078'. [ 1048.564874][ T1292] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.9079'. [ 1048.576007][ T1292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9079'. [ 1048.586634][ T1292] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.630297][ T1296] FAULT_INJECTION: forcing a failure. [ 1048.630297][ T1296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1048.643442][ T1296] CPU: 1 UID: 0 PID: 1296 Comm: syz.5.9081 Tainted: G W syzkaller #0 PREEMPT(full) [ 1048.643484][ T1296] Tainted: [W]=WARN [ 1048.643490][ T1296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1048.643498][ T1296] Call Trace: [ 1048.643519][ T1296] [ 1048.643525][ T1296] __dump_stack+0x1d/0x30 [ 1048.643540][ T1296] dump_stack_lvl+0x95/0xd0 [ 1048.643552][ T1296] dump_stack+0x15/0x1b [ 1048.643645][ T1296] should_fail_ex+0x263/0x280 [ 1048.643661][ T1296] should_fail+0xb/0x20 [ 1048.643674][ T1296] should_fail_usercopy+0x1a/0x20 [ 1048.643691][ T1296] strncpy_from_user+0x27/0x250 [ 1048.643750][ T1296] __se_sys_memfd_create+0x20f/0x3b0 [ 1048.643803][ T1296] __x64_sys_memfd_create+0x31/0x40 [ 1048.643818][ T1296] x64_sys_call+0x1f22/0x3020 [ 1048.643857][ T1296] do_syscall_64+0x12c/0x3b0 [ 1048.644023][ T1296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.644038][ T1296] RIP: 0033:0x7fbc8853cdd9 [ 1048.644049][ T1296] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.644060][ T1296] RSP: 002b:00007fbc86f96e08 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1048.644072][ T1296] RAX: ffffffffffffffda RBX: 0000000000000511 RCX: 00007fbc8853cdd9 [ 1048.644118][ T1296] RDX: 00007fbc86f96ee0 RSI: 0000000000000000 RDI: 00007fbc885d2f49 [ 1048.644157][ T1296] RBP: 0000200000000140 R08: 00000000ffffffff R09: 0000000000000000 [ 1048.644171][ T1296] R10: 0000000000000001 R11: 0000000000000202 R12: 0000200000000080 [ 1048.644234][ T1296] R13: 00007fbc86f96ee0 R14: 00007fbc86f96ea0 R15: 00002000000006c0 [ 1048.644256][ T1296] [ 1048.824849][ T1298] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1048.840699][ T1298] loop5: detected capacity change from 0 to 512 [ 1048.847473][ T1298] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 1048.931103][ T1304] loop5: detected capacity change from 0 to 1024 [ 1048.940015][ T1304] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 1049.182975][ T1269] pimreg: left allmulticast mode [ 1049.316759][ T1310] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1049.326342][ T1310] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9086'. [ 1049.369556][ T1316] loop0: detected capacity change from 0 to 1024 [ 1049.387304][ T1316] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1049.456081][ T1323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1049.880830][ T1337] syzkaller0: entered promiscuous mode [ 1049.886878][ T1337] syzkaller0: entered allmulticast mode [ 1049.964321][ T1340] program syz.5.9097 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1050.226638][ T1348] loop0: detected capacity change from 0 to 512 [ 1050.233232][ T1348] EXT4-fs: Ignoring removed bh option [ 1050.239744][ T1348] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1050.251200][ T1348] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a816e01c, mo2=0002] [ 1050.261658][ T1348] System zones: 1-12 [ 1050.266685][ T1348] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1050.274271][ T1348] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9100: bg 0: block 361: padding at end of block bitmap is not set [ 1050.289611][ T1348] loop0: lost filesystem error report for type 5 error -117 [ 1050.290049][ T1348] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1050.306036][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 1050.306052][ C1] EXT4-fs (loop0): initial error at time 2000000629: ext4_validate_block_bitmap:441 [ 1050.306082][ C1] EXT4-fs (loop0): last error at time 2000000629: ext4_validate_block_bitmap:441 [ 1050.397764][ T1348] loop0: lost filesystem error report for type 5 error -117 [ 1050.412784][ T1348] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.9100: attempt to clear invalid blocks 33619980 len 1 [ 1050.440185][ T1348] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1050.440469][ T1348] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9100: invalid indirect mapped block 1811939328 (level 0) [ 1050.509777][ T1348] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1050.510080][ T1348] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.9100: invalid indirect mapped block 2 (level 2) [ 1050.587090][ T1348] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1050.588354][ T1348] EXT4-fs (loop0): 1 truncate cleaned up [ 1050.617301][ T1356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1050.632405][ T1348] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 1050.662283][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1050.691961][ T1358] Unsupported ieee802154 address type: 0 [ 1050.692352][ T28] audit: type=1400 audit(2000000630.259:10220): avc: denied { create } for pid=1357 comm="syz.2.9103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1050.810199][ T1369] loop0: detected capacity change from 0 to 1024 [ 1050.823657][ T1369] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1050.968657][ T1378] netlink: 'syz.5.9110': attribute type 8 has an invalid length. [ 1051.012338][ T1374] netlink: 'syz.2.9106': attribute type 3 has an invalid length. [ 1051.033967][ T1381] loop5: detected capacity change from 0 to 1024 [ 1051.044501][ T1381] EXT4-fs: Ignoring removed bh option [ 1051.069813][ T1381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1051.099399][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1051.152927][ T1390] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.186630][ T1392] loop5: detected capacity change from 0 to 128 [ 1051.198305][ T1392] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1051.211005][ T1392] ext4 filesystem being mounted at /398/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1051.229736][T26950] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1051.263349][ T1397] loop5: detected capacity change from 0 to 256 [ 1051.698066][ T1401] pimreg: entered allmulticast mode [ 1052.574977][ T1400] pimreg: left allmulticast mode [ 1052.796361][ T1414] syzkaller0: entered promiscuous mode [ 1052.807990][ T1414] syzkaller0: entered allmulticast mode [ 1053.031134][ T1423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1053.065768][ T1425] syzkaller1: entered promiscuous mode [ 1053.077132][ T1425] syzkaller1: entered allmulticast mode [ 1053.128334][ T1427] netlink: 'syz.0.9127': attribute type 8 has an invalid length. [ 1053.234733][ T1431] netlink: 'syz.5.9129': attribute type 8 has an invalid length. [ 1053.371702][ T1443] __nla_validate_parse: 101 callbacks suppressed [ 1053.371718][ T1443] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9132'. [ 1053.429597][ T1447] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.9134'. [ 1053.479532][ T1449] FAULT_INJECTION: forcing a failure. [ 1053.479532][ T1449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1053.504328][ T1449] CPU: 0 UID: 0 PID: 1449 Comm: syz.0.9135 Tainted: G W syzkaller #0 PREEMPT(full) [ 1053.504438][ T1449] Tainted: [W]=WARN [ 1053.504446][ T1449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1053.504458][ T1449] Call Trace: [ 1053.504465][ T1449] [ 1053.504473][ T1449] __dump_stack+0x1d/0x30 [ 1053.504501][ T1449] dump_stack_lvl+0x95/0xd0 [ 1053.504576][ T1449] dump_stack+0x15/0x1b [ 1053.504597][ T1449] should_fail_ex+0x263/0x280 [ 1053.504627][ T1449] should_fail+0xb/0x20 [ 1053.504653][ T1449] should_fail_usercopy+0x1a/0x20 [ 1053.504711][ T1449] _copy_from_user+0x1c/0xb0 [ 1053.504776][ T1449] ___sys_sendmsg+0xc1/0x1e0 [ 1053.504814][ T1449] __x64_sys_sendmsg+0xd4/0x160 [ 1053.504842][ T1449] x64_sys_call+0x194c/0x3020 [ 1053.504940][ T1449] do_syscall_64+0x12c/0x3b0 [ 1053.504966][ T1449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.504989][ T1449] RIP: 0033:0x7f52ff8dcdd9 [ 1053.505008][ T1449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.505028][ T1449] RSP: 002b:00007f52fe32f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.505050][ T1449] RAX: ffffffffffffffda RBX: 00007f52ffb55fa0 RCX: 00007f52ff8dcdd9 [ 1053.505143][ T1449] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1053.505235][ T1449] RBP: 00007f52fe32f090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.505250][ T1449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.505264][ T1449] R13: 00007f52ffb56038 R14: 00007f52ffb55fa0 R15: 00007ffeedf10018 [ 1053.505287][ T1449] [ 1053.713201][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1053.713214][ T28] audit: type=1400 audit(2000000633.085:10223): avc: denied { ioctl } for pid=1454 comm="syz.5.9137" path="socket:[116642]" dev="sockfs" ino=116642 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 1053.754644][ T1450] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9133'. [ 1053.841850][ T1461] loop5: detected capacity change from 0 to 512 [ 1053.854251][ T1461] EXT4-fs: dax option not supported [ 1053.899337][ T1461] loop5: detected capacity change from 0 to 512 [ 1053.930126][ T1461] EXT4-fs: dax option not supported [ 1054.010855][ T1465] program syz.0.9142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1054.181711][ T1472] netlink: 36 bytes leftover after parsing attributes in process `syz.5.9145'. [ 1054.259947][ T1474] netlink: 'syz.6.9146': attribute type 8 has an invalid length. [ 1054.303600][ T1478] pimreg: entered allmulticast mode [ 1054.317274][ T1480] FAULT_INJECTION: forcing a failure. [ 1054.317274][ T1480] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.339119][ T1482] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=25962 sclass=netlink_route_socket pid=1482 comm=syz.6.9150 [ 1054.383723][ T1480] CPU: 0 UID: 0 PID: 1480 Comm: syz.5.9149 Tainted: G W syzkaller #0 PREEMPT(full) [ 1054.383756][ T1480] Tainted: [W]=WARN [ 1054.383762][ T1480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1054.383775][ T1480] Call Trace: [ 1054.383783][ T1480] [ 1054.383793][ T1480] __dump_stack+0x1d/0x30 [ 1054.383872][ T1480] dump_stack_lvl+0x95/0xd0 [ 1054.383894][ T1480] dump_stack+0x15/0x1b [ 1054.383916][ T1480] should_fail_ex+0x263/0x280 [ 1054.383945][ T1480] should_failslab+0x8c/0xb0 [ 1054.384025][ T1480] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1054.384054][ T1480] ? skb_clone+0x151/0x1f0 [ 1054.384074][ T1480] skb_clone+0x151/0x1f0 [ 1054.384093][ T1480] __netlink_deliver_tap+0x2c9/0x500 [ 1054.384122][ T1480] netlink_unicast+0x653/0x680 [ 1054.384204][ T1480] netlink_sendmsg+0x5c8/0x6f0 [ 1054.384233][ T1480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.384335][ T1480] ____sys_sendmsg+0x563/0x5b0 [ 1054.384357][ T1480] ___sys_sendmsg+0x195/0x1e0 [ 1054.384385][ T1480] __x64_sys_sendmsg+0xd4/0x160 [ 1054.384415][ T1480] x64_sys_call+0x194c/0x3020 [ 1054.384494][ T1480] do_syscall_64+0x12c/0x3b0 [ 1054.384582][ T1480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.384607][ T1480] RIP: 0033:0x7fbc8853cdd9 [ 1054.384624][ T1480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.384644][ T1480] RSP: 002b:00007fbc86f97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.384664][ T1480] RAX: ffffffffffffffda RBX: 00007fbc887b5fa0 RCX: 00007fbc8853cdd9 [ 1054.384717][ T1480] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 1054.384732][ T1480] RBP: 00007fbc86f97090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.384747][ T1480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.384761][ T1480] R13: 00007fbc887b6038 R14: 00007fbc887b5fa0 R15: 00007ffed984e138 [ 1054.384781][ T1480] [ 1054.789698][ T1495] set_capacity_and_notify: 1 callbacks suppressed [ 1054.789717][ T1495] loop5: detected capacity change from 0 to 1024 [ 1054.827518][ T1495] EXT4-fs: Ignoring removed bh option [ 1054.837871][ T1497] Cannot find add_set index 0 as target [ 1054.845921][ T1497] loop0: detected capacity change from 0 to 256 [ 1054.871707][ T1495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1054.890595][ T1497] FAT-fs (loop0): Directory bread(block 64) failed [ 1054.897792][ T1497] FAT-fs (loop0): Directory bread(block 65) failed [ 1054.904301][ T1497] FAT-fs (loop0): Directory bread(block 66) failed [ 1054.910842][ T1497] FAT-fs (loop0): Directory bread(block 67) failed [ 1054.917508][ T1497] FAT-fs (loop0): Directory bread(block 68) failed [ 1054.924032][ T1497] FAT-fs (loop0): Directory bread(block 69) failed [ 1054.931222][ T1497] FAT-fs (loop0): Directory bread(block 70) failed [ 1054.937722][ T1497] FAT-fs (loop0): Directory bread(block 71) failed [ 1054.944279][ T1497] FAT-fs (loop0): Directory bread(block 72) failed [ 1054.950855][ T1497] FAT-fs (loop0): Directory bread(block 73) failed [ 1054.968224][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1054.977273][ T1497] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1054.986345][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1054.995963][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1055.005026][ T1497] netlink: 2 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1055.014269][ T1497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9154'. [ 1055.184628][ T1477] pimreg: left allmulticast mode [ 1055.368178][ T1512] netlink: 'syz.2.9160': attribute type 8 has an invalid length. [ 1055.682155][ T1521] program syz.2.9162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1055.712475][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.739269][ T1529] syzkaller0: entered promiscuous mode [ 1055.745951][ T1529] syzkaller0: entered allmulticast mode [ 1055.841283][ T1537] loop0: detected capacity change from 0 to 1024 [ 1055.848917][ T1537] EXT4-fs: inline encryption not supported [ 1055.862632][ T1537] EXT4-fs (loop0): stripe (6) is not aligned with cluster size (16), stripe is disabled [ 1055.880350][ T1537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1055.897061][ T28] audit: type=1400 audit(2000000635.135:10224): avc: denied { getopt } for pid=1536 comm="syz.0.9168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1055.931015][ T28] audit: type=1400 audit(2000000635.153:10225): avc: denied { read write } for pid=1536 comm="syz.0.9168" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1055.956246][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1055.956404][ T28] audit: type=1400 audit(2000000635.153:10226): avc: denied { open } for pid=1536 comm="syz.0.9168" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1055.992951][ T28] audit: type=1400 audit(2000000635.153:10227): avc: denied { ioctl } for pid=1536 comm="syz.0.9168" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x54dc scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 1056.033701][ T1553] program syz.0.9170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1056.126530][ T1562] netlink: 'syz.0.9173': attribute type 8 has an invalid length. [ 1056.594387][ T1573] Cannot find add_set index 0 as target [ 1056.606349][ T1573] loop0: detected capacity change from 0 to 256 [ 1056.731332][ T1573] FAT-fs (loop0): Directory bread(block 64) failed [ 1056.737990][ T1573] FAT-fs (loop0): Directory bread(block 65) failed [ 1056.744645][ T1573] FAT-fs (loop0): Directory bread(block 66) failed [ 1056.751175][ T1573] FAT-fs (loop0): Directory bread(block 67) failed [ 1056.758374][ T1573] FAT-fs (loop0): Directory bread(block 68) failed [ 1056.764893][ T1573] FAT-fs (loop0): Directory bread(block 69) failed [ 1056.771469][ T1573] FAT-fs (loop0): Directory bread(block 70) failed [ 1056.778049][ T1573] FAT-fs (loop0): Directory bread(block 71) failed [ 1056.784583][ T1573] FAT-fs (loop0): Directory bread(block 72) failed [ 1056.791755][ T1573] FAT-fs (loop0): Directory bread(block 73) failed [ 1058.130305][ T1594] siw: device registration error -23 [ 1058.137307][ T1594] loop5: detected capacity change from 0 to 164 [ 1058.177349][ T28] audit: type=1400 audit(2000000637.221:10228): avc: denied { create } for pid=1589 comm="syz.5.9181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 1058.343460][ T28] audit: type=1400 audit(2000000637.221:10229): avc: denied { write } for pid=1589 comm="syz.5.9181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1058.770035][ T1612] loop0: detected capacity change from 0 to 1024 [ 1058.800251][ T1612] ext4: Unknown parameter 'nouser_xattr' [ 1058.970175][ T1614] FAULT_INJECTION: forcing a failure. [ 1058.970175][ T1614] name failslab, interval 1, probability 0, space 0, times 0 [ 1059.047538][ T1614] CPU: 1 UID: 0 PID: 1614 Comm: syz.2.9188 Tainted: G W syzkaller #0 PREEMPT(full) [ 1059.047622][ T1614] Tainted: [W]=WARN [ 1059.047630][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.047642][ T1614] Call Trace: [ 1059.047648][ T1614] [ 1059.047656][ T1614] __dump_stack+0x1d/0x30 [ 1059.047678][ T1614] dump_stack_lvl+0x95/0xd0 [ 1059.047700][ T1614] dump_stack+0x15/0x1b [ 1059.047767][ T1614] should_fail_ex+0x263/0x280 [ 1059.047797][ T1614] should_failslab+0x8c/0xb0 [ 1059.047901][ T1614] __kmalloc_cache_node_noprof+0x6b/0x470 [ 1059.047970][ T1614] ? __get_vm_area_node+0x106/0x1d0 [ 1059.048000][ T1614] __get_vm_area_node+0x106/0x1d0 [ 1059.048171][ T1614] __vmalloc_node_range_noprof+0x25a/0x11c0 [ 1059.048190][ T1614] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.048213][ T1614] ? preempt_schedule_irq+0x2d/0x50 [ 1059.048249][ T1614] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.048358][ T1614] __vmalloc_noprof+0xa4/0xf0 [ 1059.048441][ T1614] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.048466][ T1614] bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.048505][ T1614] ? bpf_prog_alloc+0x2a/0x150 [ 1059.048530][ T1614] bpf_prog_alloc+0x3c/0x150 [ 1059.048575][ T1614] bpf_prog_load+0x50d/0x1030 [ 1059.048608][ T1614] ? security_bpf+0x2b/0x90 [ 1059.048628][ T1614] __sys_bpf+0x505/0x7e0 [ 1059.048660][ T1614] __x64_sys_bpf+0x41/0x50 [ 1059.048758][ T1614] x64_sys_call+0x10cb/0x3020 [ 1059.048784][ T1614] do_syscall_64+0x12c/0x3b0 [ 1059.048804][ T1614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.048870][ T1614] RIP: 0033:0x7f9112dacdd9 [ 1059.048888][ T1614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.048906][ T1614] RSP: 002b:00007f91117ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1059.048924][ T1614] RAX: ffffffffffffffda RBX: 00007f9113025fa0 RCX: 00007f9112dacdd9 [ 1059.048937][ T1614] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1059.048949][ T1614] RBP: 00007f91117ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.049002][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.049013][ T1614] R13: 00007f9113026038 R14: 00007f9113025fa0 R15: 00007fff1a4ae158 [ 1059.049034][ T1614] [ 1059.289242][ T1614] syz.2.9188: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0 [ 1059.473224][ T1614] CPU: 1 UID: 0 PID: 1614 Comm: syz.2.9188 Tainted: G W syzkaller #0 PREEMPT(full) [ 1059.473258][ T1614] Tainted: [W]=WARN [ 1059.473266][ T1614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1059.473308][ T1614] Call Trace: [ 1059.473315][ T1614] [ 1059.473323][ T1614] __dump_stack+0x1d/0x30 [ 1059.473348][ T1614] dump_stack_lvl+0x95/0xd0 [ 1059.473366][ T1614] dump_stack+0x15/0x1b [ 1059.473404][ T1614] warn_alloc+0x145/0x1c0 [ 1059.473455][ T1614] __vmalloc_node_range_noprof+0x27f/0x11c0 [ 1059.473542][ T1614] ? preempt_schedule_irq+0x2d/0x50 [ 1059.473574][ T1614] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.473601][ T1614] __vmalloc_noprof+0xa4/0xf0 [ 1059.473619][ T1614] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.473645][ T1614] bpf_prog_alloc_no_stats+0x47/0x390 [ 1059.473665][ T1614] ? bpf_prog_alloc+0x2a/0x150 [ 1059.473684][ T1614] bpf_prog_alloc+0x3c/0x150 [ 1059.473736][ T1614] bpf_prog_load+0x50d/0x1030 [ 1059.473818][ T1614] ? security_bpf+0x2b/0x90 [ 1059.473841][ T1614] __sys_bpf+0x505/0x7e0 [ 1059.473868][ T1614] __x64_sys_bpf+0x41/0x50 [ 1059.473890][ T1614] x64_sys_call+0x10cb/0x3020 [ 1059.473968][ T1614] do_syscall_64+0x12c/0x3b0 [ 1059.473993][ T1614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.474017][ T1614] RIP: 0033:0x7f9112dacdd9 [ 1059.474034][ T1614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1059.474099][ T1614] RSP: 002b:00007f91117ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1059.474120][ T1614] RAX: ffffffffffffffda RBX: 00007f9113025fa0 RCX: 00007f9112dacdd9 [ 1059.474136][ T1614] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1059.474151][ T1614] RBP: 00007f91117ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1059.474166][ T1614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1059.474181][ T1614] R13: 00007f9113026038 R14: 00007f9113025fa0 R15: 00007fff1a4ae158 [ 1059.474206][ T1614] [ 1059.474727][ T1614] Mem-Info: [ 1059.761799][ T1614] active_anon:59992 inactive_anon:16 isolated_anon:2 [ 1059.761799][ T1614] active_file:16523 inactive_file:14429 isolated_file:0 [ 1059.761799][ T1614] unevictable:18 dirty:116 writeback:0 [ 1059.761799][ T1614] slab_reclaimable:3726 slab_unreclaimable:28521 [ 1059.761799][ T1614] mapped:36166 shmem:49572 pagetables:8147 [ 1059.761799][ T1614] sec_pagetables:0 bounce:0 [ 1059.761799][ T1614] kernel_misc_reclaimable:0 [ 1059.761799][ T1614] free:1801727 free_pcp:6373 free_cma:0 [ 1059.851535][ T1614] Node 0 active_anon:241244kB inactive_anon:64kB active_file:66092kB inactive_file:57716kB unevictable:72kB isolated(anon):8kB isolated(file):0kB mapped:144664kB dirty:464kB writeback:0kB shmem:198288kB kernel_stack:4896kB pagetables:32472kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1059.883100][ T1614] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1060.150149][ T1614] lowmem_reserve[]: 0 2878 7857 7857 [ 1060.155562][ T1614] Node 0 DMA32 free:2944460kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948088kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 1060.190616][ T1614] lowmem_reserve[]: 0 0 4978 4978 [ 1060.195866][ T1614] Node 0 Normal free:4255092kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:231036kB inactive_anon:64kB active_file:66092kB inactive_file:57716kB unevictable:72kB writepending:464kB zspages:0kB present:5242880kB managed:5098236kB mlocked:68kB bounce:0kB free_pcp:23000kB local_pcp:13472kB free_cma:0kB [ 1060.230080][ T1614] lowmem_reserve[]: 0 0 0 0 [ 1060.234954][ T1614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1060.247953][ T1614] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 2*64kB (M) 3*128kB (M) 3*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944460kB [ 1060.265962][ T1614] Node 0 Normal: 1002*4kB (UME) 3217*8kB (UME) 812*16kB (UME) 484*32kB (UME) 557*64kB (UME) 566*128kB (UME) 344*256kB (UME) 276*512kB (UME) 233*1024kB (UME) 152*2048kB (UME) 808*4096kB (UM) = 4255152kB [ 1060.286624][ T1614] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1060.297415][ T1614] 78357 total pagecache pages [ 1060.302125][ T1614] 17 pages in swap cache [ 1060.306976][ T1614] Free swap = 124928kB [ 1060.311303][ T1614] Total swap = 124996kB [ 1060.315584][ T1614] 2097051 pages RAM [ 1060.319546][ T1614] 0 pages HighMem/MovableOnly [ 1060.324350][ T1614] 81630 pages reserved [ 1060.351961][ T1625] bond1: Unable to set up delay as MII monitoring is disabled [ 1060.361035][ T1625] bond1 (unregistering): Released all slaves [ 1060.399467][ T28] audit: type=1400 audit(2000000639.346:10230): avc: denied { append } for pid=1624 comm="syz.2.9191" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 1060.444259][ T1627] netlink: 'syz.0.9190': attribute type 3 has an invalid length. [ 1060.452074][ T1627] __nla_validate_parse: 57 callbacks suppressed [ 1060.452110][ T1627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9190'. [ 1060.599681][ T1635] program syz.5.9193 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1060.632041][ T28] audit: type=1400 audit(2000000639.561:10231): avc: denied { getopt } for pid=1636 comm="syz.5.9194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1060.702894][ T1639] loop5: detected capacity change from 0 to 4096 [ 1060.715946][ T1639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1060.736484][ T1644] netlink: 'syz.6.9196': attribute type 1 has an invalid length. [ 1060.799347][ T1653] netlink: 'syz.1.9198': attribute type 7 has an invalid length. [ 1060.807549][ T1653] netlink: 'syz.1.9198': attribute type 8 has an invalid length. [ 1060.817338][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1060.838411][ T1647] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9196'. [ 1060.847339][ T1647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9196'. [ 1060.856456][ T1647] netlink: 'syz.6.9196': attribute type 13 has an invalid length. [ 1060.897543][ T1656] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9199'. [ 1060.907519][ T1658] netlink: 'syz.6.9200': attribute type 8 has an invalid length. [ 1061.107826][ T1664] hub 8-0:1.0: USB hub found [ 1061.112866][ T1664] hub 8-0:1.0: 8 ports detected [ 1061.129511][ T1664] netlink: 'syz.5.9201': attribute type 36 has an invalid length. [ 1061.144785][ T1664] bridge27: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1061.154771][ T1664] bridge27: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1061.573070][ T1670] program syz.2.9204 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1061.584069][ T1668] loop0: detected capacity change from 0 to 1024 [ 1061.595528][ T1668] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1061.623705][ T28] audit: type=1400 audit(2000000640.487:10232): avc: denied { create } for pid=1671 comm="syz.6.9205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1061.811657][ T1685] Cannot find map_set index 65533 as target [ 1061.824841][ T28] audit: type=1400 audit(2000000640.665:10233): avc: denied { setopt } for pid=1680 comm="syz.1.9209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1061.973377][ T28] audit: type=1400 audit(2000000640.815:10234): avc: denied { listen } for pid=1690 comm="syz.5.9211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1062.027917][ T28] audit: type=1400 audit(2000000640.843:10235): avc: denied { write } for pid=1690 comm="syz.5.9211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1062.059803][ T28] audit: type=1400 audit(2000000640.899:10236): avc: denied { setopt } for pid=1690 comm="syz.5.9211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1062.081537][ T1692] loop5: detected capacity change from 0 to 512 [ 1062.096029][ T1692] ext4: Bad value for 'max_dir_size_kb' [ 1062.112635][ T1692] loop5: detected capacity change from 0 to 512 [ 1062.136033][ T1692] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1062.163626][ T1692] ext4 filesystem being mounted at /422/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1062.179864][ T1698] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9213'. [ 1062.440749][ T28] audit: type=1400 audit(2000000641.217:10237): avc: denied { setattr } for pid=1690 comm="syz.5.9211" path="/422/file0/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1062.501341][ T28] audit: type=1400 audit(2000000641.283:10238): avc: denied { append } for pid=1690 comm="syz.5.9211" name="bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 1062.790730][ T1707] program syz.0.9217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1062.889829][ T1713] loop0: detected capacity change from 0 to 2048 [ 1062.913072][ T1708] netlink: 'syz.1.9214': attribute type 3 has an invalid length. [ 1062.931467][ T1708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9214'. [ 1062.941983][ T1713] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1062.958943][ T28] audit: type=1400 audit(2000000641.741:10239): avc: denied { read } for pid=1712 comm="syz.0.9219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1063.138528][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1063.201917][ T1724] netlink: 'syz.5.9221': attribute type 8 has an invalid length. [ 1063.270051][ T1731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9224'. [ 1063.306823][ T1731] bond1: option lacp_active: invalid value (5) [ 1063.313996][ T1731] bond1 (unregistering): Released all slaves [ 1063.348055][ T1736] netlink: 'syz.5.9225': attribute type 8 has an invalid length. [ 1063.407778][ T1750] program syz.2.9229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1063.534793][ T1756] lo speed is unknown, defaulting to 1000 [ 1063.783236][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1063.847229][ T1768] loop0: detected capacity change from 0 to 512 [ 1063.932729][ T1770] syz.0.9234: attempt to access beyond end of device [ 1063.932729][ T1770] loop0: rw=1, sector=560, nr_sectors = 32 limit=512 [ 1063.960227][ T1770] syz.0.9234: attempt to access beyond end of device [ 1063.960227][ T1770] loop0: rw=1, sector=624, nr_sectors = 32 limit=512 [ 1063.992618][ T1770] syz.0.9234: attempt to access beyond end of device [ 1063.992618][ T1770] loop0: rw=1, sector=688, nr_sectors = 32 limit=512 [ 1064.032026][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.032026][ T1770] loop0: rw=1, sector=752, nr_sectors = 32 limit=512 [ 1064.065977][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.065977][ T1770] loop0: rw=1, sector=816, nr_sectors = 32 limit=512 [ 1064.110077][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.110077][ T1770] loop0: rw=1, sector=880, nr_sectors = 32 limit=512 [ 1064.144594][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.144594][ T1770] loop0: rw=1, sector=944, nr_sectors = 32 limit=512 [ 1064.173032][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.173032][ T1770] loop0: rw=1, sector=1008, nr_sectors = 32 limit=512 [ 1064.201788][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.201788][ T1770] loop0: rw=1, sector=1072, nr_sectors = 32 limit=512 [ 1064.232080][ T1770] syz.0.9234: attempt to access beyond end of device [ 1064.232080][ T1770] loop0: rw=1, sector=1136, nr_sectors = 32 limit=512 [ 1064.506267][ T1775] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9236'. [ 1064.617487][ T1785] program syz.2.9238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1064.635258][ T1784] loop5: detected capacity change from 0 to 512 [ 1064.650904][ T1784] EXT4-fs (loop5): 1 truncate cleaned up [ 1064.656986][ T1784] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1064.765144][ T1784] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9239: invalid indirect mapped block 4294967295 (level 1) [ 1064.833434][ T1784] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.9239: invalid indirect mapped block 65535 (level 2) [ 1064.931689][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1065.002010][ T1803] loop5: detected capacity change from 0 to 512 [ 1065.017112][ T1803] ext3: Bad value for 'dax' [ 1065.037088][ T1804] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.9243'. [ 1065.065935][ T1804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9243'. [ 1065.216573][ T1812] program syz.5.9245 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.276954][ T1814] program syz.5.9246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1065.902036][ T1843] pimreg: entered allmulticast mode [ 1065.909314][ T1842] pimreg: left allmulticast mode [ 1066.118206][ T1849] hub 8-0:1.0: USB hub found [ 1066.123273][ T1849] hub 8-0:1.0: 8 ports detected [ 1066.139374][ T1849] netlink: 'syz.2.9258': attribute type 36 has an invalid length. [ 1066.152626][ T1849] bridge23: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1066.163250][ T1849] bridge23: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1066.317121][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 1066.317143][ T28] audit: type=1400 audit(2000000644.876:10252): avc: denied { cpu } for pid=1851 comm="syz.0.9260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 1066.472552][ T28] audit: type=1400 audit(2000000644.951:10253): avc: denied { getopt } for pid=1853 comm="syz.5.9261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1066.510352][ T1854] lo speed is unknown, defaulting to 1000 [ 1066.535492][ T28] audit: type=1400 audit(2000000645.092:10254): avc: denied { read write } for pid=1851 comm="syz.0.9260" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1066.566812][ T28] audit: type=1400 audit(2000000645.092:10255): avc: denied { open } for pid=1851 comm="syz.0.9260" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1066.622495][ T28] audit: type=1400 audit(2000000645.166:10256): avc: denied { create } for pid=1859 comm="syz.0.9263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1066.668926][ T28] audit: type=1400 audit(2000000645.166:10257): avc: denied { execute } for pid=1863 comm="syz.5.9265" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=117700 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 1066.700824][ T1860] FAULT_INJECTION: forcing a failure. [ 1066.700824][ T1860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1066.715440][ T1860] CPU: 0 UID: 0 PID: 1860 Comm: syz.0.9263 Tainted: G W syzkaller #0 PREEMPT(full) [ 1066.715475][ T1860] Tainted: [W]=WARN [ 1066.715482][ T1860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1066.715495][ T1860] Call Trace: [ 1066.715501][ T1860] [ 1066.715509][ T1860] __dump_stack+0x1d/0x30 [ 1066.715653][ T1860] dump_stack_lvl+0x95/0xd0 [ 1066.715675][ T1860] dump_stack+0x15/0x1b [ 1066.715765][ T1860] should_fail_ex+0x263/0x280 [ 1066.715795][ T1860] should_fail+0xb/0x20 [ 1066.715821][ T1860] should_fail_usercopy+0x1a/0x20 [ 1066.715849][ T1860] _copy_from_user+0x1c/0xb0 [ 1066.715937][ T1860] ___sys_recvmsg+0xaa/0x3b0 [ 1066.715964][ T1860] do_recvmmsg+0x1ef/0x560 [ 1066.716062][ T1860] __x64_sys_recvmmsg+0xe5/0x170 [ 1066.716088][ T1860] x64_sys_call+0x80f/0x3020 [ 1066.716112][ T1860] do_syscall_64+0x12c/0x3b0 [ 1066.716192][ T1860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.716215][ T1860] RIP: 0033:0x7f52ff8dcdd9 [ 1066.716259][ T1860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.716275][ T1860] RSP: 002b:00007f52fe32f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1066.716363][ T1860] RAX: ffffffffffffffda RBX: 00007f52ffb55fa0 RCX: 00007f52ff8dcdd9 [ 1066.716452][ T1860] RDX: 0000000000000001 RSI: 00002000000050c0 RDI: 000000000000000c [ 1066.716466][ T1860] RBP: 00007f52fe32f090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.716481][ T1860] R10: 0000000040010102 R11: 0000000000000246 R12: 0000000000000001 [ 1066.716495][ T1860] R13: 00007f52ffb56038 R14: 00007f52ffb55fa0 R15: 00007ffeedf10018 [ 1066.716515][ T1860] [ 1066.989001][ T28] audit: type=1400 audit(2000000645.513:10258): avc: denied { connect } for pid=1863 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1067.100805][ T28] audit: type=1400 audit(2000000645.513:10259): avc: denied { read } for pid=1863 comm="syz.5.9265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1067.151125][ T1869] skbuff: bad partial csum: csum=65506/2 headroom=136 headlen=65526 [ 1067.173312][ T28] audit: type=1400 audit(2000000645.616:10260): avc: denied { firmware_load } for pid=1863 comm="syz.5.9265" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 1067.272034][ T1883] pimreg: entered allmulticast mode [ 1067.489408][ T1891] loop0: detected capacity change from 0 to 1024 [ 1067.508362][ T1891] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 1068.152738][ T1882] pimreg: left allmulticast mode [ 1068.510234][ T28] audit: type=1400 audit(2000000646.935:10261): avc: denied { write } for pid=1927 comm="syz.5.9283" name="snmp" dev="proc" ino=4026532794 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1068.603572][ T1930] loop5: detected capacity change from 0 to 1024 [ 1068.625432][ T1930] EXT4-fs: Ignoring removed bh option [ 1068.653029][ T1930] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1068.901124][ T1935] lo speed is unknown, defaulting to 1000 [ 1069.395529][ T1945] Cannot find add_set index 0 as target [ 1069.533989][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1069.607246][ T1951] bpf: Bad value for 'mode' [ 1069.792534][ T1962] program syz.5.9294 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1069.824031][ T1964] loop0: detected capacity change from 0 to 1024 [ 1069.833777][ T1964] EXT4-fs: inline encryption not supported [ 1069.850887][ T1964] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 1069.850887][ T1964] [ 1069.885523][ T1964] loop0: detected capacity change from 0 to 512 [ 1069.911080][ T1964] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1069.953042][ T1964] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1069.981353][ T1964] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 1069.991593][ T1967] netlink: 'syz.5.9296': attribute type 8 has an invalid length. [ 1070.207251][ T1976] loop0: detected capacity change from 0 to 8192 [ 1070.255392][ T1976] bio_check_eod: 201 callbacks suppressed [ 1070.255409][ T1976] syz.0.9298: attempt to access beyond end of device [ 1070.255409][ T1976] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.315071][ T1982] loop5: detected capacity change from 0 to 1024 [ 1070.329144][ T1976] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.348146][ T1982] EXT4-fs: Ignoring removed bh option [ 1070.357412][ T1975] syz.0.9298: attempt to access beyond end of device [ 1070.357412][ T1975] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.390352][ T1975] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.400369][ T1982] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1070.406605][ T1976] syz.0.9298: attempt to access beyond end of device [ 1070.406605][ T1976] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.469015][ T1976] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.495546][ T1975] syz.0.9298: attempt to access beyond end of device [ 1070.495546][ T1975] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.634551][ T1975] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.949195][ T1976] syz.0.9298: attempt to access beyond end of device [ 1070.949195][ T1976] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.963259][ T1976] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.971593][ T1975] syz.0.9298: attempt to access beyond end of device [ 1070.971593][ T1975] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1070.985079][ T1975] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1070.998932][ T1976] syz.0.9298: attempt to access beyond end of device [ 1070.998932][ T1976] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1071.027913][ T1976] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1071.048669][ T1975] syz.0.9298: attempt to access beyond end of device [ 1071.048669][ T1975] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1071.076168][ T1975] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1071.106193][ T1976] syz.0.9298: attempt to access beyond end of device [ 1071.106193][ T1976] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1071.142397][ T1976] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1071.172601][ T1975] syz.0.9298: attempt to access beyond end of device [ 1071.172601][ T1975] loop0: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 1071.216732][ T1975] Buffer I/O error on dev loop0, logical block 57847, async page read [ 1071.424767][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1071.646639][ T2014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9310'. [ 1071.668871][ T28] kauditd_printk_skb: 13248 callbacks suppressed [ 1071.668887][ T28] audit: type=1326 audit(2000000649.883:23479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1071.678567][ T2016] FAULT_INJECTION: forcing a failure. [ 1071.678567][ T2016] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.749737][ T2016] CPU: 1 UID: 0 PID: 2016 Comm: syz.0.9308 Tainted: G W syzkaller #0 PREEMPT(full) [ 1071.749767][ T2016] Tainted: [W]=WARN [ 1071.749773][ T2016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1071.749846][ T2016] Call Trace: [ 1071.749854][ T2016] [ 1071.749863][ T2016] __dump_stack+0x1d/0x30 [ 1071.749889][ T2016] dump_stack_lvl+0x95/0xd0 [ 1071.749909][ T2016] dump_stack+0x15/0x1b [ 1071.749929][ T2016] should_fail_ex+0x263/0x280 [ 1071.749985][ T2016] should_failslab+0x8c/0xb0 [ 1071.750017][ T2016] kmem_cache_alloc_node_noprof+0x6d/0x450 [ 1071.750050][ T2016] ? __alloc_skb+0x2d6/0x690 [ 1071.750111][ T2016] __alloc_skb+0x2d6/0x690 [ 1071.750140][ T2016] ? __alloc_skb+0x200/0x690 [ 1071.750222][ T2016] netlink_alloc_large_skb+0xbf/0xf0 [ 1071.750243][ T2016] netlink_sendmsg+0x40c/0x6f0 [ 1071.750269][ T2016] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1071.750362][ T2016] ____sys_sendmsg+0x563/0x5b0 [ 1071.750385][ T2016] ___sys_sendmsg+0x195/0x1e0 [ 1071.750418][ T2016] __x64_sys_sendmsg+0xd4/0x160 [ 1071.750463][ T2016] x64_sys_call+0x194c/0x3020 [ 1071.750487][ T2016] do_syscall_64+0x12c/0x3b0 [ 1071.750510][ T2016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.750577][ T2016] RIP: 0033:0x7f52ff8dcdd9 [ 1071.750593][ T2016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.750612][ T2016] RSP: 002b:00007f52fe30e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1071.750634][ T2016] RAX: ffffffffffffffda RBX: 00007f52ffb56090 RCX: 00007f52ff8dcdd9 [ 1071.750653][ T2016] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000006 [ 1071.750665][ T2016] RBP: 00007f52fe30e090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.750741][ T2016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.750754][ T2016] R13: 00007f52ffb56128 R14: 00007f52ffb56090 R15: 00007ffeedf10018 [ 1071.750773][ T2016] [ 1071.764702][ T28] audit: type=1326 audit(2000000649.892:23513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1071.979729][ T28] audit: type=1326 audit(2000000649.892:23514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.043086][ T28] audit: type=1326 audit(2000000649.892:23515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.087773][ T28] audit: type=1326 audit(2000000649.892:23516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.114671][ T28] audit: type=1326 audit(2000000649.892:23517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.141470][ T28] audit: type=1326 audit(2000000649.892:23518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.165914][ T28] audit: type=1326 audit(2000000649.892:23519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.190038][ T28] audit: type=1326 audit(2000000649.892:23520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.217956][ T28] audit: type=1326 audit(2000000649.892:23521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1916 comm="syz.2.9279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9112d4e159 code=0x7ffc0000 [ 1072.512323][ T2040] loop5: detected capacity change from 0 to 1764 [ 1072.569721][ T2040] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1072.965106][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.109585][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.315844][ T2048] loop0: detected capacity change from 0 to 8192 [ 1073.409530][ T2053] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62480 sclass=netlink_route_socket pid=2053 comm=syz.6.9324 [ 1073.438732][ T2055] program syz.2.9323 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1073.549211][ T2057] veth0_vlan: entered allmulticast mode [ 1073.627462][ T2065] netlink: 1057 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1073.665299][ T2063] veth0_vlan: left promiscuous mode [ 1073.670902][ T2063] veth0_vlan: entered promiscuous mode [ 1073.681231][ T2066] pimreg: entered allmulticast mode [ 1073.686576][ T2065] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9328'. [ 1073.709518][ T2065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1073.734202][ T2061] pimreg: left allmulticast mode [ 1073.808606][ T2073] program syz.2.9331 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1074.157057][ T2082] netlink: 'syz.5.9333': attribute type 8 has an invalid length. [ 1074.235898][ T2083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.245047][ T2083] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.254387][ T2083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.263995][ T2083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.273093][ T2083] netlink: 2 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.282442][ T2083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.292294][ T2083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9332'. [ 1074.409956][ T2086] loop5: detected capacity change from 0 to 1024 [ 1074.462076][ T2086] EXT4-fs: Ignoring removed bh option [ 1074.487540][ T2086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1075.313701][ T2109] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1075.469143][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1075.962780][ T2136] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 1076.142813][ T2147] hub 8-0:1.0: USB hub found [ 1076.147582][ T2147] hub 8-0:1.0: 8 ports detected [ 1076.154782][ T2147] netlink: 'syz.0.9353': attribute type 36 has an invalid length. [ 1076.165601][ T2147] bridge20: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1076.175552][ T2147] bridge20: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1076.994398][ T2160] __nla_validate_parse: 42 callbacks suppressed [ 1076.994415][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.009834][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.020689][ T2160] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.029929][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.039341][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.049025][ T2160] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.058230][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.067387][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.076479][ T2160] netlink: 2 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1077.086456][ T2160] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1078.044566][ T2169] hub 8-0:1.0: USB hub found [ 1078.049293][ T2169] hub 8-0:1.0: 8 ports detected [ 1078.235417][ T28] kauditd_printk_skb: 2969 callbacks suppressed [ 1078.235441][ T28] audit: type=1400 audit(2000000656.031:26489): avc: denied { mounton } for pid=2170 comm="syz.5.9361" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=214 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1078.267291][ T2171] tmpfs: Bad value for 'mpol' [ 1078.388194][ T28] audit: type=1400 audit(2000000656.181:26490): avc: denied { read append } for pid=2170 comm="syz.5.9361" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1078.523476][ T28] audit: type=1400 audit(2000000656.181:26491): avc: denied { open } for pid=2170 comm="syz.5.9361" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1078.547711][ T28] audit: type=1400 audit(2000000656.181:26492): avc: denied { ioctl } for pid=2170 comm="syz.5.9361" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 1078.579610][ T2176] program syz.0.9363 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1078.680646][ T2181] netlink: 'syz.6.9364': attribute type 8 has an invalid length. [ 1080.065859][ T2207] Cannot find add_set index 0 as target [ 1080.095437][ T2204] loop5: detected capacity change from 0 to 256 [ 1081.887412][ T2210] loop0: detected capacity change from 0 to 512 [ 1081.895427][ T2210] EXT4-fs: inline encryption not supported [ 1081.909218][ T2204] FAT-fs (loop5): Directory bread(block 64) failed [ 1081.915784][ T2204] FAT-fs (loop5): Directory bread(block 65) failed [ 1081.922360][ T2204] FAT-fs (loop5): Directory bread(block 66) failed [ 1081.928903][ T2204] FAT-fs (loop5): Directory bread(block 67) failed [ 1081.935458][ T2204] FAT-fs (loop5): Directory bread(block 68) failed [ 1081.941955][ T2204] FAT-fs (loop5): Directory bread(block 69) failed [ 1081.948545][ T2204] FAT-fs (loop5): Directory bread(block 70) failed [ 1081.955054][ T2204] FAT-fs (loop5): Directory bread(block 71) failed [ 1081.961593][ T2204] FAT-fs (loop5): Directory bread(block 72) failed [ 1081.968092][ T2204] FAT-fs (loop5): Directory bread(block 73) failed [ 1082.123673][ T2210] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.9373: bad orphan inode 15 [ 1082.144626][ T2224] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1082.290480][ T2210] loop0: lost filesystem error report for type 5 error -117 [ 1082.293735][ T2210] ext4_test_bit(bit=14, block=5) = 0 [ 1082.306743][ T2210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.347319][ T28] audit: type=1400 audit(2000000659.858:26493): avc: denied { write } for pid=2234 comm="syz.2.9381" path="socket:[120252]" dev="sockfs" ino=120252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1082.371561][ T2210] EXT4-fs warning (device loop0): ext4_resize_begin:72: won't resize using backup superblock at 1 [ 1082.379912][ T28] audit: type=1400 audit(2000000659.858:26494): avc: denied { create } for pid=2234 comm="syz.2.9381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1082.412507][ T2241] program syz.2.9383 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1082.425028][ T2210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1082.478338][ T2245] loop0: detected capacity change from 0 to 1024 [ 1082.485366][ T2245] EXT4-fs: Ignoring removed bh option [ 1082.542670][ T2245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1082.586405][ T2250] loop5: detected capacity change from 0 to 4096 [ 1082.611819][ T2250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1083.307577][T26950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.536716][ T2271] __nla_validate_parse: 41 callbacks suppressed [ 1083.536811][ T2271] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.9390'. [ 1083.562757][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9390'. [ 1083.585685][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.619543][ T28] audit: type=1400 audit(2000000661.066:26495): avc: denied { watch watch_reads } for pid=2266 comm="syz.2.9391" path="/proc/1124" dev="proc" ino=120290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 1083.649567][ T2271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.781591][ T2275] tipc: Enabled bearer , priority 0 [ 1083.949099][ T28] audit: type=1400 audit(2000000661.384:26496): avc: denied { ioctl } for pid=2274 comm="syz.5.9393" path="socket:[119664]" dev="sockfs" ino=119664 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1084.388140][ T2283] tipc: Resetting bearer [ 1084.842216][ T2275] tipc: Disabling bearer [ 1085.960723][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1085.969696][ T2282] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1085.979157][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1085.988334][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1085.997948][ T2282] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1086.006950][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1086.015986][ T2282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1086.025530][ T2282] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9394'. [ 1086.036007][ T7616] tipc: Node number set to 4178385589 [ 1086.500123][ T2306] program syz.2.9398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1086.531472][ T2309] loop0: detected capacity change from 0 to 256 [ 1087.150120][ T2313] loop0: detected capacity change from 0 to 256 [ 1087.245700][ T28] audit: type=1400 audit(2000000664.463:26497): avc: denied { watch watch_reads } for pid=2308 comm="syz.0.9401" path="/332/file0/file0/file0" dev="loop0" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 1087.592333][ T28] audit: type=1400 audit(2000000664.790:26498): avc: denied { getopt } for pid=2322 comm="syz.6.9405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 1087.651016][ T2331] loop0: detected capacity change from 0 to 512 [ 1087.658845][ T2331] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1087.682753][ T2331] EXT4-fs (loop0): 1 orphan inode deleted [ 1087.688563][ T2331] EXT4-fs (loop0): 1 truncate cleaned up [ 1087.695190][ T2331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.449905][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.937656][ T2346] loop5: detected capacity change from 0 to 1764 [ 1090.043993][ T28] audit: type=1400 audit(2000000666.793:26499): avc: denied { accept } for pid=2344 comm="syz.0.9412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1090.586416][ T2356] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=2356 comm=syz.0.9412 [ 1091.060807][ T2371] loop0: detected capacity change from 0 to 4096 [ 1091.086970][T25318] tipc: Resetting bearer [ 1091.089617][ T2371] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1091.120215][T25318] tipc: Disabling bearer [ 1091.121484][ T28] audit: type=1400 audit(2000000668.093:26500): avc: denied { mounton } for pid=2378 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 1091.229773][ T2366] lo speed is unknown, defaulting to 1000 [ 1091.708457][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1091.768380][ T2393] netlink: 'syz.2.9422': attribute type 29 has an invalid length. [ 1091.956775][ T2395] netlink: 'syz.2.9422': attribute type 29 has an invalid length. [ 1092.115849][ T28] audit: type=1400 audit(2000000668.683:26501): avc: denied { connect } for pid=2392 comm="syz.2.9422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1092.136159][ T28] audit: type=1400 audit(2000000668.908:26502): avc: denied { read } for pid=2392 comm="syz.2.9422" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1092.183090][ T2407] program syz.0.9423 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1092.194607][ T2378] lo speed is unknown, defaulting to 1000 [ 1092.231455][ T2405] __nla_validate_parse: 52 callbacks suppressed [ 1092.231470][ T2405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9426'. [ 1092.395079][ T2405] hsr_slave_1 (unregistering): left promiscuous mode [ 1092.544244][ T2417] syzkaller1: entered promiscuous mode [ 1092.550784][ T2417] syzkaller1: entered allmulticast mode [ 1092.602263][ T2378] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.719301][ T2378] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.726868][ T2378] bridge_slave_0: entered allmulticast mode [ 1092.733484][ T2378] bridge_slave_0: entered promiscuous mode [ 1092.741574][ T2378] bridge0: port 2(bridge_slave_1) entered blocking state [ 1092.749138][ T2378] bridge0: port 2(bridge_slave_1) entered disabled state [ 1092.756584][ T2378] bridge_slave_1: entered allmulticast mode [ 1092.763182][ T2378] bridge_slave_1: entered promiscuous mode [ 1092.862809][ T2431] loop5: detected capacity change from 0 to 256 [ 1092.887523][ T2431] FAT-fs (loop5): Directory bread(block 64) failed [ 1092.894177][ T2431] FAT-fs (loop5): Directory bread(block 65) failed [ 1092.900747][ T2431] FAT-fs (loop5): Directory bread(block 66) failed [ 1092.919966][ T2431] FAT-fs (loop5): Directory bread(block 67) failed [ 1092.926587][ T2431] FAT-fs (loop5): Directory bread(block 68) failed [ 1092.933209][ T2431] FAT-fs (loop5): Directory bread(block 69) failed [ 1092.955208][ T2431] FAT-fs (loop5): Directory bread(block 70) failed [ 1092.969401][ T2378] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1092.982367][ T2431] FAT-fs (loop5): Directory bread(block 71) failed [ 1092.989830][ T2431] FAT-fs (loop5): Directory bread(block 72) failed [ 1093.000371][ T2378] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.009879][ T2431] FAT-fs (loop5): Directory bread(block 73) failed [ 1093.087385][ T2378] team0: Port device team_slave_0 added [ 1093.117120][ T2378] team0: Port device team_slave_1 added [ 1093.130334][ T2431] veth0: entered promiscuous mode [ 1093.162431][ T28] audit: type=1400 audit(2000000669.974:26503): avc: denied { mounton } for pid=2429 comm="syz.5.9431" path="/460/file1" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 1093.198311][ T2378] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1093.218694][ T2378] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.245603][ T2378] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.257933][ T2431] veth0: left promiscuous mode [ 1093.315793][ T2378] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.341932][ T2378] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.369685][ T2378] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.549361][ T2378] hsr_slave_0: entered promiscuous mode [ 1093.563458][ T2378] hsr_slave_1: entered promiscuous mode [ 1093.573662][ T2378] debugfs: 'hsr0' already exists in 'hsr' [ 1093.587874][ T2378] Cannot create hsr debugfs directory [ 1094.457425][ T2378] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1094.471464][ T2378] 8021q: adding VLAN 0 to HW filter on device team0 [ 1094.512768][T10711] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.519947][T10711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1094.539042][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.546143][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1094.558321][ T28] audit: type=1400 audit(2000000671.313:26504): avc: denied { accept } for pid=2465 comm="syz.6.9441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1094.567700][ T2461] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9440'. [ 1094.589784][ T2378] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1094.600485][ T28] audit: type=1400 audit(2000000671.341:26505): avc: denied { write } for pid=2465 comm="syz.6.9441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1094.606105][ T2378] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1094.687435][ T2476] loop0: detected capacity change from 0 to 512 [ 1094.747413][ T2378] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1094.771195][ T2476] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1094.779555][ T2476] System zones: 0-2, 18-18, 34-34 [ 1094.785285][ T2476] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 1094.794050][ T2476] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1094.809436][ T2476] EXT4-fs (loop0): mount failed [ 1094.903853][ T2504] netlink: 1057 bytes leftover after parsing attributes in process `syz.5.9445'. [ 1094.908589][ T2378] veth0_vlan: entered promiscuous mode [ 1094.921040][ T2476] lo speed is unknown, defaulting to 1000 [ 1094.928075][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9445'. [ 1094.940707][ T2504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.969241][ T2378] veth1_vlan: entered promiscuous mode [ 1095.028182][ T2378] veth0_macvtap: entered promiscuous mode [ 1095.037863][ T2506] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:20004 [ 1095.043263][ T2378] veth1_macvtap: entered promiscuous mode [ 1095.061056][ T2378] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.073110][ T2378] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.100580][ T28] audit: type=1400 audit(2000000671.790:26506): avc: denied { mounton } for pid=2378 comm="syz-executor" path="/root/syzkaller.tUpA4x/syz-tmp" dev="sda1" ino=2093 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 1095.125214][ T28] audit: type=1400 audit(2000000671.790:26507): avc: denied { mount } for pid=2378 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1095.154199][ T2513] FAULT_INJECTION: forcing a failure. [ 1095.154199][ T2513] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.166841][ T2513] CPU: 0 UID: 0 PID: 2513 Comm: syz.1.9418 Tainted: G W syzkaller #0 PREEMPT(full) [ 1095.166861][ T2513] Tainted: [W]=WARN [ 1095.166865][ T2513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1095.166873][ T2513] Call Trace: [ 1095.166878][ T2513] [ 1095.166962][ T2513] __dump_stack+0x1d/0x30 [ 1095.166978][ T2513] dump_stack_lvl+0x95/0xd0 [ 1095.166990][ T2513] dump_stack+0x15/0x1b [ 1095.167001][ T2513] should_fail_ex+0x263/0x280 [ 1095.167029][ T2513] should_failslab+0x8c/0xb0 [ 1095.167046][ T2513] kmem_cache_alloc_noprof+0x66/0x3f0 [ 1095.167107][ T2513] ? do_getname+0x2e/0x1c0 [ 1095.167118][ T2513] do_getname+0x2e/0x1c0 [ 1095.167129][ T2513] user_path_at+0x28/0x100 [ 1095.167151][ T2513] __se_sys_mount+0x25b/0x2e0 [ 1095.167170][ T2513] ? fput+0x8f/0xc0 [ 1095.167193][ T2513] __x64_sys_mount+0x67/0x80 [ 1095.167276][ T2513] x64_sys_call+0x2d61/0x3020 [ 1095.167299][ T2513] do_syscall_64+0x12c/0x3b0 [ 1095.167335][ T2513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.167348][ T2513] RIP: 0033:0x7f96b2becdd9 [ 1095.167358][ T2513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.167369][ T2513] RSP: 002b:00007f96b163f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1095.167381][ T2513] RAX: ffffffffffffffda RBX: 00007f96b2e65fa0 RCX: 00007f96b2becdd9 [ 1095.167470][ T2513] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 1095.167556][ T2513] RBP: 00007f96b163f090 R08: 0000200000000100 R09: 0000000000000000 [ 1095.167564][ T2513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.167571][ T2513] R13: 00007f96b2e66038 R14: 00007f96b2e65fa0 R15: 00007ffd062fabb8 [ 1095.167583][ T2513] [ 1095.468759][ T2528] netlink: 'syz.0.9452': attribute type 9 has an invalid length. [ 1095.577002][ T2537] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.9455'. [ 1095.589457][ T2537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9455'. [ 1095.599965][ T2537] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1095.631740][ T2542] loop0: detected capacity change from 0 to 128 [ 1095.640822][ T2542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1095.653502][ T2542] ext4 filesystem being mounted at /349/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.665826][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 1095.665840][ T28] audit: type=1400 audit(2000000672.351:26513): avc: denied { create } for pid=2541 comm="syz.0.9457" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.668340][ T2542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9457'. [ 1095.671939][ T28] audit: type=1400 audit(2000000672.351:26514): avc: denied { add_name } for pid=2541 comm="syz.0.9457" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 1095.723567][T29286] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1095.760951][ T2546] loop0: detected capacity change from 0 to 512 [ 1095.772328][ T2546] EXT4-fs (loop0): 1 truncate cleaned up [ 1095.778302][ T2546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.797347][ T2546] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.9458: invalid indirect mapped block 4294967295 (level 1) [ 1095.811511][ T2546] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.9458: invalid indirect mapped block 65535 (level 2) [ 1095.833364][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.852870][ T2549] loop0: detected capacity change from 0 to 512 [ 1095.862073][ T2549] EXT4-fs: Ignoring removed nobh option [ 1095.878518][ T2549] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1095.891405][ T2549] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1095.904863][ T2549] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.9459: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 1095.933463][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.956913][ T2553] loop0: detected capacity change from 0 to 512 [ 1095.974328][ T2553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002] [ 1095.982341][ T2553] System zones: 0-2, 18-18, 34-34 [ 1095.987900][ T2553] Quota error (device loop0): v2_read_file_info: Can't read info structure [ 1095.996882][ T2553] EXT4-fs warning (device loop0): ext4_enable_quotas:7269: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 1096.012285][ T2553] EXT4-fs (loop0): mount failed [ 1096.038161][ T2557] loop5: detected capacity change from 0 to 128 [ 1096.046353][ T2557] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 not in group (block 8388611)! [ 1096.057808][ T2557] EXT4-fs (loop5): group descriptors corrupted! [ 1096.102438][ T2553] lo speed is unknown, defaulting to 1000 [ 1096.337833][ T2572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1096.345096][ T2572] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.352329][ T2572] IPv6: NLM_F_CREATE should be set when creating new route [ 1096.581490][ T2579] netlink: 'syz.1.9467': attribute type 3 has an invalid length. [ 1096.591856][ T2579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9467'. [ 1096.642841][ T2598] netlink: 'syz.6.9477': attribute type 1 has an invalid length. [ 1096.660308][ T2598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1096.676415][ T2598] bond1: (slave gretap1): making interface the new active one [ 1096.686103][ T2598] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1096.935928][ T2608] program syz.5.9480 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1097.099950][ T2612] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1097.161756][ T2612] loop0: detected capacity change from 0 to 1024 [ 1097.177640][ T2612] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 1097.193011][ T2612] System zones: 0-1, 3-36 [ 1097.206278][ T2612] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.9481: bad orphan inode 134217728 [ 1097.217996][ T2612] loop0: lost filesystem error report for type 5 error -117 [ 1097.230180][ T2612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1097.424883][ T2612] ================================================================== [ 1097.433038][ T2612] BUG: KCSAN: data-race in filemap_read / filemap_read [ 1097.440000][ T2612] [ 1097.442332][ T2612] read to 0xffff888133326d60 of 8 bytes by task 2615 on cpu 1: [ 1097.449874][ T2612] filemap_read+0x6f/0xa10 [ 1097.454308][ T2612] generic_file_read_iter+0x79/0x330 [ 1097.459606][ T2612] ext4_file_read_iter+0x1cc/0x290 [ 1097.464727][ T2612] copy_splice_read+0x471/0x6c0 [ 1097.469602][ T2612] splice_direct_to_actor+0x28f/0x670 [ 1097.474987][ T2612] do_splice_direct+0x119/0x1a0 [ 1097.479861][ T2612] do_sendfile+0x382/0x650 [ 1097.484293][ T2612] __x64_sys_sendfile64+0x105/0x150 [ 1097.489504][ T2612] x64_sys_call+0x2dc4/0x3020 [ 1097.494197][ T2612] do_syscall_64+0x12c/0x3b0 [ 1097.498802][ T2612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.504711][ T2612] [ 1097.507044][ T2612] write to 0xffff888133326d60 of 8 bytes by task 2612 on cpu 0: [ 1097.514677][ T2612] filemap_read+0x98d/0xa10 [ 1097.519206][ T2612] generic_file_read_iter+0x79/0x330 [ 1097.524591][ T2612] ext4_file_read_iter+0x1cc/0x290 [ 1097.529730][ T2612] copy_splice_read+0x471/0x6c0 [ 1097.534608][ T2612] splice_direct_to_actor+0x28f/0x670 [ 1097.539998][ T2612] do_splice_direct+0x119/0x1a0 [ 1097.544909][ T2612] do_sendfile+0x382/0x650 [ 1097.549324][ T2612] __x64_sys_sendfile64+0x105/0x150 [ 1097.554521][ T2612] x64_sys_call+0x2dc4/0x3020 [ 1097.559190][ T2612] do_syscall_64+0x12c/0x3b0 [ 1097.563764][ T2612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.569645][ T2612] [ 1097.571965][ T2612] value changed: 0x0000000000000195 -> 0x0000000000000196 [ 1097.579049][ T2612] [ 1097.581361][ T2612] Reported by Kernel Concurrency Sanitizer on: [ 1097.587497][ T2612] CPU: 0 UID: 0 PID: 2612 Comm: syz.0.9481 Tainted: G W syzkaller #0 PREEMPT(full) [ 1097.598366][ T2612] Tainted: [W]=WARN [ 1097.602152][ T2612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1097.612193][ T2612] ================================================================== [ 1097.679603][T29286] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.